Quantum Query Lower Bounds for Key Recovery Attacks on the Even-Mansour Cipher

Akinori Kawachi, Yuki Naito

The Even-Mansour (EM) cipher is one of the famous constructions for a block cipher. Kuwakado and Morii demonstrated that a quantum adversary can recover its $n$-bit secret keys onl…