Indifferentiability of the Sum of Random Permutations Toward Optimal Security

A natural way of constructing a pseudorandom function from multiple pseudorandom permutations is to simply add the permutations. In the indistinguishability model, it is known that even two random permutations are sufficient to provide security up to 2
ⁿ
queries. On the other hand, the indifferentiability has been proved only up to 2
^(2n/3)
queries for any number of summands. In this paper, we improve this bound up to 2
^(((l-1)n)/l)
queries for an even integer l ≥ 4. This is the first result that shows the indifferentiablity of the sum of random permutations is strengthened towards the optimal bound 2
ⁿ
as the number of summands increases.