Order-independent ciphers
问题 Is there exist a ciphering approach such that encrypting and decrypting order is arbitrary? Like using two padlocks on the same lock loop. That is, if there are two keys (or keypairs) K1, K2 , message M , and the cryptogram C is obtained as (for example) C=M*K1*K2 (where * denotes ciphering), then the message M can be retrieved in each of the following ways: 1) M=C*K1*K2 , 2) M=C*K2*K1 (here * denotes deciphering). Obviously, XOR is a trivial candidate. Do any cryptographically strong