首页> 外文会议>Progress in Cryptology - AFRICACRYPT 2008 >A Proof of Security in O(2~n) for the Benes Scheme
【24h】

A Proof of Security in O(2~n) for the Benes Scheme

机译:Benes方案的O(2〜n)安全性证明

获取原文
获取原文并翻译 | 示例

摘要

In [1], W. Aiello and R. Venkatesan have shown how to construct pseudorandom functions of 2n bits → 2n bits from pseudorandom functions of n bits → n bits. They claimed that their construction, called "Benes" reaches the optimal bound (m 2~n) of security against adversaries with unlimited computing power but limited by m queries in an Adaptive Chosen Plaintext Attack (CPA-2). This result may have many applications in Cryptography (cf [1,19,18] for example). However, as pointed out in [18] a complete proof of this result is not given in [1] since one of the assertions in [1] is wrong. It is not easy to fix the proof and in [18], only a weaker result was proved, i.e. that in the Benes Schemes we have security when m f/(∈) · 2~(n-∈), where f is a function such that lim_(∈→0) f(∈) = +∞ (f depends only of ∈, not of n). Nevertheless, no attack better than in O(2~n) was found. In this paper we will in fact present a complete proof of security when m O(2~n) for the Benes Scheme, with an explicit O function. Therefore it is possible to improve all the security bounds on the cryptographic constructions based on Benes (such as in [19]) by using our O(2~n) instead of /(∈) · 2~(n-∈) of [18].
机译:在[1]中,W。Aiello和R. Venkatesan展示了如何从n位→n位的伪随机函数构造2n位→2n位的伪随机函数。他们声称,他们的构造(称为“ Benes”)可以达到对具有无限计算能力但受自适应选择纯文本攻击(CPA-2)中的m个查询限制的对手的安全性的最佳范围(m << 2〜n)。该结果可能在密码学中有许多应用(例如,参见[1,19,18])。但是,正如[18]中指出的那样,[1]中没有给出该结果的完整证明,因为[1]中的一个断言是错误的。固定证明并不容易,在[18]中,仅证明了一个较弱的结果,即在Benes方案中,当m << f /(​​∈)·2〜(n-∈)时,我们具有安全性,其中f是使lim_(∈→0)f(∈)= +∞的函数(f仅取决于∈,不取决于n)。然而,没有发现比O(2〜n)更好的攻击。在本文中,实际上我们将为Benes方案提供m << O(2〜n)时具有显式O函数的完整安全性证明。因此,有可能通过使用我们的O(2〜n)代替[]的/(∈)·2〜(n-∈)来改善基于Benes的密码结构的所有安全边界(例如[19])。 18]。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号