Algebraic XOR-RKA-Secure Pseudorandom Functions from Post-Zeroizing Multilinear Maps

Abstract : Due to the vast number of successful related-key attacks against existing block-ciphers, related-key security has become a common design goal for such primitives. In these attacks, the adversary is not only capable of seeing the output of a function on inputs of its choice, but also on related keys. At Crypto 2010, Bellare and Cash proposed the first construction of a pseudorandom function that could provably withstand such attacks based on standard assumptions. Their construction, as well as several others that appeared more recently, have in common the fact that they only consider linear or polynomial functions of the secret key over complex groups. In reality, however, most related-key attacks have a simpler form, such as the XOR of the key with a known value. To address this problem, we propose the first construction of RKA secure pseudorandom function for XOR relations. Our construction relies on multilinear maps and, hence, can only be seen as a feasibility result. Nevertheless, we remark that it can be instantiated under two of the existing multilinear-map candidates since it does not reveal any encodings of zero. To achieve this goal, we rely on several techniques that were used in the context of program obfuscation, but we also introduce new ones to address challenges that are specific to the related-key-security setting.
Type de document :
Rapport
[Technical Report] Report 2017/500, IACR Cryptology ePrint Archive. 2017
Liste complète des métadonnées

https://hal.inria.fr/hal-01667132
Contributeur : Michel Abdalla <>
Soumis le : mardi 19 décembre 2017 - 10:17:57
Dernière modification le : jeudi 26 avril 2018 - 10:29:12

Identifiants

  • HAL Id : hal-01667132, version 1

Collections

Citation

Michel Abdalla, Fabrice Benhamouda, Alain Passelègue. Algebraic XOR-RKA-Secure Pseudorandom Functions from Post-Zeroizing Multilinear Maps. [Technical Report] Report 2017/500, IACR Cryptology ePrint Archive. 2017. 〈hal-01667132〉

Partager

Métriques

Consultations de la notice

124