[PDF] Top 20 An Algebraic Framework for Pseudorandom Functions and Applications to Related-Key Security

... RKA security for very restricted ...new algebraic framework extends the one from [ABPP14] and provides constructions for new and larger classes of RKD ... See full document

... The related-key security requires that the queries under the related keys do not threaten the security under the original key, as the definition of related-key ... See full document

... for functions with 1-bit output sets) will contribute to establish a better relation between PRGs and ...two applications of FDPs discussed in the last two sections, a kind of “risk-hedging” relation exists ... See full document

... of pseudorandom functions, several extensions have been proposed in the literature over the years, with the goal of providing additional functionalities to these ...secret key with the capability of ... See full document

... weaker security model in which the adversary is allowed to ask signatures on only Q different datasets, where Q is a (pre-specified) ...Q-time security (similarly to the Q-time security of regular ... See full document

... introduced pseudorandom functions (PRFs) in 1984 ...numerous applications such as private- key encryption, message authentication codes, key derivation, and many more, ...novel ... See full document

... main security property, needed to obtain proofs of work, can be stated as correlation intractability with respect to a specific set of relations, which come from protocol-defined constraints on the input and the ... See full document

... different key sizes (128, 256, and 512), 2) compared the processing overhead (time needed for encryption of user name and password) of proposed scheme with existing related schemes SQLIPA (Shaukat Ali, ... See full document

... E-business is able to benefit all types of businesses. E- business is not restricted to technology-related products and services. It permits companies in every field to do their business online. E-business can be ... See full document

... attribute-based key encapsulation mechanism (AB-KEM) over an ...appropriate security properties with an AB-KEM yields a fully functional ...DEM key set K = Y ... See full document

... the framework provides entity authentication for OoC UEs, in addition to receiver ...of security services such as entity ...The framework conceals the IDs of participating stations to maintain the ... See full document

... ciphers, pseudorandom generators, and pseudorandom functions) has been motivated by ef- ficiency considerations (memory consumption, hardware compatibility, ease of ...strongly related to ... See full document

... random functions with extra properties have been proposed, enabling more sophisticated forms of access to PRFs and more structured forms of ...elsewhere; key-homomorphic PRFs [BLMR13] which are homomorphic ... See full document

... the security of cryptographic primitives in the situation where the key can be manipulated by the ...of related-key deriving (RKD) functions which the adversary is re- stricted to using ... See full document

... security, we always assume that the public parameter p is chosen once and for all, and is given to the adversary as an additional input which is not subject to related-key attacks (i.e., the ... See full document

... Pseudorandom functions (PRFs) are one of the fundamental building blocks in modern cryptogra- ...chosen key k ∈ K, the output of the function F (k, x) for any input x in the input space “looks” ... See full document

... the security server and evaluated by the server ...of security events and credentials from one security model to another, ...flexible security policies, i.e., the definition of a ... See full document

... 3. A decision criterion for algebraic function. Consider further the ex- ample of F(1/6; 5/6; 7/6;z). From the traditional point of view, it seems that this infinitely many valued function has only three isolated ... See full document

... fast algebraic attacks on LFSR-based stream ciphers, which use a Boolean function f : GF (2) n → GF (2) as the filter or combination generator, is to find a function g of small degree such that the multiple gf has ... See full document

... We have not yet explained how to deal with key and IV bits in the cipher. This problem was already a major problem in [16] and general non-linear cryptanal- ysis is substantially more complex than Bi-Linear ... See full document