Key-Dependent Message Security in the Standard Model Dennis - PowerPoint PPT Presentation

Sep 09, 2023 •226 likes •272 views

Key-Dependent Message Security in the Standard Model Dennis Hofheinz (CWI, Amsterdam) What and why? Key-dependent message (KDM) security As IND, but with special encryption oracle Real game: O(F) = ENC SK ( F(SK) ) Random

Key-Dependent Message Security in the Standard Model Dennis Hofheinz (CWI, Amsterdam)
What and why? • Key-dependent message (KDM) security • As IND, but with special encryption oracle – Real game: O(F) = ENC SK ( F(SK) ) – Random game: O(F) = ENC SK ( random ) • Security: no adv. can distinguish real/rand • Useful : formal link, encrypt your hard drive • Our focus : symmetric setting and CPA
What is known? • Black, Shrimpton, Rogaway 2002: ENC SK ( M ) = ( R, H( SK||R ) + M ) • KDM-CPA in RO model, but RO essential • Only* provable construction known! * except for straightforward but uninteresting solutions: – schemes with secret key longer than total volume of messages ever encrypted (then privacy amplification techniques work) – “hey, look how easy the proof now is”-style interactive non-standard computational assumptions beyond intuition
What do we have? • Stateful encryption assuming PRNG only ENC SKi ( M ) : 1.) pick UHF h 2.) cond := h( SK i ) 3.) (SK i+1 , pad) := PRNG( cond ) 4.) C := (h, pad + M) • Weak stateful KDM-CPA (i.e., M=M(SK i ))

Recommend

Randomness Dependent Randomness Dependent Message Security g y Eleanor Birrell Kai

Randomness Dependent Randomness Dependent Message Security g y Eleanor Birrell Kai Min Chung Rafael Pass Sidharth Telang Public key Encryption Public key Encryption Goal: l (pk,sk) Gen c = Enc(pk,m) E ( k ) Dec(sk,c) = m

638 views • 40 slides

MPI - Message Passing Interface MPI is the mostly used message passing-standard By

MPI - Message Passing Interface MPI is the mostly used message passing-standard By using MPI you obtain portable programs MPI is based on earlier message passing libraries Lecture 7: NX, MPL, PVM, P4, TCGMSH, PARMACS, ...

360 views • 9 slides

Message Passing Concepts Message Passing Model The message passing model is based on the

Message Passing Concepts Message Passing Model The message passing model is based on the notion of processes can think of a process as an instance of a running program, together with the programs data In the message passing model,

601 views • 16 slides

A Standard-Model Security Analysis of TLS-DHE Tibor Jager

A Standard-Model Security Analysis of TLS-DHE Tibor Jager 1 , Florian Kohlar 2 , Sven Schge 3 , and Jrg Schwenk 2 1 Karlsruhe Ins-tute of Technology

425 views • 17 slides

A Standard-Model Security Analysis of TLS-DHE Tibor Jager

A Standard-Model Security Analysis of TLS-DHE Tibor Jager 1 , Florian Kohlar 2 , Sven Schge 3 , and Jrg Schwenk 2 1 Karlsruhe Ins-tute of Technology

763 views • 37 slides

1 Message Encryption- see Table 11.1 in the book Message Encryption if public-key encryption

Message Authentication CPE 542: CRYPTOGRAPHY & NETWORK SECURITY message authentication is concerned with: protecting the integrity of a message Chapter 11 Message Authentication and validating identity of originator Hash

462 views • 6 slides

Homomorphic Smooth Projective Hashing Hoeteck Wee ENS, Paris . . . . . . . .

KDM-Security via Homomorphic Smooth Projective Hashing Hoeteck Wee ENS, Paris . . . . . . . . key-dependent message security. [ Black Rogaway Shrimpton 02 ] this work. unifying framework with a simple proof of security enc pk ( sk )

955 views • 44 slides

Choosing with the Worst in Mind: A Reference-Dependent Model Gerelt Tserenjigmid Caltech

Choosing with the Worst in Mind: A Reference-Dependent Model Gerelt Tserenjigmid Caltech Bounded Rationality in Choice Conference 2015 Gerelt Tserenjigmid A Reference-Dependent Model Motivation A new axiomatic model of reference-dependent

722 views • 50 slides

Security Public key (e.g., RSA) Message digest (e.g., MD5) Security services

Overview Cryptography functions Secret key (e.g., DES) Security Public key (e.g., RSA) Message digest (e.g., MD5) Security services Privacy: preventing unauthorized release of information Outline Authentication:

883 views • 5 slides

Hash Functions, Message Hash Functions, Message Security Services Security Services

Hash Functions, Message Hash Functions, Message Security Services Security Services Authentication Codes Authentication Codes Confidentiality : Symmetric encryption solves Integrity Ahmet Burak Can Authentication Hacettepe

341 views • 4 slides

Message Passing Programming with MPI Message Passing Programming with MPI 1 What is MPI?

Message Passing Programming with MPI Message Passing Programming with MPI 1 What is MPI? Message Passing Programming with MPI 2 MPI Forum First message-passing interface standard. Sixty people from forty different organisations.

1.61k views • 113 slides

Model checking with Message Sequence Charts Doron Peled Collaborators: R. Alur, E. Gunter, G.

Model checking with Message Sequence Charts Doron Peled Collaborators: R. Alur, E. Gunter, G. Holzmann, A. Muscholl, Z. Su Department of Computer Science University of Warwick, UK Bar Ilan University, IL MSCs An ITU standard notation

678 views • 55 slides

What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

Network security Network security Foundations: what is security? cryptography Network Security Network Security authentication message integrity key distribution and certification Security in practice: Srinidhi Varadarajan

332 views • 6 slides

Message Passing Programming with MPI What is MPI? Message Passing Programming with MPI 1

Message Passing Programming with MPI What is MPI? Message Passing Programming with MPI 1 Message Passing Programming with MPI 2 MPI Forum Goals and Scope of MPI First message-passing interface standard. MPIs prime goals are:

511 views • 29 slides

Security 2 CSC 249 April 12, 2018 Network Security Recap Message Integrity and Authentication

Security 2 CSC 249 April 12, 2018 Network Security Recap Message Integrity and Authentication Trusted Intermediaries Secure email pretty good privacy (PGP) 2 1 Cryptographic Keys Alices Bobs K A encryption decryption K B key

427 views • 13 slides

RPS Work Item: Beta Testing of Message Standard IMDRF Stakeholder Forum Washington, D.C.

RPS Work Item: Beta Testing of Message Standard IMDRF Stakeholder Forum Washington, D.C. September 17, 2014 Nancy Shadeed Health Canada Recap Beta Testing Objective (Phase 1): Assess RPS Standard fitness for use with device

224 views • 11 slides

Message Authentication Codes Auth. with MAC Security Algorithms CSS441: Security and

CSS441 Introduction Functions Auth. with Encryption Message Authentication Codes Auth. with MAC Security Algorithms CSS441: Security and Cryptography Sirindhorn International Institute of Technology Thammasat University Prepared by

673 views • 21 slides

Sensitivity of T2HKK to non-standard flavor-dependent interactions Osamu Yasuda Tokyo

Sensitivity of T2HKK to non-standard flavor-dependent interactions Osamu Yasuda Tokyo Metropolitan University Sep. 26, 2017 WG5, NuFact 2017@ Uppsala, Sweden 1/31 Contents of this talk 1. Introduction 2. Nonstandard Interaction in

493 views • 33 slides

On the Security of IV Dependent Stream Ciphers Cme Berbain and Henri Gilbert France Telecom

On the Security of IV Dependent Stream Ciphers Cme Berbain and Henri Gilbert France Telecom R&D {firstname.lastname@orange-ftgroup.com} research & development Stream Ciphers IV-less IV-dependent key K IV (initial value)

477 views • 18 slides

Investigating Beyond Standard Model Joydeep Chakrabortty Physical Research Laboratory TPSC

Outline Standard Model BSM Classification Low Energy Models High Scale Model Remarks Investigating Beyond Standard Model Joydeep Chakrabortty Physical Research Laboratory TPSC Seminar, IOP 5th February, 2013 1 / 35 Outline Standard

476 views • 35 slides

RPS Work Item: Beta Testing of Message Standard IMDRF Stakeholder Forum San Francisco March 26,

RPS Work Item: Beta Testing of Message Standard IMDRF Stakeholder Forum San Francisco March 26, 2014 Nancy Shadeed Health Canada Recap Beta Testing Objective (Phase 1): Assess RPS Standard fitness for use with device submissions

775 views • 12 slides

Message-Passing Programming with MPI Message-Passing Concepts Overview This lecture will

Message-Passing Programming with MPI Message-Passing Concepts Overview This lecture will cover message passing model SPMD communication modes collective communications Programming Models Message-Passing Serial Programming

406 views • 28 slides

Message Passing Programming Introduction to MPI What is MPI? MPI Forum First

Message Passing Programming Introduction to MPI What is MPI? MPI Forum First message-passing interface standard. Sixty people from forty different organisations. Users and vendors represented, from the US and Europe. Two-year

526 views • 18 slides

Cryptography and Network Codes Security At cats' green on the Sunday he took the message from

4/19/2010 Chapter 12 Message Authentication Cryptography and Network Codes Security At cats' green on the Sunday he took the message from the Chapter 12 inside of the pillar and added Peter Moran's name to the two names already printed

349 views • 6 slides