laconic zero knowledge to public key cryptography public
play

Laconic Zero Knowledge to Public Key Cryptography Public Key - PowerPoint PPT Presentation

Feb 01, 2024 •46 likes •296 views

Laconic Zero Knowledge to Public Key Cryptography Public Key Cryptography Akshay Degwekar (MIT) Public Key Encryption (PKE) [Diffie-Hellman76, Rivest-Shamir-Adelman78, Goldwasser-Micali82] pk sk Public Key Encryption Public Key Encryption

  1. Laconic Zero Knowledge to Public Key Cryptography Public Key Cryptography Akshay Degwekar (MIT)

  2. Public Key Encryption (PKE) [Diffie-Hellman76, Rivest-Shamir-Adelman78, Goldwasser-Micali82] pk sk Public Key Encryption Public Key Encryption ct = Enc pk (m) GOAL: Construct “different” public-key encryption schemes public-key encryption schemes Lattices Number Theory

  3. What What structure+hardness implies public-key crypto? public-key crypto?

  4. Possible answers: NP-hardness No Crypto Known Some impossibility results [Brassard79, Feigenbaum-Fortnow93, Bogdanov- Some impossibility results [Brassard79, Feigenbaum-Fortnow93, Bogdanov- Trevisan03, Goldreich-Goldwasser98, AkaviaGoldreichGoldwasserMoshkovitz06] One-Way Functions Some barriers [Impagliazzo-Rudich89, Brakerski-Katz-Segev-Yerukhimovich11, Dachman-Soled16, Garg-Hajiabadi-Mahmoody-Mohammed18] SZK-hardness (SZK = Statistical Zero Knowledge) SZK-hardness (SZK = Statistical Zero Knowledge) Implies OWFs [Ostrovsky91] Many problems in SZK imply PKE

  5. Statistical Zero Knowledge (SZK) [ Goldwasser-Micali-Rackoff85 ] Completeness: Completeness: P * P V Soundness: Proof : All powerful P * Argument : Efficient P *

  6. Honest-Verifier Statistical Zero Knowledge: [ Goldwasser-Micali-Rackoff85 ] P V Simulator:

  7. Statistical Zero Knowledge NP PKE from SZK-Hardness? Seems Challenging : Discrete Log, Graph Iso have SZK proofs but no PKE known. SZK DLog DLog Need more Structure? Need more Structure? Graph Iso. Factoring LWE QR

  8. Example: Quadratic Non-Residuosity (Or: From GMR to GM) Can sample [Goldwasser-Micali82, Goldwasser-Micali-Rackoff85] hard instances (Honest-Verifier) (Honest-Verifier) w/ witnesses w/ witnesses Statistical Zero-Knowledge Proof Efficient Efficient Prover Prover talks very little

  9. Our Results: These Properties are Sufficient! ZK PROOF SYSTEM Public-Key Encryption + CRYPTO HARD LANGUAGE CRYPTO HARD LANGUAGE Implies One-Way Functions

  10. Instantiations QR DDH Our Our PKE PKE Assumption LWE Low noise LPN ABW Factoring CDH

  11. Perspective: Relaxing the Assumption ZK PROOF SYSTEM [Sahai-Vadhan03] [Sahai-Vadhan03] [HaitnerNguyenOng ReingoldVadhan03] + CRYPTO HARD LANGUAGE CRYPTO HARD LANGUAGE

  12. Characterization WEAK WEAK : soundness, completeness hold on average ZK PROOF SYSTEM Public-Key Encryption + + DISTRIBUTIONS DISTRIBUTIONS CRYPTO HARD LANGUAGE

  13. Summary Laconic, Efficient Prover, Laconic, Efficient Prover, HVSZK ARGUMENT Public Key + Encryption CRYPTO HARD LANGUAGE

  14. Techniques

  15. Warmup: 2-Msg, Deterministic Prover * V * a.k.a Hash Proof System [Cramer-Shoup02]

  16. Weak Key Agreement Correctness: Every verifier challenge has Every verifier challenge has unique prover response

  17. D Break average-case hardness V V 0/1 0/1 Adv = Cheating Prover Adv = Cheating Prover soundness soundness Contradiction. D breaks average-case hardness. Amplify from weak PKE to PKE using HolensteinRenner05

  18. We saw: PKE from deterministic, 2-msg SZK Proof System. Challenges: Randomized Prover Multi-round Proof System Stateful Prover Lesser Challenges: Relaxing perfect ZK, perfect completeness Lesser Challenges: Relaxing perfect ZK, perfect completeness

  19. Coping with Randomized Provers Correctness: Weak Security: Weak Security: Trapdoor Our Pseudoentropy PKE Assumption Generator

  20. Trapdoor Our Pseudoentropy PKE Assumption Generator Security : Adv can only sample from “bigger” dist. Formalized using pseudoentropy [HILL99]

  21. Trapdoor Our Pseudoentropy PKE Assumption Generator Challenges: Many rounds Stateful Prover [Ostrovsky 91] Terminate at Laconic. Rejection Sampling random round.

  22. Trapdoor Our Pseudoentropy PKE Assumption Generator Amplification Theorem Technically difficult half Uses connections between Pseudorandomness & Unpredictability Ingredients from: OWFs => PRG (HILL99, VadhanZheng12)

  23. Conclusion and Open Problems Laconic, Efficient Prover, HVSZK ARGUMENT Public Key + + Encryption CRYPTO HARD LANGUAGE Big Open Q: Big Open Q: Design new PKE schemes

  24. Thank You!

  25. Trapdoor Pseudoentropy Public Key Encryption Generator Security : Gap between Decode & adversary Formalized using pseudoentropy [HILL99]

Recommend

Public-Key Cryptography Public-Key Cryptography Lecture 9 Public-Key Cryptography Lecture 9

Public-Key Cryptography Public-Key Cryptography Lecture 9 Public-Key Cryptography Lecture 9

Public-Key Cryptography Public-Key Cryptography Lecture 9 Public-Key Cryptography Lecture 9 CCA Security SIM-CCA Security (PKE) Recv Send PK/Enc SK/Dec Replay Filter Secure (and correct) if: s.t. output of is distributed

1.26k views • 101 slides
Public-Key Cryptography Public-Key Cryptography Lecture 8 Public-Key Encryption Public-Key

Public-Key Cryptography Public-Key Cryptography Lecture 8 Public-Key Encryption Public-Key

Public-Key Cryptography Public-Key Cryptography Lecture 8 Public-Key Encryption Public-Key Cryptography Lecture 8 Public-Key Encryption Diffie-Hellman Key-Exchange PKE scheme PKE scheme SKE: Syntax KeyGen outputs K K Enc: M K R

1.18k views • 104 slides
Public Key Cryptography in Practice Eli Biham - May 3, 2005 c 372 Public Key Cryptography in

Public Key Cryptography in Practice Eli Biham - May 3, 2005 c 372 Public Key Cryptography in

Public Key Cryptography in Practice Eli Biham - May 3, 2005 c 372 Public Key Cryptography in Practice (13) How Cryptography is Used in Applications The main drawback of public key cryptography is the inherent slow speed of the public key

442 views • 14 slides
Cryptography Public-Key Cryptography Uwe Egly Vienna University of Technology Institute of

Cryptography Public-Key Cryptography Uwe Egly Vienna University of Technology Institute of

Cryptography Public-Key Cryptography Uwe Egly Vienna University of Technology Institute of Information Systems Knowledge-Based Systems Group 1 / 18 Overview Problem of symmetric procedures: Exchange of secret key Solution: public-key

884 views • 18 slides
Lecture 8 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography

Lecture 8 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography

Lecture 8 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography Asymmetric cryptography Invented in 1974-1978 (Diffie-Hellman and Rivest-Shamir- Adleman) Two keys: private (SK), public (PK) Encryption: with

445 views • 17 slides
Lecture 8 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography

Lecture 8 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography

Lecture 8 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography Asymmetric cryptography Invented in 1974-1978 (Diffie-Hellman and Rivest-Shamir- Adleman) Two keys: private (SK), public (PK) Encryption:

256 views • 22 slides
Lecture 7 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography

Lecture 7 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography

Lecture 7 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography Asymmetric cryptography Invented in 1974-1978 (Diffie-Hellman and Rivest-Shamir- Adleman) Two keys: private (SK), public (PK) Encryption:

810 views • 42 slides
Public Key Cryptography Cryptography School of Engineering and Technology CQUniversity Australia

Public Key Cryptography Cryptography School of Engineering and Technology CQUniversity Australia

Cryptography Public Key Cryptography Concepts of Public Key Cryptography Public Key Cryptography Cryptography School of Engineering and Technology CQUniversity Australia Prepared by Steven Gordon on 20 Feb 2020, public.tex, r1803 1

421 views • 7 slides
Outline CPSC 418/MATH 318 Introduction to Cryptography Public Key Cryptography, RSA Public-Key

Outline CPSC 418/MATH 318 Introduction to Cryptography Public Key Cryptography, RSA Public-Key

Outline CPSC 418/MATH 318 Introduction to Cryptography Public Key Cryptography, RSA Public-Key Cryptography 1 Renate Scheidler The RSA Cryptosystem 2 Department of Mathematics & Statistics Department of Computer Science University of

372 views • 7 slides
Public key cryptography: a practical Public key cryptography: a practical approach approach

Public key cryptography: a practical Public key cryptography: a practical approach approach

Public key cryptography: a practical Public key cryptography: a practical approach approach Israel Herraiz <isra@herraiz.org> <israel.herraiz@upm.es> KeyID FE0A7AF3 Fingerprint D0DA E915 BFDD E5CD 8BA0 B159 7E97 2ACB FE0A 7AF3

996 views • 43 slides
Public Key Cryptography Diffie-Hellman Others CSS441: Security and Cryptography Sirindhorn

Public Key Cryptography Diffie-Hellman Others CSS441: Security and Cryptography Sirindhorn

CSS441 Public Key Crypto Principles RSA Public Key Cryptography Diffie-Hellman Others CSS441: Security and Cryptography Sirindhorn International Institute of Technology Thammasat University Prepared by Steven Gordon on 20 December 2015

461 views • 29 slides
Public-Key Cryptography Public-Key Cryptography Lecture 8 Public-Key Cryptography Lecture 8

Public-Key Cryptography Public-Key Cryptography Lecture 8 Public-Key Cryptography Lecture 8

Public-Key Cryptography Public-Key Cryptography Lecture 8 Public-Key Cryptography Lecture 8 Public-Key Encryption from Trapdoor OWP Public-Key Cryptography Lecture 8 Public-Key Encryption from Trapdoor OWP CCA Security El Gamal Encryption

1.78k views • 162 slides
C) Public Key Cryptography C.a) Fundamentals C.b) RSA with Applications C.c) DSA and Diffie

C) Public Key Cryptography C.a) Fundamentals C.b) RSA with Applications C.c) DSA and Diffie

1 C) Public Key Cryptography C.a) Fundamentals C.b) RSA with Applications C.c) DSA and Diffie Hellman W. Schindler: Cryptography, B-IT, winter 2006 / 2007 2 C.a) Fundamentals 3 C.1 Introducing Remark Public key cryptosystems are widely

621 views • 47 slides
Handout 8 Summary of this handout: Asymmetric Cryptography Public Key Cryptography

Handout 8 Summary of this handout: Asymmetric Cryptography Public Key Cryptography

06-20008 Cryptography The University of Birmingham Autumn Semester 2012 School of Computer Science Eike Ritter 15 November, 2012 Handout 8 Summary of this handout: Asymmetric Cryptography Public Key Cryptography Diffie-Hellman Key

208 views • 8 slides
Lecture 7 Public Key Cryptography I: Encryption + Signatures [lecture slides are adapted from

Lecture 7 Public Key Cryptography I: Encryption + Signatures [lecture slides are adapted from

Lecture 7 Public Key Cryptography I: Encryption + Signatures [lecture slides are adapted from previous slides by Prof. Gene Tsudik] 1 Public Key Cryptography Asymmetric cryptography Invented in 1974-1978 (Diffie-Hellman and

478 views • 23 slides
Blended Cryptography: Public Key Infrastructure for Devices that dont Public key Phillip

Blended Cryptography: Public Key Infrastructure for Devices that dont Public key Phillip

Blended Cryptography: Public Key Infrastructure for Devices that dont Public key Phillip Hallam-Baker Principal Scientist VeriSign Inc. Small is not beautiful Not When you write the code PIC 16F88 368 bytes RAM 4K Word ROM 20MHz

390 views • 21 slides
Chapter3 Chapter3 Public-Key Cryptography and Public-Key Cryptography and Message

Chapter3 Chapter3 Public-Key Cryptography and Public-Key Cryptography and Message

Chapter3 Chapter3 Public-Key Cryptography and Public-Key Cryptography and Message Authentication Message Authentication Henric Johnson Blekinge Institute of Technology, Sweden http://www.its.bth.se/staff/hjo/ henric.johnson@bth.se Henric

576 views • 28 slides
Cryptography: Public Key Cryptography; Mathematical Preliminaries Greg Plaxton Theory in

Cryptography: Public Key Cryptography; Mathematical Preliminaries Greg Plaxton Theory in

Cryptography: Public Key Cryptography; Mathematical Preliminaries Greg Plaxton Theory in Programming Practice, Spring 2005 Department of Computer Science University of Texas at Austin Secure Communication Earlier we discussed the problems

202 views • 18 slides
Public-Key Cryptography Public-Key Cryptography Lecture 9 Public-Key Cryptography Lecture 9 El

Public-Key Cryptography Public-Key Cryptography Lecture 9 Public-Key Cryptography Lecture 9 El

Public-Key Cryptography Public-Key Cryptography Lecture 9 Public-Key Cryptography Lecture 9 El Gamal Encryption Public-Key Cryptography Lecture 9 El Gamal Encryption Public-Key Encryption from Trapdoor OWP Public-Key Cryptography Lecture

2.11k views • 163 slides
June 6, 2016 this week Public key cryptography Pieter van den Hombergh RSA and friends

June 6, 2016 this week Public key cryptography Pieter van den Hombergh RSA and friends

June 6, 2016 this week Public key cryptography Pieter van den Hombergh RSA and friends Crypto, PPK Public key cryptography Public and private Keys Information exchange Shared secret Authentication/signing Signing Pieter van den Hombergh

177 views • 7 slides
Tutorial on Public Key Cryptography RSA Eli Biham - May 3, 2005 c 386 Tutorial on Public

Tutorial on Public Key Cryptography RSA Eli Biham - May 3, 2005 c 386 Tutorial on Public

Tutorial on Public Key Cryptography RSA Eli Biham - May 3, 2005 c 386 Tutorial on Public Key Cryptography RSA (14) RSA the Key Generation Example 1. Randomly choose two prime numbers p and q . We choose p = 11 and q = 13. 2.

259 views • 22 slides
CSCI E-170 October 17, 2005 L04: Public Key Cryptography 1 Todays Outline 1. LJ Nonsense

CSCI E-170 October 17, 2005 L04: Public Key Cryptography 1 Todays Outline 1. LJ Nonsense

CSCI E-170 October 17, 2005 L04: Public Key Cryptography 1 Todays Outline 1. LJ Nonsense 2. HW2 - Graded and returned. 3. HW3 - How are things going? 4. Review of L03 (hash functions & ciphers) 5. Public Key Cryptography 6.

757 views • 43 slides
Algorithms for Public Key Cryptography Eli Biham - May 3, 2005 c 408 Algorithms for Public

Algorithms for Public Key Cryptography Eli Biham - May 3, 2005 c 408 Algorithms for Public

Algorithms for Public Key Cryptography Eli Biham - May 3, 2005 c 408 Algorithms for Public Key Cryptography (15) Computing Square Roots Modulo a Prime We have already seen how to compute square roots modulo primes of the form p = 4 k + 3:

932 views • 34 slides
1 Symmetric algorithm Public key algorithm Secret key public key and private key C 1 = E

1 Symmetric algorithm Public key algorithm Secret key public key and private key C 1 = E

Cryptography security Cryptography may be a component of a secure system Cryptographic Systems Adding cryptography may not make a Authentication & Communication system secure Protocols Paul Krzyzanowski Distributed Systems

753 views • 23 slides

More recommend