Security of weak secrets based cryptographic primitives via the Rényi entropy. Issue 6 (1st November 2016)

• Record Type: Journal Article
• Authors: Yao, Yanqing; Li, Zhoujun
• Is Part Of: IET information security. Volume 10:Issue 6(2016)
• Page Start: 442
• Page End: 450
• Publication Date: 2016-11-01
• Subjects: private key cryptography; CPA‐secure symmetric‐key encryption scheme -- extend key derivation function -- pairwise independent hash function family -- pseudorandom generator -- universal hash function family -- Holder inequality -- collision entropy -- secret source -- cryptographic primitive -- Renyi entropy; Computer security -- Periodicals; Cryptography -- Periodicals; Computer networks -- Security measures -- Periodicals; Database security -- Periodicals; 005.8
• DOI: 10.1049/iet-ifs.2015.0007
• Languages: English
• ISSNs: 1751-8709

Abstract

Abstract : In ideality, cryptographic primitives take for granted that the secret sources are derived from uniform distribution. However, in reality, we may only obtain some 'weak' random sources guaranteed with high unpredictability (e.g. biometric data, physical sources, and secrets with partial leakage). Formally, the security of cryptographic primitives is measured by the expectation of some function, called 'perfect' expectation in the ideal model and 'weak' expectation in the real model. The authors propose some elementary inequalities which show that the 'weak' expectation is not much worse than the 'perfect' expectation. The authors present how to overcome weak expectations dependent on the Rényi entropy other than the min and collision entropies by Dodis and Yu [TCC 2013]. The authors achieve these results by capturing on two approaches: one is by observing a new relationship between the collision entropy and other Rényi entropy, the other is by developing the connection between different moments of a variable. Furthermore, pseudorandom generator, and pairwise independent hash function family, the authors extend key derivation functions based on the Rényi entropy. The results are applied to all unpredictability applications and 'square‐friendly' indistinguishability applications including CPA‐secure symmetric‐key encryption schemes.