Description
We focus on two new number-theoretic problems of major importance for RSA and factoring-based cryptosystems. An RSA key generator Gen(1^k) = (n, e) is malleable when factoring n is easier when given access to a factoring oracle for other keys (n', e')!= (n, e) output by Gen. Gen is instance-malleable when it is easier to extract e-th roots mod n given an e'-th root extractor mod n' for (n', e') != (n , e) output by Gen. Instance-non-malleable generators are of prime importance for practical RSA-based systems (RSA-PSS, RSA-OAEP, etc) because their security can be shown not to be equivalent to RSA in the standard model, in contradiction with the random oracle heuristic. We investigate the malleability and instance-malleability of popular RSA key generators such as textbook RSA and low-exponent RSA and question the existence of non-trivial malleable RSA instances.
Prochains exposés
-
Oblivious Transfer from Zero-Knowledge Proofs (or how to achieve round-optimal quantum Oblivious Transfer without structure)
Orateur : Léo Colisson - Université Grenoble Alpes
We provide a generic construction to turn any classical Zero-Knowledge (ZK) protocol into a composable oblivious transfer (OT) protocol (the protocol itself involving quantum interactions), mostly lifting the round-complexity properties and security guarantees (plain-model/statistical security/unstructured functions…) of the ZK protocol to the resulting OT protocol. Such a construction is unlikely[…]-
Cryptography
-