Re: Computational secure entropy extraction

From: David Wagner (daw_at_taverner.cs.berkeley.edu)
Date: 10/29/04

  • Next message: Aldar Chan: "Re: Key Evolving Encryption" 
    Date: Fri, 29 Oct 2004 21:01:38 +0000 (UTC)

    Ernst Lippe wrote:
    >On Fri, 29 Oct 2004 18:46:22 +0000, David Wagner wrote:
    >> Ernst Lippe wrote:
    >>>For the entropy distiller D() we take a PRF. This implies when an
    >>>attacker wants to know t different outputs of D() he has to do at least
    >>>O(t) work.
    >>
    >> Can you explain what you mean by that second sentence? I'm not sure of
    >> your meaning.
    >
    >As far I understand the random oracle model, it implies
    >that if you want to know the value for t different inputs
    >you will have to make at least t queries to the oracle.

    What does the random oracle model have to do with anything? You were
    talking about a PRF, not a random oracle.

  • Next message: Aldar Chan: "Re: Key Evolving Encryption"

    Relevant Pages

    • Re: Whos familiar with random oracle model?
      ... I am not an expert on the random oracle model. ... A practical random oracle is a hash function, ... lines of "the attacker needs X oracle invocations where the average ...
      (sci.crypt)
    • Re: Weakness in RSA
      ... > -- and that is what most of the random oracle folks do. ... I don't want make the impression that heuristics are ... a proof in the random oracle model is much more than a heuristic. ... then the practical usefulness of the result ...
      (sci.crypt)
    • Re: dumb question: why is it called a "reduction"?
      ... I don't know of any paper that calls random oracle proofs a reduction. ... Most papers are clear to state that the random oracle model is a *model*, ... Clearly one can't prove that SHA1 is a random ... Reductions avoid the pitfalls of the random oracle model. ...
      (sci.crypt)
    • Re: AES with constant key
      ... more into the direction of reformating an encrpyted block and ... A random oracle is a hypothetical 'black box' function. ... mode, an attacker could find relations between certain bits easily, ... function with a fixed key in the random oracle model, ...
      (sci.crypt)
    • Re: Computational secure entropy extraction
      ... you want to work in the random oracle model. ... the random oracle model makes very strong assumptions. ... My question about the existence of provably secure distillers was asking ... whether there is any distiller that is provably secure in the standard ...
      (sci.crypt)
    • Quantcast