Decisional second-preimage resistance: when does SPR imply PRE?

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

Abstract

There is a well-known gap between second-preimage resistance and preimage resistance for length-preserving hash functions. This paper introduces a simple concept that fills this gap. One consequence of this concept is that tight reductions can remove interactivity for multi-target length-preserving preimage problems, such as the problems that appear in analyzing hash-based signature systems. Previous reduction techniques applied to only a negligible fraction of all length-preserving hash functions, presumably excluding all off-the-shelf hash functions.
Original languageEnglish
Title of host publicationAdvances in Cryptology – ASIACRYPT 2019 - 25th International Conference on the Theory and Application of Cryptology and Information Security, Proceedings
EditorsSteven D. Galbraith, Shiho Moriai
Place of PublicationBerlin
PublisherSpringer
Chapter2
Pages33-62
Number of pages30
ISBN (Electronic)978-3-030-34618-8
ISBN (Print)978-3-030-34617-1
DOIs
Publication statusPublished - 22 Nov 2019
Event25th Annual International Conference on Theory and Application of Cryptology and Information Security, (ASIACRYPT 2019) - Kobe, Japan
Duration: 8 Dec 201912 Dec 2019

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume11923 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference25th Annual International Conference on Theory and Application of Cryptology and Information Security, (ASIACRYPT 2019)
CountryJapan
CityKobe
Period8/12/1912/12/19

Keywords

  • Cryptographic hash functions
  • Hash-based signatures
  • Multi-target attacks
  • Preimage resistance
  • Provable security
  • Second-preimage resistance
  • Tight reductions

Fingerprint Dive into the research topics of 'Decisional second-preimage resistance: when does SPR imply PRE?'. Together they form a unique fingerprint.

Cite this