Failing Gracefully: Decryption Failures and the Fujisaki-Okamoto Transform

Onderzoeksoutput: Hoofdstuk in Boek/Rapport/CongresprocedureConferentiebijdrageAcademicpeer review


In known security reductions for the Fujisaki-Okamoto transformation, decryption failures are handled via a reduction solving the rather unnatural task of finding failing plaintexts given the private key, resulting in a Grover search bound. Moreover, they require an implicit rejection mechanism for invalid ciphertexts to achieve a reasonable security bound in the QROM. We present a reduction that has neither of these deficiencies: We introduce two security games related to finding decryption failures, one capturing the computationally hard task of using the public key to find a decryption failure, and one capturing the statistically hard task of searching the random oracle for key-independent failures like, e.g., large randomness. As a result, our security bounds in the QROM are tighter than previous ones with respect to the generic random oracle search attacks: The attacker can only partially compute the search predicate, namely for said key-independent failures. In addition, our entire reduction works for the explicit-reject variant of the transformation and improves significantly over all of its known reductions. Besides being the more natural variant of the transformation, security of the explicit reject mechanism is also relevant for side channel attack resilience of the implicit-rejection variant. Along the way, we prove several technical results characterizing preimage extraction and certain search tasks in the QROM that might be of independent interest.
Originele taal-2Engels
TitelAdvances in Cryptology -- ASIACRYPT 2022
RedacteurenShweta Agrawal, Dongdai Lin
Plaats van productieCham
UitgeverijSpringer Nature
Aantal pagina's30
ISBN van geprinte versie978-3-031-22972-5
StatusGepubliceerd - 2023


Duik in de onderzoeksthema's van 'Failing Gracefully: Decryption Failures and the Fujisaki-Okamoto Transform'. Samen vormen ze een unieke vingerafdruk.

Citeer dit