Relativized cryptography

  • Authors:
  • Gilles Brassard

  • Affiliations:
  • -

  • Venue:
  • SFCS '79 Proceedings of the 20th Annual Symposium on Foundations of Computer Science
  • Year:
  • 1979

Quantified Score

Hi-index 0.00

Visualization

Abstract

It seems very difficult to give a formal definition of computational security for Public Key Cryptography. We define a slightly different notion, called Transient-Key Cryptography, for which a natural definition of security against chosen-plaintext-attacks can be given. The main result presented here is the existence of a relativized model of computation under which there exists a provably secure transientkey cryptosystem. Indeed, there exists a computable oracle that can be used by cryptographers to efficiently encipher and decipher messages, yet it is of no help to the cryptanalyst trying to decode messages not intended for him. As a corollary, there exists a length-preserving permutation, the inverse of which is hard to compute on most elements of its domain even if arbitrary evaluations of the function itself are allowed for free.