Local randomness in candidate one-way functions

  • Authors:
  • H. Niederreiter;C. P. Schnorr

  • Affiliations:
  • Österreichische Akademie der Wissenschaften, Institut für lnformationsverarbeitung, Sonnenfelsgasse, Wien, Austria;Fachbereich Mathematik/Informatik, Universität Frankfurt, Frankurt, Germany

  • Venue:
  • EUROCRYPT'92 Proceedings of the 11th annual international conference on Theory and application of cryptographic techniques
  • Year:
  • 1992

Quantified Score

Hi-index 0.00

Visualization

Abstract

We call a distribution on n-bit strings (Ɛ, e)-locally random, if for every choice of e ≤ n positions the induced distribution on e-bit strings is in the L1-norm at most Ɛ away from the uniform distribution on e-bit strings. We establish local randomness in polynomial random number generators (RNG) that are candidate one-way functions. Let N be a squarefree integer and let f1, ..., fl be polynomials with coefficients in ZN = Z/NZ. We study the RNG that stretches a random x Ɛ ZN into the sequence of least significant bits of f1(x), ..., fl(x). We show that this RNG provides local randomness if for every prime divisor p of N the polynomials f1,...,fl are linearly independent modulo the subspace of polynomials of degree ≤ 1 in Zp[x]. We also establish local randomness in polynomial random function generators. This yields candidates for cryptographic hash functions. The concept of local randomness in families of functions extends the concept of universal families of hash functions by CARTER and WEGMAN (1979). The proofs of our results rely on upper bounds for exponential sums.