Efficient pseudorandom generators from exponentially hard one-way functions

  • Authors:
  • Iftach Haitner;Danny Harnik;Omer Reingold

  • Affiliations:
  • Dept. of Computer Science and Applied Math., Weizmann Institute of Science, Rehovot, Israel;Dept. of Computer Science, Technion, Haifa, Israel;Dept. of Computer Science and Applied Math., Weizmann Institute of Science, Rehovot, Israel

  • Venue:
  • ICALP'06 Proceedings of the 33rd international conference on Automata, Languages and Programming - Volume Part II
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

In their seminal paper [HILL99], Håstad, Impagliazzo, Levin and Luby show that a pseudorandom generator can be constructed from any one-way function. This plausibility result is one of the most fundamental theorems in cryptography and helps shape our understanding of hardness and randomness in the field. Unfortunately, the reduction of [HILL99] is not nearly as efficient nor as security preserving as one may desire. The main reason for the security deterioration is the blowup to the size of the input. In particular, given one-way functions on n bits one obtains by [HILL99] pseudorandom generators with seed length $\cal{O}$(n8). Alternative constructions that are far more efficient exist when assuming the one-way function is of a certain restricted structure (e.g. a permutations or a regular function). Recently, Holenstein [Hol06] addressed a different type of restriction. It is demonstrated in [Hol06] that the blowup in the construction may be reduced when considering one-way functions that have exponential hardness. This result generalizes the original construction of [HILL99] and obtains a generator from any exponentially hard one-way function with a blowup of $\cal{O}$(n5), and even $\cal{O}$(n4 log2n) if the security of the resulting pseudorandom generator is allowed to have weaker (yet super-polynomial) security In this work we show a construction of a pseudorandom generator from any exponentially hard one-way function with a blowup of only $\cal{O}$(n2) and respectively, only $\cal{O}$(n log2n) if the security of the resulting pseudorandom generator is allowed to have only super-polynomial security. Our technique does not take the path of the original [HILL99] methodology, but rather follows by using the tools recently presented in [HHR05] (for the setting of regular one-way functions) and further developing them