The cryptographic power of random selection

  • Authors:
  • Matthias Krause;Matthias Hamann

  • Affiliations:
  • Theoretical Computer Science, University of Mannheim, Mannheim, Germany;Theoretical Computer Science, University of Mannheim, Mannheim, Germany

  • Venue:
  • SAC'11 Proceedings of the 18th international conference on Selected Areas in Cryptography
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

The principle of random selection and the principle of adding biased noise are new paradigms used in several recent papers for constructing lightweight RFID authentication protocols. The cryptographic power of adding biased noise can be characterized by the hardness of the intensively studied Learning Parity with Noise (LPN) Problem. In analogy to this, we identify a corresponding learning problem for random selection and study its complexity. Given L secret linear functions $f_1,\ldots,f_L:\mbox{\{0,1\}}^n\longrightarrow\mbox{\{0,1\}}^a$ , $RandomSelect\left(L,n,a\right)$ denotes the problem of learning f1 ,…,fL from values $\left(u,f_l\left(u\right)\right)$ , where the secret indices l∈{1,…,L} and the inputs $u\in\mbox{$\{0,1\}^n$}$ are randomly chosen by an oracle. We take an algebraic attack approach to design a nontrivial learning algorithm for this problem, where the running time is dominated by the time needed to solve full-rank systems of linear equations over $O\left(n^L\right)$ unknowns. In addition to the mathematical findings relating correctness and average running time of the suggested algorithm, we also provide an experimental assessment of our results.