The Modular Inversion Hidden Number Problem

  • Authors:
  • Dan Boneh;Shai Halevi;Nick Howgrave-Graham

  • Affiliations:
  • -;-;-

  • Venue:
  • ASIACRYPT '01 Proceedings of the 7th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
  • Year:
  • 2001

Quantified Score

Hi-index 0.00

Visualization

Abstract

We study a class of problems called Modular Inverse Hidden Number Problems (MIHNPs). The basic problem in this class is the following: Given many pairs 〈xi, MSBk((α + xi)-1 mod p)〉 for random xi ∈ Zp the problem is to find α ∈ Zp (here MSBk(x) refers to the k most significant bits of x). We describe an algorithm for this problem when k (log2 p)/3 and conjecture that the problem is hard whenever k 2 p)/3. We show that assuming hardness of some variants of this MIHNP problem leads to very efficient algebraic PRNGs and MACs.