Hidden number problem with hidden multipliers, timed-release crypto, and noisy exponentiation

  • Authors:
  • Nick A. Howgrave-Graham;Phong Q. Nguyen;Igor E. Shparlinski

  • Affiliations:
  • IBM T. J. Watson Research Center, Hawthorne, NY;Département d'Informatique, École Normale Supérieure, 45, rue d'Ulm, 75230 Paris Cedex 05, France;Department of Computing, Macquarie University, New South Wales 2109, Australia

  • Venue:
  • Mathematics of Computation
  • Year:
  • 2003

Quantified Score

Hi-index 0.00

Visualization

Abstract

We consider a generalisation of the hidden number problem recently introduced by Boneh and Venkatesan. The initial problem can be stated as follows: recover a number a ∈ Fp such that for many known random t ∈ Fp approximations to the values of ⌊at⌋p are known. Here we study a version of the problem where the "multipliers" t are not known but rather certain approximations to them are given. We present a probabilistic polynomial time solution when the error is small enough, and we show that the problem cannot be solved if the error is sufficiently large. We apply the result to the bit security of "timed-release crypto" introduced by Rivest, Shamir and Wagner, to noisy exponentiation black-boxes and to the bit security of the "inverse" exponentiation. We also show that it implies a certain bit security result for Weil pairing on elliptic curves.