Paper 2018/458 Original: eprint.iacr.org/2018/458 ↗
Characterizing Collision and Second-Preimage Resistance in Linicrypt
Abstract
Linicrypt (Carmer & Rosulek, Crypto 2016) refers to the class of algorithms that make calls to a random oracle and otherwise manipulate values via fixed linear operations. We give a characterization of collision-resistance and second-preimage resistance for a significant class of Linicrypt programs (specifically, those that achieve domain separation on their random oracle queries via nonces). Our characterization implies that collision-resistance and second-preimage resistance are equivalent, in an asymptotic sense, for this class. Furthermore, there is a polynomial-time procedure for determining whether such a Linicrypt program is collision/second-preimage resistant.
Metadata
- Available format(s)
PDF
- Category
- Foundations
- Publication info
- Preprint.
- History
- 2020-07-24: last updated
- 2018-05-21: published
- Short URL
- https://ia.cr/2018/458
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2018/458,
author = {Ian McQuoid and Trevor Swope and Mike Rosulek},
title = {Characterizing Collision and Second-Preimage Resistance in Linicrypt},
howpublished = {Cryptology {ePrint} Archive, Paper 2018/458},
year = {2018},
url = {https://eprint.iacr.org/2018/458}
}