Paper Info
Title
Analysis of random oracle instantiation scenarios for OAEP and other practical schemes
Abstract
We investigate several previously suggested scenarios of instantiating random oracles (ROs) with “realizable” primitives in cryptographic schemes. As candidates for such “instantiating” primitives we pick perfectly one-way hash functions (POWHFs) and verifiable pseudorandom functions (VPRFs). Our analysis focuses on the most practical encryption schemes such as OAEP and its variant PSS-E and the Fujisaki-Okamoto hybrid encryption scheme. We also consider the RSA Full Domain Hash (FDH) signature scheme. We first show that some previous beliefs about instantiations for some of these schemes are not true. Namely we show that, contrary to Canetti's conjecture, in general one cannot instantiate either one of the two ROs in the OAEP encryption scheme by POWHFs without losing security. We also confirm through the FDH signature scheme that the straightforward instantiation of ROs with VPRFs may result in insecure schemes, in contrast to regular pseudorandom functions which can provably replace ROs (in a well-defined way). But unlike a growing number of papers on negative results about ROs, we bring some good news. We show that one can realize one of the two ROs in a variant of the PSS-E encryption scheme and either one of the two ROs in the Fujisaki-Okamoto hybrid encryption scheme through POWHFs, while preserving the IND-CCA security in both cases (still in the RO model). Although this partial instantiation in form of substituting only one RO does not help to break out of the random oracle model, it yet gives a better understanding of the necessary properties of the primitives and also constitutes a better security heuristic.
Year
DOI
Venue
2005
10.1007/11535218_25
CRYPTO
Keywords
Field
DocType
fdh signature scheme,fujisaki-okamoto hybrid encryption scheme,practical scheme,random oracle instantiation scenario,insecure scheme,better security heuristic,signature scheme,cryptographic scheme,pss-e encryption scheme,oaep encryption scheme,ind-cca security,practical encryption scheme,hybrid encryption,random oracle model,random oracle
Pseudorandom function family,Optimal asymmetric encryption padding,Cryptography,Computer science,Digital signature,Encryption,Theoretical computer science,Full Domain Hash,Distributed computing,Discrete mathematics,Random oracle,Algorithm,Hash function
Conference
Volume
ISSN
ISBN
3621
0302-9743
3-540-28114-2
Citations 
PageRank 
References 
25
0.93
25
Authors
2
Name
Order
Citations
PageRank
Alexandra Boldyreva12297114.80
Marc Fischlin2170992.71