On the Statistical Leak of the GGH13 Multilinear Map and some Variants - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2018

On the Statistical Leak of the GGH13 Multilinear Map and some Variants

Léo Ducas
  • Fonction : Auteur
  • PersonId : 945707
Alice Pellet--Mary

Résumé

At EUROCRYPT 2013, Garg, Gentry and Halevi proposed a candidate construction (later referred as GGH13) of cryptographic multilinear map (MMap). Despite weaknesses uncovered by Hu and Jia (EUROCRYPT 2016), this candidate is still used for designing obfuscators. The naive version of the GGH13 scheme was deemed susceptible to averaging attacks, i.e., it could suffer from a statistical leak (yet no precise attack was described). A variant was therefore devised, but it remains heuristic. Recently, to obtain MMaps with low noise and modulus, two variants of this countermeasure were developed by Döttling et al. (EPRINT:2016/599). In this work, we propose a systematic study of this statistical leak for all these GGH13 variants. In particular, we confirm the weakness of the naive version of GGH13. We also show that, among the two variants proposed by Döttling et al., the so-called conservative method is not so effective: it leaks the same value as the unprotected method. Luckily, the leak is more noisy than in the unprotected method, making the straightforward attack unsuccessful. Additionally, we note that all the other methods also leak values correlated with secrets. As a conclusion, we propose yet another countermeasure, for which this leak is made unrelated to all secrets. On our way, we also make explicit and tighten the hidden exponents in the size of the parameters, as an effort to assess and improve the efficiency of MMaps.
Fichier principal
Vignette du fichier
version_eprint.pdf (612.21 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01895645 , version 1 (15-10-2018)

Identifiants

  • HAL Id : hal-01895645 , version 1

Citer

Léo Ducas, Alice Pellet--Mary. On the Statistical Leak of the GGH13 Multilinear Map and some Variants. Asiacrypt 2018, Dec 2018, Brisbane, Australia. pp.465-493. ⟨hal-01895645⟩
83 Consultations
134 Téléchargements

Partager

Gmail Mastodon Facebook X LinkedIn More