Sciweavers

Share
TIT
2008

The Bare Bounded-Storage Model: The Tight Bound on the Storage Requirement for Key Agreement

10 years 2 months ago
The Bare Bounded-Storage Model: The Tight Bound on the Storage Requirement for Key Agreement
Abstract--In the bounded-storage model (BSM) for information-theoretic secure encryption and key agreement, one makes use of a random string R whose length t is greater than the assumed bound s on the adversary Eve's storage capacity. The legitimate parties, Alice and Bob, execute a protocol, over an authenticated channel accessible to Eve, to generate a secret key K about which Eve has essentially no information even if she has infinite computing power. The string Ris either assumed to be accessible to all parties or communicated publicly from Alice to Bob. While in the BSM one often assumes that Alice and Bob initially share a short secret key, and the goal of the protocol is to generate a much longer key, in this communication, we consider the bare BSM without any initially shared secret key. It is proved that in the bare BSM, secret key agreement is impossible unless Alice and Bob have themselves very high storage capacity, namely, O( pt). This proves the optimality of a schem...
Stefan Dziembowski, Ueli M. Maurer
Added 29 Dec 2010
Updated 29 Dec 2010
Type Journal
Year 2008
Where TIT
Authors Stefan Dziembowski, Ueli M. Maurer
Comments (0)
books