Range Extension for Weak PRFs; The Good, the Bad, and the Ugly

13 years 10 months ago
Range Extension for Weak PRFs; The Good, the Bad, and the Ugly
We investigate a general class of (black-box) constructions for range extension of weak pseudorandom functions: a construction based on m independent functions F1, . . . , Fm is given by a set of strings over {1, . . . , m}∗ , where for example { 2 , 1, 2 } corresponds to the function X → [F2(X), F2(F1(X))]. All efficient constructions for range expansion of weak pseudorandom functions that we are aware of are of this form. We completely classify such constructions as good, bad or ugly, where the good constructions are those whose security can be proven via a blackbox reduction, the bad constructions are those whose insecurity can be proven via a black-box reduction, and the ugly constructions are those which are neither good nor bad. Our classification shows that the range expansion from [10] is optimal, in the sense that it achieves the best possible expansion (2m − 1 when using m keys). Along the way we show that for weak quasirandom functions (i.e. in the information theoret...
Krzysztof Pietrzak, Johan Sjödin
Added 07 Jun 2010
Updated 07 Jun 2010
Type Conference
Year 2007
Authors Krzysztof Pietrzak, Johan Sjödin
Comments (0)