Key Encapsulation Mechanism with Tight Enhanced Security in the Multi-user Setting: Impossibility Result and Optimal Tightness

Han, Shuai; Liu, Shengli; Gu, Dawu

doi:10.1007/978-3-030-92075-3_17

Cited by 6 publications

(2 citation statements)

References 38 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We also show that, by hashing its encapsulated key, a OW-ChCCA secure KEM is tightly indistinguishable against enhanced chosen-ciphertext attacks (IND-ECCA) in the ROM. IND-ECCA is a notion proposed by Han et al [HLG21] to rule out constructing Open Problems. We initiate the first step in constructing efficient lattice-based tightly secure AKE protocols.…”

Section: Our Contributionsmentioning

confidence: 99%

“…The resulting AKE protocol, AKE in , is described as in Figure 8; • A public-key encryption scheme with simulation-based bi-selective opening security; • A key encapsulation mechanism with enhanced CCA security [HLG21]. Since it is not the main result of our paper, we postpone this application to Appendix F.…”

Section: Further Applications Of Ow-chcca Securitymentioning

confidence: 99%

See 1 more Smart Citation

Lattice-Based Authenticated Key Exchange with Tight Security

Pan

Wagner

Zeng

2023

Lecture Notes in Computer Science

View full text Add to dashboard Cite

We construct the first tightly secure authenticated key exchange (AKE) protocol from lattices. Known tight constructions are all based on Diffie-Hellman-like assumptions. Thus, our protocol is the first construction with tight security from a post-quantum assumption.Our AKE protocol is constructed tightly from a new security notion for key encapsulation mechanisms (KEMs), called one-way security against checkable chosen-ciphertext attacks (OW-ChCCA). We show how an OW-ChCCA secure KEM can be tightly constructed based on the Learning With Errors assumption, leading to the desired AKE protocol. To show the usefulness of OW-ChCCA security beyond AKE, we use it to construct the first tightly bilateral selective-opening (BiSO) secure PKE. BiSO security is a stronger selective-opening notion proposed by Lai et al. (ASIACRYPT 2021).

show abstract

Section: Our Contributionsmentioning

confidence: 99%

Section: Further Applications Of Ow-chcca Securitymentioning

confidence: 99%