Analysis of Error Dependencies on Newhope
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Song, Minki | - |
dc.contributor.author | Lee, Seunghwan | - |
dc.contributor.author | Shin, Dong-Joon | - |
dc.contributor.author | Lee, Eunsang | - |
dc.contributor.author | Kim, Young-Sik | - |
dc.contributor.author | No, Jong-Seon | - |
dc.date.accessioned | 2021-08-02T09:51:21Z | - |
dc.date.available | 2021-08-02T09:51:21Z | - |
dc.date.created | 2021-05-12 | - |
dc.date.issued | 2020-03 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/hanyang/handle/2021.sw.hanyang/10576 | - |
dc.description.abstract | Among many submissions to NIST post-quantum cryptography (PQC) project, NewHope is a promising key encapsulation mechanism (KEM) based on the Ring-Learning with errors (Ring-LWE) problem. Since NewHope is an indistinguishability (IND)-chosen ciphertext attack secure KEM by applying the Fujisaki-Okamoto transform to an IND-chosen plaintext attack secure public-key encryption, accurate calculation of decryption failure rate (DFR) is required to guarantee resilience against attacks that exploit decryption failures. However, the current upper bound (UB) on DFR of NewHope is rather loose because the compression noise, the effect of encoding/decoding of NewHope, and the approximation effect of centered binomial distribution are not fully considered. Furthermore, since NewHope is a Ring-LWE based cryptography, there is a problem of error dependency among error coefficients, which makes accurate DFR calculation difficult. In this paper, we derive much tighter UB on DFR than the current UB by using constraint relaxation and union bound. Especially, the above-mentioned factors are all considered in the derivation of new UB and the centered binomial distribution is not approximated. Since the error dependency is also considered, the new UB is much closer to the real DFR than the current UB. Furthermore, the new UB is parameterized by using Chernoff-Cramer bound to facilitate the calculation of new UB for the parameters of NewHope. Since the new UB is much lower than the DFR requirement of PQC, this DFR margin can be used to improve NewHope. As a result, the security level and bandwidth efficiency of NewHope are improved by 7.2 % and 5.9 %, respectively. | - |
dc.language | 영어 | - |
dc.language.iso | en | - |
dc.publisher | IEEE-INST ELECTRICAL ELECTRONICS ENGINEERS INC | - |
dc.title | Analysis of Error Dependencies on Newhope | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Shin, Dong-Joon | - |
dc.identifier.doi | 10.1109/ACCESS.2020.2977607 | - |
dc.identifier.scopusid | 2-s2.0-85082017979 | - |
dc.identifier.wosid | 000524584300001 | - |
dc.identifier.bibliographicCitation | IEEE ACCESS, v.8, pp.45443 - 45456 | - |
dc.relation.isPartOf | IEEE ACCESS | - |
dc.citation.title | IEEE ACCESS | - |
dc.citation.volume | 8 | - |
dc.citation.startPage | 45443 | - |
dc.citation.endPage | 45456 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.isOpenAccess | Y | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalResearchArea | Engineering | - |
dc.relation.journalResearchArea | Telecommunications | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.relation.journalWebOfScienceCategory | Engineering, Electrical & Electronic | - |
dc.relation.journalWebOfScienceCategory | Telecommunications | - |
dc.subject.keywordPlus | Bandwidth | - |
dc.subject.keywordPlus | Efficiency | - |
dc.subject.keywordPlus | Failure analysis | - |
dc.subject.keywordPlus | Public key cryptography | - |
dc.subject.keywordPlus | Quantum cryptography | - |
dc.subject.keywordPlus | Errors | - |
dc.subject.keywordPlus | Bandwidth efficiency | - |
dc.subject.keywordPlus | Chernoff-Cramer bound | - |
dc.subject.keywordPlus | Decryption failures | - |
dc.subject.keywordPlus | Error dependency | - |
dc.subject.keywordPlus | Key encapsulation mechanisms | - |
dc.subject.keywordPlus | Lattice-based cryptography | - |
dc.subject.keywordPlus | Learning with Errors | - |
dc.subject.keywordPlus | NewHope | - |
dc.subject.keywordPlus | NIST | - |
dc.subject.keywordPlus | Post quantum cryptography | - |
dc.subject.keywordPlus | relaxation | - |
dc.subject.keywordPlus | security | - |
dc.subject.keywordPlus | Union bounds | - |
dc.subject.keywordPlus | Upper Bound | - |
dc.subject.keywordAuthor | Bandwidth efficiency | - |
dc.subject.keywordAuthor | Chernoff-Cramer bound | - |
dc.subject.keywordAuthor | decryption failure rate | - |
dc.subject.keywordAuthor | error dependency | - |
dc.subject.keywordAuthor | key encapsulation mechanism | - |
dc.subject.keywordAuthor | lattice-based cryptography | - |
dc.subject.keywordAuthor | NewHope | - |
dc.subject.keywordAuthor | NIST | - |
dc.subject.keywordAuthor | post-quantum cryptography | - |
dc.subject.keywordAuthor | relaxation | - |
dc.subject.keywordAuthor | ring-learning with errors | - |
dc.subject.keywordAuthor | security | - |
dc.subject.keywordAuthor | union bound | - |
dc.subject.keywordAuthor | upper bound | - |
dc.identifier.url | https://ieeexplore.ieee.org/document/9020084 | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
222, Wangsimni-ro, Seongdong-gu, Seoul, 04763, Korea+82-2-2220-1365
COPYRIGHT © 2021 HANYANG UNIVERSITY.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.