Universal composition with joint state

Ran Canetti, Tal Rabin

Research output: Chapter in Book/Report/Conference proceedingChapterpeer-review

Abstract

Cryptographic systems often involve running multiple concurrent instances of some protocol, where the instances have some amount of joint state and randomness. (Examples include systems where multiple protocol instances use the same public-key infrastructure, or the same common reference string.) Rather than attempting to analyze the entire system as a single unit, we would like to be able to analyze each such protocol instance as stand-alone, and then use a general composition theorem to deduce the security of the entire system. However, no known composition theorem applies in this setting, since they all assume that the composed protocol instances have disjoint internal states, and that the internal random choices in the various executions are independent. We propose a new composition operation that can handle the case where different components have some amount of joint state and randomness, and demonstrate sufficient conditions for when the new operation preserves security. The new operation, which is called universal composition with joint state (and is based on the recently proposed universal composition operation), turns out to be very useful in a number of quite different scenarios such as those mentioned above.

Original languageEnglish
Title of host publicationLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
EditorsDan Boneh
PublisherSpringer Verlag
Pages265-281
Number of pages17
ISBN (Print)9783540406747
DOIs
StatePublished - 2003
Externally publishedYes

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume2729
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Keywords

  • Cryptographic protocols
  • Protocol composition
  • Security analysis

Fingerprint

Dive into the research topics of 'Universal composition with joint state'. Together they form a unique fingerprint.

Cite this