Lecture Notes in Computer Science 4284

Transcription

1 Lecture Notes in Computer Science 4284 Commenced Publication in 1973 Founding and Former Series Editors: Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen Editorial Board David Hutchison Lancaster University, UK Takeo Kanade Carnegie Mellon University, Pittsburgh, PA, USA Josef Kittler University of Surrey, Guildford, UK Jon M. Kleinberg Cornell University, Ithaca, NY, USA Friedemann Mattern ETH Zurich, Switzerland John C. Mitchell Stanford University, CA, USA Moni Naor Weizmann Institute of Science, Rehovot, Israel Oscar Nierstrasz University of Bern, Switzerland C. Pandu Rangan Indian Institute of Technology, Madras, India Bernhard Steffen University of Dortmund, Germany Madhu Sudan Massachusetts Institute of Technology, MA, USA Demetri Terzopoulos University of California, Los Angeles, CA, USA Doug Tygar University of California, Berkeley, CA, USA Moshe Y. Vardi Rice University, Houston, TX, USA Gerhard Weikum Max-Planck Institute of Computer Science, Saarbruecken, Germany

2 Xuejia Lai Kefei Chen (Eds.) Advances in Cryptology ASIACRYPT th International Conference on the Theory and Application of Cryptology and Information Security Shanghai, China, December 3-7, 2006 Proceedings 13

3 Volume Editors Xuejia Lai Dept. of Computer Science and Engineering Shanghai Jiaotong University 800 Dong Chuan Road, Min Hang Shanghai , P.R. China Kefei Chen Dept. of Computer Science and Engineering Shanghai Jiaotong University 800 Dong Chuan Road, Min Hang Shanghai , P.R., China Library of Congress Control Number: CR Subject Classification (1998): E.3, D.4.6, F.2.1-2, K.6.5, C.2, J.1, G.2 LNCS Sublibrary: SL 4 Security and Cryptology ISSN ISBN Springer Berlin Heidelberg New York ISBN Springer Berlin Heidelberg New York This work is subject to copyright. All rights are reserved, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, re-use of illustrations, recitation, broadcasting, reproduction on microfilms or in any other way, and storage in data banks. Duplication of this publication or parts thereof is permitted only under the provisions of the German Copyright Law of September 9, 1965, in its current version, and permission for use must always be obtained from Springer. Violations are liable to prosecution under the German Copyright Law. Springer is a part of Springer Science+Business Media springer.com IACR 2006 Printed in Germany Typesetting: Camera-ready by author, data conversion by Scientific Publishing Services, Chennai, India Printed on acid-free paper SPIN: /

4 Preface ASIACRYPT 2006 was held in Shanghai, China, during December 3 7, This was the 12th annual ASIACRYPT conference, and was sponsored by the International Association for Cryptologic Research (IACR), in cooperation with the State Key Labs of Information Security, Chinese Academy of Sciences (LOIS), Lab for Cryptography and Information Security, Shanghai Jiaotong University (CIS/SJTU) and Natural Science Foundation of China (NSFC). This year we received a record number of 314 submissions, of which 303 regular submissions were reviewed by 32 members of the Program Committee, with the help of 250 external referees. After a two-month review process, the Program Committee selected 30 papers for presentation. This volume of proceedings contains the revised version of the 30 selected papers. The IACR 2006 distinguished lecture by Ivan Damgaard was also in the program. The paper Finding SHA-1 Characteristics by Christophe De Canniére and Christian Rechberger received the best paper award. The reviewing process was a challenging task, and we had to reject many good submissions that could have been accepted under normal circumstances. I am very grateful to Program Committee for their efforts to carry out this challenging task and to keep the high standard of ASIACRYPT conferences. We gratefully acknowledge our 250 external referees; without their help it would be infeasible to provide 1008 high-quality, often extensive, reviews. More importantly, I would like to thank all the authors who submitted their work to ASIACRYPT This year submissions were processed using Web-based software ichair, and would like to thank Thomas Baigneres, Matthieu Finiasz and Serge Vaudenay for providing this valuable tool. I am grateful to Ruimin Shen for his generous and indispensable support and I would like to thank Changzhe Gao, Haining Lu and Jingjing Wu for the smooth operation of our Web-sites. I would also like to thank the General Chair, Dingyi Pei, for organizing the conference and the Organization Chair, Kefei Chen, for taking over all the hard tasks and preparing these proceedings. Last but not least, my thanks to all the participants of the ASIACRYPT 2006 conference. September 2006 Xuejia Lai

5 ASIACRYPT 2006 December 3 7, 2006, Shanghai, China Sponsored by the International Association for Cryptologic Research (IACR) in cooperation with the State Key Labs of Information Security, Chinese Academy of Sciences (LOIS) and Lab for Cryptography and Information Security, Shanghai Jiaotong University (CIS/SJTU) and Natural Science Foundation of China (NSFC) General Chair Dingyi Pei...Chinese Academy of Sciences, China Program Chair Xuejia Lai...Shanghai Jiaotong University, China Organization Chair Kefei Chen...Shanghai Jiaotong University, China Program Committee Paulo S.L.M. Barreto University of Sao Paulo, Brazil Mihir Bellare U.C. San Diego, USA Lily Chen NIST, USA Ed Dawson Queensland University of Technology, Australia Yvo G. Desmedt University College London, UK Giovanni Di Crescenzo Telcordia Technologies, USA Cunsheng Ding Hong Kong University of Science and Technology, China Henri Gilbert France Telecom R&D, France Guang Gong University of Waterloo, Canada

6 VIII Organization Antoine Joux DGA and University Versailles St-Quentin, France Kwangjo Kim ICU, Korea Kaoru Kurosawa Ibaraki University, Japan Chi Sung Laih National Cheng Kung University, Taiwan Tanja Lange Technical University of Denmark, Denmark Arjen K. Lenstra EPFL, Switzerland Mulan Liu Chinese Academy of Sciences, China Wenbo Mao HP Labs, China Willi Meier FHNW, Switzerland Kaisa Nyberg Helsinki University of Technology and Nokia, Finland Kenny Paterson Royal Holloway University of London, UK David Pointcheval CNRS/ENS, Paris, France Bart Preneel Katholieke Universiteit Leuven, Belgium Raphael C.W. Phan Swinburne University of Technology, Malaysia Phillip Rogaway U.C. Davis, USA and Mah Fah Luang University, Thailand Rei Safavi-Naini University of Wollongong, Australia Kouichi Sakurai Kyushu University, Japan Hovav Shacham Weizmann Institute of Science, Israel Serge Vaudenay EPFL, Switzerland Wenling Wu LOIS, Chinese Academy of Sciences, China Moti Yung Columbia University, USA Jianying Zhou Institute for Infocomm Research, Singapore External Referees Michel Abdalla Joonsang Baek Thomas Baigneres Lejla Batina Amos Beimel Come Berbain Daniel J. Bernstein Olivier Billet Peter Birkner Alex Biryukov Alexandra Boldyreva Colin Boyd Ernie Brickell Sébastien Canard Ran Canetti Zhengjun Cao Dr Gary Carter Jiun-Ming Chen Liqun Chen Benoit Chevallier-Mames Jung-Hui Chiu Kim-Kwang R. Choo Yvonne Cliff Martin Cochran Scott Contini Jean-Sebastien Coron Nicolas Courtois Jason Crampton Ricardo Dahab Tanmoy Kanti Das Blandine Debraize Cecile Delerablee Yi Deng Yingpu Deng Alex Dent Claus Diem Christophe Doche Yevgeniy Dodis Ling Dong Jeroen Doumen Orr Dunkelman Ratna Dutta Chun-I Fan Haining Fan Reza Rezaeien Farashahi Siamak Fayyaz-Shahan-dashti Serge Fehr Décio Luiz Gazzoni Filho Matthieu Finiasz Marc Fischlin

7 Organization IX Eiichiro Fujisaki Kazuhide Fukushima Jun Furukawa Steven Galbraith Marc Girault Kenneth Giuliani Philippe Golle Zheng Gong Eu-Jin Goh Jeroen van de Graaf Jens Groth Lifeng Guo Kishan Gupta Satoshi Hada Safuat Hamdy Helena Handschuh Colm O heigeartaigh Martin Hell Swee-Huay Heng Yong-Sork Her Javier Herranz Clemens Heuberger Alejandro Hevia Jason Hinek Shoichi Hirose Martin Hirt Xuan Hong Nick Hopper Yoshiaki Hori Honggang Hu Lei Hu Po-Yi Huang Qianhong Huang Xinyi Huang Zhenjie Huang J. J. Hwang Jim Hughes Russell Impagliazzo Yuval Ishai Kouichi Itoh Tetsu Iwata Stanislaw Jarecki Shaoquan Jiang Kwon Jo Ellen Jochemsz Ari Juels Pascal Junod Marcelo Kaihara Yael Kalai Jonathan Katz Pinhun Ke John Kelsey Shahram Khazaei Khoongming Khoo Aggelos Kiayias Joe Kilian Jongsung Kim Eike Kiltz Takeshi Koshiba Lars Knudsen Noboru Kunihiro Simon Künzli Wen-Chung Kuo Hidenori Kuwakado Joseph Lano Sven Laur John Malone Lee Reynald Lercier Jung-Shian Li Pin Lin Xiangxue Li Zhuowei Li Benoit Libert Yehuda Lindell Yu Long Vadim Lyubashevsky Mark Manulis Anton Mityagin Jean Monnerat Tal Moran Yi Mu Sourav Mukhopadhyay Michael Naehrig Jorge Nakahara Jr. Mridul Nandy Yassir Nawaz Gregory Neven Lan Nguyen Phong Nguyen Jesper Buus Nielsen Juan Gonzalez Nieto Juanma Gonzales Nieto Svetla Nikova Yasuhiro Ohtaki Dag Arne Osvik Soyoung Park Matthew G. Parker Sylvain Pasini Torben Pryds Pedersen Kun Peng Olivier Pereira Ludovic Perret Thomas Peyrin Duong Hieu Phan Josef Pieprzyk Benny Pinkas Angela Piper Weidong Qiu Tal Rabin Leonid Reyzin Tom Ristenpart Matt Robshaw Markus Rohe Allen Roginsky Greg Rose Andy Rupp Ahmad-Reza Sadeghi Palash Sarkar Louis Salvail Werner Schindler Katja Schmidt-Samoa Berry Schoenmakers Jasper Scholten Jacob Schuldt Gil Segev SeongHan Shin Tom Shrimpton Andrey Sidorenko Alice Silverberg Leonie Simpson Jerome A. Solinas Nigel Smart Adam Smith Markus Stadler Martijn Stam

8 X Organization Allan Steel Till Stegers Damien Stehle Andreas Stein John Steinberger Marc Stevens Doug Stinson Chunhua Su Makoto Sugita Haipo Sun Hung-Min Sun Willy Susilo Daisuke Suzuki Gelareh Taban Tsuyoshi Takagi Jun-ichi Takeuchi Keisuke Tanaka Qiang Tang Tomas Toft Dongvu Tonien Jacques Traore Pim Tuyls Wen-Guey Tzeng Yoshifumi Ueshige Ingrid Verbauwhede Frederik Vercauteren Damien Vergnaud Eric Verheul Martin Vuagnoux Charlotte Vikkelsoe Johan Wallén Colin Walter Chih-Hung Wang Guilin Wang Huaxiong Wang Kunpeng Wang Wang Peng Shuhong Wang Bogdan Warinschi Brent Waters Benne de Weger Mi Wen Jian Weng Christopher Wolf Stefan Wolf Zheng Xu Yacov Yacobi Akihiro Yamamura Bo-Yin Yang Chung-Huang Yang C. N. Yang Lizhen Yang Yiqun Lisa Yin Nam Yul Yu Bin Zhang Lei Zhang Rui Zhang Wentao Zhang Zhengfeng Zhang Zhifang Zhang Xianfeng Zhao Yunlei Zhao Dong Zheng Sujing Zhou Yongbin Zhou Huafei Zhu

9 Table of Contents Attacks on Hash Functions Finding SHA-1 Characteristics: General Results and Applications... 1 Christophe De Cannière, Christian Rechberger Improved Collision Search for SHA Yusuke Naito, Yu Sasaki, Takeshi Shimoyama, Jun Yajima, Noboru Kunihiro, Kazuo Ohta Forgery and Partial Key-Recovery Attacks on HMAC and NMAC Using Hash Collisions Scott Contini, Yiqun Lisa Yin Stream Ciphers and Boolean Functions New Guess-and-Determine Attack on the Self-Shrinking Generator Bin Zhang, Dengguo Feng On the (In)security of Stream Ciphers Based on Arrays and Modular Addition Souradyuti Paul, Bart Preneel Construction and Analysis of Boolean Functions of 2t + 1 Variables with Maximum Algebraic Immunity Na Li, Wen-Feng Qi Biometrics and ECC Computation Secure Sketch for Biometric Templates Qiming Li, Yagiz Sutcu, Nasir Memon The 2-Adic CM Method for Genus 2 Curves with Application to Cryptography P. Gaudry, T. Houtmann, D. Kohel, C. Ritzenthaler, A. Weng Extending Scalar Multiplication Using Double Bases Roberto Avanzi, Vassil Dimitrov, Christophe Doche, Francesco Sica

10 XII Table of Contents ID-Based Schemes HIBE With Short Public Parameters Without Random Oracle Sanjit Chatterjee, Palash Sarkar Forward-Secure and Searchable Broadcast Encryption with Short Ciphertexts and Private Keys Nuttapong Attrapadung, Jun Furukawa, Hideki Imai On the Generic Construction of Identity-Based Signatures with Additional Properties David Galindo, Javier Herranz, Eike Kiltz Public-Key Schemes On the Provable Security of an Efficient RSA-Based Pseudorandom Generator Ron Steinfeld, Josef Pieprzyk, Huaxiong Wang On the Security of OAEP Alexandra Boldyreva, Marc Fischlin Relationship Between Standard Model Plaintext Awareness and Message Hiding Isamu Teranishi, Wakaha Ogata RSA and Factorization On the Equivalence of RSA and Factoring Regarding Generic Ring Algorithms Gregor Leander, Andy Rupp Trading One-Wayness Against Chosen-Ciphertext Security in Factoring-Based Encryption Pascal Paillier, Jorge L. Villar A Strategy for Finding Roots of Multivariate Polynomials with New Applications in Attacking RSA Variants Ellen Jochemsz, Alexander May Construction of Hash Function Indifferentiable Security Analysis of Popular Hash Functions with Prefix-Free Padding Donghoon Chang, Sangjin Lee, Mridul Nandi, Moti Yung

11 Table of Contents XIII Multi-Property-Preserving Hash Domain Extension and the EMD Transform Mihir Bellare, Thomas Ristenpart Combining Compression Functions and Block Cipher-Based Hash Functions Thomas Peyrin, Henri Gilbert, Frédéric Muller, Matt Robshaw Protocols A Scalable Password-Based Group Key Exchange Protocol in the Standard Model Michel Abdalla, David Pointcheval A Weakness in Some Oblivious Transfer and Zero-Knowledge Protocols Ventzislav Nikov, Svetla Nikova, Bart Preneel Almost Optimum Secret Sharing Schemes Secure Against Cheating for Arbitrary Secret Distribution Satoshi Obana, Toshinori Araki Block Ciphers KFC - The Krazy Feistel Cipher Thomas Baignères, Matthieu Finiasz Generic Attacks on Unbalanced Feistel Schemes with Contracting Functions Jacques Patarin, Valérie Nachef, Côme Berbain New Cryptanalytic Results on IDEA Eli Biham, Orr Dunkelman, Nathan Keller Signatures New Approach for Selectively Convertible Undeniable Signature Schemes Kaoru Kurosawa, Tsuyoshi Takagi Simulation-Sound NIZK Proofs for a Practical Language and Constant Size Group Signatures Jens Groth

12 XIV Table of Contents Analysis of One Popular Group Signature Scheme Zhengjun Cao Author Index