Lecture Notes in Computer Science 4964

Transcription

1 Lecture Notes in Computer Science 4964 Commenced Publication in 1973 Founding and Former Series Editors: Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen Editorial Board David Hutchison Lancaster University, UK Takeo Kanade Carnegie Mellon University, Pittsburgh, PA, USA Josef Kittler University of Surrey, Guildford, UK Jon M. Kleinberg Cornell University, Ithaca, NY, USA Alfred Kobsa University of California, Irvine, CA, USA Friedemann Mattern ETH Zurich, Switzerland John C. Mitchell Stanford University, CA, USA Moni Naor Weizmann Institute of Science, Rehovot, Israel Oscar Nierstrasz University of Bern, Switzerland C. Pandu Rangan Indian Institute of Technology, Madras, India Bernhard Steffen University of Dortmund, Germany Madhu Sudan Massachusetts Institute of Technology, MA, USA Demetri Terzopoulos University of California, Los Angeles, CA, USA Doug Tygar University of California, Berkeley, CA, USA Gerhard Weikum Max-Planck Institute of Computer Science, Saarbruecken, Germany

2 Tal Malkin (Ed.) Topics in Cryptology CT-RSA 2008 The Cryptographers Track at the RSA Conference 2008 San Francisco, CA, USA, April 8-11, 2008 Proceedings 13

3 Volume Editor Tal Malkin Columbia University Department of Computer Science 514 CSC, 1214 Amsterdam Avenue MC 0401 New York, NY , USA Library of Congress Control Number: CR Subject Classification (1998): E.3, G.2.1, D.4.6, K.6.5, K.4.4, F.2.1-2, C.2, J.1 LNCS Sublibrary: SL 4 Security and Cryptology ISSN ISBN Springer Berlin Heidelberg New York ISBN Springer Berlin Heidelberg New York This work is subject to copyright. All rights are reserved, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, re-use of illustrations, recitation, broadcasting, reproduction on microfilms or in any other way, and storage in data banks. Duplication of this publication or parts thereof is permitted only under the provisions of the German Copyright Law of September 9, 1965, in its current version, and permission for use must always be obtained from Springer. Violations are liable to prosecution under the German Copyright Law. Springer is a part of Springer Science+Business Media springer.com Springer-Verlag Berlin Heidelberg 2008 Printed in Germany Typesetting: Camera-ready by author, data conversion by Scientific Publishing Services, Chennai, India Printed on acid-free paper SPIN: /

4 Preface The RSA Conference is the largest regularly-staged computer security event, with over 350 vendors and many thousands of attendees. The Cryptographers Track (CT-RSA) is a research conference within the RSA Conference. CT-RSA began in 2001, and has become one of the major established venues for presenting cryptographic research papers to a wide variety of audiences. CT-RSA 2008 was held in San Francisco, California from April 8 to April 11. The proceedings of CT-RSA 2008 contain 26 papers selected from 95 submissions pertaining to all aspects of cryptography. Each submission was reviewed by at least three reviewers, which was made possible by the hard work of 27 Program Committee members and many external reviewers listed on the following pages. The papers were selected following a detailed online discussion among the Program Committee members. The program included an invited talk by Shafi Goldwasser. The current proceedings include a short abstract of her talk. I would like to express my deep gratitude to the Program Committee members, who volunteered their expertise and hard work over several months, as well as to the external reviewers. Special thanks to Shai Halevi for providing and maintaining the Web review system used for paper submission, reviewing, and final-version preparation. Finally, I would like to thank Burt Kaliski and Ari Juels of RSA Laboratories, as well as the RSA conference team, especially Bree LaBollita, for their assistance throughout the process. February 2008 Tal Malkin

5 CT-RSA 2008 The Cryptographers Track of the RSA Conference Moscone Center, San Francisco, CA, USA April 8 11, 2008 Program Chair Tal Malkin, Columbia University, USA Program Committee Masayuki Abe NTT Corporation, Japan Feng Bao Institute for Infocomm Research, Singapore Dario Catalano Università di Catania, Italy Orr Dunkelman Katholieke Universiteit Leuven, Belgium Nelly Fazio IBM Almaden Research Center, USA Marc Fischlin Darmstadt University of Technology, Germany Michael Freedman Princeton University, USA Stuart Haber HP Labs, USA Danny Harnik IBM Haifa Research Lab, Israel Susan Hohenberger Johns Hopkins University, USA Aggelos Kiayias University of Connecticut, USA Eike Kiltz CWI, The Netherlands Ilya Mironov Microsoft Research, USA Kobbi Nissim Ben Gurion University, Israel Satoshi Obana NEC, Japan Elisabeth Oswald University of Bristol, UK Kunsoo Park Seoul National University, Korea Rafael Pass Cornell University, USA Josef Pieprzyk Macquarie University, Australia Tal Rabin IBM T.J. Watson Research Center, USA Matt Robshaw France Télécom, France Rei Safavi-Naini University of Calgary, Canada Alice Silverberg UC Irvine, USA Adam Smith Pennsylvania State University, USA François-Xavier Standaert UCL, Belgium Eran Tromer MIT, USA Yiqun Lisa Yin Independent Consultant, USA

6 VIII Organization External Reviewers Joel Alwen Nuttapong Attrapadung Lejla Batina Amos Beimel Come Berbain D.J. Bernstein Guido Bertoni Olivier Billet Carl Bosley Chris Charnes Jiun-Ming Chen Lily Chen Joo Yeon Cho Baudoin Collard Scott Contini Glenn Durfee Jean-Charles Faugère Martin Feldhofer Dario Fiore Craig Gentry Benedikt Gierlichs Rob Granger Matthew Green Johann Großschädl Iryna Gurevych Shai Halevi Jason Hinek Dennis Hofheinz Shaoquan Jiang Antoine Joux Marc Joye Marcelo Kaihara Seny Kamara François Koeune Hugo Krawczyk Mario Lamberger Tanja Lange Kerstin Lemke-Rust Tieyan Li Benoit Libert Huijia (Rachel) Lin Jennifer Lindsay Stefan Mangard Krystian Matusiewicz Alexander May Pradeep Kumar Mishra David Molnar Tal Moran Shiho Moriai Phong Q. Nguyen Antonio Nicolosi Svetla Nikova Miyako Ohkubo Yossi Oren Dag Arne Osvik Serdar Pehlivanoglu Chris Peikert Pedro Peris-Lopez Ray Perlner Duong Hieu Phan Krzysztof Pietrzak Benny Pinkas Gilles Piret Mario Di Raimondo Raj Rajagopalan Nalini Ratha Vincent Rijmen Thomas Ristenpart Tom Roeder Guy Rothblum Tomas Sander Bagus Santoso Dominique Schröder Jean-Pierre Seifert Nicolas Sendrier Hovav Shacham Siamak Shahandashti Zhijie Shi Igor Shparlinski Michal Sramka Ron Steinfeld Tamir Tassa Stefan Tillich Dustin Tseng Vinod Vaikuntanathan Muthu Venkitasubramaniam Shabsi Walfish Zhenghong Wang William Whyte Jin Yuan Hong Sheng Zhou Hong-Sheng Zhou

7 Table of Contents Hash Function Cryptanalysis Security of MD5 Challenge and Response: Extension of APOP Password Recovery Attack... 1 Yu Sasaki, Lei Wang, Kazuo Ohta, and Noboru Kunihiro Cryptanalysis of a Hash Function Based on Quasi-cyclic Codes Pierre-Alain Fouque and Gaëtan Leurent Linear-XOR and Additive Checksums Don t Protect Damgård-Merkle Hashes from Generic Attacks Praveen Gauravaram and John Kelsey Cryptographic Building Blocks Efficient Fully-Simulatable Oblivious Transfer Andrew Y. Lindell Separation Results on the One-More Computational Problems Emmanuel Bresson, Jean Monnerat, and Damien Vergnaud Fairness in Secure Computation An Efficient Protocol for Fair Secure Two-Party Computation Mehmet S. Kiraz and Berry Schoenmakers Efficient Optimistic Fair Exchange Secure in the Multi-user Setting and Chosen-Key Model without Random Oracles Qiong Huang, Guomin Yang, Duncan S. Wong, and Willy Susilo Legally-Enforceable Fairness in Secure Two-Party Computation Andrew Y. Lindell Message Authentication Codes Security of NMAC and HMAC Based on Non-malleability Marc Fischlin Aggregate Message Authentication Codes Jonathan Katz and Andrew Y. Lindell

8 X Table of Contents Improved AES Implementations Boosting AES Performance on a Tiny Processor Core Stefan Tillich and Christoph Herbst A Fast and Cache-Timing Resistant Implementation of the AES Robert Könighofer Public Key Encryption with Special Properties Identity-Based Threshold Key-Insulated Encryption without Random Oracles Jian Weng, Shengli Liu, Kefei Chen, Dong Zheng, and Weidong Qiu CCA2 Secure IBE: Standard Model Efficiency through Authenticated Symmetric Encryption Eike Kiltz and Yevgeniy Vahlis Public-Key Encryption with Non-interactive Opening Ivan Damgård, Dennis Hofheinz, Eike Kiltz, and Rune Thorbek Side Channel Cryptanalysis A Vulnerability in RSA Implementations Due to Instruction Cache Analysis and Its Demonstration on OpenSSL Onur Acıiçmez and Werner Schindler Fault Analysis Study of IDEA Christophe Clavier, Benedikt Gierlichs, and Ingrid Verbauwhede Susceptibility of UHF RFID Tags to Electromagnetic Analysis Thomas Plos Cryptography for Limited Devices Online/Offline Signature Schemes for Devices with Limited Computing Capabilities Ping Yu and Stephen R. Tate RFID Security: Tradeoffs between Security and Efficiency Ivan Damgård and Michael Østergaard Pedersen Invited Talk Program Obfuscation and One-Time Programs (Abstract) Shafi Goldwasser

9 Table of Contents XI Key Exchange Efficient Two-Party Password-Based Key Exchange Protocols in the UC Framework Michel Abdalla, Dario Catalano, Céline Chevalier, and David Pointcheval Beyond Secret Handshakes: Affiliation-Hiding Authenticated Key Exchange Stanis law Jarecki, Jihye Kim, and Gene Tsudik Cryptanalysis Improving the Efficiency of Impossible Differential Cryptanalysis of Reduced Camellia and MISTY Jiqiang Lu, Jongsung Kim, Nathan Keller, and Orr Dunkelman Small Secret Key Attack on a Variant of RSA (Due to Takagi) Kouichi Itoh, Noboru Kunihiro, and Kaoru Kurosawa Cryptographic Protocols Super-Efficient Verification of Dynamic Outsourced Databases Michael T. Goodrich, Roberto Tamassia, and Nikos Triandopoulos A Latency-Free Election Scheme Kristian Gjøsteen Author Index