International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Decisional Second-Preimage Resistance: When Does SPR Imply PRE?

Authors:
Daniel J. Bernstein
Andreas Hülsing
Download:
DOI: 10.1007/978-3-030-34618-8_2
Search ePrint
Search Google
Abstract: There is a well-known gap between second-preimage resistance and preimage resistance for length-preserving hash functions. This paper introduces a simple concept that fills this gap. One consequence of this concept is that tight reductions can remove interactivity for multi-target length-preserving preimage problems, such as the problems that appear in analyzing hash-based signature systems. Previous reduction techniques applied to only a negligible fraction of all length-preserving hash functions, presumably excluding all off-the-shelf hash functions.
BibTeX
@article{asiacrypt-2019-30056,
  title={Decisional Second-Preimage Resistance: When Does SPR Imply PRE?},
  booktitle={Advances in Cryptology – ASIACRYPT 2019},
  series={Advances in Cryptology – ASIACRYPT 2019},
  publisher={Springer},
  volume={11923},
  pages={33-62},
  doi={10.1007/978-3-030-34618-8_2},
  author={Daniel J. Bernstein and Andreas Hülsing},
  year=2019
}