International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Paper: Key-Homomorphic Pseudorandom Functions from LWE with Small Modulus

Authors:
Sam Kim , Stanford University
Download:
DOI: 10.1007/978-3-030-45724-2_20 (login may be required)
Search ePrint
Search Google
Conference: EUROCRYPT 2020
Abstract: Pseudorandom functions (PRFs) are fundamental objects in cryptography that play a central role in symmetric-key cryptography. Although PRFs can be constructed from one-way functions generically, these black-box constructions are usually inefficient and require deep circuits to evaluate compared to direct PRF constructions that rely on specific algebraic assumptions. From lattices, one can directly construct PRFs from the Learning with Errors (LWE) assumption (or its ring variant) using the result of Banerjee, Peikert, and Rosen (Eurocrypt 2012) and its subsequent works. However, all existing PRFs in this line of work rely on the hardness of the LWE problem where the associated modulus is super-polynomial in the security parameter. In this work, we provide two new PRF constructions from the LWE problem that each focuses on either minimizing the depth of its evaluation circuit or providing key-homomorphism while relying on the hardness of the LWE problem with only a polynomial modulus. Along the way, we introduce a new variant of the LWE problem called the Learning with Rounding and Errors (LWRE) problem. We show that for certain settings of parameters, the LWRE problem is as hard as the LWE problem. We then show that the hardness of the LWRE problem naturally induces a pseudorandom synthesizer that can be used to construct a low-depth PRF. The techniques that we introduce to study the LWRE problem can then be used to derive variants of existing key-homomorphic PRFs whose security can be reduced from the hardness of the LWE problem with a much smaller modulus.
Video from EUROCRYPT 2020
BibTeX
@inproceedings{eurocrypt-2020-30208,
  title={Key-Homomorphic Pseudorandom Functions from LWE with Small Modulus},
  booktitle={39th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Zagreb, Croatia, May 10–14, 2020, Proceedings},
  series={Lecture Notes in Computer Science},
  publisher={Springer},
  keywords={pseudorandom functions;lattices;key-homomorphic PRFs},
  volume={12105},
  doi={10.1007/978-3-030-45724-2_20},
  author={Sam Kim},
  year=2020
}