Feb 07 this paper

A Concrete Introduction to Higher Algebra, 2nd Edition

Info iconThis preview shows page 1. Sign up to view the full content.

View Full Document Right Arrow Icon
Bellare - Random oracles are practical Random oracles are practical: A paradigm for designing efficient protocols Authors: M. Bellare and P. Rogaway Abstract: We argue that the random oracle model ---where all parties have access to a public random oracle--- provides a bridge between cryptographic theory and cryptographic practice. In the paradigm we suggest, a practical protocol P is produced by first devising and proving correct a protocol P^R for the random oracle model, and then replacing oracle accesses by the computation of an ``appropriately chosen'' function h. This paradigm yields protocols much more efficient than standard ones while retaining many of the advantages of provable security. We illustrate these gains for problems including encryption, signatures, and zero-knowledge proofs.
Background image of page 1
This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: Ref: Extended abstract in Proc. First Annual Conference on Computer and Communications Security, ACM, 1993. Full paper available below. Full paper: Available as compressed postscript , postscript , or pdf . ( Help if this doesn't work). Related work and links Our most important schemes designed using the random oracle model are the PSS (Probabilistic Signature Scheme, for signing with RSA) and OAEP (Optimal Asymmetric Encryption Padding/ Protocol, for encryption with RSA). We also used this model in the design of incremental hash functions . Following our work, the random oracle model has been used in numerous other places. file:///C|/Documents%20and%20Settings/Linda%20Grauer/My. ..ents/Dolores/Berkeley-H2/CS276/2.07%20this%20paper.html [2/4/2008 11:46:16 AM]...
View Full Document

This note was uploaded on 02/04/2008 for the course CS 276 taught by Professor Trevisan during the Spring '02 term at Berkeley.

Ask a homework question - tutors are online