loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
2006 IEEE Symposium on Security and Privacy (S&P'06)
Simulatable Security and Polynomially Bounded Concurrent Composability
Berkeley/Oakland, California
May 21-May 24
ISBN: 0-7695-2574-1
Dennis Hofheinz, CWI, Cryptology and Information Security Group Amsterdam, The Netherlands
Dominique Unruh, Universitat Karlsruhe, Germany

Simulatable security is a security notion for multi-party protocols that implies strong composability features. The main definitional flavours of simulatable security are standard simulatability, universal simulatability, and black-box simulatability. All three come in "computational," "statistical" and "perfect" subflavours indicating the considered adversarial power. Universal and black-box simulatability, in all of their subflavours, are already known to guarantee that the concurrent composition even of a polynomial number of secure protocols stays secure.

We show that computational standard simulatability does not allow for secure concurrent composition of polynomially many protocols, but we also show that statistical standard simulatability does. The first result assumes the existence of an interesting cryptographic tool (namely time-lock puzzles), and its proof employs a cryptographic multi-party computation in an interesting and unconventional way.

Index Terms:
Reactive Simulatability, Universal Composability,concurrent composition.
Citation:
Dennis Hofheinz, Dominique Unruh, "Simulatable Security and Polynomially Bounded Concurrent Composability," sp, pp.169-183, 2006 IEEE Symposium on Security and Privacy (S&P'06), 2006
Usage of this product signifies your acceptance of the Terms of Use.