Under the auspices of the Computational Complexity Foundation (CCF)

REPORTS > DETAIL:

### Revision(s):

Revision #1 to TR14-033 | 16th June 2014 05:09

#### Candidate Weak Pseudorandom Functions in $\mathrm{AC}0 \circ \mathrm{MOD}2$

Revision #1
Authors: Adi Akavia, Andrej Bogdanov, Siyao Guo, Akshay Kamath, Alon Rosen
Accepted on: 16th June 2014 05:09
Keywords:

Abstract:

Pseudorandom functions (PRFs) play a fundamental role in symmetric-key cryptography. However, they are inherently complex and cannot be implemented in the class $\mathrm{AC}^0( \mathrm{MOD}_2)$. Weak pseudorandom functions (weak PRFs) do not suffer from this complexity limitation, yet they suffice for many cryptographic applications. We study the minimal complexity requirements for constructing weak PRFs. To this end

1. We conjecture that the function family $F_A(x) = g(Ax)$, where $A$ is a random square $GF(2)$ matrix and $g$ is a carefully chosen function of constant depth, is a weak PRF. In support of our conjecture, we show that functions in this family are inapproximable by $GF(2)$ polynomials and do not correlate with any fixed Boolean function family of subexponential size.

2. We study the class $\mathrm{AC}0 \circ \mathrm{MOD}_2$ that captures the complexity of our construction. We conjecture that all functions in this class have a Fourier coefficient of magnitude $\exp(- \poly \log n)$ and prove this conjecture in the case when the $\mathrm{MOD}_2$ function is typical.

3. We investigate the relation between the hardness of learning noisy parities and the existence of weak PRFs in $\mathrm{AC}0 \circ \mathrm{MOD}_2$.

We argue that such a complexity-driven approach can play a role in bridging the gap between the theory and practice of cryptography.

Changes to previous version:

We improve our inapproximability results for TRIBES function; we show our candidate cannot be learned by statistical query learning algorithms.

### Paper:

TR14-033 | 10th March 2014 04:58

#### Candidate Weak Pseudorandom Functions in $\mathrm{AC}0 \circ \mathrm{MOD}2$

TR14-033
Authors: Adi Akavia, Andrej Bogdanov, Siyao Guo, Akshay Kamath, Alon Rosen
Publication: 10th March 2014 07:51
Keywords:

Abstract:

Pseudorandom functions (PRFs) play a fundamental role in symmetric-key cryptography. However, they are inherently complex and cannot be implemented in the class $\mathrm{AC}^0( \mathrm{MOD}_2)$. Weak pseudorandom functions (weak PRFs) do not suffer from this complexity limitation, yet they suffice for many cryptographic applications. We study the minimal complexity requirements for constructing weak PRFs. To this end

1. We conjecture that the function family $F_A(x) = g(Ax)$, where $A$ is a random square $GF(2)$ matrix and $g$ is a carefully chosen function of constant depth, is a weak PRF. In support of our conjecture, we show that functions in this family are inapproximable by $GF(2)$ polynomials of low degree and do not correlate with any fixed Boolean function family of subexponential size.

2. We study the class $\mathrm{AC}0 \circ \mathrm{MOD}_2$ that captures the complexity of our construction. We conjecture that all functions in this class have a Fourier coefficient of magnitude $\exp(- \poly \log n)$ and prove this conjecture in the case when the $\mathrm{MOD}_2$ function is typical.

3. We investigate the relation between the hardness of learning noisy parities and the existence of weak PRFs in $\mathrm{AC}0 \circ \mathrm{MOD}_2$.

We argue that such a complexity-driven approach can play a role in bridging the gap between the theory and practice of cryptography.

ISSN 1433-8092 | Imprint