Revision #1 Authors: Adi Akavia, Andrej Bogdanov, Siyao Guo, Akshay Kamath, Alon Rosen

Accepted on: 16th June 2014 05:09

Downloads: 786

Keywords:

Pseudorandom functions (PRFs) play a fundamental role in symmetric-key cryptography. However, they are inherently complex and cannot be implemented in the class $\mathrm{AC}^0( \mathrm{MOD}_2)$. Weak pseudorandom functions (weak PRFs) do not suffer from this complexity limitation, yet they suffice for many cryptographic applications. We study the minimal complexity requirements for constructing weak PRFs. To this end

1. We conjecture that the function family $F_A(x) = g(Ax)$, where $A$ is a random square $GF(2)$ matrix and $g$ is a carefully chosen function of constant depth, is a weak PRF. In support of our conjecture, we show that functions in this family are inapproximable by $GF(2)$ polynomials and do not correlate with any fixed Boolean function family of subexponential size.

2. We study the class $\mathrm{AC}0 \circ \mathrm{MOD}_2$ that captures the complexity of our construction. We conjecture that all functions in this class have a Fourier coefficient of magnitude $\exp(- \poly \log n)$ and prove this conjecture in the case when the $\mathrm{MOD}_2$ function is typical.

3. We investigate the relation between the hardness of learning noisy parities and the existence of weak PRFs in $\mathrm{AC}0 \circ \mathrm{MOD}_2$.

We argue that such a complexity-driven approach can play a role in bridging the gap between the theory and practice of cryptography.

We improve our inapproximability results for TRIBES function; we show our candidate cannot be learned by statistical query learning algorithms.

TR14-033 Authors: Adi Akavia, Andrej Bogdanov, Siyao Guo, Akshay Kamath, Alon Rosen

Publication: 10th March 2014 07:51

Downloads: 2017

Keywords:

Pseudorandom functions (PRFs) play a fundamental role in symmetric-key cryptography. However, they are inherently complex and cannot be implemented in the class $\mathrm{AC}^0( \mathrm{MOD}_2)$. Weak pseudorandom functions (weak PRFs) do not suffer from this complexity limitation, yet they suffice for many cryptographic applications. We study the minimal complexity requirements for constructing weak PRFs. To this end

1. We conjecture that the function family $F_A(x) = g(Ax)$, where $A$ is a random square $GF(2)$ matrix and $g$ is a carefully chosen function of constant depth, is a weak PRF. In support of our conjecture, we show that functions in this family are inapproximable by $GF(2)$ polynomials of low degree and do not correlate with any fixed Boolean function family of subexponential size.

2. We study the class $\mathrm{AC}0 \circ \mathrm{MOD}_2$ that captures the complexity of our construction. We conjecture that all functions in this class have a Fourier coefficient of magnitude $\exp(- \poly \log n)$ and prove this conjecture in the case when the $\mathrm{MOD}_2$ function is typical.

3. We investigate the relation between the hardness of learning noisy parities and the existence of weak PRFs in $\mathrm{AC}0 \circ \mathrm{MOD}_2$.

We argue that such a complexity-driven approach can play a role in bridging the gap between the theory and practice of cryptography.