{"author":[{"full_name":"Micciancio, Daniele","last_name":"Micciancio","first_name":"Daniele"},{"id":"488F98B0-F248-11E8-B48F-1D18A9856A87","first_name":"Michael","last_name":"Walter","full_name":"Walter, Michael","orcid":"0000-0003-3186-2482"}],"type":"conference","year":"2018","date_created":"2018-12-11T11:45:42Z","page":"3 - 28","date_updated":"2023-09-13T09:12:04Z","month":"03","volume":10820,"_id":"300","title":"On the bit security of cryptographic primitives","department":[{"_id":"KrPi"}],"intvolume":"     10820","oa_version":"Submitted Version","oa":1,"publication_status":"published","acknowledgement":"Research supported in part by the Defense Advanced Research Projects Agency (DARPA) and the U.S. Army Research Office under the SafeWare program. Opinions, findings and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views, position or policy of the Government. The second author was also supported by the European Research Council, ERC consolidator grant (682815 - TOCNeT).","isi":1,"date_published":"2018-03-31T00:00:00Z","main_file_link":[{"url":"https://eprint.iacr.org/2018/077","open_access":"1"}],"project":[{"grant_number":"682815","name":"Teaching Old Crypto New Tricks","call_identifier":"H2020","_id":"258AA5B2-B435-11E9-9278-68D0E5697425"}],"day":"31","ec_funded":1,"status":"public","alternative_title":["LNCS"],"quality_controlled":"1","external_id":{"isi":["000517097500001"]},"user_id":"c635000d-4b10-11ee-a964-aac5a93f6ac1","publist_id":"7581","abstract":[{"text":"We introduce a formal quantitative notion of “bit security” for a general type of cryptographic games (capturing both decision and search problems), aimed at capturing the intuition that a cryptographic primitive with k-bit security is as hard to break as an ideal cryptographic function requiring a brute force attack on a k-bit key space. Our new definition matches the notion of bit security commonly used by cryptographers and cryptanalysts when studying search (e.g., key recovery) problems, where the use of the traditional definition is well established. However, it produces a quantitatively different metric in the case of decision (indistinguishability) problems, where the use of (a straightforward generalization of) the traditional definition is more problematic and leads to a number of paradoxical situations or mismatches between theoretical/provable security and practical/common sense intuition. Key to our new definition is to consider adversaries that may explicitly declare failure of the attack. We support and justify the new definition by proving a number of technical results, including tight reductions between several standard cryptographic problems, a new hybrid theorem that preserves bit security, and an application to the security analysis of indistinguishability primitives making use of (approximate) floating point numbers. This is the first result showing that (standard precision) 53-bit floating point numbers can be used to achieve 100-bit security in the context of cryptographic primitives with general indistinguishability-based security definitions. Previous results of this type applied only to search problems, or special types of decision problems.","lang":"eng"}],"publisher":"Springer","article_processing_charge":"No","language":[{"iso":"eng"}],"conference":{"location":"Tel Aviv, Israel","name":"Eurocrypt: Advances in Cryptology","end_date":"2018-05-03","start_date":"2018-04-29"},"citation":{"chicago":"Micciancio, Daniele, and Michael Walter. “On the Bit Security of Cryptographic Primitives,” 10820:3–28. Springer, 2018. <a href=\"https://doi.org/10.1007/978-3-319-78381-9_1\">https://doi.org/10.1007/978-3-319-78381-9_1</a>.","ama":"Micciancio D, Walter M. On the bit security of cryptographic primitives. In: Vol 10820. Springer; 2018:3-28. doi:<a href=\"https://doi.org/10.1007/978-3-319-78381-9_1\">10.1007/978-3-319-78381-9_1</a>","ieee":"D. Micciancio and M. Walter, “On the bit security of cryptographic primitives,” presented at the Eurocrypt: Advances in Cryptology, Tel Aviv, Israel, 2018, vol. 10820, pp. 3–28.","ista":"Micciancio D, Walter M. 2018. On the bit security of cryptographic primitives. Eurocrypt: Advances in Cryptology, LNCS, vol. 10820, 3–28.","mla":"Micciancio, Daniele, and Michael Walter. <i>On the Bit Security of Cryptographic Primitives</i>. Vol. 10820, Springer, 2018, pp. 3–28, doi:<a href=\"https://doi.org/10.1007/978-3-319-78381-9_1\">10.1007/978-3-319-78381-9_1</a>.","short":"D. Micciancio, M. Walter, in:, Springer, 2018, pp. 3–28.","apa":"Micciancio, D., &#38; Walter, M. (2018). On the bit security of cryptographic primitives (Vol. 10820, pp. 3–28). Presented at the Eurocrypt: Advances in Cryptology, Tel Aviv, Israel: Springer. <a href=\"https://doi.org/10.1007/978-3-319-78381-9_1\">https://doi.org/10.1007/978-3-319-78381-9_1</a>"},"doi":"10.1007/978-3-319-78381-9_1","scopus_import":"1"}