Soundness and Completeness of Formal Encryption: the Cases of Key-Cycles and Partial Information Leakage

TitleSoundness and Completeness of Formal Encryption: the Cases of Key-Cycles and Partial Information Leakage
Publication TypeJournal Article
Year of Publication2009
AuthorsAdao, Pedro, Gergei Bana, Jonathan Herzog, and Andre Scedrov
JournalJournal of Computer Security
Volume7
Issue5
Pagination737-797
AbstractBoth the formal and the computational models of cryptography contain the notion of message equivalence or indistinguishability. An encryption scheme provides soundness for indistinguishability if, when mapping formal messages into the computational model, equivalent formal messages are mapped to indistinguishable computational distributions. Previous soundness results are limited in that they do not apply when key-cycles are present. We demonstrate that an encryption scheme provides soundness in the presence of key-cycles if it satisfies the recently-introduced notion of key-dependent message (KDM) security. We also show that soundness in the presence of key-cycles (and KDM security) neither implies nor is implied by security against chosen ciphertext attack (CCA-2). Therefore, soundness for key-cycles is possible using a new notion of computational security, not possible using previous such notions, and the relationship between the formal and computational models extends beyond chosen-ciphertext security.
URLhttp://files.jonathanherzog.com/adao_soundness.pdf
DOI10.3233/JCS-2009-0358