Michael Walter is working on his post doc at IST in Austria. This is the presentation he gave while at EuroCrypt 2018.

1. On the Bit Security of
Cryptographic Primitives
Daniele Micciancio Michael Walter
UCSD IST Austria
eprint.iacr.org/2018/077
M
ETRAS7.7M

2. Security
Security
Game
Adversary
1

3. Security
Security
Game
Adversary
1

4. Security
Security
Game
Adversary
A's resources
and advantage
1

5. Proofs of Security
Simplicity Precision
2

6. Proofs of Security
Asymptotic
Proofs
Simplicity Precision
2

7. Proofs of Security
Asymptotic
Proofs
Concrete
Security
Simplicity Precision
2

8. Proofs of Security
Asymptotic
Proofs
Concrete
Security
Bit Security
Simplicity Precision
2

9. Proofs of Security
Asymptotic
Proofs
Concrete
Security
Bit Security
Simplicity Precision
A's resources
A's advantage
2

10. Adversarial Advantage
3

11. Adversarial Advantage
1) Search game:
3

12. Adversarial Advantage
1) Search game:
2) Decision game:
3

13. Adversarial Advantage
1) Search game:
2) Decision game:
A's resources
A's advantage
constant
3

14. Adversarial Advantage
1) Search game:
2) Decision game:
A's resources
A's advantage
not constant
A's resources
A's advantage
constant
3

15. Adversarial Advantage
1) Search game:
2) Decision game:
A's resources
A's advantage
not constant
no bit secure PRG:
A's resources
A's advantage
constant
3

16. Adversarial Advantage, contd.
4

17. Adversarial Advantage, contd.
[HILL'99]
4

18. Adversarial Advantage, contd.
[HILL'99]
4

19. Adversarial Advantage, contd.
[HILL'99]
[GL'89,L'93]
4

20. Adversarial Advantage, contd.
[HILL'99]
[GL'89,L'93]
4

21. Adversarial Advantage, contd.
[HILL'99]
[GL'89,L'93]
4

22. Adversarial Advantage, contd.
[HILL'99]
[GL'89,L'93]
4

23. Adversarial Advantage, contd.
[HILL'99]
[GL'89,L'93]
4

24. Adversarial Advantage, contd.
[HILL'99]
[GL'89,L'93]
4

25. General Definition
5

26. General Definition
- unify search and decision games
5

27. General Definition
- unify search and decision games
- characterize information gain of A
5

28. General Definition
- unify search and decision games
- characterize information gain of A
- specialize to search and decision games
5

29. General Definition
- unify search and decision games
- characterize information gain of A
- specialize to search and decision games
"right" advantage:
5

30. General Definition
- unify search and decision games
- characterize information gain of A
- specialize to search and decision games
"right" advantage:
Search
5

31. General Definition
- unify search and decision games
- characterize information gain of A
- specialize to search and decision games
"right" advantage:
Search Decision
5

32. Security Reductions:
One-Way vs Pseudorandom
OW PR
6

33. Security Reductions:
One-Way vs Pseudorandom
OW PR
6

34. Security Reductions:
One-Way vs Pseudorandom
OW PR
bit secure OWF implies
GL hardcore bit is bit pseudorandom
[L'93]
6

35. Security Reductions:
One-Way vs Pseudorandom
OW PR
bit secure OWF implies
GL hardcore bit is bit pseudorandom
[L'93]
6

36. Security Reductions:
One-Way vs Pseudorandom
OW PR
bit secure OWF implies
GL hardcore bit is bit pseudorandom
[L'93]
bit secure PRG is also
bit secure OWF
6

37. Security Reductions:
Further Results
7

38. Security Reductions:
Further Results
- Encryption: IND implies OW
7

39. Security Reductions:
Further Results
- Hybrid Argument
- Encryption: IND implies OW
7

40. Security Reductions:
Further Results
- Hybrid Argument
- Security for Approximate Samplers
with Less Precision
- Encryption: IND implies OW
7

41. Make sure to check out vpnMentors’ interview with Michael Walter
after his presentation at EuroCrypt 2018 in Tel Aviv.