DOCSLIB.ORG

CURRICULUM VITAE Rafail Ostrovsky

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
CURRICULUM VITAE Rafail Ostrovsky January 2007 CURRICULUM VITAE Rafail Ostrovsky http://www.cs.ucla.edu/»rafail/ mailing address: Contact information: UCLA Computer Science Department Phone: (310) 206-5283 Box 951596, 3732D Boelter Hall, Cell: (201) 286-0108 Los Angeles, CA, 90095-1596 E-mail: [email protected] Research ² Cryptography and Computer Security; Interests ² Routing and Network Algorithms; ² Clustering, Metric Embeddings, and Search Problems on High-Dimensional Data. Education NSF Mathematical Sciences Postdoctoral Research Fellow Conducted at U.C. Berkeley 1992-95. Ph.D. in Computer Science, Massachusetts Institute of Technology, 1989-92. ² Thesis titled: \Software Protection and Simulation on Oblivious RAMs". Final version appeared in JACM, 1996. Practical applications of thesis work also appear in U.S. Patent No.5,123,045 ² Minor: \Management and Technology", M.I.T. Sloan School of Management. M.S. in Computer Science, Boston University, 1985-87. B.A. Magna Cum Laude in Mathematics, State University of New York at Bu®alo, 1980-84. Department of Mathemat- ics Graduation Honors: With highest distinction. Appointments UCLA Computer Science Department (2003 { present): Full Professor of Computer Science with Tenure. UCLA School of Engineering (2003 { present): Director, Center for Information and Computation Security. See: http://www.cs.ucla.edu/security/ UCLA Department of Mathematics (2006 { present): Full Professor of Mathematics (by courtesy). 1 Appointments Consultant (cont.) (2003 { present): Consulting for Telcordia Technologies, Lucent. Telcordia Technologies (formerly Bellcore: Bell Communications Research) (1999 { 2003): Senior Research Scientist, Mathematics and Cryptogra- phy Research Group, Applied Research. Bellcore (Bell Communications Research) (1995 { 1999): Research Scientist, Mathematics and Cryptography Re- search Group, Applied Research. NSF Mathematical Sciences Postdoctoral Research Fellow, Berkeley. (Fall 1992 { August 1995). Fellowship conducted at the University of California at Berkeley and International Computer Science Institute at Berkeley. IBM T.J. Watson Research Center, Hawthorne, New York. (July { August 1992); (June { September 1991); (July { September 1990). Summer research positions: distributed network algorithms, com- puter viruses, password security, cryptography. Bellcore, Morristown, New Jersey. (May { July 1992). Consulting: secure protocols, cryptography, com- puter security. AT&T Bell Laboratories, Murray Hill, New Jersey. (May { July 1990). Math Research Center. Summer research position: cryptography, distributed and parallel algorithms. Index Technology Corporation, Cambridge, Massachusetts. (1987 { 1989). Full-time Research Engineer, Product Planning, Archi- tecture and Research Group: design and programming of algorithms and applications protocols and algorithms for various software analysis tools. Digital Equipment Corporation, Hudson, Massachusetts. (June { August 1985); (June { August 1986). Summer research intern- ship: design and programming of several graph and pattern-matching algorithms for natural language processing project. Honors and ² Plenary Invited Speaker { Public Key Cryptography international confer- Awards ence, 2007. ² IBM Faculty Award, 2006. ² 2006 and 2005 Xerox Corporate Innovation Faculty Award. ² 2006 Xerox Corporation Distinguished Lecture Series invited speaker. ² 2005 Distinguished Cryptographer of the Year Lecture Series NTT Labs, Kanagawa, Japan. ² OKAWA 2004 Research Award. 2 Honors and ² NSF CyberTrust Research Award. Awards ² SAIC 2002 Publication Prize for Best SAIC-employee Publication in Mathe- (cont.) matics and Computer Science (SAIC is Telcordia Parent company with over 40,000 engineers and scientists). ² SAIC 2001 Publication Prize for Best SAIC-employee Publication in Math- ematics and Computer Science. ² SAIC 1999 Publication Prize for Best SAIC-employee Publication in Infor- mation and Communications Technology. ² Bellcore prize for excellence in research, 1996. ² Henry H. Taub Prize for the paper \One-Way Functions are Essential for Non-Trivial Zero-Knowledge" 1993. ² NSF Mathematical Sciences Postdoctoral Research Fellowship, 1992-1995. ² IBM Graduate Fellowship, 1990-92. Professional ² Chair, IPAM (International Institute of Pure and Applied Mathematics) Activities three month program on Cybersecurity. September - December, 2006 with 100's of participants invited to spend an entire semester in residence at UCLA, funded by NSF. ² Editorial Board member Journal of Cryptology 2006{present. ² Editorial Board member Algorithmica International Journal 2005{present. ² Steering Committee member Conference on Security and Cryptography for Networks 2005{present. ² Editorial and Advisory Board member International Journal of Information and Computer Security. 2004{present. ² Co-chair, Dagshtul Workshop Anonymous Communication and its Applica- tions October 9-14, 2005. ² Co-organizer, IPAM Workshop Multiscale Geometry and Analysis in High Dimensions October 19-23, 2004. ² Co-organizer, DIMACS Workshop Cryptographic Protocols in Complex En- vironments May 15-17, 2002. Program ² ACISP-2007: Australian Conference on Information Security and Privacy Committees July 2-6, 2007, Townsville, Queensland, Australia. ² PKC-2007: International Workshop on Practice and Theory in Public Key Cryptography, April 17-19, China 2007 3 Program ² ICALP-2006: 33rd International Colloquium on Automata, Languages and Committees Programming, July 9-16, 2006, Venice, Italy. (cont.) ² STOC-2006: Annual ACM Symposium on Theory of Computing, May 2006. ² PKC-2006: International Workshop on Practice and Theory in Public Key Cryptography, April 24-26, New York City, USA. ² INDOCRYPT-2005 December 10-12, 2005 Indian Institute of Science Ban- galore, India, 2005. ² Eurocrypt-2005, Aarhus, May 22-26, 2005. ² TCC-2005: Second Theory of Cryptography Conference, Feb 2005. ² SCN-2004: Security in Communication Networks 2004 (SCN'04) September 8-10, Amal¯, Italy. ² PODC-2004: 23rd Annual ACM Symposium on Principles of Distributed Computing, July 2004. ² CRYPTO-2004: 24nd Annual IACR/IEEE Conference on Cryptologic Re- search, ² CRYPTO-2003: 23rd Annual IACR/IEEE Conference on Cryptologic Re- search, ² STOC-2003: Annual ACM Symposium on Theory of Computing May of 2003. ² CRYPTO-2002: 22nd Annual IACR/IEEE Conference on Cryptologic Re- search. ² RANDOM-2002: The 6th International Workshop on Randomization and Approximation Techniques in Computer Science, September 13-15, 2002. ² Co-organizer of DIMACS Workshop on Cryptographic Protocols in Complex Environments, May 15-17, 2002. ² SCN-2002: Third Workshop on Security in Communication Networks, September 2002, Amal¯, Italy ² STOC-2000:Annual ACM Symposium on Theory of Computing, 2000. ² SODA-2000: Eleventh Annual ACM-SIAM Symposium on Discrete Algo- rithms, January 1-9, 2000, San Francisco. ² SCN-99: Second Workshop on Security in Communication Networks, September 1999, Amal¯, Italy ² CRYPTO-98: 18th Annual IACR/IEEE Conference on Cryptologic Re- search 1998. ² ISTCS-97: 5th ISRAEL Symposium on Theory of Computing and Systems, 1997. 4 Patents 1. Oded GOLDREICH and Rafail OSTROVSKY \COMPREHENSIVE SOFTWARE PROTECTION SYSTEM" U.S. Patent No.5,123,045. 2. Rafail OSTROVSKY, Giovanni DI CRESCENZO, And Yuval ISHAI, \METHOD AND SYSTEM FOR NON-MALLEABLE AND NON- INTERACTIVE CRYPTOGRAPHIC COMMITMENT IN A NETWORK" U.S. Patent 6,301,664. 3. William AIELLO, Rafail OSTROVSKY, And Sachin LODHA \A METHOD FOR EFFICIENTLY REVOKING DIGITAL IDENTITIES" U.S. Patent 6,397,329. 4. Rafail OSTROVSKY, Yuval ISHAI, AND Giovanni DI-CRESCENZO, \METHOD AND SYSTEM FOR PRIVATE INFORMATION RE- TRIEVAL USING COMMODITIES" U.S. Patent 6,216,128. 5. Rafail OSTROVSKY and Eyal KUSHILEVITZ, \METHOD AND APPA- RATUS FOR PRIVATE INFORMATION RETRIEVAL FROM A SINGLE ELECTRONIC STORAGE DEVICE" U.S. Patent 6,167,392. 6. Rafail OSTROVSKY And Yuval RABANI, "METHOD AND SYSTEM FOR DETERMINING APPROXIMATE HAMMING DISTANCE AND APPROXIMATE NEAREST NEIGHBORS IN AN ELECTRONIC STOR- AGE DEVICE" U.S. Patent 6,226,640. 7. Rafail OSTROVSKY, Yuval ISHAI, AND Giovanni DI-CRESCENZO, \SYSTEM AND METHOD FOR PRIVATE INFORMATION RE- TRIEVAL USING VERIFIABLE COMMODITIES" U.S. Patent 6,438,554. 5 Rafail Ostrovsky List of Publications [1] Searchable symmetric encryption: improved de¯nitions and e±cient construc- tions. Reza Curtmola, Juan A. Garay, Seny Kamara, Rafail Ostrovsky In CCS-06 Proc. ACM Conference on Computer and Communications Security 2006: 79-88 [2] Non-interactive Zaps and New Techniques for NIZK. Jens Groth, Rafail Ostrovsky, Amit Sahai In CRYPTO-06: 97-111 [3] Perfect Non-interactive Zero Knowledge for NP. Jens Groth, Rafail Ostrovsky, Amit Sahai In EUROCRYPT-06: 339-358. [4] Sequential Aggregate Signatures and Multisignatures Without Random Ora- cles. Steve Lu, Rafail Ostrovsky, Amit Sahai, Hovav Shacham, Brent Waters In EUROCRYPT-06: 465-485 96 [5] The E®ectiveness of Lloyd-Type Methods for the k-Means Problem. Rafail Ostrovsky, Yuval Rabani, Leonard Schulman, Chaitanya Swamy In Proc. 47th FOCS, 2006. [6] Cryptography from Anonymity. Yuval Ishai, Eyal Kushilevitz, Rafail Ostrovsky, Amit Sahai: In Proc. 47th FOCS, 2006. [7] Error-Correcting Codes for Automatic Control Rafail Ostrovsky, Leonard Schulman, Yuval Rabani In Proc. 46th FOCS, 2005. [8] Private Searching on Streaming Data Rafail Ostrovsky, William Skeith. Preliminary version in Proceedings of Advances in Cryptology, CRYPTO-2005 Springer- Verlag/IACR Lecture Notes in Computer Science. [9] Secure Remote Authentication Using Biometric Data. Xavier
Load more

Recommended publications
  • Secure Merge with O(N Log Log N) Secure Operations
    Secure Merge with O(n log log n) Secure Operations Brett Hemenway Falk # University of Pennsylvania, Philadelphia, PA, USA Rafail Ostrovsky # University of California, Los Angeles, CA, USA Abstract Data-oblivious algorithms are a key component of many secure computation protocols. In this work, we show that advances in secure multiparty shuffling algorithms can be used to increase the efficiency of several key cryptographic tools. The key observation is that many secure computation protocols rely heavily on secure shuffles. The best data-oblivious shuffling algorithms require O(n log n), operations, but in the two-party or multiparty setting, secure shuffling can be achieved with only O(n) communication. Leveraging the efficiency of secure multiparty shuffling, we give novel, information-theoretic algorithms that improve the efficiency of securely sorting sparse lists, secure stable compaction, and securely merging two sorted lists. Securely sorting private lists is a key component of many larger secure computation protocols. The best data-oblivious sorting algorithms for sorting a list of n elements require O(n log n) comparisons. Using black-box access to a linear-communication secure shuffle, we give a secure algorithm for sorting a list of length n with t ≪ n nonzero elements with communication O(t log2 n + n), which beats the best oblivious algorithms when the number of nonzero elements, t, satisfies t < n/ log2 n. Secure compaction is the problem of removing dummy elements from a list, and is essentially equivalent to sorting on 1-bit keys. The best oblivious compaction algorithms run in O(n)-time, but they are unstable, i.e., the order of the remaining elements is not preserved.
    [Show full text]
  • Magic Adversaries Versus Individual Reduction: Science Wins Either Way ?
    Magic Adversaries Versus Individual Reduction: Science Wins Either Way ? Yi Deng1;2 1 SKLOIS, Institute of Information Engineering, CAS, Beijing, P.R.China 2 State Key Laboratory of Cryptology, P. O. Box 5159, Beijing ,100878,China [email protected] Abstract. We prove that, assuming there exists an injective one-way function f, at least one of the following statements is true: – (Infinitely-often) Non-uniform public-key encryption and key agreement exist; – The Feige-Shamir protocol instantiated with f is distributional concurrent zero knowledge for a large class of distributions over any OR NP-relations with small distinguishability gap. The questions of whether we can achieve these goals are known to be subject to black-box lim- itations. Our win-win result also establishes an unexpected connection between the complexity of public-key encryption and the round-complexity of concurrent zero knowledge. As the main technical contribution, we introduce a dissection procedure for concurrent ad- versaries, which enables us to transform a magic concurrent adversary that breaks the distribu- tional concurrent zero knowledge of the Feige-Shamir protocol into non-black-box construc- tions of (infinitely-often) public-key encryption and key agreement. This dissection of complex algorithms gives insight into the fundamental gap between the known universal security reductions/simulations, in which a single reduction algorithm or simu- lator works for all adversaries, and the natural security definitions (that are sufficient for almost all cryptographic primitives/protocols), which switch the order of qualifiers and only require that for every adversary there exists an individual reduction or simulator. 1 Introduction The seminal work of Impagliazzo and Rudich [IR89] provides a methodology for studying the lim- itations of black-box reductions.
    [Show full text]
  • CHURP: Dynamic-Committee Proactive Secret Sharing
    CHURP: Dynamic-Committee Proactive Secret Sharing Sai Krishna Deepak Maram∗† Cornell Tech Fan Zhang∗† Lun Wang∗ Andrew Low∗ Cornell Tech UC Berkeley UC Berkeley Yupeng Zhang∗ Ari Juels∗ Dawn Song∗ Texas A&M Cornell Tech UC Berkeley ABSTRACT most important resources—money, identities [6], etc. Their loss has We introduce CHURP (CHUrn-Robust Proactive secret sharing). serious and often irreversible consequences. CHURP enables secure secret-sharing in dynamic settings, where the An estimated four million Bitcoin (today worth $14+ Billion) have committee of nodes storing a secret changes over time. Designed for vanished forever due to lost keys [69]. Many users thus store their blockchains, CHURP has lower communication complexity than pre- cryptocurrency with exchanges such as Coinbase, which holds at vious schemes: O¹nº on-chain and O¹n2º off-chain in the optimistic least 10% of all circulating Bitcoin [9]. Such centralized key storage case of no node failures. is also undesirable: It erodes the very decentralization that defines CHURP includes several technical innovations: An efficient new blockchain systems. proactivization scheme of independent interest, a technique (using An attractive alternative is secret sharing. In ¹t;nº-secret sharing, asymmetric bivariate polynomials) for efficiently changing secret- a committee of n nodes holds shares of a secret s—usually encoded sharing thresholds, and a hedge against setup failures in an efficient as P¹0º of a polynomial P¹xº [73]. An adversary must compromise polynomial commitment scheme. We also introduce a general new at least t +1 players to steal s, and at least n−t shares must be lost technique for inexpensive off-chain communication across the peer- to render s unrecoverable.
    [Show full text]
  • Improved Threshold Signatures, Proactive Secret Sharing, and Input Certification from LSS Isomorphisms
    Improved Threshold Signatures, Proactive Secret Sharing, and Input Certification from LSS Isomorphisms Diego F. Aranha1, Anders Dalskov2, Daniel Escudero1, and Claudio Orlandi1 1 Aarhus University, Denmark 2 Partisia, Denmark Abstract. In this paper we present a series of applications steming from a formal treatment of linear secret-sharing isomorphisms, which are linear transformations between different secret-sharing schemes defined over vector spaces over a field F and allow for efficient multiparty conversion from one secret-sharing scheme to the other. This concept generalizes the folklore idea that moving from a secret-sharing scheme over Fp to a secret sharing \in the exponent" can be done non-interactively by multiplying the share unto a generator of e.g., an elliptic curve group. We generalize this idea and show that it can also be used to compute arbitrary bilinear maps and in particular pairings over elliptic curves. We include the following practical applications originating from our framework: First we show how to securely realize the Pointcheval-Sanders signature scheme (CT-RSA 2016) in MPC. Second we present a construc- tion for dynamic proactive secret-sharing which outperforms the current state of the art from CCS 2019. Third we present a construction for MPC input certification using digital signatures that we show experimentally to outperform the previous best solution in this area. 1 Introduction A(t; n)-secure secret-sharing scheme allows a secret to be distributed into n shares in such a way that any set of at most t shares are independent of the secret, but any set of at least t + 1 shares together can completely reconstruct the secret.
    [Show full text]
  • Resettably Sound Zero-Knoweldge Arguments from Owfs - the (Semi) Black-Box Way
    Resettably Sound Zero-Knoweldge Arguments from OWFs - the (semi) Black-Box way Rafail Ostrovsky Alessandra Scafuro Muthuramakrishnan UCLA, USA UCLA, USA Venkitasubramaniam University of Rochester, USA Abstract We construct a constant-round resettably-sound zero-knowledge argument of knowledge based on black-box use of any one-way function. Resettable-soundness was introduced by Barak, Goldreich, Goldwasser and Lindell [FOCS 01] and is a strengthening of the soundness requirement in interactive proofs demanding that soundness should hold even if the malicious prover is allowed to “reset” and “restart” the verifier. In their work they show that resettably-sound ZK arguments require non-black-box simula- tion techniques, and also provide the first construction based on the breakthrough simulation technique of Barak [FOCS 01]. All known implementations of Barak’s non-black-box technique required non-black-box use of a collision-resistance hash-function (CRHF). Very recently, Goyal, Ostrovsky, Scafuro and Visconti [STOC 14] showed an implementation of Barak’s technique that needs only black-box access to a collision-resistant hash-function while still having a non-black-box simulator. (Such a construction is referred to as semi black-box.) Plugging this implementation in the BGGL’s construction yields the first resettably-sound ZK arguments based on black-box use of CRHFs. However, from the work of Chung, Pass and Seth [STOC 13] and Bitansky and Paneth [STOC 13], we know that resettably-sound ZK arguments can be constructed from non-black-box use of any one-way function (OWF), which is the minimal assumption for ZK arguments. Hence, a natural question is whether it is possible to construct resettably-sound zero- knowledge arguments from black-box use of any OWF only.
    [Show full text]
  • CURRICULUM VITAE Rafail Ostrovsky
    last updated: December 26, 2020 CURRICULUM VITAE Rafail Ostrovsky Distinguished Professor of Computer Science and Mathematics, UCLA http://www.cs.ucla.edu/∼rafail/ mailing address: Contact information: UCLA Computer Science Department Phone: (310) 206-5283 475 ENGINEERING VI, E-mail: [email protected] Los Angeles, CA, 90095-1596 Research • Cryptography and Computer Security; Interests • Streaming Algorithms; Routing and Network Algorithms; • Search and Classification Problems on High-Dimensional Data. Education NSF Mathematical Sciences Postdoctoral Research Fellow Conducted at U.C. Berkeley 1992-95. Host: Prof. Manuel Blum. Ph.D. in Computer Science, Massachusetts Institute of Technology, 1989-92. • Thesis titled: \Software Protection and Simulation on Oblivious RAMs", Ph.D. advisor: Prof. Silvio Micali. Final version appeared in Journal of ACM, 1996. Practical applications of thesis work appeared in U.S. Patent No.5,123,045. • Minor: \Management and Technology", M.I.T. Sloan School of Management. M.S. in Computer Science, Boston University, 1985-87. B.A. Magna Cum Laude in Mathematics, State University of New York at Buffalo, 1980-84. Department of Mathematics Graduation Honors: With highest distinction. Personal • U.S. citizen, naturalized in Boston, MA, 1986. Data Appointments UCLA Computer Science Department (2003 { present): Distinguished Professor of Computer Science. Recruited in 2003 as a Full Professor with Tenure. UCLA School of Engineering (2003 { present): Director, Center for Information and Computation Security. (See http://www.cs.ucla.edu/security/.) UCLA Department of Mathematics (2006 { present): Distinguished Professor of Mathematics (by courtesy). 1 Appointments Bell Communications Research (Bellcore) (cont.) (1999 { 2003): Senior Research Scientist; (1995 { 1999): Research Scientist, Mathematics and Cryptography Research Group, Applied Research.
    [Show full text]
  • Verifiable Secret Redistribution for Threshold Sharing Schemes
    Verifiable Secret Redistribution for Threshold Sharing Schemes Theodore M. Wong Chenxi Wang1 Jeannette M. Wing February 2002 CMU-CS-02-114 School of Computer Science Carnegie Mellon University Pittsburgh, PA 15213 Abstract We present a new protocol for verifiably redistributing secrets from an (m; n) threshold sharing scheme to an (m0; n0) scheme. Our protocol guards against dynamic adversaries. We observe that existing protocols either cannot be readily extended to allow redistribution between different threshold schemes, or have vul- nerabilities that allow faulty old shareholders to distribute invalid shares to new shareholders. Our primary contribution is that in our protocol, new shareholders can verify the validity of their shares after redistribu- tion between different threshold schemes. 1Department of Electrical and Computer Engineering, [email protected] This research is sponsored by the Defense Advanced Research Projects Agency (DARPA), Advanced Technology Office, under the title “Organically Assured and Survivable Information Systems (OASIS)” (Air Force Coop. Agreement no. F30602-00-2-0523). The views and conclusions contained in this document are those of the authors and should not be interpreted as representing official policies, either expressed or implied, of DARPA or the U.S. Government. Keywords: non-interactive verifiable secret redistribution, threshold sharing schemes, threshold cryp- tography 1 Introduction Threshold cryptography protocols provide fundamental building blocks for secure distributed computation and the safeguarding of secrets. The area of threshold cryptography has been studied extensively since its introduction by Blakley and Shamir [Bla79, Sha79]. Two categories of threshold protocols, proactive secret sharing (PSS) protocols and secret redistribution protocols, provide enhanced protection against dynamic adversaries ([OY91]).
    [Show full text]
  • Lossy Encryption: Constructions from General Assumptions and Efficient Selective Opening Chosen Ciphertext Security
    Lossy Encryption: Constructions from General Assumptions and Efficient Selective Opening Chosen Ciphertext Security Brett Hemenway∗ Beno^ıtLiberty Rafail Ostrovskyz Damien Vergnaudx March 22, 2012 Abstract Lossy encryption was originally studied as a means of achieving efficient and composable oblivious transfer. Bellare, Hofheinz and Yilek showed that lossy encryption is also selective opening secure. We present new and general constructions of lossy encryption schemes and of cryptosystems secure against selective opening adversaries. We show that every re-randomizable encryption scheme gives rise to efficient encryptions secure against a selective opening adversary. We show that statistically-hiding 2-round Oblivious Transfer implies Lossy Encryption and so do smooth hash proof systems. This shows that private information retrieval and homomorphic encryption both imply Lossy Encryption, and thus Selective Opening Secure Public Key Encryption. Applying our constructions to well-known cryptosystems, we obtain selective opening se- cure commitments and encryptions from the Decisional Diffie-Hellman, Decisional Composite Residuosity and Quadratic Residuosity assumptions. In an indistinguishability-based model of chosen-ciphertext selective opening security, we obtain secure schemes featuring short ciphertexts under standard number theoretic assumptions. In a simulation-based definition of chosen-ciphertext selective opening security, we also handle non-adaptive adversaries by adapting the Naor-Yung paradigm and using the perfect zero- knowledge proofs of Groth, Ostrovsky and Sahai. Keywords: Public key encryption, commitment, selective opening security, homo- morphic encryption, chosen-ciphertext security, lossy encryption A preliminary version of this work appeared in the proceedings of ASIACRYPT 2011 ∗E-mail: [email protected]. Supported in part by NSF VIGRE Fellowship and NSF grants 0716835, 0716389, 0830803 and 0916574.
    [Show full text]
  • Cryptography in the Multi-String Model
    Cryptography in the Multi-string Model Jens Groth1? and Rafail Ostrovsky1?? University of California, Los Angeles, CA 90095 fjg,[email protected] Abstract. The common random string model introduced by Blum, Feldman and Micali permits the construction of cryptographic protocols that are provably im- possible to realize in the standard model. We can think of this model as a trusted party generating a random string and giving it to all parties in the protocol. How- ever, the introduction of such a third party should set alarm bells going off: Who is this trusted party? Why should we trust that the string is random? Even if the string is uniformly random, how do we know it does not leak private information to the trusted party? The very point of doing cryptography in the first place is to prevent us from trusting the wrong people with our secrets. In this paper, we propose the more realistic multi-string model. Instead of having one trusted authority, we have several authorities that generate random strings. We do not trust any single authority; we only assume a majority of them generate the random string honestly. This security model is reasonable, yet at the same time it is very easy to implement. We could for instance imagine random strings being provided on the Internet, and any set of parties that want to execute a protocol just need to agree on which authorities’ strings they want to use. We demonstrate the use of the multi-string model in several fundamental crypto- graphic tasks. We define multi-string non-interactive zero-knowledge proofs and prove that they exist under general cryptographic assumptions.
    [Show full text]
  • Optimally Resilient and Adaptively Secure Multi-Party Computation with Low Communication Locality
    Optimally Resilient and Adaptively Secure Multi-Party Computation with Low Communication Locality Nishanth Chandran∗ Wutichai Chongchitmatey Juan A. Garayz Shafi Goldwasserx Rafail Ostrovskyy Vassilis Zikas{ Abstract Secure multi-party computation (MPC) has been thoroughly studied over the past decades. The vast majority of works assume a full communication pattern: every party exchanges mes- sages with all the network participants over a complete network of point-to-point channels. This can be problematic in modern large scale networks, where the number of parties can be of the order of millions, as for example when computing on large distributed data. Motivated by the above observation, Boyle, Goldwasser, and Tessaro [TCC 2013] recently put forward the notion of communication locality, namely, the total number of point-to-point channels that each party uses in the protocol, as a quality metric of MPC protocols. They proved that assuming a public-key infrastructure (PKI) and a common reference string (CRS), an MPC protocol can be constructed for computing any n-party function, with communication 0 locality O(logc n) and round complexity O(logc n), for appropriate constants c and c0. Their 1 protocol tolerates a static (i.e., non-adaptive) adversary corrupting up to t < ( 3 − )n parties 1 for any given constant 0 < < 3 . These results leave open the following questions: (1) Can we achieve low communication locality and round complexity while tolerating adaptive adversaries? (2) Can we achieve low communication locality with optimal resiliency t < n=2? In this work we answer both questions affirmatively. First, we consider the model from [TCC 2013], where we replace the CRS with a symmetric-key infrastructure (SKI).
    [Show full text]
  • Rafail Ostrovsky – Research Statement
    May 31, 2011. Rafail Ostrovsky { Research Statement My research interests are in the areas of Cryptography, Distributed Algorithms, and Search Algorithms for Streaming and High-Dimensional Data. My extensive experience in industry prior to joining UCLA has influenced the type of problems that I choose to work on: my research emphasis has always been on problems that are strongly driven by their practical significance and their practical applications. I find these topics exciting to work on, not only due to their practical importance, but also since they are concerned with fundamental issues in computation, including fault-tolerance, randomization, knowledge, and interaction. I intend to continue to work in these fields, improving the efficiency of and our under- standing of various protocol problems, as well as proving lower bounds for these problems. I often find underlying ties between the techniques from the three diverse areas of my studies. I consider it to be an important effort to bring together approaches and tools from different fields. 1 Cryptography and Related Areas. With the rapid technological advances in wireless and wired media and fast affordable hardware, the Internet and other communication networks have become pervasive. As networks become ever larger and more ubiquitous { distributed protocols begin to play a central role in both the scientific and business environments of today. Hand-in-hand with these developments come the questions of security, privacy, and fault-tolerance. For example, how do we ensure that distributed computations and protocols are not compromised, that passwords are not broken, or that we can cope with a virus spread or overloaded network traffic? Luckily, cryptography and distributed algorithms provide some of the answers to these questions.
    [Show full text]
  • UCLA Electronic Theses and Dissertations
    UCLA UCLA Electronic Theses and Dissertations Title How to Rewind with Minimal Interaction Permalink https://escholarship.org/uc/item/53s2w021 Author Khurana, Dakshita Publication Date 2018 Peer reviewed|Thesis/dissertation eScholarship.org Powered by the California Digital Library University of California UNIVERSITY OF CALIFORNIA Los Angeles How to Rewind with Minimal Interaction A dissertation submitted in partial satisfaction of the requirements for the degree Doctor of Philosophy in Computer Science by Dakshita Khurana 2018 c Copyright by Dakshita Khurana 2018 ABSTRACT OF THE DISSERTATION How to Rewind with Minimal Interaction by Dakshita Khurana Doctor of Philosophy in Computer Science University of California, Los Angeles, 2018 Professor Rafail Ostrovsky, Co-Chair Professor Amit Sahai, Co-Chair The notion of simulation is central to cryptography: often, to demonstrate that an adversary did not recover any information about private inputs of other participants, we exhibit the existence of a simulator that generates the adversary's view without access to inputs of honest participants. The primary method used to build simulators is rewinding, where a simulator resets the adversary to a previous point in the protocol and tries to complete the protocol tree multiple times until it achieves a favorable outcome. First introduced in the context of zero-knowledge proof systems and secure computa- tion, today the rewinding technique is synonymous with protocol security and polynomial simulation. Prior to this work, all known rewinding techniques in the plain model required multiple rounds of back-and-forth interaction between participants. In this thesis, we demonstrate the first rewinding techniques that require only a single message from each participant.
    [Show full text]