New Bounds in Secret-Key Agreement: The Gap between Formation and Secrecy Extraction

Perfectly secret message transmission can be realized with only partially secret and weakly correlated information shared by the parties as soon as this information allows for the extraction of informationtheoretically secret bits. The best known upper bound on the rate S at which such key bits can be generated has been the intrinsic information of the distribution modeling the parties’, including the adversary’s, knowledge. Based on a new property of the secret-key rate S, we introduce a conditional mutual information measure which is a stronger upper bound on S. Having thus seen that the intrinsic information of a distribution P is not always suitable for determining the number of secret bits extractable from P, we prove a different significance of it in the same context: It is a lower bound on the number of key bits required to generate P by public communication. Taken together, these two results imply that sometimes, (a possibly arbitrarily large fraction of) the correlation ...

• Type: Conference
• Year: 2003
• Where: EUROCRYPT
• Authors: Renato Renner, Stefan Wolf
• Keywords: Cryptography, EUROCRYPT 2003, Key Bits, Secret Bits, Upper Bound