Joint State Theorems for Public-Key Encryption and Digital Signature Functionalities with Local Computation

Composition theorems in simulation-based approaches allow to build complex protocols from sub-protocols in a modular way. However, as first pointed out and studied by Canetti and Rabin, this modular approach often leads to impractical implementations. For example, when using a functionality for digital signatures within a more complex protocol, parties have to generate new verification and signing keys for every session of the protocol. This motivates to generalize composition theorems to so-called joint state theorems, where different copies of a functionality may share some state, e.g., the same verification and signing keys. In this paper, we present a joint state theorem which is more general than the original theorem of Canetti and Rabin, for which several problems and limitations are pointed out. We apply our theorem to obtain joint state realizations for three functionalities: public-key encryption, replayable public-key encryption, and digital signatures. Unlike most other ...

• Type: Conference
• Year: 2008
• Where: CSFW
• Authors: Ralf Küsters, Max Tuengerthal
• Keywords: Composition Theorem, CSFW 2008, Joint State, Joint State Theorem, Security Privacy