Docsity
Docsity

Prepare for your exams
Prepare for your exams

Study with the several resources on Docsity


Earn points to download
Earn points to download

Earn points by helping other students or get them with a premium plan


Guidelines and tips
Guidelines and tips

Pseudo Random Bit Generators: Definition, Blum-Blum-Shub Algorithm, and Encryption, Slides of Cryptography and System Security

The concept of pseudo random bit generators (prgs), also known as stream ciphers. Prgs are deterministic functions that produce outputs indistinguishable from random bitstreams. The definition and security properties of prgs are provided, followed by the description of the blum-blum-shub algorithm, an official prg. The document also establishes the connection between prgs and stateful private encryption.

Typology: Slides

2012/2013

Uploaded on 04/27/2013

divyaa
divyaa 🇮🇳

4.4

(59)

71 documents

1 / 6

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
Pseudo Random Bit
Generators
Docsity.com
pf3
pf4
pf5

Partial preview of the text

Download Pseudo Random Bit Generators: Definition, Blum-Blum-Shub Algorithm, and Encryption and more Slides Cryptography and System Security in PDF only on Docsity!

Pseudo Random Bit

Generators

2

Pseudo Random

Generator

PRG ’s also known as stream ciphers because they correspond to pseudo-random one-time pads. Intuitively, these are deterministic functions whose outputs cannot be differentiated from random bitstreams.

4

Blum-Blum-Shub

Official PRG

l ( k ) is any polynomial > k INPUT: random seed x of length k OUTPUT: bitstring s of length L Use 1st ¼ of x to generate p deterministically Use 2nd ¼ of x to generate q deterministically Let n = pq , and r = 2nd ½ of x. Return BBS-PRG( n, r, l ( k )) // slide #5 from // “probabilistic encryption”

5

PRG Stateful Private

Encryption

THM: A pseudo random bit generator exists iff a stateful symmetric encryption scheme exists with |M| > |K| that is computationally secure. ½ proof : PRG g Encryption : Use the pseudo random one time pad defined by

security parameter k chosen so l ( k ) ≥ | m |

G: K = (key K a rand. k -bit string)

Uk

EK

EK ( m ) = g ( K ) ⊕ m