Cryptology ePrint Archive: Report 2012/722

Hardness Preserving Reductions via Cuckoo Hashing

Itay Berman and Iftach Haitner and Ilan Komargodski and Moni Naor

Abstract: The focus of this work is hardness-preserving transformations of somewhat limited pseudorandom functions families (PRFs) into ones with more versatile characteristics. Consider the problem of domain extension of pseudorandom functions: given a PRF that takes as input elements of some domain $\mathcal{U}$, we would like to come up with a PRF over a larger domain. Can we do it with little work and without significantly impacting the security of the system? One approach is to first hash the larger domain into the smaller one and then apply the original PRF. Such a reduction, however, is vulnerable to a "birthday attack": after $\sqrt{|\mathcal{U}|}$ queries to the resulting PRF, a collision (i.e., two distinct inputs having the same hash value) is very likely to occur. As a consequence, the resulting PRF is insecure against an attacker making this number of queries.

In this work we show how to go beyond the aforementioned birthday attack barrier by replacing the above simple hashing approach with a variant of cuckoo hashing, a hashing paradigm that resolves collisions in a table by using two hash functions and two tables, cleverly assigning each element to one of the two tables. We use this approach to obtain: (i) a domain extension method that requires just two calls to the original PRF, can withstand as many queries as the original domain size, and has a distinguishing probability that is exponentially small in the amount of non-cryptographic work; and (ii) a security-preserving reduction from non-adaptive to adaptive PRFs.

Category / Keywords: foundations / cuckoo hashing; pseudorandom functions ; hardness preserving reductions; domain extension; non-adaptive to adaptive

Publication Info: TCC 2013 proceedings

Date: received 24 Dec 2012, last revised 20 Oct 2015

Contact author: ilan komargodski at weizmann ac il

Available format(s): PDF | BibTeX Citation

Note: Full version.

Version: 20151020:101716 (All versions of this report)

Short URL: ia.cr/2012/722

Discussion forum: Show discussion | Start new discussion