Cryptology ePrint Archive: Report 2006/151

Simulation-Based Security with Inexhaustible Interactive Turing Machines

Ralf Kuesters

Abstract: Recently, there has been much interest in extending models for simulation-based security in such a way that the runtime of protocols may depend on the length of their input. Finding such extensions has turned out to be a non-trivial task. In this work, we propose a simple, yet expressive general computational model for systems of Interactive Turing Machines (ITMs) where the runtime of the ITMs may be polynomial per activation and may depend on the length of the input received. One distinguishing feature of our model is that the systems of ITMs that we consider involve a generic mechanism for addressing dynamically generated copies of ITMs. We study properties of such systems and, in particular, show that systems satisfying a certain acyclicity condition run in polynomial time. Based on our general computational model, we state different notions of simulation-based security in a uniform and concise way, study their relationships, and prove a general composition theorem for composing a polynomial number of copies of protocols, where the polynomial is determined by the environment. The simplicity of our model is demonstrated by the fact that many of our results can be proved by mere equational reasoning based on a few equational principles on systems.

Category / Keywords: foundations / simulation-based security, universal composability, black-box simulatability

Publication Info: Abridged version appears in CSFW 2006.

Date: received 18 Apr 2006

Contact author: kuesters at ti informatik uni-kiel de

Available format(s): Postscript (PS) | Compressed Postscript (PS.GZ) | PDF | BibTeX Citation

Version: 20060422:183210 (All versions of this report)

Short URL:

[ Cryptology ePrint archive ]