Finding Collisions in Interactive Protocols -- A Tight Lower Bound on the Round Complexity of Statistically-Hiding Commitments

Iftach Haitner; Jonathan J.  Hoch; Omer Reingold; Gil Segev

Paper 2007/145

Finding Collisions in Interactive Protocols -- A Tight Lower Bound on the Round Complexity of Statistically-Hiding Commitments

Iftach Haitner, Jonathan J. Hoch, Omer Reingold, and Gil Segev

Abstract

We study the round complexity of various cryptographic protocols. Our main result is a tight lower bound on the round complexity of any fully-black-box construction of a statistically-hiding commitment scheme from one-way permutations, and even from trapdoor permutations. This lower bound matches the round complexity of the statistically-hiding commitment scheme due to Naor, Ostrovsky, Venkatesan and Yung (CRYPTO '92). As a corollary, we derive similar tight lower bounds for several other cryptographic protocols, such as single-server private information retrieval, interactive hashing, and oblivious transfer that guarantees statistical security for one of the parties. Our techniques extend the collision-finding oracle due to Simon (EUROCRYPT '98) to the setting of interactive protocols (our extension also implies an alternative proof for the main property of the original oracle). In addition, we substantially extend the reconstruction paradigm of Gennaro and Trevisan (FOCS '00). In both cases, our extensions are quite delicate and may be found useful in proving additional black-box separation results.

Metadata

Available format(s): PDF PS
Category: Foundations
Publication info: Published elsewhere. FOCS '07. This is the full version.
Keywords: Black-box reductions Lower bounds
Contact author(s): gil segev @ weizmann ac il
History: 2007-07-31: last of 3 revisions; 2007-04-23: received; See all versions
Short URL: https://ia.cr/2007/145
License: CC BY

BibTeX

@misc{cryptoeprint:2007/145,
      author = {Iftach Haitner and Jonathan J.  Hoch and Omer Reingold and Gil Segev},
      title = {Finding Collisions in Interactive Protocols -- A Tight Lower Bound on the Round Complexity of Statistically-Hiding Commitments},
      howpublished = {Cryptology {ePrint} Archive, Paper 2007/145},
      year = {2007},
      url = {https://eprint.iacr.org/2007/145}
}