### Joint State Theorems for Public-Key Encryption and Digital Signature Functionalities with Local Computation

Ralf Kuesters and Max Tuengerthal

##### Abstract

In frameworks for universal composability, complex protocols can be built from sub-protocols in a modular way using composition theorems. However, as first pointed out and studied by Canetti and Rabin, this modular approach often leads to impractical implementations. For example, when using a functionality for digital signatures within a more complex protocol, parties have to generate new verification and signing keys for every session of the protocol. This motivates to generalize composition theorems to so-called joint state (composition) theorems, where different copies of a functionality may share some state, e.g., the same verification and signing keys. In this paper, we present a joint state theorem which is more general than the original theorem of Canetti and Rabin, for which several problems and limitations are pointed out. We apply our theorem to obtain joint state realizations for three functionalities: public-key encryption, replayable public-key encryption, and digital signatures. Unlike most other formulations, our functionalities model that ciphertexts and signatures are computed locally, rather than being provided by the adversary. To obtain the joint state realizations, the functionalities have to be designed carefully. Other formulations proposed in the literature are shown to be unsuitable. Our work is based on the IITM model. Our definitions and results demonstrate the expressivity and simplicity of this model. For example, unlike Canetti's UC model, in the IITM model no explicit joint state operator needs to be defined and the joint state theorem follows immediately from the composition theorem in the IITM model.

Note: The major difference to the version from 2008 is that we now use the new IITM model: http://eprint.iacr.org/2013/025/

Available format(s)
Category
Cryptographic protocols
Publication info
Published elsewhere. MAJOR revision.Version from 2008 has been published in CSF 2008.
Keywords
simulation-based securityjoint state theorem
Contact author(s)
kuesters @ uni-trier de
History
2013-08-30: last of 6 revisions
See all versions
Short URL
https://ia.cr/2008/006

CC BY

BibTeX

@misc{cryptoeprint:2008/006,
author = {Ralf Kuesters and Max Tuengerthal},
title = {Joint State Theorems for Public-Key Encryption and Digital Signature Functionalities with Local Computation},
howpublished = {Cryptology ePrint Archive, Paper 2008/006},
year = {2008},
note = {\url{https://eprint.iacr.org/2008/006}},
url = {https://eprint.iacr.org/2008/006}
}

Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.