Paper 2025/1021

Black-Box Crypto is Useless for Pseudorandom Codes

Sanjam Garg, University of California, Berkeley
Sam Gunn, University of California, Berkeley
Mingyuan Wang, NYU, Shanghai
Abstract

A pseudorandom code is a keyed error-correction scheme with the property that any polynomial number of encodings appear random to any computationally bounded adversary. We show that the pseudorandomness of any code tolerating a constant rate of random errors cannot be based on black-box reductions to almost any generic cryptographic primitive: for instance, anything that can be built from random oracles, generic multilinear groups, and virtual black-box obfuscation. Our result is optimal, as Ghentiyala and Guruswami (2024) observed that pseudorandom codes tolerating any sub-constant rate of random errors exist using a black-box reduction from one-way functions. The key technical ingredient in our proof is the hypercontractivity theorem for Boolean functions, which we use to prove our impossibility in the random oracle model. It turns out that this easily extends to an impossibility in the presence of "crypto oracles," a notion recently introduced---and shown to be capable of implementing all the primitives mentioned above---by Lin, Mook, and Wichs (EUROCRYPT 2025).

Metadata
Available format(s)
PDF
Category
Foundations
Publication info
Published by the IACR in TCC 2025
Keywords
Error correctionpseudorandomnessblack-box separations
Contact author(s)
sanjamg @ berkeley edu
gunn @ berkeley edu
mingyuan wang @ nyu edu
History
2025-09-29: revised
2025-06-02: received
See all versions
Short URL
https://ia.cr/2025/1021
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2025/1021,
      author = {Sanjam Garg and Sam Gunn and Mingyuan Wang},
      title = {Black-Box Crypto is Useless for Pseudorandom Codes},
      howpublished = {Cryptology {ePrint} Archive, Paper 2025/1021},
      year = {2025},
      url = {https://eprint.iacr.org/2025/1021}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.