Inproceedings,

Merkle Puzzles Are Optimal - An ($^2$)-Query Attack on Any Key Exchange from a Random Oracle

, and .
CRYPTO, volume 5677 of Lecture Notes in Computer Science, page 374-390. Springer, (2009)
DOI: 10.1007/978-3-642-03356-8_22

Abstract

We prove that every key exchange protocol in the random oracle model in which the honest users make at most n queries to the oracle can be broken by an adversary making O(n 2) queries to the oracle. This improves on the previous query attack given by Impagliazzo and Rudich (STOC ’89), and answers an open question posed by them. Our bound is optimal up to a constant factor since Merkle (CACM ’78) gave a key exchange protocol that can easily be implemented in this model with n queries and cannot be broken by an adversary making o(n 2) queries.

Tags

Users

  • @ytyoun

Comments and Reviews