English

Iterated group products and leakage resilience against NC^1

Computational Complexity 2013-12-12 v1

Abstract

We show that if NC1^1 \neq L, then for every element α\alpha of the alternating group AtA_t, circuits of depth O(logt)O(\log t) cannot distinguish between a uniform vector over (At)t(A_t)^t with product =α= \alpha and one with product == identity. Combined with a recent construction by the author and Viola in the setting of leakage-resilient cryptography [STOC '13], this gives a compiler that produces circuits withstanding leakage from NC1^1 (assuming NC1^1 \neq L). For context, leakage from NC1^1 breaks nearly all previous constructions, and security against leakage from P is impossible. %In the multi-query setting, circuits produced by this compiler use a simple secure hardware component. We build on work by Cook and McKenzie [J.\ Algorithms '87] establishing the relationship between L == logarithmic space and the symmetric group StS_t. Our techniques include a novel algorithmic use of commutators to manipulate the cycle structure of permutations in AtA_t.

Keywords

Cite

@article{arxiv.1312.3193,
  title  = {Iterated group products and leakage resilience against NC^1},
  author = {Eric Miles},
  journal= {arXiv preprint arXiv:1312.3193},
  year   = {2013}
}

Comments

ITCS 2014