两种语义安全性定义的等价性  

Equivalence Between Two Definitions of Semantic Security

作　　者：陈原[1] 白恩健[2] 肖国镇[1] 

机构地区：[1]西安电子科技大学ISN综合业务网国家重点实验室,陕西西安710071 [2]东华大学信息科学与技术学院,上海200051

出　　处：《电子学报》2009年第10期2149-2153,共5页Acta Electronica Sinica

基　　金：国家自然科学基金(No.60603010)

摘　　要：对于语义安全性有两种不同形式的定义,一种基于模拟器,一种基于比较.我们采用Goldreich对语义安全性的基于模拟器的定义,证明了它与相应基于比较的定义都等价于不可区分性,得出了这两种定义确实等价的结论.该结论与Watanabe等人的结论相悖,原因在于他们采用的基于模拟器的语义安全性定义中允许敌手及其模拟器自己选择其输入的有关明文的附加部分信息,导致敌手模拟器与敌手选择的可能不同,这使该定义与不可区分性不等价,与公认的结论不符.For semantic security,there are two different definitions.One is simulator-based,the other is comparison-based.For Goldreich＇s simulator-based definition,we show the corresponding comparison-based definition is equivalent to it by proving both of them are equivalent to indistinguishability.This conflicts with that of Watanabe,etc.The reason lies in that in the simulation-based definition they used the adversary and its simulator are allowed to choose the auxiliary partial information about the plaintext to be input by themselves which results in the information chosen by them can be different.This makes the definition even not equivalent to indistinguishability,contradicts with widely accepted result.

关 键 词：语义安全性 公钥加密 不可区分性 

分 类 号：TN918.1[电子电信—通信与信息系统]