<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-02375594</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-03T17:48:55+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Algebraic XOR-RKA-Secure Pseudorandom Functions from Post-Zeroizing Multilinear Maps</title>
            <author role="aut">
              <persName>
                <forename type="first">Michel</forename>
                <surname>Abdalla</surname>
              </persName>
              <email type="md5">03397ec5cc20e04a81916ecd987c747a</email>
              <email type="domain">ens.fr</email>
              <idno type="idhal" notation="string">michel-abdalla</idno>
              <idno type="idhal" notation="numeric">3693</idno>
              <idno type="halauthorid" notation="string">19239-3693</idno>
              <idno type="IDREF">https://www.idref.fr/192007718</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-2447-4329</idno>
              <orgName ref="#struct-59704"/>
              <affiliation ref="#struct-454320"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Fabrice</forename>
                <surname>Benhamouda</surname>
              </persName>
              <email type="md5">e0f68ebc3d44cba4744a8968a17bb29c</email>
              <email type="domain">ens.fr</email>
              <idno type="idhal" notation="string">fabrice-benhamouda</idno>
              <idno type="idhal" notation="numeric">1059</idno>
              <idno type="halauthorid" notation="string">19073-1059</idno>
              <idno type="IDREF">https://www.idref.fr/253130247</idno>
              <affiliation ref="#struct-574469"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Alain</forename>
                <surname>Passelègue</surname>
              </persName>
              <email type="md5">df212dc65fab30d041456a601b62326f</email>
              <email type="domain">inria.fr</email>
              <idno type="idhal" notation="string">alain-passelegue</idno>
              <idno type="idhal" notation="numeric">172819</idno>
              <idno type="halauthorid" notation="string">23099-172819</idno>
              <idno type="IDREF">https://www.idref.fr/242130607</idno>
              <affiliation ref="#struct-178327"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Michel</forename>
                <surname>Abdalla</surname>
              </persName>
              <email type="md5">03397ec5cc20e04a81916ecd987c747a</email>
              <email type="domain">ens.fr</email>
            </editor>
            <funder ref="#projeurop-103152"/>
            <funder>The first author was supported in part by the European Research Council under the European Union’s Seventh Framework Programme (FP7/2007-2013 Grant Agreement 339563 – CryptoCloud). The second author was supported in part by the Defense Advanced Research Projects Agency (DARPA) and Army Research Office (ARO) under Contract No. W911NF-15-C-0236. Part of this work was done while the second author was at École normale supérieure, Paris, France, and at IBM Research, Yorktown Heights, NY, USA. Part of this work was done while the third author was at École normale supérieure, Paris, France, and at UCLA, Los Angeles, CA, USA.</funder>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2020-11-12 16:58:24</date>
              <date type="whenModified">2025-10-27 11:30:02</date>
              <date type="whenReleased">2020-11-13 09:24:25</date>
              <date type="whenProduced">2019-12-08</date>
              <date type="whenEndEmbargoed">2020-11-12</date>
              <ref type="file" target="https://inria.hal.science/hal-02375594v1/document">
                <date notBefore="2020-11-12"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-02375594v1/file/main.pdf" id="file-3002201-2644365">
                <date notBefore="2020-11-12"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="186717">
                <persName>
                  <forename>Michel</forename>
                  <surname>Abdalla</surname>
                </persName>
                <email type="md5">03397ec5cc20e04a81916ecd987c747a</email>
                <email type="domain">ens.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-02375594</idno>
            <idno type="halUri">https://inria.hal.science/hal-02375594</idno>
            <idno type="halBibtex">abdalla:hal-02375594</idno>
            <idno type="halRefHtml">&lt;i&gt;ASIACRYPT 2019 - 25th International Conference on the Theory and Application of Cryptology and Information Security&lt;/i&gt;, Dec 2019, Kobe, Japan. pp.386-412, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-030-34621-8_14"&gt;&amp;#x27E8;10.1007/978-3-030-34621-8_14&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">ASIACRYPT 2019 - 25th International Conference on the Theory and Application of Cryptology and Information Security, Dec 2019, Kobe, Japan. pp.386-412, &amp;#x27E8;10.1007/978-3-030-34621-8_14&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-3002201-2644365"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="ENS-LYON">École Normale Supérieure de Lyon</idno>
            <idno type="stamp" n="ENS-PARIS">Ecole Normale Supérieure de Paris</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="UNIV-LYON1">Université Claude Bernard - Lyon I</idno>
            <idno type="stamp" n="INRIA-RHA">INRIA Grenoble - Rhône-Alpes</idno>
            <idno type="stamp" n="INRIA-ROCQ">INRIA Paris - Rocquencourt</idno>
            <idno type="stamp" n="LIP" corresp="UNIV-LYON1">Laboratoire de l'Informatique du Parallélisme</idno>
            <idno type="stamp" n="OPENAIRE">OpenAIRE</idno>
            <idno type="stamp" n="INRIA_TEST">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="TESTALAIN1">TESTALAIN1</idno>
            <idno type="stamp" n="INRIA2">INRIA 2</idno>
            <idno type="stamp" n="PSL">Université Paris sciences et lettres</idno>
            <idno type="stamp" n="INRIA-PSL">INRIA-PSL</idno>
            <idno type="stamp" n="INRIA-RENGRE">INRIA-RENGRE</idno>
            <idno type="stamp" n="UDL">UDL</idno>
            <idno type="stamp" n="UNIV-LYON">Université de Lyon</idno>
            <idno type="stamp" n="ENS-PSL" corresp="PSL">École normale supérieure - PSL</idno>
            <idno type="stamp" n="INRIA-ETATSUNIS">Copublications Inria-Etats-Unis</idno>
            <idno type="stamp" n="DIENS" corresp="ENS-PARIS">Département d'informatique de l'ENS-PSL</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Algebraic XOR-RKA-Secure Pseudorandom Functions from Post-Zeroizing Multilinear Maps</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Michel</forename>
                    <surname>Abdalla</surname>
                  </persName>
                  <email type="md5">03397ec5cc20e04a81916ecd987c747a</email>
                  <email type="domain">ens.fr</email>
                  <idno type="idhal" notation="string">michel-abdalla</idno>
                  <idno type="idhal" notation="numeric">3693</idno>
                  <idno type="halauthorid" notation="string">19239-3693</idno>
                  <idno type="IDREF">https://www.idref.fr/192007718</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-2447-4329</idno>
                  <orgName ref="#struct-59704"/>
                  <affiliation ref="#struct-454320"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Fabrice</forename>
                    <surname>Benhamouda</surname>
                  </persName>
                  <email type="md5">e0f68ebc3d44cba4744a8968a17bb29c</email>
                  <email type="domain">ens.fr</email>
                  <idno type="idhal" notation="string">fabrice-benhamouda</idno>
                  <idno type="idhal" notation="numeric">1059</idno>
                  <idno type="halauthorid" notation="string">19073-1059</idno>
                  <idno type="IDREF">https://www.idref.fr/253130247</idno>
                  <affiliation ref="#struct-574469"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Alain</forename>
                    <surname>Passelègue</surname>
                  </persName>
                  <email type="md5">df212dc65fab30d041456a601b62326f</email>
                  <email type="domain">inria.fr</email>
                  <idno type="idhal" notation="string">alain-passelegue</idno>
                  <idno type="idhal" notation="numeric">172819</idno>
                  <idno type="halauthorid" notation="string">23099-172819</idno>
                  <idno type="IDREF">https://www.idref.fr/242130607</idno>
                  <affiliation ref="#struct-178327"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>ASIACRYPT 2019 - 25th International Conference on the Theory and Application of Cryptology and Information Security</title>
                  <date type="start">2019-12-08</date>
                  <date type="end">2019-12-12</date>
                  <settlement>Kobe</settlement>
                  <country key="JP">Japan</country>
                </meeting>
                <editor>Steven D. Galbraith</editor>
                <editor>Shiho Moriai</editor>
                <imprint>
                  <biblScope unit="serie">Lecture Notes in Computer Science</biblScope>
                  <biblScope unit="volume">11922</biblScope>
                  <biblScope unit="pp">386-412</biblScope>
                  <date type="datePub">2019-11-22</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-030-34621-8_14</idno>
              <ref target="https://eprint.iacr.org/2017/500" type="seeAlso"/>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Post-Zeroizing Constructions</term>
                <term xml:lang="en">Multilinear Maps</term>
                <term xml:lang="en">Related-Key Security</term>
                <term xml:lang="en">Pseudorandom Functions</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Due to the vast number of successful related-key attacks against existing block-ciphers, related-key security has become a common design goal for such primitives. In these attacks, the adversary is not only capable of seeing the output of a function on inputs of its choice, but also on related keys. At Crypto 2010, Bellare and Cash proposed the first construction of a pseudorandom function that could provably withstand such attacks based on standard assumptions. Their construction, as well as several others that appeared more recently, have in common the fact that they only consider linear or polynomial functions of the secret key over complex groups. In reality, however, most related-key attacks have a simpler form, such as the XOR of the key with a known value. To address this problem, we propose the first construction of RKA-secure pseudorandom function for XOR relations. Our construction relies on multilinear maps and, hence, can only be seen as a feasibility result. Nevertheless, we remark that it can be instantiated under two of the existing multilinear-map candidates since it does not reveal any encodings of zero. To achieve this goal, we rely on several techniques that were used in the context of program obfuscation, but we also introduce new ones to address challenges that are specific to the related-key-security setting.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-454320" status="VALID">
          <idno type="IdRef">241283752</idno>
          <idno type="RNSR">200818333X</idno>
          <idno type="ROR">https://ror.org/04zpj8n12</idno>
          <orgName>Construction and Analysis of Systems for Confidentiality and Authenticity of Data and Entities</orgName>
          <orgName type="acronym">CASCADE</orgName>
          <date type="start">2016-04-01</date>
          <date type="end">2028-12-31</date>
          <desc>
            <address>
              <addrLine>45, rue d'Ulm 75230 Paris Cedex 05</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/equipes/cascade</ref>
          </desc>
          <listRelation>
            <relation active="#struct-25027" type="direct"/>
            <relation active="#struct-59704" type="indirect"/>
            <relation active="#struct-564132" type="indirect"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation name="UMR8548" active="#struct-441569" type="direct"/>
            <relation active="#struct-441569" type="direct"/>
            <relation active="#struct-454310" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-574469" status="VALID">
          <orgName>Algorand Foundation</orgName>
          <desc>
            <address>
              <addrLine>New York, NY</addrLine>
              <country key="US"/>
            </address>
            <ref type="url">https://algorand.foundation/</ref>
          </desc>
        </org>
        <org type="researchteam" xml:id="struct-178327" status="OLD">
          <idno type="RNSR">201221021B</idno>
          <orgName>Arithmetic and Computing</orgName>
          <orgName type="acronym">ARIC</orgName>
          <date type="start">2013-01-01</date>
          <date type="end">2021-12-31</date>
          <desc>
            <address>
              <addrLine>46 Allée d'Italie 69364 Lyon France</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/equipes/aric</ref>
          </desc>
          <listRelation>
            <relation active="#struct-2497" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-35418" type="direct"/>
            <relation active="#struct-6818" type="indirect"/>
            <relation active="#struct-301088" type="indirect"/>
            <relation active="#struct-194495" type="indirect"/>
            <relation name="UMR5668 / URA1398" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="regrouplaboratory" xml:id="struct-25027" status="VALID">
          <idno type="IdRef">148034055</idno>
          <idno type="RNSR">199812876J</idno>
          <idno type="ROR">05y6rqs46</idno>
          <orgName>Département d'informatique - ENS-PSL</orgName>
          <orgName type="acronym">DI-ENS</orgName>
          <date type="start">1999-01-01</date>
          <desc>
            <address>
              <addrLine>École normale supérieure 45 rue d'Ulm F-75230 Paris Cedex 05</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.di.ens.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-59704" type="direct"/>
            <relation active="#struct-564132" type="indirect"/>
            <relation active="#struct-300009" type="direct"/>
            <relation name="UMR8548" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-59704" status="VALID">
          <idno type="IdRef">031738419</idno>
          <idno type="ISNI">0000000123532622</idno>
          <idno type="ROR">https://ror.org/05a0dhs15</idno>
          <orgName>École normale supérieure - Paris</orgName>
          <orgName type="acronym">ENS-PSL</orgName>
          <date type="start">1985-07-24</date>
          <desc>
            <address>
              <addrLine>45, Rue d'Ulm - 75230 Paris cedex 05</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.ens.psl.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-564132" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-564132" status="VALID">
          <idno type="IdRef">241597595</idno>
          <idno type="ISNI">0000 0004 1784 3645</idno>
          <idno type="ROR">https://ror.org/013cjyk83</idno>
          <orgName>Université Paris Sciences et Lettres</orgName>
          <orgName type="acronym">PSL</orgName>
          <desc>
            <address>
              <addrLine>60 rue Mazarine 75006 Paris</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.psl.eu/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-454310" status="VALID">
          <idno type="IdRef">241614864</idno>
          <idno type="RNSR">196718247G</idno>
          <idno type="ROR">https://ror.org/05eyd5d35</idno>
          <orgName>Centre Inria de Paris</orgName>
          <date type="start">2016-03-10</date>
          <desc>
            <address>
              <addrLine>48 Rue Barrault, 75013 Paris</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/centre/paris</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-2497" status="VALID">
          <idno type="RNSR">199218244V</idno>
          <idno type="ROR">https://ror.org/00n8d6z93</idno>
          <orgName>Centre Inria de l'Université Grenoble Alpes</orgName>
          <desc>
            <address>
              <addrLine>Inovallée655 avenue de l'Europe38330 Montbonnot</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/centre/grenoble</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-35418" status="VALID">
          <idno type="IdRef">191041289</idno>
          <idno type="ISNI">0000000104538607</idno>
          <idno type="RNSR">200317503S</idno>
          <idno type="ROR">04msnz457</idno>
          <orgName>Laboratoire de l'Informatique du Parallélisme</orgName>
          <orgName type="acronym">LIP</orgName>
          <date type="start">1990-01-01</date>
          <desc>
            <address>
              <addrLine>46 Allée d'Italie 69364 LYON CEDEX 07</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ens-lyon.fr/LIP/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-6818" type="direct"/>
            <relation active="#struct-301088" type="direct"/>
            <relation active="#struct-194495" type="direct"/>
            <relation active="#struct-300009" type="direct"/>
            <relation name="UMR5668 / URA1398" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-6818" status="VALID">
          <idno type="IdRef">149154992</idno>
          <idno type="ISNI">0000000123319856</idno>
          <idno type="ROR">https://ror.org/04zmssz18</idno>
          <idno type="Wikidata">Q10159</idno>
          <orgName>École normale supérieure de Lyon</orgName>
          <orgName type="acronym">ENS de Lyon</orgName>
          <date type="start">2010-01-01</date>
          <desc>
            <address>
              <addrLine>15 parvis René Descartes - BP 7000 - 69342 Lyon Cedex 07</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.ens-lyon.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-301088" status="VALID">
          <idno type="ROR">https://ror.org/01rk35k63</idno>
          <orgName>Université de Lyon</orgName>
          <desc>
            <address>
              <addrLine>92 rue Pasteur - CS 30122, 69361 Lyon Cedex 07</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.universite-lyon.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-194495" status="VALID">
          <idno type="IdRef">026402823</idno>
          <idno type="ISNI">0000000121686185</idno>
          <idno type="ROR">https://ror.org/029brtt94</idno>
          <orgName>Université Claude Bernard Lyon 1</orgName>
          <orgName type="acronym">UCBL</orgName>
          <desc>
            <address>
              <addrLine>43, boulevard du 11 novembre 1918, 69622 Villeurbanne cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-lyon1.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
          </listRelation>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="europeanProject" xml:id="projeurop-103152" status="VALID">
          <idno type="number">339563</idno>
          <idno type="program">ERC-2013-ADG</idno>
          <idno type="call">ERC-2013-ADG</idno>
          <orgName>CryptoCloud</orgName>
          <desc>Cryptography for the Cloud</desc>
          <date type="start">2014-01-06</date>
          <date type="end">2019-05-31</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>