<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-02993617</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-03T17:49:51+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Simulation-Sound Arguments for LWE and Applications to KDM-CCA2 Security</title>
            <author role="aut">
              <persName>
                <forename type="first">Benoît</forename>
                <surname>Libert</surname>
              </persName>
              <email type="md5">6ac253d22697de2600890d4070a8883a</email>
              <email type="domain">ens-lyon.fr</email>
              <idno type="idhal" notation="string">benoit-libert</idno>
              <idno type="idhal" notation="numeric">173481</idno>
              <idno type="halauthorid" notation="string">32729-173481</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-6914-1616</idno>
              <idno type="IDREF">https://www.idref.fr/22891910X</idno>
              <affiliation ref="#struct-441569"/>
              <affiliation ref="#struct-178327"/>
              <affiliation ref="#struct-35418"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Khoa</forename>
                <surname>Nguyen</surname>
              </persName>
              <idno type="halauthorid">680690-0</idno>
              <affiliation ref="#struct-300732"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Alain</forename>
                <surname>Passelègue</surname>
              </persName>
              <email type="md5">df212dc65fab30d041456a601b62326f</email>
              <email type="domain">inria.fr</email>
              <idno type="idhal" notation="string">alain-passelegue</idno>
              <idno type="idhal" notation="numeric">172819</idno>
              <idno type="halauthorid" notation="string">23099-172819</idno>
              <idno type="IDREF">https://www.idref.fr/242130607</idno>
              <affiliation ref="#struct-178327"/>
              <affiliation ref="#struct-35418"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Radu</forename>
                <surname>Titiu</surname>
              </persName>
              <idno type="halauthorid">1449359-0</idno>
              <affiliation ref="#struct-522375"/>
              <affiliation ref="#struct-178327"/>
              <affiliation ref="#struct-35418"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Benoit</forename>
                <surname>Libert</surname>
              </persName>
              <email type="md5">6ac253d22697de2600890d4070a8883a</email>
              <email type="domain">ens-lyon.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2020-11-06 20:35:12</date>
              <date type="whenModified">2026-01-29 10:00:12</date>
              <date type="whenReleased">2020-11-09 08:37:16</date>
              <date type="whenProduced">2020-12-07</date>
              <date type="whenEndEmbargoed">2020-11-06</date>
              <ref type="file" target="https://inria.hal.science/hal-02993617v1/document">
                <date notBefore="2020-11-06"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-02993617v1/file/kdm-NIZK.pdf" id="file-2993617-2637466">
                <date notBefore="2020-11-06"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="170416">
                <persName>
                  <forename>Benoit</forename>
                  <surname>Libert</surname>
                </persName>
                <email type="md5">6ac253d22697de2600890d4070a8883a</email>
                <email type="domain">ens-lyon.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-02993617</idno>
            <idno type="halUri">https://inria.hal.science/hal-02993617</idno>
            <idno type="halBibtex">libert:hal-02993617</idno>
            <idno type="halRefHtml">&lt;i&gt;Asiacrypt 2020 - 26th Annual International Conference on the Theory and Application of Cryptology and Information Security&lt;/i&gt;, Dec 2020, Virtual, South Korea. pp.1-67</idno>
            <idno type="halRef">Asiacrypt 2020 - 26th Annual International Conference on the Theory and Application of Cryptology and Information Security, Dec 2020, Virtual, South Korea. pp.1-67</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-2993617-2637466"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="ENS-LYON">École Normale Supérieure de Lyon</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="UNIV-LYON1">Université Claude Bernard - Lyon I</idno>
            <idno type="stamp" n="INRIA-RHA">INRIA Grenoble - Rhône-Alpes</idno>
            <idno type="stamp" n="LIP" corresp="UNIV-LYON1">Laboratoire de l'Informatique du Parallélisme</idno>
            <idno type="stamp" n="INRIA_TEST">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="TESTALAIN1">TESTALAIN1</idno>
            <idno type="stamp" n="INRIA2">INRIA 2</idno>
            <idno type="stamp" n="INRIA-RENGRE">INRIA-RENGRE</idno>
            <idno type="stamp" n="UDL">UDL</idno>
            <idno type="stamp" n="UNIV-LYON">Université de Lyon</idno>
            <idno type="stamp" n="INRIA-SINGAPOUR">INRIA-SINGAPOUR</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Simulation-Sound Arguments for LWE and Applications to KDM-CCA2 Security</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Benoît</forename>
                    <surname>Libert</surname>
                  </persName>
                  <email type="md5">6ac253d22697de2600890d4070a8883a</email>
                  <email type="domain">ens-lyon.fr</email>
                  <idno type="idhal" notation="string">benoit-libert</idno>
                  <idno type="idhal" notation="numeric">173481</idno>
                  <idno type="halauthorid" notation="string">32729-173481</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-6914-1616</idno>
                  <idno type="IDREF">https://www.idref.fr/22891910X</idno>
                  <affiliation ref="#struct-441569"/>
                  <affiliation ref="#struct-178327"/>
                  <affiliation ref="#struct-35418"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Khoa</forename>
                    <surname>Nguyen</surname>
                  </persName>
                  <idno type="halauthorid">680690-0</idno>
                  <affiliation ref="#struct-300732"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Alain</forename>
                    <surname>Passelègue</surname>
                  </persName>
                  <email type="md5">df212dc65fab30d041456a601b62326f</email>
                  <email type="domain">inria.fr</email>
                  <idno type="idhal" notation="string">alain-passelegue</idno>
                  <idno type="idhal" notation="numeric">172819</idno>
                  <idno type="halauthorid" notation="string">23099-172819</idno>
                  <idno type="IDREF">https://www.idref.fr/242130607</idno>
                  <affiliation ref="#struct-178327"/>
                  <affiliation ref="#struct-35418"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Radu</forename>
                    <surname>Titiu</surname>
                  </persName>
                  <idno type="halauthorid">1449359-0</idno>
                  <affiliation ref="#struct-522375"/>
                  <affiliation ref="#struct-178327"/>
                  <affiliation ref="#struct-35418"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>Asiacrypt 2020 - 26th Annual International Conference on the Theory and Application of Cryptology and Information Security</title>
                  <date type="start">2020-12-07</date>
                  <date type="end">2020-12-11</date>
                  <settlement>Virtual</settlement>
                  <country key="KR">South Korea</country>
                </meeting>
                <imprint>
                  <biblScope unit="pp">1-67</biblScope>
                </imprint>
              </monogr>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">tight security</term>
                <term xml:lang="en">KDM-CCA2 security</term>
                <term xml:lang="en">simulation- soundness</term>
                <term xml:lang="en">NIZK arguments</term>
                <term xml:lang="en">Naor-Yung</term>
                <term xml:lang="en">standard model</term>
                <term xml:lang="en">LWE</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>The Naor-Yung paradigm is a well-known technique that constructs IND-CCA2-secure encryption schemes by means of non-interactive zero-knowledge proofs satisfying a notion of simulation-soundness. Until recently, it was an open problem to instantiate it under the sole Learning-With-Errors (LWE) assumption without relying on random oracles. While the recent results of Canetti et al. (STOC'19) and Peikert-Shiehian (Crypto'19) provide a solution to this problem by applying the Fiat-Shamir transform in the standard model, the resulting constructions are extremely inefficient as they proceed via a reduction to an NP-complete problem. In this paper, we give a direct, non-generic method for instantiating Naor-Yung under the LWE assumption outside the random oracle model. Specifically, we give a direct construction of an unbounded simulation-sound NIZK argument system which, for carefully chosen parameters, makes it possible to express the equality of plaintexts encrypted under different keys in Regev's cryptosystem. We also give a variant of our argument that provides tight security. As an application, we obtain an LWE-based public-key encryption scheme for which we can prove (tight) key-dependent message security under chosen-ciphertext attacks in the standard model.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="researchteam" xml:id="struct-178327" status="OLD">
          <idno type="RNSR">201221021B</idno>
          <orgName>Arithmetic and Computing</orgName>
          <orgName type="acronym">ARIC</orgName>
          <date type="start">2013-01-01</date>
          <date type="end">2021-12-31</date>
          <desc>
            <address>
              <addrLine>46 Allée d'Italie 69364 Lyon France</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/equipes/aric</ref>
          </desc>
          <listRelation>
            <relation active="#struct-2497" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-35418" type="direct"/>
            <relation active="#struct-6818" type="indirect"/>
            <relation active="#struct-301088" type="indirect"/>
            <relation active="#struct-194495" type="indirect"/>
            <relation name="UMR5668 / URA1398" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-35418" status="VALID">
          <idno type="IdRef">191041289</idno>
          <idno type="ISNI">0000000104538607</idno>
          <idno type="RNSR">200317503S</idno>
          <idno type="ROR">04msnz457</idno>
          <orgName>Laboratoire de l'Informatique du Parallélisme</orgName>
          <orgName type="acronym">LIP</orgName>
          <date type="start">1990-01-01</date>
          <desc>
            <address>
              <addrLine>46 Allée d'Italie 69364 LYON CEDEX 07</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ens-lyon.fr/LIP/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-6818" type="direct"/>
            <relation active="#struct-301088" type="direct"/>
            <relation active="#struct-194495" type="direct"/>
            <relation active="#struct-300009" type="direct"/>
            <relation name="UMR5668 / URA1398" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300732" status="VALID">
          <idno type="ROR">https://ror.org/02e7b5302</idno>
          <orgName>Nanyang Technological University [Singapour]</orgName>
          <orgName type="acronym">NTU</orgName>
          <date type="start">1955-01-01</date>
          <desc>
            <address>
              <addrLine>50 Nanyang Avenue, Singapour 639798</addrLine>
              <country key="SG"/>
            </address>
            <ref type="url">https://www.ntu.edu.sg/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-522375" status="VALID">
          <orgName>Bitdefender [Bucharest]</orgName>
          <desc>
            <address>
              <addrLine>Bucharest</addrLine>
              <country key="RO"/>
            </address>
            <ref type="url">https://www.bitdefender.ro/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-2497" status="VALID">
          <idno type="RNSR">199218244V</idno>
          <idno type="ROR">https://ror.org/00n8d6z93</idno>
          <orgName>Centre Inria de l'Université Grenoble Alpes</orgName>
          <desc>
            <address>
              <addrLine>Inovallée655 avenue de l'Europe38330 Montbonnot</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/centre/grenoble</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-6818" status="VALID">
          <idno type="IdRef">149154992</idno>
          <idno type="ISNI">0000000123319856</idno>
          <idno type="ROR">https://ror.org/04zmssz18</idno>
          <idno type="Wikidata">Q10159</idno>
          <orgName>École normale supérieure de Lyon</orgName>
          <orgName type="acronym">ENS de Lyon</orgName>
          <date type="start">2010-01-01</date>
          <desc>
            <address>
              <addrLine>15 parvis René Descartes - BP 7000 - 69342 Lyon Cedex 07</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.ens-lyon.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-301088" status="VALID">
          <idno type="ROR">https://ror.org/01rk35k63</idno>
          <orgName>Université de Lyon</orgName>
          <desc>
            <address>
              <addrLine>92 rue Pasteur - CS 30122, 69361 Lyon Cedex 07</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.universite-lyon.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-194495" status="VALID">
          <idno type="IdRef">026402823</idno>
          <idno type="ISNI">0000000121686185</idno>
          <idno type="ROR">https://ror.org/029brtt94</idno>
          <orgName>Université Claude Bernard Lyon 1</orgName>
          <orgName type="acronym">UCBL</orgName>
          <desc>
            <address>
              <addrLine>43, boulevard du 11 novembre 1918, 69622 Villeurbanne cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-lyon1.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
          </listRelation>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>