Event Details

Universally Composable Security: A New Paradigm for Cryptographic Protocols

Presenter: Dr. Ran Canetti - IBM, T.J. Watson Research Centre
Supervisor: Dr. Valerie King - Associate Professor

Date: Mon, October 21, 2002
Time: 13:30:00 - 14:30:00
Place: David Strong Building (DSB), Room C 116

ABSTRACT

ABSTRACT:

Rigorously capturing the security requirements of cryptographic tasks is a notoriously subtle and tricky business. One major stumbling point is coming up with a notion of security that is robust enough so as to guarantee security even when the protocol is run as a component of an unknown larger system. So far, no such general notions were known.

We propose a new paradigm for defining security of cryptographic protocols, called Universally Composable Security. The salient property of universally composable notions of security is that they guarantee security even when a protocol is used as a component within an arbitrary system. In particular, universally composable notions guarantee security when an unbounded number of protocol instances are running concurrently in an adversarially controlled manner, they guarantee non-malleability with respect to arbitrary protocols, and more. Such properties are crucial for arguing the security of cryptographic protocols in complex and unpredictable environments such as the Internet.

The talk will provide a high-level motivation and introduction to universally composable security, and will survey recent results. No prior knowledge in cryptography will be assumed.