Multiparty generation of an rsa modulus

Megan Chen; Ran Cohen; Jack Doerner; Yashvanth Kondi; Eysa Lee; Schuyler Rosefield; Abhi Shelat

doi:10.1007/978-3-030-56877-1_3

Multiparty generation of an rsa modulus

Megan Chen, Ran Cohen, Jack Doerner, Yashvanth Kondi, Eysa Lee, Schuyler Rosefield, Abhi Shelat

Northeastern University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

12 Scopus citations

Abstract

We present a new multiparty protocol for the distributed generation of biprime RSA moduli, with security against any subset of maliciously colluding parties assuming oblivious transfer and the hardness of factoring. Our protocol is highly modular, and its uppermost layer can be viewed as a template that generalizes the structure of prior works and leads to a simpler security proof. We introduce a combined sampling-and-sieving technique that eliminates both the inherent leakage in the approach of Frederiksen et al. (Crypto’18), and the dependence upon additively homomorphic encryption in the approach of Hazay et al. (JCrypt’19). We combine this technique with an efficient, privacy-free check to detect malicious behavior retroactively when a sampled candidate is not a biprime, and thereby overcome covert rejection-sampling attacks and achieve both asymptotic and concrete efficiency improvements over the previous state of the art.

Original language	English
Title of host publication	Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings
Editors	Daniele Micciancio, Thomas Ristenpart
Publisher	Springer
Pages	64-93
Number of pages	30
ISBN (Print)	9783030568764
DOIs	https://doi.org/10.1007/978-3-030-56877-1_3
State	Published - 2020
Externally published	Yes
Event	40th Annual International Cryptology Conference, CRYPTO 2020 - Santa Barbara, United States Duration: 17 Aug 2020 → 21 Aug 2020

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	12172 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	40th Annual International Cryptology Conference, CRYPTO 2020
Country/Territory	United States
City	Santa Barbara
Period	17/08/20 → 21/08/20

Bibliographical note

Publisher Copyright:
© International Association for Cryptologic Research 2020.

Funding

This research was supported in part by the Office of the Director of National Intelligence (ODNI), Intelligence Advanced Research Project Activity (IARPA) under contract number 2019-19-020700009 (ACHILLES). The authors thank Muthuramakrishnan Venkitasubramaniam for the useful conversations and insights he provided, Tore Frederiksen for reviewing and confirming our cost analysis of his protocol [16], and Xiao Wang and Peter Scholl for providing detailed cost analyses of their respective protocols [21,34]. This research was supported in part by the Office of the Director of National Intelligence (ODNI), Intelligence Advanced Research Project Activity (IARPA) under contract number 2019-19-020700009 (ACHILLES). The views and conclusions contained herein are those of the authors and should not be interpreted as necessarily representing the official policies or endorsements, either expressed or implied, of ODNI, IARPA, DoI/NBC, or the U.S. Government. The U.S. Government is authorized to reproduce and distribute reprints for Governmental purposes notwithstanding any copyright annotation thereon.

Funders	Funder number
ACHILLES
Xiao Wang and Peter Scholl	21,34
Office of the Director of National Intelligence
Intelligence Advanced Research Projects Activity	2019-19-020700009

Access to Document

10.1007/978-3-030-56877-1_3

Cite this

Chen, M., Cohen, R., Doerner, J., Kondi, Y., Lee, E., Rosefield, S., & Shelat, A. (2020). Multiparty generation of an rsa modulus. In D. Micciancio, & T. Ristenpart (Eds.), Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings (pp. 64-93). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 12172 LNCS). Springer. https://doi.org/10.1007/978-3-030-56877-1_3

Chen, Megan ; Cohen, Ran ; Doerner, Jack et al. / Multiparty generation of an rsa modulus. Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings. editor / Daniele Micciancio ; Thomas Ristenpart. Springer, 2020. pp. 64-93 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{4703aefe6a764845adca0800dc25b59c,

title = "Multiparty generation of an rsa modulus",

abstract = "We present a new multiparty protocol for the distributed generation of biprime RSA moduli, with security against any subset of maliciously colluding parties assuming oblivious transfer and the hardness of factoring. Our protocol is highly modular, and its uppermost layer can be viewed as a template that generalizes the structure of prior works and leads to a simpler security proof. We introduce a combined sampling-and-sieving technique that eliminates both the inherent leakage in the approach of Frederiksen et al. (Crypto{\textquoteright}18), and the dependence upon additively homomorphic encryption in the approach of Hazay et al. (JCrypt{\textquoteright}19). We combine this technique with an efficient, privacy-free check to detect malicious behavior retroactively when a sampled candidate is not a biprime, and thereby overcome covert rejection-sampling attacks and achieve both asymptotic and concrete efficiency improvements over the previous state of the art.",

author = "Megan Chen and Ran Cohen and Jack Doerner and Yashvanth Kondi and Eysa Lee and Schuyler Rosefield and Abhi Shelat",

note = "Publisher Copyright: {\textcopyright} International Association for Cryptologic Research 2020.; 40th Annual International Cryptology Conference, CRYPTO 2020 ; Conference date: 17-08-2020 Through 21-08-2020",

year = "2020",

doi = "10.1007/978-3-030-56877-1_3",

language = "אנגלית",

isbn = "9783030568764",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer",

pages = "64--93",

editor = "Daniele Micciancio and Thomas Ristenpart",

booktitle = "Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings",

}

Chen, M, Cohen, R, Doerner, J, Kondi, Y, Lee, E, Rosefield, S & Shelat, A 2020, Multiparty generation of an rsa modulus. in D Micciancio & T Ristenpart (eds), Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 12172 LNCS, Springer, pp. 64-93, 40th Annual International Cryptology Conference, CRYPTO 2020, Santa Barbara, United States, 17/08/20. https://doi.org/10.1007/978-3-030-56877-1_3

Multiparty generation of an rsa modulus. / Chen, Megan; Cohen, Ran; Doerner, Jack et al.
Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings. ed. / Daniele Micciancio; Thomas Ristenpart. Springer, 2020. p. 64-93 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 12172 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Multiparty generation of an rsa modulus

AU - Chen, Megan

AU - Cohen, Ran

AU - Doerner, Jack

AU - Kondi, Yashvanth

AU - Lee, Eysa

AU - Rosefield, Schuyler

AU - Shelat, Abhi

PY - 2020

Y1 - 2020

N2 - We present a new multiparty protocol for the distributed generation of biprime RSA moduli, with security against any subset of maliciously colluding parties assuming oblivious transfer and the hardness of factoring. Our protocol is highly modular, and its uppermost layer can be viewed as a template that generalizes the structure of prior works and leads to a simpler security proof. We introduce a combined sampling-and-sieving technique that eliminates both the inherent leakage in the approach of Frederiksen et al. (Crypto’18), and the dependence upon additively homomorphic encryption in the approach of Hazay et al. (JCrypt’19). We combine this technique with an efficient, privacy-free check to detect malicious behavior retroactively when a sampled candidate is not a biprime, and thereby overcome covert rejection-sampling attacks and achieve both asymptotic and concrete efficiency improvements over the previous state of the art.

AB - We present a new multiparty protocol for the distributed generation of biprime RSA moduli, with security against any subset of maliciously colluding parties assuming oblivious transfer and the hardness of factoring. Our protocol is highly modular, and its uppermost layer can be viewed as a template that generalizes the structure of prior works and leads to a simpler security proof. We introduce a combined sampling-and-sieving technique that eliminates both the inherent leakage in the approach of Frederiksen et al. (Crypto’18), and the dependence upon additively homomorphic encryption in the approach of Hazay et al. (JCrypt’19). We combine this technique with an efficient, privacy-free check to detect malicious behavior retroactively when a sampled candidate is not a biprime, and thereby overcome covert rejection-sampling attacks and achieve both asymptotic and concrete efficiency improvements over the previous state of the art.

UR - http://www.scopus.com/inward/record.url?scp=85089717783&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-56877-1_3

DO - 10.1007/978-3-030-56877-1_3

M3 - ???researchoutput.researchoutputtypes.contributiontobookanthology.conference???

AN - SCOPUS:85089717783

SN - 9783030568764

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 64

EP - 93

BT - Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings

A2 - Micciancio, Daniele

A2 - Ristenpart, Thomas

PB - Springer

T2 - 40th Annual International Cryptology Conference, CRYPTO 2020

Y2 - 17 August 2020 through 21 August 2020

ER -

Chen M, Cohen R, Doerner J, Kondi Y, Lee E, Rosefield S et al. Multiparty generation of an rsa modulus. In Micciancio D, Ristenpart T, editors, Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings. Springer. 2020. p. 64-93. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-030-56877-1_3

Multiparty generation of an rsa modulus

Abstract

Publication series

Conference

Bibliographical note

Funding

Access to Document

Other files and links

Fingerprint

Cite this