|
In cryptography, the concept of a verifiable random function was introduced by Micali, Rabin, and Vadhan. It is a pseudo-random function that provides publicly verifiable proofs of its outputs' correctness. Given an input value ''x'', the owner of the secret key SK can compute the function value ''y'' = ''F''SK(''x'') and the proof ''p''SK(''x''). Using the proof and the public key , everyone can check that the value ''y'' = ''F''SK(''x'') was indeed computed correctly, yet this information cannot be used to find the secret key. The original construction was rather inefficient. Recently, an efficient and practical verifiable random function was proposed by Yevgeniy Dodis and Aleksandr Yampolskiy. In their construction, : where ''e''(·,·) is a bilinear map. To verify whether was computed correctly or not, one can check if . The proof of security relies on a new decisional bilinear Diffie-Hellman inversion assumption, which asks given as input to distinguish from random. ==References== 〔 抄文引用元・出典: フリー百科事典『 ウィキペディア(Wikipedia)』 ■ウィキペディアで「Verifiable random function」の詳細全文を読む スポンサード リンク
|