Abstract:We are interested in this problem: a verifier, with a small and reliable storage, wants to periodically check whether a remote server is keeping a large file x. A dishonest server, by adapting the challenges and responses, tries to discard partial information of x and yet evades detection. Besides the security requirements, there are considerations on communication, storage size and computation time. Juels et al. [10] gave a security model for Proof of Retrievability (\documentclass[12pt]{minimal}\usepackage{amsmath}\usepackage{wasysym}\usepackage{amsfonts}\usepackage{amssymb}\usepackage{amsbsy}\usepackage{mathrsfs}\usepackage{upgreek}\setlength{\oddsidemargin}{-69pt}\begin{document}$\mathcal{POR}$\end{document}) system. The model imposes a requirement that the original x can be recovered from multiple challenges-responses. Such requirement is not necessary in our problem. Hence, we propose an alternative security model for Remote Integrity Check (\documentclass[12pt]{minimal}\usepackage{amsmath}\usepackage{wasysym}\usepackage{amsfonts}\usepackage{amssymb}\usepackage{amsbsy}\usepackage{mathrsfs}\usepackage{upgreek}\setlength{\oddsidemargin}{-69pt}\begin{document}$\mathcal{RIC}$\end{document}). We study a few schemes and analyze their efficiency and security. In particular, we prove the security of a proposed scheme HENC. This scheme can be deployed as a \documentclass[12pt]{minimal}\usepackage{amsmath}\usepackage{wasysym}\usepackage{amsfonts}\usepackage{amssymb}\usepackage{amsbsy}\usepackage{mathrsfs}\usepackage{upgreek}\setlength{\oddsidemargin}{-69pt}\begin{document}$\mathcal{POR}$\end{document} system and it also serves as an example of an effective \documentclass[12pt]{minimal}\usepackage{amsmath}\usepackage{wasysym}\usepackage{amsfonts}\usepackage{amssymb}\usepackage{amsbsy}\usepackage{mathrsfs}\usepackage{upgreek}\setlength{\oddsidemargin}{-69pt}\begin{document}$\mathcal{POR}$\end{document} system whose “extraction” is not verifiable. We also propose a combination of the RSA-based scheme by Filho et al. [7] and the ECC-based authenticator by Naor et al. [12], which achieves good asymptotic performance. This scheme is not a \documentclass[12pt]{minimal}\usepackage{amsmath}\usepackage{wasysym}\usepackage{amsfonts}\usepackage{amssymb}\usepackage{amsbsy}\usepackage{mathrsfs}\usepackage{upgreek}\setlength{\oddsidemargin}{-69pt}\begin{document}$\mathcal{POR}$\end{document} system and seems to be a secure \documentclass[12pt]{minimal}\usepackage{amsmath}\usepackage{wasysym}\usepackage{amsfonts}\usepackage{amssymb}\usepackage{amsbsy}\usepackage{mathrsfs}\usepackage{upgreek}\setlength{\oddsidemargin}{-69pt}\begin{document}$\mathcal{RIC}$\end{document}. In-so-far, all schemes that have been proven secure can also be adopted as \documentclass[12pt]{minimal}\usepackage{amsmath}\usepackage{wasysym}\usepackage{amsfonts}\usepackage{amssymb}\usepackage{amsbsy}\usepackage{mathrsfs}\usepackage{upgreek}\setlength{\oddsidemargin}{-69pt}\begin{document}$\mathcal{POR}$\end{document} systems. This brings out the question of whether there are fundamental differences between the two models. To highlight the differences, we introduce a notion, trap-door compression, that captures a property on compressibility.

A Response to a Critique of “A Novel Electronic Cash System with Trustee-Based Anonymity Revocation from Pairing,” by Chen, Chou, Sun and Cho (2011)

A response to a critique of "A novel electronic cash system with trustee-based anonymity revocation from pairing," by Chen, Chou, Sun and Cho (2011)

A Novel Electronic Cash System with Trustee-Based Anonymity Revocation from Pairing

An Efficient Delegation-Based Anonymous Authentication Protocol

A fair electronic payment system for digital content using elliptic curve cryptography

Cryptoanalysis of ID-based Proxy Re-Signature Scheme with Pairing-Free

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

An Electronic Cash System Based on Certificateless Group Signature

A Fair E-cash Scheme Based on Elliptic Curve Cryptography

Security Analysis of Shim's Authenticated Key Agreement Protocols from Pairings

Robust Countermeasure Against Detector Control Attack in a Practical Quantum Key Distribution System: Reply

A Novel Mutual Authentication Scheme Based on Quadratic Residues for RFID Systems

Comments on "Improved Efficient Remote User Authentication Schemes"

Notice of Violation of IEEE Publication Principles: Secure Two-Party Computation in Social Cloud Based on Reputation

Remote Integrity Check with Dishonest Storage Server

Cryptanalysis of Aydos Et Al.'s ECC-based Wireless Authentication Protocol

Cryptanalysis of Sun and Cao's Remote Authentication Scheme with User Anonymity

Anonymous Authentication Scheme for Smart Home Environment with Provable Security

Pitfalls in an ECC-based Lightweight Authentication Protocol for Low-Cost RFID

Another Round of Breaking and Making Quantum Money: How to Not Build It from Lattices, and More

2 The Definition and Security Models of Signcryption with Key Privacy