Abstract:Driven by the open problem raised by Hofheinz and Kiltz (J Cryptol 25(3):484–527, 2012), we study the formalization of lattice-based programmable hash function (PHF) and give three types of concrete constructions by using several techniques such as a novel combination of cover-free sets and lattice trapdoors. Under the inhomogeneous small integer solution (ISIS) assumption, we show that any (non-trivial) lattice-based PHF is a collision-resistant hash function, which gives a direct application of this new primitive. We further demonstrate the power of lattice-based PHF by giving generic constructions of signature and identity-based encryption (IBE) in the standard model, which not only provide a way to unify several previous lattice-based schemes using the partitioning proof techniques, but also allow us to obtain new short signature schemes and IBE schemes from (ideal) lattices. Specifically, by instantiating the generic constructions with our Type-II and Type-III PHF constructions, we immediately obtain two short signatures and two IBE schemes with asymptotically much shorter keys. A major downside which inherits from our Type-II and Type-III PHF constructions is that we can only prove the security of the new signatures and IBEs in the bounded security model that the number Q of the adversary's queries is required to be known in advance. Another downside is that the computational time of our new signatures and IBEs is a linear function of Q , which is large for typical parameters. To overcome the above limitations, we also give a refined way of using Type-II and Type-III PHFs to construct lattice-based short signatures with short verification keys in the full security model. In particular, our methods depart from the confined guessing technique of Böhl et al. (Eurocrypt'13) that was used to construct previous standard model short signature schemes with short verification keys by Ducas and Micciancio (Crypto'14) and by Alperin-Sheriff (PKC'15) and allow us to achieve much tighter security from weaker hardness assumptions.

Computational Aspects of Lattices and Their Cryptographic Applications

Lattice-Based Cryptography: A Survey

Some mathematical mysteries in lattices

New Lattice Based Cryptographic Constructions

A survey on lattice-based digital signature

Survey of Lattice-Based Group Signature

Lattice Problems and Their Reductions(Russian)

Lattice basis reduction techniques

The Mathematical Foundation of Post-Quantum Cryptography

Evolutionary techniques in lattice sieving algorithms

Number Theoretic Transform and Its Applications in Lattice-based Cryptosystems: A Survey

An Attack on $p$-adic Lattice Public-key Cryptosystems and Signature Schemes

Euclidean lattices: theory and applications

Lattices in function fields and applications

Graphic Lattices and Matrix Lattices Of Topological Coding

On the Closest Vector Problem for Lattices Constructed from Polynomials and Their Cryptographic Applications

Lattice-Based Threshold Secret Sharing Scheme and Its Applications: A Survey

Compact Lossy and All-but-One Trapdoor Functions from Lattice

An efficient quantum algorithm for lattice problems achieving subexponential approximation factor

Lattice-Based Programmable Hash Functions and Applications

Almost tight security in lattices with polynomial moduli—PRF, IBE, all-but-many LTF, and more