Introduction to Modern Cryptography: Principles and Protocols
[ ~]Jf-~~. -f")jt
[ Y':A ~ ~rj J Jl~ ~}] lk_ • #.-tt ~
1:1-1-fi
jf-
• ::lt:Jit .
Ill ~ .f£ Jlii!ii !§! ( CIP ) lSI" 'I'm
JJilf-t~li!b~:@)!l!fl!i?JJ.i)U(~)--F~(Katz,J.),
(l~H~.?tl)Jmi~JBZi • #tti~(Lindel,Y. )tf;{:f~i.f.
-:ft.J?:: !EilJJI~l±\Jl&;f± ,2011. 1
~~ Jlj(:)c: Introduction to Modern Cryptogarphy:
Prinples and Protocols
ISBN 978-7-118-07065-1
I .CDJJil···
n.CD--F··· ®Im··· ®f:f··· m.CD~li!b
~i£ lV. CDTN918. 1
·r:j=tJEJl&;zjs:OO~ttf CIP ~!liH~~(2010)~ 201087 ~
© 2008 by Taylor & Francis Group , LLC
Chapman & HalVCRC is an imprint of Taylor & Francis Group, an Informa business
Authorized translation from English language edition published by CRC Press, part of Tay-
lor & Francis Group LLC.
All rights Reserved
*
t&J ri .. 1 :. Jf"-
:P- m ~it rr
C::ltJli:rtJtfiil)E!K~'It~m~23% dl~~!lii~ 100048)
~ .p fP liltlrf!J.Iiltl
fW$15J;!;~1!f
** 787 X 1096
*
1/16 W* 22%
2011 iF 1 Jl ~ 1 /lN.~ 1 ;j:f!J{fllj
Sill!!!: l-2500 11/t
:lEffl" 48. 00 5G
!¥11!1: 558 T~
!EilJJ~J;S: ( 010)68428422
~tr~lt:(OI0)68411535
~Hib~W;J: (010)68414474
~H~;}: (010)68472764
{33J1J~~~$-JJ.jUf~t)}i.5l.>-4H:Bf'F1lf Jonathan katz ;f!l Yehuda Lindell :Jik§f!J~
~ffi~~$®!:J!ll89~~$1!f,:JHJUI]iJlb\-T~~~~ Moti Yung ;f!l Oded Goldreicho ~45 §
2007 !if. 8 Ji §?Xili Jt!i~*, :lz:J!P~~ Elf~ ~Tm~::k$mJtl :1>J~~$i*Wli1fJ'Ej:_ ( .l!X:*f-4
j:_) ftW , ;lt 9=t ·§J& Wd!l1ii ::k $,if if*Wf 'tiffi-::k $ , * ~ ::k $ , :hD *11M m SIE ::k $fa}'[ *1 51-;Bt
•o~45~M~~m~m~~~~Elf~~::k$m.ffi:1>J•ft~~$ft~,;tt9=t~m~~~,
-~ ,.::k*L~~ ,t1:*1M ,:fJD:$:::k,3f~·~o ;tt~n(ti]j]iEft~~ti-::ko
~4589~~MI~T~~$89~*n00,51n.xt~~tl3~~$;f!l0fJ3~U!?J$,~at7FIJ~T
Jtfif!.ftfll. 45 9=t ~ ~ _m 89 .± »2, 11u 5~n 119 l!.lR m !l& :& j:_ ~, 119 l!.lR m Pl§ !l& < w. ~) , ~~ n w. ~,
Paillier :fln~~.&ruRfJLJ:Uii§f;jjt~•o J:t~m::k:l:89 33 »!;f!lt/ ~15?Ji~~J¥:-t1rm o
~ 45 89i~:l£Jr.J:\:~!RA*f~ , :@:45~J=IH1t- 89i~:l£fll~ ( ~ .J:\: f-t 89 gc:@:JE: )( , ~ lifti 89-ffil
i5LF~89gc:@::iJEI3Jl) *1rm~U!?J$~i.R, l!~tt iJ:1JJ$1lr 1>\ -7fMlf.lti~¥U ~~89il&$
i..HifJF-,~nltF~89fll.$~~;f!l-f-t@;U!?J$89Ji~Ht33·1:9t, mLEniJA*-$1l@;~$~i.R89w;1!r
!Tffi§f , ~~~iit A:1f JS :&·11:, t~~ 1>\ 9=t $33 ¥1JJT 89 ~~51-tJT l'ilJ »! fllfWH~:filJ I! 89 Jr~ , l!:fi!Jr
~:Jik-ft@;~$1VfJ'E9=t~~~ffl89Jr~o
~4589~-~*f~:Jil::~~m~~A~~,~•kmmam•~~T~-r~••~tt
89•1-t@;U!?J$89-*~-noo o 1A~~A~U!?J$i#~, 51 m•f-t~~$89£*JJJtiJ!U;f!l;;c~1**
89Ji'U~o ~}§51 ili~llJIZ_?j-•jf:E,~Jii.~"J 'llJ%t~~$·~'L'~~ ,*JJtl.f-t~U!?J$89~-Jr
~, i~J£T f1gruf[f]L£j:_~( rnt~U!?J, i-8-)(gc:@::) , f1gl!.lf[f]LB:_~( :51-~ll~U!?J, CPA gc:@:) , :iHi:i17~
.\~1-:~~IJU!?J~m CCA gc:@:89:fJD~Jr~ ,J:t:il!:-$!*i;>fT £-T .!f!.!PJ Pl§il&~mf191!.if[f]L£j:_:Ho
?'/.\J§:i1~¥110fJ3@;U!?J$89!l&~rilJ»!B3x1H'4:-ffili'it,J:t:il!:m1i~J£0~:flo~< ~nw.~) ;f!l0~
~~ ,l!.lf[fJLJ:U!l§f;jjt~o ~atB:£:iHiffl~mJr~89JJJt~·l1:i#fm,f.lrw;1!rm~A.l*•1*~•
f-t@;U!?J$89~~0
~1!rft~~b\•magc~~J'E89~¥m,l*l*-f*~~~~*•ft~U!?J$~J'E;f!lft$
~ ~Jrlif 89 ~Jf. , 91 :il!:Jf:O~l!*ft~ 891t :i= ~;J ~~fiG~ ft ~ U!?J$ ;f!l f§ .m, gc :@:~N!.!ll89 m
-i*f4~;f!lft$7J<.3JZ, Tfm~7~~U!?J$;f!lf§.m,gc~~J'E;f!lft$79J!Pl .~~~iit .&at;f!l!.IZ,~89 o
~W~I:Ji(II!~Jt!::k$~50tftt't;f!lit1Jl::k$*~~ftt't893t~o· ~WJT:fJD:lJt~~::k$
Robert H. Deng(5<~1;1~)ftt't89:ffli!IJo ~W Jonathan Ka~ ftB'ttZ9=t1-J9=t)CJt!i~!'¥o ~
*·~W-~Ifi::k$~M3Jl-ftt'to~W9=t~~~$~ftWit'F•m~o~iMji:Ji(.Jt!
m
::k~f~Lm,:tc~q:t,c,,J.V,.&JR.~~Ij)~o ~iMOO~I~ti::\#JH±B
*~~~$~~~~~~*m~~~m.~~~§~~~~l.ROJIJ
=f § $~1-!BfJf~~fr..(~-z~:tEr-TI!!tf:!t T x;J$1-t~~~~F:.mi~~, II'IJBt X~
f* ~~ 1&:~5¥: a<1JJ .:rt:iti:H1l-m o
3lntru·fJf~.:f!Gff111t~~~$1t< 1980 ~5~) ~~~0 $~~~~--"5t~-~~~~JR
jjiJ :tE =f : TI ~.!iHfnl ):£5( , lit liffl B91'SA1& § ~it!!.IJI ill ~$~1', il1Wt~i~. ~lN.~
~~~~1r~~EJiJE~~~tt •• ~A*~~-~~~~J:E5(~~~-=fJ:E5(J:JA·~-~
~fl!iia:o ~~JN.f-t•~~Bf~EI!i~:~&~
~1J~o
~-a9n~olW~~$~-~~~m~~ttttR~£:J·~~m~li1FJi:~~.*o:tE~
1WM.J:E5(~m~ttB~M17ZiAII'IJ,#H1&:~~~li1FJi:::l!f(~ffl-~~IA~~~~
*t~E~MJi:A.ln )fJff*:lit, II'IJBt, F:.m~~~iJEJ:JA Bt~nlt~~~1r;tf/jftft~-#~>.Ko
v
:fi~T-.llt,:<$:~~~" lliiJ=IH¥Hi~$:" M." PJiiE!lA~1t" r:f7t~ lfi*; ffi&, :tE~lfi~ffl89.,)
~~m89mfi$:~m~-89~~.~M·~-~~~1t~~M~~89~*<*87tMR
~~m\~iiE!lAMW) o
*~if:Jl.l~~-m
:<$:1ll:?:tE:fWWJ~m*~f'F~~i*~M89~i*1lf .$:~mtJ!gJAr:f~m\xt::$:~P>J~89:fi
m•~o
( 1) ~!IH19~;HJ~iRo :<$:~~ffl¥IJ~~,iJE!lA~lk~$:-~. f511ffl~~Afk-~89~
$:~1J, ::$:~1I!li!i!:w;# A4k*$:~$:7J< 3Jl-, 5!1l$::i1~~~$:, ~'lit~$: ,:lfr!, !!X:it:lf~~ o
· ~'lfj!!].llt,;<$:~~~~-ffij{t~~~J:\,{J!'f-w;filo f5J.llt;$:~~~tjj~~Jf~F~89;fJ:J:k
~M£~o:f!:l&.~H~1t§~~m~~~~.~£~~~-~~mfi$:~m~r!r:f89i!i!:
if~~o
:<$:~ 89~ll~~fl~~~~5t~i*W-&~:lfr!i*Wfll~'lit~$:1*~ o -& ftJ ~, !!X:#iJZ.:tEff:Mmfi$:·i~i*W r:f5.1i?.,~~t)(
89~i*P>J~.§f~S~~ JL-t-~00( '1Wli.%89P>l~*-Elf~S .~:tEJSOOiti~):
• m 1 • -m 4 tr< ¥IJ 4. 61l). iti~g:2~mfi$:,m\1-tmfi$:~~xtf*m-mmfi$:
89l!iilfl < xtf*m-m:IJomfllr~.~.~JJU) o
• m 5 tf .~U*lli:<$:897tmmfii!i!:itrntJJlU ,§1JS)~~ffl897}gllmfi DES f!] AESo CD
• m 7 ti ,1(-ffi~0i:A~IE~89J't.f*~$:1BJ~.tiH!tT~T~- RSA,Diffie-Hellman
~lk El Carnal mfi*~89~~'W:J:o WJ~( *~~-.®l*A89it~flliiE!lA) PJ:tE 30 $:Bf -35 $:Bt89:<$:#i*W r:f
i#~ o :fi£$~i*$:Bf 89i#~# PI~ tVctt 1l * , f71J 5!1li#~M:fi ilE llA 89 ~1l , ~ lk :tE1l-ffi :fl3
'*M~l!iilflfll~~'W:J:Bf:li~C'tlimll o Wt~, ~:IJO~OO 89-.®W15'r ±~ o
xt~~.®1tf~i#~W15'r89P>J~.:fi£*~1*$:at:e.X:~~m·l9cl1*iit~lilf~~i*W89~
i*~lfflg ,5!1l.~I'BJ.ft.ilf( !!X:~~i*~~~@) .~~m\::$:~89gll~.ft.ilf!R.f.S~§*~.f11!
89±~.~JJU~-~WJ~.%< *) 89ttl1 o ~•7ttr1l~~~:m:~ • .R~~l:i:f'F~mfi$:•1-~
i*W89f*'L'P>l~o iE5!1liXJtl~~tllfi89i*W*~H*-El*'IW£%89P>J~) ,'/W£%89tf1lPJ~
/i1J~M .:e.X:~:tE~Ifim\89fJrfli#~.$~~~nlfiJJ§0089i*W, ~JJU~:<$:~·1* T~'IW £%89
P>J~~~ffl~'/W£%89P>J~o·*·7}pg~[fflg,'/W£%89tf1J~~jf~~:fl3ft(fA(~
*ii 89t.!t. ~l'PftJ~89±~~-.®1tf~~i*W~~89~1*~:
• ~~::tE£ftJi!!PJT-i#~~~89i*Wr:f .-EltJSP>J~ 3. 2. 2 1l<:IJom~•89iE-~~1t~
VI
50 ;4. 8 5¥11 4. 9 "ll< mttx>tf$*-m:fin*B{]~.!il::ti~l!Jt~) ; ~ 6 • < :fl-m1f!.flil Pl§f;c5¥0
~ ~ tt ~ , »,. f:f{PJ 1(!. fliJ ft ~ ftJ ~ ffiJ l~.iCHJL f;c ~ 1:. :B 5¥11 ffiJ l~.iCHJL PEi f;cl .iUJ~ ; 10. 7 1l M.
f:f{PJ~flft~f1Jiit!0 o
• f;c~ :~ll:~~1:::ff ~:f!fB{]f;c~~liili .wt#tl~x>t~*~*~~B{]f;c~$:$1-, PiiiJttl
~7 :!t1:9=t£~~8{]~i~I*JWC~n9=tOO~J~~:fli!.JI!fiiMI!Ht~W) ;~8 -8{]~$(:kf;c
:$1-fm5¥U~fttM~-:ftd ; ~ 11 :!,'f:B{]$:$1-( Wi~ Goldwasser- Mical ,Rabin 5¥11 Paillier
:fin*Jr~B{]f;ci~'W:rt) o
it:iSI.~Wl~
*~8{]~~§8{]£~•~*~~m~U.M"m~~•m~~-~~#~U.*B{]r:k•#
FJr~~ o ~m•~~ilf~fn£~:12l~J 7 ~- § 8{] o ~fn~l:'ilt *:ftt&~J*r .11t ~ 8{] & 11!,
*r~M~*.llt~B{]••tt•~o~m~m~r:J:tm::ffM~wt~~~;m£~*~~-::ff
:jf~ilf~ff], ~ffJ~-t:$1-~~( -1'-B ~ B{]l}J~~~:(:E http :I /www. cs. umd. edu/- jkatz/
imc. html £liP) o PT~U.~mB{]•i)l.5¥UlJJ~2t~ jkatz@ cs. umd. edu W(; Iindell@ cs. biu. ac.
il; ±J!~il!ftl: a)j" Introduction to Modem Cryptography" 0
1!§1i.ft
Jonathan Katz:~~ Zvi Galil, Moti Yung 5¥11 Rafail Ostrovsky :ft~¥b&1:~:l:J:Wr:f:t8{]'fi
& , m ~ ~U..&x ~ o m::ff ftMn 8{] x>t~ -t-A2tM 8{] :9tit'\ , *-# /FPT ~~ w 1tt o fifl M ~i~Hit 8{] fifl
¥ff1 .~~~5¥nfikff1~?Xiti~*r~-**~~f]{:.fJB{]" IElifft"n~o ~B{]I~MOO* §
?&~~~~~ffi.~~WJ ,tj}! § %1'.7#0627306 ,#0447075 IU-. 0 -# qor~:J2l8{]fjf::ff
-~,~-lU..&~i~wt#.iSl.,~£~1'-AB{] ,:Jf/Ff-t~OO* § ?&~-t~~~~ffi.~B{]XW.,~~o
Yehuda Lindell:§5t~Wf0ded Goldreich 5¥11 Moni Naod~~1WA~J*~~1tt..W.o fikffJ
-~~~~~B.:Jf~-~-~-g·~~*o~::ffm~m~~~A~~*-~M~·
ntuJ11l:k .~11!/F--:m.&, .RAi.#.-JE"WtWt, fikffJ~:iH~i.Ji8{]£ifL
~Wf Zoe Bermant ~i\JIJ7*-#r:f:t8{]00Jt ;David Wagner @1~7*-T:$1-t!i*~.&~*~
~:$1-m:::IJWB{]riiJI!;Salil Vadhan 5¥11 Alon Rosen :tE*-Ml:k~B{]*~~l!J{~~Wqorti\Jij7W:
f]{:.fJ, :Jf:mm::ff 1ftfRB{] & i1Jt~Jli!. o ~fn-~ flil ~~•w: -#1it#.li:Jf~ tfi •iSLB{]A 1n, ~U..&x>t:Blf
fllllli*:mtfifl;j~-~B{]AffJ~?R~Wf:Adam Bender,Chiu- Yuen Koo, Yair Dombb, Mi
chael Fuhr, William Glenn, S. Dov Gordon, Carmit Hazay, Eyal Kushilevitz, Avivit Levy,
Matthew Mah, Ryan Murphy, Steve Myers, Martin Paraskevov, Eli Quiroz ,Jason Rogers, Rui
Xue, Dicky Yan,Arkady Yerukhimovich 5¥11 Hila Zarosimo ~ff18{].i)lf&:k·:m~7 ~B{]l!JJ:
:ll::Jf~Y7M~o ~l:'ilt~Wf~~.®ttMJJ~ffJ~f'Flf':~B{]AfrJ .fikff15¥n~ffJB{]~~-~.jj~tJt
£~~-*-#A:~rffflB{] o
-JR!§" ,:$1-JJIJ~Wf:(:E~f'F*-#B{]i.lfi.lf~~ B -THI~ff18{]~-T5¥0~-Tff18{]3(~5¥n:fli!.Mo
vn
Preface to Chinese Edition
The goal of this hook is to provide an accessible introduction to mod
ern cryptography, with a focus on definitions, assumptions, and proofs of
security. In writing this book, we hoped to reach as many people as possi
ble; I am therefore particularly thrilled that this hook will now find an au
dience in China.
It was perh~ps fortuitous that the translation of this book into Chinese
was completed during the same week that I was visiting China for the first time. While there , I
had a chance to learn about the tremendous variety of academic cryptography research taking
place in China, and to see the large number of students interested in this subject. It is my sin
cere wish that this hook will inspire the next generation of researchers , and help foster interna
tional cooperation and collaboration for the advancement of scientific knowledge.
College Park , MD , USA
July 2010
*-t5B9 f3 B9:JiJtH~xt~ft!M~~-Mt~~m~B91rm ,m,~:t£-r~scMi!ii~:'ti.:~tt
iiE f!ij o if~ 1t* -t5nt. !IG1n ;ffl-:m tm~w~ g Pifil31rz B9t~:ttwt ; ~ Jit:&if!!Gxt~ 45 rmw~
!:f:l OO~:tfffil~¥1J*f§JrJ:lt!!.i9t~ o
if1 ilf:l!-Mt J5 it,*~ B911mil!I -ft{f!IG§ 1Xtn !'OJ !:f:l 00 (J{JIP]-.m1 ~ fflt o :t£~ 1X !:f:lli'J Z
1-T!:f:l .!IG:flf!L~ Tffff¥1J!:f:li~LiE7f~liffitl:§::kB9~Mt~~B9*~~~;:-f:1Vf~, ffilll:W¥1J:fl
::ktl:B9~~xt~~±~~~~ o !IG•~:it!!.mm~~fm~~~~-~1Vf~~.*W~~*
oo~rme