Introduction to Modern Cryptography: Principles and Protocols 
[ ~]Jf-~~. -f")jt 
[  Y':A  ~ ~rj J Jl~ ~}] lk_  •  #.-tt ~ 
1:1-1-fi 
jf-
• ::lt:Jit  . 
Ill ~ .f£ Jlii!ii !§! ( CIP ) lSI" 'I'm 
JJilf-t~li!b~:@)!l!fl!i?JJ.i)U(~)--F~(Katz,J.), 
(l~H~.?tl)Jmi~JBZi • #tti~(Lindel,Y. )tf;{:f~i.f. 
-:ft.J?:: !EilJJI~l±\Jl&;f± ,2011. 1 
~~ Jlj(:)c: Introduction  to  Modern  Cryptogarphy: 
Prinples  and  Protocols 
ISBN  978-7-118-07065-1 
I  .CDJJil··· 
n.CD--F···  ®Im···  ®f:f···  m.CD~li!b
~i£  lV. CDTN918. 1 
·r:j=tJEJl&;zjs:OO~ttf CIP ~!liH~~(2010)~ 201087  ~ 
© 2008  by Taylor & Francis  Group ,  LLC 
Chapman  &  HalVCRC  is  an  imprint  of Taylor  &  Francis  Group,  an  Informa  business 
Authorized  translation from  English language edition published by  CRC  Press,  part of Tay-
lor &  Francis  Group  LLC. 
All  rights  Reserved 
* 
t&J  ri  ..  1  :.  Jf"-
:P- m ~it rr 
C::ltJli:rtJtfiil)E!K~'It~m~23%  dl~~!lii~ 100048) 
~ .p fP liltlrf!J.Iiltl 
fW$15J;!;~1!f 
** 787  X  1096 
* 
1/16  W* 22% 
2011  iF 1 Jl ~ 1 /lN.~ 1 ;j:f!J{fllj 
Sill!!!:  l-2500 11/t 
:lEffl" 48. 00 5G 
!¥11!1: 558  T~ 
!EilJJ~J;S: ( 010)68428422 
~tr~lt:(OI0)68411535 
~Hib~W;J: (010)68414474 
~H~;}: (010)68472764 
{33J1J~~~$-JJ.jUf~t)}i.5l.>-4H:Bf'F1lf Jonathan  katz ;f!l  Yehuda  Lindell  :Jik§f!J~ 
~ffi~~$®!:J!ll89~~$1!f,:JHJUI]iJlb\-T~~~~ Moti  Yung  ;f!l  Oded  Goldreicho  ~45 § 
2007 !if. 8 Ji §?Xili Jt!i~*, :lz:J!P~~ Elf~ ~Tm~::k$mJtl :1>J~~$i*Wli1fJ'Ej:_ ( .l!X:*f-4 
j:_) ftW , ;lt 9=t ·§J& Wd!l1ii ::k $,if if*Wf 'tiffi-::k $  , * ~ ::k $  , :hD *11M m SIE ::k $fa}'[ *1 51-;Bt 
•o~45~M~~m~m~~~~Elf~~::k$m.ffi:1>J•ft~~$ft~,;tt9=t~m~~~, 
-~ ,.::k*L~~ ,t1:*1M ,:fJD:$:::k,3f~·~o  ;tt~n(ti]j]iEft~~ti-::ko 
~4589~~MI~T~~$89~*n00,51n.xt~~tl3~~$;f!l0fJ3~U!?J$,~at7FIJ~T 
Jtfif!.ftfll. 45 9=t ~ ~ _m 89 .± »2, 11u 5~n 119 l!.lR m !l& :& j:_ ~, 119 l!.lR m Pl§ !l& < w. ~) , ~~ n w. ~, 
Paillier :fln~~.&ruRfJLJ:Uii§f;jjt~•o  J:t~m::k:l:89 33 »!;f!lt/ ~15?Ji~~J¥:-t1rm o 
~ 45 89i~:l£Jr.J:\:~!RA*f~ , :@:45~J=IH1t- 89i~:l£fll~ ( ~ .J:\: f-t 89 gc:@:JE: )( , ~ lifti 89-ffil 
i5LF~89gc:@::iJEI3Jl) *1rm~U!?J$~i.R, l!~tt iJ:1JJ$1lr 1>\ -7fMlf.lti~¥U ~~89il&$ 
i..HifJF-,~nltF~89fll.$~~;f!l-f-t@;U!?J$89Ji~Ht33·1:9t, mLEniJA*-$1l@;~$~i.R89w;1!r 
!Tffi§f , ~~~iit A:1f JS :&·11:, t~~ 1>\ 9=t $33 ¥1JJT 89 ~~51-tJT l'ilJ »! fllfWH~:filJ I! 89 Jr~ , l!:fi!Jr 
~:Jik-ft@;~$1VfJ'E9=t~~~ffl89Jr~o 
~4589~-~*f~:Jil::~~m~~A~~,~•kmmam•~~T~-r~••~tt 
89•1-t@;U!?J$89-*~-noo o 1A~~A~U!?J$i#~, 51 m•f-t~~$89£*JJJtiJ!U;f!l;;c~1** 
89Ji'U~o  ~}§51 ili~llJIZ_?j-•jf:E,~Jii.~"J 'llJ%t~~$·~'L'~~ ,*JJtl.f-t~U!?J$89~-Jr 
~, i~J£T f1gruf[f]L£j:_~( rnt~U!?J, i-8-)(gc:@::)  , f1gl!.lf[f]LB:_~( :51-~ll~U!?J, CPA gc:@:)  , :iHi:i17~ 
.\~1-:~~IJU!?J~m CCA gc:@:89:fJD~Jr~ ,J:t:il!:-$!*i;>fT £-T .!f!.!PJ Pl§il&~mf191!.if[f]L£j:_:Ho 
?'/.\J§:i1~¥110fJ3@;U!?J$89!l&~rilJ»!B3x1H'4:-ffili'it,J:t:il!:m1i~J£0~:flo~< ~nw.~) ;f!l0~ 
~~ ,l!.lf[fJLJ:U!l§f;jjt~o  ~atB:£:iHiffl~mJr~89JJJt~·l1:i#fm,f.lrw;1!rm~A.l*•1*~• 
f-t@;U!?J$89~~0 
~1!rft~~b\•magc~~J'E89~¥m,l*l*-f*~~~~*•ft~U!?J$~J'E;f!lft$ 
~ ~Jrlif 89 ~Jf. , 91 :il!:Jf:O~l!*ft~ 891t :i= ~;J ~~fiG~ ft ~ U!?J$ ;f!l f§ .m, gc :@:~N!.!ll89 m 
-i*f4~;f!lft$7J<.3JZ, Tfm~7~~U!?J$;f!lf§.m,gc~~J'E;f!lft$79J!Pl .~~~iit .&at;f!l!.IZ,~89 o 
~W~I:Ji(II!~Jt!::k$~50tftt't;f!lit1Jl::k$*~~ftt't893t~o· ~WJT:fJD:lJt~~::k$ 
Robert  H.  Deng(5<~1;1~)ftt't89:ffli!IJo  ~W Jonathan  Ka~ ftB'ttZ9=t1-J9=t)CJt!i~!'¥o  ~ 
*·~W-~Ifi::k$~M3Jl-ftt'to~W9=t~~~$~ftWit'F•m~o~iMji:Ji(.Jt! 
m 
::k~f~Lm,:tc~q:t,c,,J.V,.&JR.~~Ij)~o  ~iMOO~I~ti::\#JH±B
*~~~$~~~~~~*m~~~m.~~~§~~~~l.ROJIJ 
=f § $~1-!BfJf~~fr..(~-z~:tEr-TI!!tf:!t T x;J$1-t~~~~F:.mi~~, II'IJBt X~
f* ~~ 1&:~5¥: a<1JJ .:rt:iti:H1l-m o 
3lntru·fJf~.:f!Gff111t~~~$1t< 1980 ~5~) ~~~0 $~~~~--"5t~-~~~~JR 
jjiJ :tE =f : TI ~.!iHfnl ):£5( , lit liffl B91'SA1& §  ~it!!.IJI ill ~$~1', il1Wt~i~. ~lN.~ 
~~~~1r~~EJiJE~~~tt •• ~A*~~-~~~~J:E5(~~~-=fJ:E5(J:JA·~-~ 
~fl!iia:o  ~~JN.f-t•~~Bf~EI!i~:~&~ 
~1J~o 
~-a9n~olW~~$~-~~~m~~ttttR~£:J·~~m~li1FJi:~~.*o:tE~ 
1WM.J:E5(~m~ttB~M17ZiAII'IJ,#H1&:~~~li1FJi:::l!f(~ffl-~~IA~~~~ 
*t~E~MJi:A.ln )fJff*:lit, II'IJBt, F:.m~~~iJEJ:JA Bt~nlt~~~1r;tf/jftft~-#~>.Ko 
v 
:fi~T-.llt,:<$:~~~" lliiJ=IH¥Hi~$:" M." PJiiE!lA~1t" r:f7t~ lfi*; ffi&, :tE~lfi~ffl89.,) 
~~m89mfi$:~m~-89~~.~M·~-~~~1t~~M~~89~*<*87tMR 
~~m\~iiE!lAMW) o 
*~if:Jl.l~~-m 
:<$:1ll:?:tE:fWWJ~m*~f'F~~i*~M89~i*1lf .$:~mtJ!gJAr:f~m\xt::$:~P>J~89:fi 
m•~o 
( 1) ~!IH19~;HJ~iRo :<$:~~ffl¥IJ~~,iJE!lA~lk~$:-~. f511ffl~~Afk-~89~ 
$:~1J, ::$:~1I!li!i!:w;# A4k*$:~$:7J< 3Jl-, 5!1l$::i1~~~$:, ~'lit~$: ,:lfr!, !!X:it:lf~~ o 
· ~'lfj!!].llt,;<$:~~~~-ffij{t~~~J:\,{J!'f-w;filo  f5J.llt;$:~~~tjj~~Jf~F~89;fJ:J:k 
~M£~o:f!:l&.~H~1t§~~m~~~~.~£~~~-~~mfi$:~m~r!r:f89i!i!: 
if~~o 
:<$:~ 89~ll~~fl~~~~5t~i*W-&~:lfr!i*Wfll~'lit~$:1*~ o -& ftJ ~, !!X:#iJZ.:tEff:Mmfi$:·i~i*W r:f5.1i?.,~~t)( 
89~i*P>J~.§f~S~~ JL-t-~00( '1Wli.%89P>l~*-Elf~S .~:tEJSOOiti~): 
• m 1 •  -m 4 tr< ¥IJ  4. 61l). iti~g:2~mfi$:,m\1-tmfi$:~~xtf*m-mmfi$: 
89l!iilfl < xtf*m-m:IJomfllr~.~.~JJU) o 
•  m 5 tf .~U*lli:<$:897tmmfii!i!:itrntJJlU ,§1JS)~~ffl897}gllmfi DES  f!]  AESo CD 
• m 7 ti ,1(-ffi~0i:A~IE~89J't.f*~$:1BJ~.tiH!tT~T~- RSA,Diffie-Hellman 
~lk El  Carnal  mfi*~89~~'W:J:o WJ~( *~~-.®l*A89it~flliiE!lA) PJ:tE 30 $:Bf -35 $:Bt89:<$:#i*W r:f 
i#~ o :fi£$~i*$:Bf 89i#~# PI~ tVctt 1l *  , f71J 5!1li#~M:fi ilE llA 89 ~1l , ~ lk :tE1l-ffi :fl3 
'*M~l!iilflfll~~'W:J:Bf:li~C'tlimll o Wt~, ~:IJO~OO 89-.®W15'r ±~ o 
xt~~.®1tf~i#~W15'r89P>J~.:fi£*~1*$:at:e.X:~~m·l9cl1*iit~lilf~~i*W89~ 
i*~lfflg ,5!1l.~I'BJ.ft.ilf( !!X:~~i*~~~@) .~~m\::$:~89gll~.ft.ilf!R.f.S~§*~.f11! 
89±~.~JJU~-~WJ~.%< *) 89ttl1 o ~•7ttr1l~~~:m:~ • .R~~l:i:f'F~mfi$:•1-~ 
i*W89f*'L'P>l~o  iE5!1liXJtl~~tllfi89i*W*~H*-El*'IW£%89P>J~) ,'/W£%89tf1lPJ~ 
/i1J~M .:e.X:~:tE~Ifim\89fJrfli#~.$~~~nlfiJJ§0089i*W, ~JJU~:<$:~·1* T~'IW £%89 
P>J~~~ffl~'/W£%89P>J~o·*·7}pg~[fflg,'/W£%89tf1J~~jf~~:fl3ft(fA(~ 
*ii 89t.!t. ~l'PftJ~89±~~-.®1tf~~i*W~~89~1*~: 
•  ~~::tE£ftJi!!PJT-i#~~~89i*Wr:f .-EltJSP>J~ 3. 2. 2 1l<:IJom~•89iE-~~1t~ 
VI 
50 ;4. 8 5¥11  4. 9 "ll< mttx>tf$*-m:fin*B{]~.!il::ti~l!Jt~) ; ~ 6 •  < :fl-m1f!.flil Pl§f;c5¥0 
~ ~ tt ~ , »,. f:f{PJ 1(!. fliJ ft ~ ftJ ~ ffiJ l~.iCHJL f;c ~ 1:. :B 5¥11 ffiJ l~.iCHJL PEi f;cl .iUJ~ ; 10. 7 1l M. 
f:f{PJ~flft~f1Jiit!0 o 
•  f;c~ :~ll:~~1:::ff ~:f!fB{]f;c~~liili .wt#tl~x>t~*~*~~B{]f;c~$:$1-, PiiiJttl 
~7 :!t1:9=t£~~8{]~i~I*JWC~n9=tOO~J~~:fli!.JI!fiiMI!Ht~W) ;~8 -8{]~$(:kf;c 
:$1-fm5¥U~fttM~-:ftd ; ~ 11  :!,'f:B{]$:$1-( Wi~ Goldwasser- Mical ,Rabin  5¥11  Paillier 
:fin*Jr~B{]f;ci~'W:rt) o 
it:iSI.~Wl~ 
*~8{]~~§8{]£~•~*~~m~U.M"m~~•m~~-~~#~U.*B{]r:k•# 
FJr~~ o ~m•~~ilf~fn£~:12l~J 7  ~- §  8{] o  ~fn~l:'ilt *:ftt&~J*r .11t ~ 8{] & 11!, 
*r~M~*.llt~B{]••tt•~o~m~m~r:J:tm::ffM~wt~~~;m£~*~~-::ff 
:jf~ilf~ff], ~ffJ~-t:$1-~~( -1'-B ~ B{]l}J~~~:(:E http :I /www. cs. umd.  edu/- jkatz/ 
imc. html £liP) o  PT~U.~mB{]•i)l.5¥UlJJ~2t~ jkatz@ cs.  umd.  edu  W(;  Iindell@ cs.  biu.  ac. 
il; ±J!~il!ftl: a)j" Introduction  to  Modem  Cryptography" 0 
1!§1i.ft 
Jonathan  Katz:~~ Zvi  Galil,  Moti  Yung 5¥11  Rafail  Ostrovsky :ft~¥b&1:~:l:J:Wr:f:t8{]'fi 
& , m ~ ~U..&x ~ o  m::ff ftMn 8{] x>t~ -t-A2tM 8{] :9tit'\ , *-# /FPT ~~ w 1tt o  fifl M ~i~Hit 8{] fifl 
¥ff1 .~~~5¥nfikff1~?Xiti~*r~-**~~f]{:.fJB{]" IElifft"n~o  ~B{]I~MOO* § 
?&~~~~~ffi.~~WJ ,tj}! § %1'.7#0627306 ,#0447075  IU-. 0  -# qor~:J2l8{]fjf::ff 
-~,~-lU..&~i~wt#.iSl.,~£~1'-AB{] ,:Jf/Ff-t~OO* § ?&~-t~~~~ffi.~B{]XW.,~~o 
Yehuda  Lindell:§5t~Wf0ded Goldreich  5¥11  Moni  Naod~~1WA~J*~~1tt..W.o fikffJ 
-~~~~~B.:Jf~-~-~-g·~~*o~::ffm~m~~~A~~*-~M~· 
ntuJ11l:k .~11!/F--:m.&, .RAi.#.-JE"WtWt, fikffJ~:iH~i.Ji8{]£ifL 
~Wf Zoe  Bermant ~i\JIJ7*-#r:f:t8{]00Jt ;David  Wagner  @1~7*-T:$1-t!i*~.&~*~ 
~:$1-m:::IJWB{]riiJI!;Salil Vadhan  5¥11  Alon  Rosen  :tE*-Ml:k~B{]*~~l!J{~~Wqorti\Jij7W: 
f]{:.fJ, :Jf:mm::ff 1ftfRB{] & i1Jt~Jli!. o  ~fn-~ flil ~~•w: -#1it#.li:Jf~ tfi •iSLB{]A 1n, ~U..&x>t:Blf 
fllllli*:mtfifl;j~-~B{]AffJ~?R~Wf:Adam Bender,Chiu- Yuen  Koo, Yair  Dombb,  Mi
chael  Fuhr,  William  Glenn,  S.  Dov  Gordon,  Carmit  Hazay,  Eyal  Kushilevitz,  Avivit  Levy, 
Matthew  Mah,  Ryan  Murphy,  Steve  Myers,  Martin  Paraskevov,  Eli  Quiroz ,Jason  Rogers,  Rui 
Xue,  Dicky  Yan,Arkady  Yerukhimovich  5¥11  Hila  Zarosimo  ~ff18{].i)lf&:k·:m~7 ~B{]l!JJ: 
:ll::Jf~Y7M~o ~l:'ilt~Wf~~.®ttMJJ~ffJ~f'Flf':~B{]AfrJ .fikff15¥n~ffJB{]~~-~.jj~tJt 
£~~-*-#A:~rffflB{] o 
-JR!§" ,:$1-JJIJ~Wf:(:E~f'F*-#B{]i.lfi.lf~~ B -THI~ff18{]~-T5¥0~-Tff18{]3(~5¥n:fli!.Mo 
vn 
Preface to  Chinese Edition 
The  goal  of this  hook  is  to  provide  an  accessible  introduction  to  mod
ern  cryptography,  with  a  focus  on  definitions,  assumptions,  and  proofs  of 
security.  In writing this  book,  we  hoped  to reach  as many people as possi
ble;  I  am  therefore  particularly  thrilled  that  this  hook  will  now  find  an  au
dience  in  China. 
It  was  perh~ps fortuitous  that  the  translation  of this  book  into  Chinese 
was  completed  during  the same week  that  I  was  visiting  China for  the first  time.  While there ,  I 
had  a  chance  to  learn  about  the  tremendous  variety  of academic  cryptography  research  taking 
place  in  China,  and to  see  the  large  number of students interested in this  subject.  It is my  sin
cere  wish  that  this  hook  will  inspire  the  next  generation  of researchers ,  and  help  foster  interna
tional  cooperation  and  collaboration  for  the  advancement  of scientific  knowledge. 
College  Park ,  MD ,  USA 
July 2010 
*-t5B9 f3  B9:JiJtH~xt~ft!M~~-Mt~~m~B91rm ,m,~:t£-r~scMi!ii~:'ti.:~tt 
iiE f!ij o if~ 1t* -t5nt. !IG1n ;ffl-:m tm~w~ g Pifil31rz B9t~:ttwt ; ~ Jit:&if!!Gxt~ 45 rmw~ 
!:f:l OO~:tfffil~¥1J*f§JrJ:lt!!.i9t~ o 
if1 ilf:l!-Mt J5 it,*~ B911mil!I -ft{f!IG§ 1Xtn !'OJ !:f:l 00 (J{JIP]-.m1 ~ fflt o :t£~ 1X !:f:lli'J Z 
1-T!:f:l .!IG:flf!L~ Tffff¥1J!:f:li~LiE7f~liffitl:§::kB9~Mt~~B9*~~~;:-f:1Vf~, ffilll:W¥1J:fl 
::ktl:B9~~xt~~±~~~~ o !IG•~:it!!.mm~~fm~~~~-~1Vf~~.*W~~* 
oo~rme