RST model: Difference between revisions

From formulasearchengine
Jump to navigation Jump to search
← Older edit

en>Yobot

en>Bibcode Bot
m Adding 1 arxiv eprint(s), 1 bibcode(s) and 0 doi(s). Did it miss something? Report bugs, errors, and suggestions at User talk:Bibcode Bot
en>Yobot
m →References: WP:CHECKWIKI error fixes using AWB (10093)
 
(One intermediate revision by one other user not shown)
Line 1: Line 1:
In 1997, [[Moni Naor]] and [[Omer Reingold]] described efficient constructions for various [[cryptographic primitive]]s in private key as well as [[public-key cryptography]]. Their result is the construction of an efficient [[pseudorandom function family|pseudorandom function]]. Let ''p'' and ''l'' be [[prime number]]s with ''l'' |''p''-1. Select an element ''g'' ∈ <math> {\mathbb F_p}^*</math> of [[multiplicative order]] ''l''. Then for each n-dimensional [[coordinate vector|vector]] ''a'' = (''a''<sub>''1''</sub>, ..., ''a''<sub>''n''</sub>)∈ <math> (\mathbb F_{l})^{n} </math> they define the function
Keeping yourself wholesome means adding the correct nutrition in your body. Here are some tips that will help you incorporate far healthier meals into your daily diet. Don't think that you should make a whole modify right away. You'll discover numerous tips to get a lean body whilst experiencing and enjoying the what you eat.<br><br>Just about the most essential nutrients that your system needs is h2o. Get plenty of fluids each day. Preferably, use filtered plain tap water to concurrently avoid cluttering the surroundings with containers but additionally prevent consuming any chemical substances or pollutants that may be found in the local plain tap water offer.<br><br>In choosing meals, consider diet. Eco-friendly legumes appear to be healthy, by way of example, but broccoli is a knockout with regards to nutrients, so it will be safer to choose broccoli for dinner. Potatoes are delicious, of course, and very harmless, when they're not slathered in butter or cream, but if you wish to package a very nutritive impact, exchange them out for sugary carrots every now and then. They're jam-loaded with vit a and C and fiber content. It's mentioned that fairly sweet potatoes (NOT fairly sweet potato fries, sorry!) are extremely healthy, that you might live to them by itself.<br><br>To learn nourishment much better, find out about recommended food groups. This is the schedule of a healthy diet plan. Make sure you try to eat aliments coming from all these teams every day in sensible quantities. The main daily food groups are sugars, fresh vegetables, fresh fruits, dairy food, natural oils and meats. Discover ways to identify aliments according to their teams.<br><br>Increase the amount of complete and minimize up fresh fruit to your diet program. Fruit, not juice, products your whole body with all the fiber content it needs to work properly and to prevent diseases like many forms of cancer. The fibers can make it filling up also. Fruit is a superb supply of essential nutrients like ascorbic acid, potassium, and folic acid. Fresh fruits could also satisfy yearnings for sweet treats.<br><br>Testing new cuisines is A Review of Athletic Greens by Tammy Camp Kiteboard World Record Holder ([https://www.youtube.com/watch?v=bGh81MwnB5s youtube.com]) wonderful way to get healthful new meals. Japanese cuisine delivers a number of the ideal food readily available without having to sacrifice preference. Mediterranean meals delivers diverse options that every come with benefits to your health. Looking at various racial cuisines might help add spice to your meals, and also provide more positive aspects nutritionally.<br><br>MSG is put into numerous processed food to further improve flavor. But MSG adds no nutrients and vitamins and contains been located to get a lot of adverse reactions, which includes depressive disorders and severe headaches. Many people will be more sensitive than the others, however, you must stay away from MSG even when you are not hypersensitive. It could have long-term, cumulative outcomes.<br><br>Make a note of and collect healthful quality recipes. Prepare guides are costly and seldom have a lot useful information and facts. Help make your individual as an alternative. Invest in a pack of directory charge cards and use them to backup down any healthful recipes you are trying and appreciate. Swap all those higher calories, bad dishes you have been preserving using the new ones.<br><br>In order to ensure your child's healthy needs are achieved, regard the appetite they have or don't have. If your little one isn't hungry, forcing meals upon them will only make them learn to disregard their all-natural craving for food signals. Serve them little servings of good food items, and they will most likely consume ample independently in order to meet the requirements.<br><br>In case you are trying to encourage your kids to get far better nutrients, one of the more successful steps you can take is to set up a good illustration. Children simulate their parents. The broader the wide range of food items you consume, the more food products your youngster will probably be ready to consider using a preference of.<br><br>Even before you take a seat to buy, create a resolve for abstain from your fried treats and fatty sweets that happen to be pictured so temptingly on each and every site of the food selection. Chances are excellent that you can find on your own completely satified in the end of the dinner anyway. As an alternative to chance destroying the night experiencing overstuffed and puffed up, remind your self of the plans to stay a far more wholesome everyday perspective.<br><br>Among the finest ways to record what you are basically adding into the system can be a food diary. There are several software for smartphones which can help you using this. Should you aren't technician savvy you only need a notebook as well as a pen and you will start off producing what you happen to be ingesting.<br><br>Many people tend not to eat sufficient zinc every day. It is important for that functioning of several significant nutrients in our body, and also, being needed for wholesome guy reproductive health. It are available in this kind of food products as whole wheat, beans, peanuts along with other seed products. It is advisable to consume zinc in food items rather than making use of nutritional supplements.<br><br>The aforementioned recommendations are great guidelines to assist you to see where you can make development within your present diet program. Nourishment doesn't get too much work on your side, especially if you prepare what you should take in in advance. Don't let the phrase faze you, it's simply a expression!
 
:<math>f_{a}(x) = g^{a_{1}^{x_{1}} a_{2}^{x_{2}}...a_{n}^{x_{n}}} \in \mathbb F_p </math>
 
where x = x<sub>''1''</sub> ... x<sub>''n''</sub> is the [[Binary_numeral_system#Representation|bit representation]] of integer x, 0 ≤ x ≤ 2<sup>n-1</sup>, with some extra leading zeros if necessary.<ref name="NaorReingold"/>
 
==Example==
 
Let ''p'' = 7, ''p'' – 1 = 6, and ''l'' = 3, ''l'' |''p''-1. Select ''g'' = 4 ∈ <math> {\mathbb F_7}^*</math> of multiplicative order 3 (since 4<sup>3</sup> = 64 ≡ 1 mod 7).  For n = 3, a = (1, 2, 1) and x = 5 (the bit representation of 5 is 101), we can compute <math> f_{a}\;(5)</math> as follows:
 
:<math>f_{a}(x) = g^{a_{1}^{x_{1}} a_{2}^{x_{2}}...a_{n}^{x_{n}}}</math>
 
:<math>f_{a}(5) = 4^{1^{1} 2^{0} 1^{1}} = 4^{1} = 4 \in \mathbb F_7 </math>
 
==Efficiency==
The evaluation of function <math> f_{a}\;(x)</math> in the '''Naor-Reingold''' construction can be done very efficiently. Computing the value of the function <math> f_{a}\;(x)</math> at any given point is comparable with one [[modular exponentiation]] and  n-modular multiplications. This function can be computed in parallel by threshold circuits of bounded depth and polynomial size.
 
The '''Naor-Reingold''' function can be used as the basis of many [[cryptography|cryptographic]]  schemes including [[Symmetric-key algorithm|symmetric encryption]], [[authentication]] and [[digital signatures]].
 
==Security of the Function==
 
Assume that an attacker sees several outputs of the function, e.g. <math> f_{a}(1) = g^{a_{1}}, f_{a}(2) = g^{a_{2}}, f_{a}(3) = g^{a_{1}a_{2}}</math>, ... <math>f_{a}(k) = g^{a_{1}^{x_{1}} a_{2}^{x_{2}}...a_{n}^{x_{n}}}</math> and wants to compute <math> f_{a}\;(k + 1)</math>. Assume for simplicity that x<sub>1</sub> = 0, then the attacker needs to solve the [[Computational Diffie–Hellman assumption|Computational Diffie-Hellman (CDH)]] between <math> f_a (1)= g^{a_{1}} </math> and <math>f_{a}(k) = g^{a_{2}^{x_{2}} ...a_{n}^{x_{n}}}</math> to get <math>f_{a}(k+1) = g^{a_{1}a_{2}^{x_{2}} \dots a_{n}^{x_{n}}}</math>. In general, moving from ''k'' to ''k'' +1 changes the bit pattern and unless ''k'' + 1 is a power of 2 one can split the exponent in <math> f_{a}\;(k + 1)</math> so that the computation corresponds to computing the [[Diffie-Hellman problem|Diffie-Hellman]] key between two of the earlier results. This attacker wants to predict the next [[sequence]] element. Such an attack would be very bad—but it's also possible to fight it off by working in [[Group (mathematics)|groups]] with a hard [[Diffie-Hellman problem]] (DHP).
 
'''Example:'''
An attacker sees several outputs of the function e.g. <math>f_{a}(5) = 4^{1^{1} 2^{0} 1^{1}} = 4^{1} = 4 </math>, as in the previous example, and <math>f_{a}(1) = 4^{1^{0} 2^{0} 1^{1}} = 4^{1} = 4 </math>. Then, the attacker wants to predict the next sequence element of this function, <math> f_{a}\;(6)</math>. However, the attacker cannot predict the outcome of <math> f_{a}\;(6) </math> from knowing <math>  f_{a}\;(1)</math> and <math> f_{a}\;(5)</math>.  
 
There are other attacks that would be very bad for a [[Pseudorandom Number Generator]]: the user expects to get random numbers from the output, so of course the stream should not be predictable, but even more, it should be indistinguishable from a random string. Let <math> \mathcal{A}^f </math> denote the algorithm <math> \mathcal{A} </math>  with access to an oracle for evaluating the function <math> f_{a}\;(x)</math> . Suppose the [[Decisional Diffie-Hellman assumption]] holds for <math> \mathbb F_p </math>, '''Naor and Reingold''' show that for every [[PP (complexity)|probabilistic polynomial time]] algorithm <math> \mathcal{A} </math>  and sufficiently large ''n''
 
: <math> \text{Pr }[\mathcal{A}^{f_{a}(x)}(p,g) \to 1] - \text{Pr }[\mathcal{A}^{R} (p,g)\to 1] </math>  is [[Negligible function|negligible]].
 
The first probability is taken over the choice of the seed s = (p, g, a)  and the second probability is taken over the random distribution induced on p, g by <math> \mathcal{I}\mathcal{G} (n) </math>, instance generator, and the random choice of the function <math> R_{a}\;(x) </math> among the set of all <math> \{0,1\}^{n} \to \mathbb F_p </math> functions.<ref name="DDHBoneh"/>
 
==Linear Complexity==
 
One natural measure of how useful a sequence may be for [[cryptography|cryptographic]] purposes is the size of its '''linear complexity'''. The linear complexity of an ''n''-element sequence W(x), x = 0,1,2,…,n – 1, over a ring <math> \mathcal{R}</math> is the length ''l'' of the shortest linear [[recurrence relation]] W (x + ''l'') = A<sub>''l''-1</sub> W (x +''l''-1) + … + A<sub>0</sub> W(x),  x = 0,1,2,…, ''n'' – ''l'' –1 with A<sub>0</sub>, …, A<sub>''l''-1</sub> ∈ <math> \mathcal{R}</math>, which is satisfied by this sequence.
 
For some <math>\gamma</math> > 0,n ≥ (1+ <math>\gamma</math>) <math>\log l</math>, for any <math>\delta > 0 </math>, sufficiently large ''l'', the linear complexity of the sequence <math> f_{a}\;(x)</math>,0 ≤ x ≤ 2<sup>n-1</sup>, denoted by <math>L_a</math> satisfies
 
:<math>L_{a} \geqslant \begin{cases}
l^{1-\ \delta\,\!} &\text{, if } \gamma\,\! \geqslant 2\\
l^{\left (\tfrac{\ \gamma\,\!}{2-\ \delta\,\!}\right )} &\text{, if }  \gamma\,\! < 2
\end{cases}</math>
 
for all except possibly at most <math>3(l - 1)^{n - \delta}</math> vectors a ∈ <math> (\mathbb F_{l})^{n} </math>.<ref name="ShparlinskiLinearComplexity"/>  The bound of this work has disadvantages, namely it does not apply to the very interesting case <math>\log p \approx \log n \approx {n.} </math>
 
==Uniformity of Distribution==
 
The statistical distribution of <math> f_{a}\;(x)</math>  is exponentially close to [[Uniform distribution (discrete)|uniform distribution]] for almost all vectors a ∈ <math> (\mathbb F_{l})^{n} </math>.
 
Let <math>{\mathbf D}_a</math> be the [[Inversive congruential generator|discrepancy]] of the set <math>\{f_a (x)| 0 \leq x \leq 2^{n-1}\}</math>. Thus, if <math>n = \log  p </math> is the bit length of ''p'' then for all vectors a ∈ <math> (\mathbb F_{l})^{n} </math> the bound <math>{\mathbf D}_a\leq \Delta (l,p)</math> holds, where
 
<math>\Delta (l,p) = \begin{cases}
p^{\left (\tfrac{1-\ \gamma\,\!}{2}\right )}l^{\left (\tfrac{-1}{2}\right )}\log^{2}p &\text{, if } l \geqslant p^{\gamma\,\!}\\
p^{\left (\tfrac{1}{2}\right )}l^{-1}\log^{2}p &\text{, if } p^{\gamma\,\!} > l \geqslant p^{\left (\tfrac{2}{3}\right )}  \\
p^{\left (\tfrac{1}{4}\right )}l^{\left (\tfrac{-5}{8}\right )}\log^{2}p &\text{, if } p^{\left (\tfrac{2}{3}\right )} > l \geqslant p^{\left (\tfrac{1}{2}\right )}  \\
p^{\left (\tfrac{1}{8}\right )}l^{\left (\tfrac{-3}{8}\right )}\log^{2}p &\text{, if } p^{\left (\tfrac{1}{2}\right )} > l \geqslant p^{\left (\tfrac{1}{3}\right )}  \\
\end{cases}</math>
 
and <math>\gamma</math> = 2.5 - <math>\log 3 </math>= 0.9150....
 
Although this property does not seem to have any immediate cryptographic implications, the inverse fact, namely non uniform distribution, if true would have disastrous consequences for applications of this function.<ref name="ShparlinskiUniformity"/>
 
==Sequences in Elliptic Curve==
 
The [[elliptic curve]] version of this function is of interest as well. In particular, it may help to improve the cryptographic security of the corresponding system. Let ''p'' > 3 be prime and let E be an elliptic curve  over <math> \mathbb F_p </math>, then each vector '''a''' defines a [[Sequence#Finite_and_infinite|finite sequence]] in the [[subgroup]] <math>\langle G\rangle</math> as:
:<math>F_{a}(x) = (a_{1}^{x_{1}} a_{2}^{x_{2}}\dots a_{n}^{x_{n}})G </math>
 
where <math>x = x_1 \dots  x_n</math>  is the bit representation of integer <math>x, 0 \leq x \leq 2^{n-1}</math>.
The '''Naor-Reingold''' elliptic curve sequence is defined as  
: <math> u_{k} = X (f_{a}(k))\; \mbox{where } X (P) \mbox{ is the abscissa of}\; P \in E. </math><ref name="EllipticNaor"/>
If the Decisional Diffie-Hellman assumption holds, the index ''k'' is not enough to compute <math>u_k</math> in polynomial time, even if an attacker performs polynomially many queries to a random oracle.
 
==See also==
*[[Decisional Diffie-Hellman assumption]]
*[[Finite Field]]
*[[Inversive congruential generator]]
*[[Generalized inversive congruential pseudorandom numbers]]
 
==Notes==
{{Reflist|refs=
<ref name="NaorReingold">Naor, M., Reingold, O. "Number-theoretic constructions of efficient pseudo-random functions," Proc 38th IEEE Symp. on Foundations of Comp. Sci, (1997), 458-467.</ref>
<ref name="ShparlinskiLinearComplexity">Shparlinski, Igor E. "Linear Complexity of the Naor-Reingold pseudo-random function," Inform. Process Lett, 76 (2000), 95-99.</ref>
<ref name="ShparlinskiUniformity">Shparlinski, Igor E. "On the uniformity of distribution of the Naor-Reingold pseudo-random function," Finite Fields and Their Applications, 7 (2001), 318-326</ref>
<ref name="EllipticNaor">Cruz, M., Gomez, D., Sadornil, D. "On the linear complexity of the Naor-Reingold sequence with elliptic curves," Finite Fields and Their Applications, 16 (2010), 329-333</ref>
<ref name="DDHBoneh">Boneh, Dan. "The Decision Diffie–Hellman Problem,"ANTS-III: Proceedings of the Third International Symposium on Algorithmic Number Theory,1998,48–63.</ref> 
  }}
 
==References==
*{{citation
| last=Shparlinski
| first=Igor
| title=Cryptographic Applications of Analytic Number Theory: Complexity Lower Bounds and Pseudorandomness
| year=2003
| edition=first
| publisher=Birkhäuser Basel
| isbn=978-3-7643-6654-4
}}
*{{citation
| last=Goldreich
| first=Oded
| title=Modern Cryptography, Probabilistic Proofs and Pseudorandomness
| year=1998
| edition=first
| publisher=Springer
| isbn=978-3-540-64766-9
}}
 
[[Category:Pseudorandom number generators]]
[[Category:Cryptography]]

Latest revision as of 14:19, 5 May 2014

Keeping yourself wholesome means adding the correct nutrition in your body. Here are some tips that will help you incorporate far healthier meals into your daily diet. Don't think that you should make a whole modify right away. You'll discover numerous tips to get a lean body whilst experiencing and enjoying the what you eat.

Just about the most essential nutrients that your system needs is h2o. Get plenty of fluids each day. Preferably, use filtered plain tap water to concurrently avoid cluttering the surroundings with containers but additionally prevent consuming any chemical substances or pollutants that may be found in the local plain tap water offer.

In choosing meals, consider diet. Eco-friendly legumes appear to be healthy, by way of example, but broccoli is a knockout with regards to nutrients, so it will be safer to choose broccoli for dinner. Potatoes are delicious, of course, and very harmless, when they're not slathered in butter or cream, but if you wish to package a very nutritive impact, exchange them out for sugary carrots every now and then. They're jam-loaded with vit a and C and fiber content. It's mentioned that fairly sweet potatoes (NOT fairly sweet potato fries, sorry!) are extremely healthy, that you might live to them by itself.

To learn nourishment much better, find out about recommended food groups. This is the schedule of a healthy diet plan. Make sure you try to eat aliments coming from all these teams every day in sensible quantities. The main daily food groups are sugars, fresh vegetables, fresh fruits, dairy food, natural oils and meats. Discover ways to identify aliments according to their teams.

Increase the amount of complete and minimize up fresh fruit to your diet program. Fruit, not juice, products your whole body with all the fiber content it needs to work properly and to prevent diseases like many forms of cancer. The fibers can make it filling up also. Fruit is a superb supply of essential nutrients like ascorbic acid, potassium, and folic acid. Fresh fruits could also satisfy yearnings for sweet treats.

Testing new cuisines is A Review of Athletic Greens by Tammy Camp Kiteboard World Record Holder (youtube.com) wonderful way to get healthful new meals. Japanese cuisine delivers a number of the ideal food readily available without having to sacrifice preference. Mediterranean meals delivers diverse options that every come with benefits to your health. Looking at various racial cuisines might help add spice to your meals, and also provide more positive aspects nutritionally.

MSG is put into numerous processed food to further improve flavor. But MSG adds no nutrients and vitamins and contains been located to get a lot of adverse reactions, which includes depressive disorders and severe headaches. Many people will be more sensitive than the others, however, you must stay away from MSG even when you are not hypersensitive. It could have long-term, cumulative outcomes.

Make a note of and collect healthful quality recipes. Prepare guides are costly and seldom have a lot useful information and facts. Help make your individual as an alternative. Invest in a pack of directory charge cards and use them to backup down any healthful recipes you are trying and appreciate. Swap all those higher calories, bad dishes you have been preserving using the new ones.

In order to ensure your child's healthy needs are achieved, regard the appetite they have or don't have. If your little one isn't hungry, forcing meals upon them will only make them learn to disregard their all-natural craving for food signals. Serve them little servings of good food items, and they will most likely consume ample independently in order to meet the requirements.

In case you are trying to encourage your kids to get far better nutrients, one of the more successful steps you can take is to set up a good illustration. Children simulate their parents. The broader the wide range of food items you consume, the more food products your youngster will probably be ready to consider using a preference of.

Even before you take a seat to buy, create a resolve for abstain from your fried treats and fatty sweets that happen to be pictured so temptingly on each and every site of the food selection. Chances are excellent that you can find on your own completely satified in the end of the dinner anyway. As an alternative to chance destroying the night experiencing overstuffed and puffed up, remind your self of the plans to stay a far more wholesome everyday perspective.

Among the finest ways to record what you are basically adding into the system can be a food diary. There are several software for smartphones which can help you using this. Should you aren't technician savvy you only need a notebook as well as a pen and you will start off producing what you happen to be ingesting.

Many people tend not to eat sufficient zinc every day. It is important for that functioning of several significant nutrients in our body, and also, being needed for wholesome guy reproductive health. It are available in this kind of food products as whole wheat, beans, peanuts along with other seed products. It is advisable to consume zinc in food items rather than making use of nutritional supplements.

The aforementioned recommendations are great guidelines to assist you to see where you can make development within your present diet program. Nourishment doesn't get too much work on your side, especially if you prepare what you should take in in advance. Don't let the phrase faze you, it's simply a expression!

Retrieved from "https://en.formulasearchengine.com/w/index.php?title=RST_model&oldid=267873"