Score:3

Indifferentiability of Sponge Construction

br flag

In the case of sponge construction, it is shown to be differentiable from a RO. In the paper by Bertoni et al., what is meant by the node being saturated. How does it become saturated and the condition which leads to error in the simulator was not clear.

Paper link: http://citeseerx.ist.psu.edu/viewdoc/download;jsessionid=09F733C00E75E6BB3E3537ACFAE4396E?doi=10.1.1.544.7974&rep=rep1&type=pdf

Score:2
tr flag

Saturation is defined in section 4.1 as the condition $R \cup O = C$, where $O$ is the set of supernodes with outgoing edges and $R$ is the set of rooted supernodes and $C$ is the equivalence class of all the nodes with equal "C" part.

The idea is that any query to the compression oracle will reveal a single path in the graph only when the starting node is rooted. If the starting node is not rooted, a random path is chosen but not revealed to the adversary.

To accomplish that, we avoid rooted supernodes with outgoing edges; otherwise, this reveals more paths to the adversary. Therefore, the simulator cannot use this trick once the graph is saturated, i.e. $O = C$, and the replies will not be consistent anymore.

The theorem is that saturation only happens after $2^c$ queries, where $c$ is the capacity.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.