Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is miTCCR still needed in light of GKWY19 findings? #179

Closed
themighty1 opened this issue Dec 13, 2022 · 3 comments
Closed

Is miTCCR still needed in light of GKWY19 findings? #179

themighty1 opened this issue Dec 13, 2022 · 3 comments

Comments

@themighty1
Copy link

Hi, GKWY19 (https://eprint.iacr.org/2019/ ) says that half-gates hash function can be instantiated with ccr instead of tccr.
Does that mean that when instantiating half-gates' H with ccr, tweak re-use becomes a non-issue and the miTCCR hash instantiation is no longer needed?

@themighty1
Copy link
Author

Hey, @wangxiao1254, I would be thankful if you could share your opinion on this matter.

@themighty1
Copy link
Author

Hi, @wangxiao1254 , could you pls shed some light on this? Thanks.

@wangxiao1254
Copy link
Member

Do note that miTCCR is proposed in a paper AFTER GKWY19 (thus GKWY19 cannot say anything about a future construction) and note that ccr, tccr and mitccr are all different. Using TCCR lead to a secure GC in the most straightforward manner; GKWY19 shows that CCR can be used and provably secure when used in the way we described in the paper; miTCCR provides better concrete security in this context.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants