jok^fik - cryptology eprint archive · !#"%$& ')( *+'-,. /0') !213 4 6587...

52

Upload: others

Post on 15-Aug-2020

1 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

������������ ������������������������ ��!#"%$&��')(���*+'-,.�/�0')��!213�4 6587��)(9�*�:;��<���,=*�:>?,A@B�C"EDF���=�.GH�*9I

J�KMLONQPER�S�PUT�VWP�X Y[Z\K^]MK^_�`bacLedgfih\jOK^fik l-aWRnmcaWR�YacNofO]qpl-fi_)NQfirtsufiRwv)xuyczEzEz

{w|)}n~�������~���%���+���n�����O�����%��%�O���������A�e�����U���%���i�����������n���O���[�. ��A�%�������u���������U�.�O¡¢��£¤�O���O���W�O���n�[����O���¥�. ��A�%�������

�%�������U�.�O¡¢�¦���U���%���i�����������n���c�§�¢�����.���e�U���O���A�����%�¢�n��¡¢¡��w���n�������[�����U�A¨=©��O��� ª+�%�«��������¡�¡¢���¬���e�w�¢�U­®����ª#��������O�¯����°c�±¡¢�n�����n�9���c���[���O��¡��²��¡�¡¢���´³��n����µc�n�����¢���²��­������#�%�O���������A�¶£¤�����n���²�§�%�����Q�·�O����¨=©����¢�%�.�#������§�A���A���n�¥�/������°U�A���¢�%���������[�¢�U­®����ª#�������O�²ª#�o�·°W�#��°�¡¢�±���������¯���¹¸«º/»q¼¾½À¿EÁwÂ�½¤Ã.Ä^½¤¸�¿EÅ�Æ=ǯÅ�ÄMÄqÅ�ÃAÈ+�������.�������ª±�����������g�.�������n�=���%���������O����ÉËÊ0­¥�.���%������©C���#ª±�o�Ì°W���. e������ª±��¡¢�¶�U��Í��.��¡��#���¯�����U�g��¡¢¡��c�����§�����A��¢�U­®�O��ª#�������O��©¦�Q�§�W�n���¢��¡�¡¢�Î��­[���%�²�������O�A�����wª±�o�Ï�W�O���9���w�����²��­¥���%�²�%���§�����Q���¢�����%�9���n�Î�� ��A�%�����O��ÉÐ0��³O���������n¡��Q���n©����·�%���Q�§�n�O�w�¶�����Ñ���������e����¡¦�n��¡¢¡��Q��Ò�Ó0ÔÕ�/���¢�A�����#�����·µc���§�wÖ0��Í#�.�qצ�n¡�¡¢ª#���U��°%�����n��c�����§�����A�e�q���U�������i�����������Q�+�O�����. ��A�%�������/���������U�.��¡%���+������³e���U�¦�[­®�O��ª#��¡%�����e��­���­����n���������«��£®�¢�����%�0�A���U�����ªØ�O���O�.¡¢��ª��U�U�n¡�¨\���O�����%�§�C°c�����#�%�O�����¢³��/���%�±�O�=���¢³��/�O�U³��n�����������Q��É�Ùq�±�O���U�����¢�������¥�����¦Ò�Ó0ÔÚ���������e����¡���%����������³e�¢�U�Q�4ª+�U���%��¡\Á�Û.ÜW¼¾½¤Ã�½ÀÄ����U���%���i�����������¢����©e�����¡����;�§�%���Ï�;ª±�����0�.Í������n�O�����������U����¡c�n��¡¢¡��Q��ÒuÒ�Ô���%�����¢�C�%����³���°%¡�� ���n���������¢�±�����[½ÀÝ0ÜW¼Þ½¤Ã.½ÀÄq�q���������n�O���¢�n�������O�#ª��U�U�n¡MÉ\�¯�������n�#�. e���n�%�±Ò�Ó0Ô¹��� �¥���������e����¡�n��¡¢¡��Q�²Ò�ÓÔ��^ß+©E���¯�/�����A�9���%�±�����U��£®��������¡��¢���i�=¨�§���O���Q��à��¡����¢�i���. e�[³��n�����¢���·��­u���%���c�����§�����A��©E�/���¢¡�������¥�����������§���U�±£À������������³��n�A¨C����¡¢���«�������n��� ³O�����Þµ%�n�u­®�O�u�������%�����§�����A��É-�²��­®����ª#��¡¢¡��±������³���§�Q�.�����Þ�«�±��­Ò�ÓÔ��^ß+©���³O���¯�/�����²������������³��n����[�.�Oª±�����Oª±�¢���n��É#Ê���¥­®����ª#��¡\ª±�U�U��¡C­®�O�¥�%�����§�����A�e�q���U�������i���¢�n�����Q��O������ ��A�%�����O����/���n�[©%���c�wª#�o��°W�[��­)���%�����W���%�U�n�i�0���i�������n�§�nÉ

áËâcãCä�å�æiç�èUé ê�ëUì.ì.íîUï�ðËëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õCø�ùUô�útôoû�÷�ó�ëUõ�üUôUø-ý±ö�þ9ôoÿ��+ô������·ëUõ��

� � ������������������

� í�îÌô�õ%ò.ö®ò.öÀô�ì�ø4í;ó�î¯î�õ��ÀúÎì.ó�ëeï.ô·ë���ëUì.ì=í�îUï�ðCø�ëUõ�ðÏí;ó�î¶ëeï.ô·÷oî �!�àñ�õ�ö®÷�ëeò.ö®õ�ütî#"Uô�ï�ëUõ¹ö®õ�ì.ô�÷�ñ�ï.ôgõ�ô�ò§í�îUï.ù)øí¥ëUõ%òàò=îÎëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô²ô�ëU÷�óÚîUò.ó�ô�ïàëUõ�ðÚëeüUï.ô�ô9î�õÚë$�®ëeï.üUô¯ì=ô�ì.ì.ö®î�õ�ùUô�úÏò=î&%\ô9ñ�ì=ô�ð('MîUï)��ï.îUò=ô�÷oò.ö®õ�üËò.ó�ô�öÀïì.ñ*%-ì=ô�+cñ�ô�õ%òg÷oî ����ñ�õ�ö®÷�ëeò.ö®î�õ�� � ó�ö¤ì�ö¤ì�÷�ë,�-�Àô�ð¬ò.ó�ô/.103242457698;:9<;09=*>@?1ACB�>EDGFH0 >�A�:JI ACKLAHMNFC?109BPOPAQ��ï.î,%��®ô��R�TSU'î�õ�ô·î,'¥ò.ó�ô²ô�õ%ò.ö®ò.öÀô�ì�ö®ì�ëÎñ�ì=ô�ïwëUõ�ð�ò.ó�ô·îUò.ó�ô�ï�ö®ì�ëËì=ô�ï�"Uô�ï�ø�ò.ó�ô�õ¹ò.ó�ö®ì#÷�ëUõV%\ô·ì=ô�ô�õÚëUìwë&��ï.î,%��Àô���ö¤õ�ò.ó�ôëeï.ô�ë�î,'W8;AYX�6,>�A)=Z2YAC8�0 F4F4AC2H24�W[ÎëUõcútì=î �®ñ�ò.öÀî�õ�ì\'^îUï[ï.ô��gîUò=ô�ñ�ì=ô�ï ëU÷�÷oô�ì.ì[ï.ô��®ú9î�õÌ÷oï.úZ��ò=îUüUï�ë9��ó�ö®÷�ë,���Àú9ì.ô�÷�ñ�ï.ôùUô�úEì�ø�ëUõ�ðt÷oî�õ�ì=ô�+Wñ�ô�õcò��Àú²ó�ë#"Uô#ò=îgð�ô�ë,�)í;öÀò.ótö®ì.ì.ñ�ô�ì\�®ö®ùUô+ùUô�ú��·ëUõ�ëeüUô��gô�õcò�ø*��ñ*%]�®ö®÷Qÿ«ùUô�ú9ö®õ�'Mï�ëUì.ò=ï�ñ�÷oò.ñ�ï.ôUøcîUïì=ô�÷�ñ�ï�ôàó�ëeï�ð�í�ëeï.ô,�^[8ëUõcúËì=î �®ñ�ò.ö®î�õ�ì[ò.ó�ëeò�ëeï.ô)�-ëUì.ì=í�îUï�ðEÿ_%�ëUì=ô�ð4ø]�®öÀùUôwò=ô��®õ�ô�ò;îUï `#ô�ï�%\ô�ï.î�ì�ø-ó�ë#"Uô)��ï�î,%��Àô��·ìò.ó�ëeò[ï�ëUõ�üUôa'^ï.î �b%\ô�ö®õ�ü�ò=îUò.ë,���Àú¯ö®õ�ì=ô�÷�ñ�ï�ôdc^ò=ô��®õ�ô�ò ì.ô�õ�ð�ìW��ëUì.ì=í�îUï�ð�ì¥ö®õ¯ò.ó�ô#÷Y�Àô�ëeïCe¦ò=îQ%\ô�ö®õ�üàì.ñ�ì�÷oôY��ò.öf%��Àô+ò=î÷oô�ï.ò.ëUö®õ¶ò§úZ�)ô�ì;î,'�ëeò=ò.ëU÷�ùWìQcE`#ô�ïH%)ô�ï�î�ì ö®ìg"Eñ��®õ�ô�ï�ë9%]�Àô+ò=î9î9h-ÿ��®ö¤õ�ô�ð�ö®÷oò.öÀî�õ�ëeï.ú²ëeò=ò.ëU÷�ùWì�i j k,l@e4�

m;npo qHrts_uwvtx4y;vazCy{s_|Gu~}4o }4�1�_�tu~|p�3q4�,y{s�qH�3�,y;q�s_y;vau~o ���ts_}Y�{sG�#�#���H���4��{�a�@��U� y��~�1�ZqHr,}4s�q��_}4s_u~y�|�� �N�3��y�oY� � y{�U�to3}��~}4x�u~y�|��C�t�����3�Y�4�Y�H�#�4�4 Y¡�¢E��£��¤�� y��~�1�ZqHr,}4s�q��_}4s_u~y�|�� �N�3��y�oY� � y{�U�to3}��~}4x�u~y�|�¥��4¦C§��H¦Y�Y�H�t�H�4 Y¡�¢G�4£��

¨

Page 2: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

© "Uô�ïËò.ó�ôª��ëUì=ò¶ð�ô�÷�ëUð�ôUø«�·ëUõcú¬�-ëUì.ì=í�îUï�ðEÿ§ëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ð�ùUô�ú ôoû�÷�ó�ëUõ�üUôV��ï.îUò=îE÷oî �®ìÌò.ó�ëeòR��ï�î �·ö®ì=ô�ðö®õ�÷oï�ô�ëUì=ô�ð�ì=ô�÷�ñ�ï�ö®ò§úÎó�ë�"UôQ%\ô�ô�õ�ð�ôY"Uô��Àî,�\ô�ðCøCô,� ü*�Àøgi®­Wøp¯Wøp°,°Eø�° ¨ øp± ²cøp°,³Eø�°,´Eøp°,¯Eø�±,¯Eøp±3j9l_�¶µ¬·Wî �gô�î,'0ò.ó�ô�ì=ôó�ë#"Uô¸%\ô�ô�õ�%�ï�îUùUô�õ¹i®± ¨ øP±,°9l«øWëUõ�ð4ø%ö®õQ'�ëU÷oò�øcî�õ��Àúàò�íîd"Uô�ï.ú�ï.ô�÷oô�õcòî�õ�ô�ì0ó�ë#"Uô¸%\ô�ô�õ�'^îUïH�·ë,���®úº��ï.ît"Uô�õ²ì.ô�÷�ñ�ï.ô,�� ó�ô�·1»a¼+ê7S¸��ï�îUò=îW÷oî ��ö®õ½i®±9k9l¦ö®ìa��ï.ît"Uô�õ�ì=ô�÷�ñ�ï.ôgö®õÎò.ó�ô�ï�ëUõ�ð�î � îUïnëU÷Y�Àô��gîEð�ô��qø~¾�ëUì.ì.ñ��·ö¤õ�ü9ò.ó�ôgì=ô�÷�ñ�ï�öÀò§úî,'\¿ ·1¼Àc�ëUõ�ð�ë,�®ì=î¶ý�ô�÷�ö®ì.öÀî�õÏý±ö�þ9ôoÿ��+ô������9ëUõCø~Á�í;ó�ô�õÂ�\ô�ï�'Mô�÷oò«'^îUï.í¥ëeï�ðÏì=ô�÷oï.ô�÷oú�ö®ì±ð�ô�ì.ö®ï.ô�ð]e4� � ó�ô�ì�ö��Q���ÀôëUõ�ðÌô��®ô�ü�ëUõ%ò���ï.îUò=îE÷oî �uö®õVi®±tl�ö®ìÃ��ï.ît"Uô�õËëUì+ì=ô�÷�ñ�ï.ôwëUì+ý�ô�÷�ö®ì.öÀî�õÎý�öÀþ9ôoÿ��;ô��-���·ëUõÌö®õ¶ë!�gîWð�ô��Cò.ó�ëeò;ö®õ�÷Y�®ñ�ð�ô�ìï�ëUõ�ð�î ��îUï�ëU÷Y�Àô�ìàëUõ�ð¹ö®ð�ô�ë,��%]�ÀîW÷�ù8÷�ö���ó�ô�ï�ìY�&c © ñ�ï�í�îUï.ùÎí¥ëUì��\ô�ï�'^îUïH�gô�ð�ö¤õ�ð�ôY�\ô�õ�ð�ô�õcò��Àú¶î,'�i®±tl_�!SAõT'�ëU÷oò�øò.ó�ôw÷oî�õ�'Mô�ï.ô�õ�÷oô�"Uô�ï�ì.öÀî�õ¶î,'�î�ñ�ï;ï.ô�ì.ñ��Àò.ì�i ¨ ±9l�ë9���\ô�ëeï�ì[ö®õÌò.ó�ô�ì.ë,�gô���ï�îW÷oô�ô�ð�ö¤õ�ü�ì[ëUì)i®±tl_�Äe

Å�ô\��ï.ô�ì=ô�õcò4ë õ�ô�íT��ëUì�ì=íîUïnðEÿ§ëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ð�ùUô�ú±ôoû�÷�ó�ëUõ�üUô7��ï.îUò=îE÷oî ��÷�ë,���®ô�ð�Æ\ǯáÈc�ê�ëUì�ì=íîUïnðEÿ�¼+ñ�ò.ó�ô�õ%ò.ö¤÷�ëeò=ô�ð`#ô�ú�ôoû�÷�ó�ëUõ�üUôtenø/í;ó�ö®÷nó¹í�ô!��ï.ît"Uô9ò=îÂ%\ô9ëUìàì.ô�÷�ñ�ï.ô9ëUì�ý�ô�÷�ö®ì.öÀî�õbý±ö�þ9ôoÿ��+ô������·ëUõ¹ö¤õ¹ò.ó�ô²ï�ëUõ�ð�î ��îUïnëU÷Y�Àô�gîEð�ô��G�\É�î ����ëeï.ô�ðtò=î·ò.ó�ô«��ï.îUò=îW÷oî �uî,'gi®±9k,l«ø�êʼ�`Ëc ¨ e[ð�îcô�ì;õ�îUò ï.ô�+Wñ�öÀï.ô±ò.ó�ô�¿ ·1¼ ëUì.ì.ñ��Q��ò.öÀî�õ�'MîUï+ì=ô�÷�ñEÿï�öÀò�úUø7cG° e±ö®ì �gîUï.ô�ôoþ²÷�ö®ô�õ%ò�ö®õ8ò=ô�ïH�9ì±î,'0ò.ó�ô·õWñ��)%)ô�ï�î,'�ï.î�ñ�õ�ð�ì�ø\ëUõ�ðJcG± e�ö¤ì#÷oî�õ�÷oôY��ò.ñ�ë,���®úËì.ö��Q�]�Àô�ï�ø)í;öÀò.óë¹ì.ö-�Q���Àô�ïQ��ï�îcî,'{�ÌÉ�î �Q�-ëeï.ô�ð ò=î�ò.ó�ô$��ï.îUò=îE÷oî � î,'�i®±tl«ø[êʼ�` ð�îcô�ì²õ�îUò·ï.ô�+Wñ�öÀï�ô¶ëUõ´ö®ð�ô�ë,�Ã%]�ÀîW÷�ùb÷�ö���ó�ô�ïëUì.ì.ñ��Q��ò.öÀî�õÂ'^îUï�ì=ô�÷�ñ�ï�öÀò�úUø�%�ñ�ò#ó�ëUì#ë��gîUï.ô·÷oî �����®ö®÷�ëeò=ô�ðÂ��ï.îWî,'{�Íc@Å�ô9õ�îUò=ô�ò.ó�ëeò#ò.ó�ô·ö®ð�ô�ë,��%��ÀîE÷.ùË÷�ö���ó�ô�ïëUì.ì.ñ��Q��ò.öÀî�õ´ö¤ì·ñ�ì=ô�ðÎ�àñ�÷nó¬�Àô�ì�ì·î,'^ò=ô�õØö®õ ò.ó�ô¹�®öÀò=ô�ïnëeò.ñ�ï.ôÌò.ó�ëUõØò.ó�ôËï�ëUõ�ð�î � îUï�ëU÷Y�®ôËëUì.ì.ñ�����ò.öÀî�õ��ÄeÏÅ�ôë,�®ì=îtì.ó�îOí ó�î�íÑò.ó�ô�ì=ô�÷�ñ�ïnöÀò§úÎî,'0êʼ�`�÷�ëUõÂ%\ôàï�ô��®ëeò=ô�ð8ò=î¯ò.ó�ô�É¥î �Q��ñ�ò.ëeò.öÀî�õ�ë,��ý±ö�þ9ôoÿ��+ô������9ëUõ&��ï�î,%��Àô��Ìøë,�Àò.ó�î�ñ�ü�óÌí;öÀò.ótí�ô�ëeùUô�ï�ì.ô�÷�ñ�ï�öÀò�ú/%\î�ñ�õ�ð�ìY�

SAõ�ëUð�ð�öÀò.öÀî�õ�ò=î8ê�¼a`gø�íô¯ë,�®ì=îËì.ó�î�íÕë¹�gîUï.ô²ôoþ²÷�öÀô�õcòº��ï.îUò=îE÷oî �0÷�ë,�-�Àô�ð�êê7`Ðc�ê�ëUì.ì.íîUï�ðbê¦ï�îUò=ô�÷oò=ô�ð`#ô�ú¹ôoû�÷�ó�ëUõ�üUôteàò.ó�ëeògö®ìd��ï.ît"ië9%��®ú¹ì=ô�÷�ñ�ï.ôtö®õÚò.ó�ôÌö��Q���®ö¤÷�öÀòAÿ§ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õ(�·îWð�ô��_� � ó�ô²êê7`Ñ��ï.îUò=îE÷oî �î�õ��Àú²ï.ô�+Wñ�öÀï.ô�ì^°�ï�î�ñ�õ�ð�ì¥î,'�÷oî ����ñ�õ�ö®÷�ëeò.öÀî�õ��

Å�ô�ò.ó�ô�õ�ôoûEò=ô�õ�ð�êʼ�` ò=î�ë¸��ï.îUò=îE÷oî �%÷�ë,���®ô�ðwêʼ�`#ÿ_Òàøeö®õ#í;ó�ö®÷�ówî�õ�ôì.ö¤ð�ô¸c^ò.ó�ô¥÷Y�®öÀô�õcò4e\ì=ò=îUï.ô�ì�ë^���¤ëUö®õ%ò=ôoûEò"Uô�ï�ì.ö®î�õ�î,'¥ò.ó�ô���ëUì.ì.íîUï�ð4øuí;ó�ö-�Àôàò.ó�ô·îUò.ó�ô�ïàì�ö®ð�ô&c^ò.ó�ô9ì.ô�ï�"Uô�ï�e±î�õ��Àú8ì.ò=îUï.ô�ìwëR"Uô�ïnö¶Ó�ô�ï�'^îUï�ò.ó�ô��-ëUì.ì=í�îUï�ð��Å�ôº'^îUïH�·ë,�-�Àú!��ï�î#"Uôàì.ô�÷�ñ�ï�öÀò�ú¯î,'/êʼa`±ÿ_Òàø�ôY"Uô�õËí;ó�ô�õÌò.ó�ôwì=ô�ïH"Uô�ï+ö®ì[÷oî �Q��ï.î �·ö®ì=ô�ð��W·Wô�÷�ñ�ï�ö®ò§úÌö®õtò.ó�ö®ì;÷�ëUì=ôï.ôY'^ô�ï�ì[ò=î¯ëUõ¶ëeò=ò.ëU÷.ùUô�ï�õ�îUò¸%)ô�ö¤õ�ügë9%��Àô�ò=î��\î�ì=ôàëUì;ë·÷Y�®ö®ô�õ%ò ë9'^ò=ô�ï+÷oî �Q��ï.î �·ö®ì.ö¤õ�ü�ò.ó�ôwì=ô�ï�"Uô�ï#Ô-õ�ëeò.ñ�ïnë,���ÀúUø�öÀòí�î�ñ��®ð�%\ô#ò=ï�öf"Eö®ë,�)ò=î��\î�ì=ôwëUì[ò.ó�ôwì=ô�ï�"Uô�ï��

© ñ�ï\'^îUïH�·ë,���gîEð�ô���'^îUïW��ëUì.ì=í�îUï�ðEÿ§ëUñ�ò.ó�ô�õ%ò.ö®÷�ëeò=ô�ðtùUô�ú9ôoûE÷nó�ëUõ�üUô�ö®ì�õ�ô�í�øEëUõ�ðÍ�·ë�ú/%)ô+î,'uö®õ�ð�ôY�)ô�õ�ð�ô�õ%òö®õcò=ô�ï.ô�ì=òY�ÕS�ò ö®ìg%�ëUì.ô�ðÌî�õÌò.ó�ô«'^îUïH�·ë,���gîEð�ô��Ê'^îUï;ì=ô�÷�ñ�ï�ô#ùUô�ú¯ôoû�÷�ó�ëUõ�üUôº%WúR·�ó�î�ñ*�(i®±,³3l\c^í;ó�ö¤÷�óR'^î ���ÀîOí;ì¥ò.ó�ôí�îUï.ùtî,'Ãi®°9l@enø�ô�õ�ó�ëUõ�÷oô�ðËí;öÀò.óÌõ�îUò.ö®î�õ�ì î,'���ëUì.ì.íîUï�ðËëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õËì.ô�÷�ñ�ï�öÀò�ú/'^ï.î �Ði®°,±�ø]±9k9l_� � ó�ö®ìÃ�gîEð�ô��ö®ìº%�ëUì=ô�ð¹î�õ�ò.ó�ô/��ñ��Àò.öÀÿ_��ëeï.ò§ú�ì.ö-�àñ��¤ëeò.ë9%�ö��®öÀò�úËò=ï�ëUð�öÀò.öÀî�õ¬c^ô,� ü*�Vi ¨ l@enø/ö®õ¹í;ó�ö®÷nó�î�õ�ô�Ó-ï�ì=òwð�ôCÓ)õ�ô�ìwëUõÚö®ð�ô�ë,�ì=úEì=ò=ô�� ò.ó�ëeò)�gîEð�ô��®ì�øuñ�ì.ö®õ�ü¶ë¶ò=ï�ñ�ì.ò=ô�ð�÷oô�õcò=ô�ï�ø�ò.ó�ô²ì=ô�ïH"Wö®÷oô9ò=î¹%\ôQ�\ô�ï�'^îUïH�gô�ð¬c�ö®õ�ò.ó�ö®ì�÷�ëUì.ôUø��-ëUì.ì=í�îUï�ðEÿëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ðÚùUô�úÏôoûE÷nó�ëUõ�üUôtenø/ëUõ�ð¹ò.ó�ô�õ�î�õ�ô���ï�î#"Uô�ì�ò.ó�ëeòwò.ó�ô���ï.îUò=îW÷oî �¦ï�ñ�õ�õ�ö¤õ�ü¯ö¤õ�ò.ó�ô·ï.ô�ë,�¦íîUïH�¤ð¹ö®ìô�ì.ì=ô�õcò.ö®ë,���®ú9ô�+Wñ�öf"eë,�Àô�õ%ò[ò=î9ò.ó�ëeò;ö®ð�ô�ë,�Cì.úWì=ò=ô��$�

Ö ×ÙØÃ��Ú�Û¸���a�Q��

Ü�Ý�Þ ß(à3á�âTãTäæå ç7á�è�å,éUê1ë�å,é�ìpè� ô�÷�ó�õ�ö-+cñ�ô�ì�'MîUïwñ�ì=ô�ïwëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õ�ëeï.ô�%�ï.î�ëUð��Àú&%�ëUì.ô�ð�î�õ�î�õ�ô·îUïd�gîUï.ôgî,'¥ò.ó�ôQ'^î ���ÀîOí;ö®õ�üÌ÷�ëeò=ô�üUîUï�öÀô�ì�íc ¨ eàí;ó�ëeò·ëÏñ�ì.ô�ïgùWõ�îOí;ì�ø cG° eàí;ó�ëeògë�ñ�ì=ô�ï·ö®ì�ø/îUï¹cG± eàí;ó�ëeògë�ñ�ì=ô�ï·ó�ëUìY�Úê�ëUì.ì=í�îUï�ð�ì�îUï²êÕS�»+ìgëeï.ôtôoûWÿë,�Q���®ô9î,';ò.ó�ô!Ó�ïnì=òà÷�ëeò=ô�üUîUï.ú,�Lî�ö®î �gô�ò=ï�ö®÷²ò=ô�÷�ó�õ�ö�+cñ�ô�ì�ø¦ì.ñ�÷nóbëUì�ëUõ�ë,�®úWì.ö¤ìwî,'^"Uî�ö¤÷oôUøæÓ-õ�üUô�ï���ï�ö®õcò.ì�ø�ï�ô�ò.ö®õ�ë,�

ïEð ypñ�u~�~�Nvtu~|G���t|G|Ê�Y�tr#s_uwvg�ts_}4�_}Y�{}��~|æòfufó y4ów�t�9qH|G|EñÊ}Hs�v#ô-r9qH|Gy;v¸�#s_}4�_}Y��}4�~|�uwoÃñ��tuw����q7|Gy{s_z�y{sÊ�t�3r3�~u~�põCy{�Ãu~|�qH�w|G}\õ�o3};ñ�oÃ�_}Õ�_�ty�3|GyUsUö�u~o ÷#y��{�_u~}4o���ó ��ó

ø � �ty�s�qHo9vt}4ùL}Hs�q4���~y�ùÃ}�v#y��3ñÊq4|�u~oY�Gs_}�vt�3�{y;vÃuwo�ú ûHü�ó � q4oY�Ã�,}4�3�t�Äq�s��ts_}H�_}Y��}��~|��3q�z�y�r,y�y{o¸�#s_}�zCy�o^|Gy����#s_y�u~o^�_�9qH��ùÃ}�vty��f�u~o3���~�3vtu~o3x�ý��t�_u~ù^qH�*n�|E�#ùÃùÃy{�Gs_u~�Õ��o3�{sG�#�t�_u~}4o�þ*q�v3v#u~o3xºò-ý�n���þ]öÕú ÿ4ü�ó � ��ñ�}��3�wv���y{sG��qHuwot�®�«r,yWv#y�|Gu®s�q4rt�wy\�_}¸�3q;zCyWqÃ|Gy��{�ts_u®�@��ts_}Y}H�p�3|Gu~o3x«}4o3�®��|E��qHo9v3q�s�v��{sG�#�t�_}4x4s�q4�t�3u~�¸q4|G|G�tùÃ�t�_u~}�ot|¸ú�����ü���r3�t�;�1|G}��¶qHs;��ot}«�ts_}4�_}Y�{}���ò�qHo9v�u~o��9q�sG�_u~���3�wqHs;��ot}«y��Ã��u~y�oY��ts_}H�_}Y��}��Äö�u~|põ�ot}�ñ�o¸�¶}Hs��_�ty��9qH|G|EñÊ}4s�v«qH�t�_�ty�oY�_uw��qH�_u~}�o �#s_}�rt�wy{ù �_�9q���u~|��ts_}�z4q4rt�~�¸|Gy��{�ts_yæu~o��_�tyæ|E��q4o9vtqHs�v¸ùÃ}�vty��fó

� � �tya�3qHs�vtoty�|G|g}H���_�ty���y{��u~|Guw}4o���u��ÃyUô�y��~�~ù^q4oQ�ts_}4r3�~y�ù uw|Wy�|G|Gy�oY�_uwq4�~�®�/y����tu~z�qH�wy{o��\�_}«�_�3y¸|Gy�ù^q4oY�_u~�a|Gy��{�ts_u®�@�Q}H���_�ty���� �qHù^q4�Py�o3�{sG�#�#�_uw}4oa|G���3y�ùÃy\ú�����ü�ó]÷#y�y � }�o3y{��ú�����üN�¶}Hs�ùÃ}Hs_yæu~ot�¶}Hs_ù^qH�_u~}�oa}�o��_�tu~|p�#s_}�rt�wy{ù ó

°

Page 3: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ì.÷�ëUõ�ì�ø�îUïàùUô�úWì=ò=ï�îUùUô�ì�ø�Ó�òwö®õÏò.ó�ô¯ì=ô�÷oî�õ�ðÚ÷�ëeò=ô�üUîUï.ú,�RS�ð�ô�õ%ò.ö¶Ó)÷�ëeò.öÀî�õ�ò=îUùUô�õ�ì�ø�ì.ñ�÷nó�ëUìàì��·ëeï.òw÷�ëeïnð�ì�ø�Ó-òwö®õò.ó�ô�ò.ó�öÀï�ðÌ÷�ëeò=ô�üUîUï.ú,� � ô�÷�ó�õ�ö-+cñ�ô�ì[ö¤õN"Uî �f"Eö®õ�üQ%-öÀî �gô�ò=ï�ö®÷±ð�ôY"Eö®÷oô�ì[ò=ô�õ�ð¶ò=î�%\ô�÷oî�ì=òAÿ_��ï�î�ó�öf%�öÀò.ö�"UôUø�í;ó�ö��Àô±ò=ô�÷nóEÿõ�ö�+Wñ�ô�ì[ö®õP"Uî �f"Eö®õ�ü·ì��9ëeï.ò;÷�ëeï�ð�ì ò=ô�õ�ð¶ò=î/%)ô«%\îUò.óÌôoû1�\ô�õ�ì.öf"UôàëUõ�ðÌï.ô��®ëeò.ö�"Uô��Àú¯ö¤õ�÷oî�õN"Uô�õ�öÀô�õ%ò¸'MîUï�ñ�ì=ô�ï�ìY� � ó�ô�Àô�ëUì=ò[ôoû1�\ô�õ�ì.öf"Uô�ëUõ�ðR�gî�ì=ò;÷oî�õP"Uô�õ�öÀô�õcò;ì=î �®ñ�ò.öÀî�õ�ìW'MîUï+ñ�ì=ô�ï;ëUñ�ò.ó�ô�õ%ò.ö®÷�ëeò.ö®î�õ¶ó�ë�"Uôº%)ô�ô�õ$%�ëUì=ô�ðtî�õÌò.ó�ô�Ó�ï�ì=ò÷�ëeò=ô�üUîUï.úUø)î,'��Aí;ó�ëeò ë·ñ�ì.ô�ï ùWõ�î�í;ì�ø��9ëUõ�ðtò.ó�ëeò;ö®ì í;ó�ëeò[í�ô�í;ö�����'^îW÷�ñ�ì[î�õ¶ö®õtò.ó�ö¤ì¥íîUï.ù��

SAõÂ'^ëU÷oò�ø�íô�í;ö��-��'^îW÷�ñ�ì±î�õÏò.ó�ô�ó�ëeï�ð�ô�ï ��ï.î,%��®ô�� î,'a8;AYX�6,>�A!=P2�AC8�09=*>@?1AYB�>EDEF40,>EDG69B�ø�ö¤õÎí+ó�ö®÷�óÏõ�îUò±î�õ��®ú��ñ�ì=ò�ò.ó�ô!%�ëUì.ö®÷gëUñ�ò.ó�ô�õ%ò.ö®÷�ëeò.ö®î�õ¹ò=ô�÷�ó�õ�ö�+Wñ�ô�ì«%\ô·ì=ô�÷�ñ�ï.ôUø�%�ñ�ò#ò.ó�ô���ï.îUò=îE÷oî �/ò.ó�ëeò�÷oî ���àñ�õ�ö®÷�ëeò=ô�ì�ò.ó�ô9ëUñEÿò.ó�ô�õcò.ö®÷�ëeò.öÀî�õtð�ëeò.ë�ëU÷oï.î�ì.ì�ò.ó�ô±õ�ô�ò�íîUï.ùÍ�àñ�ì=òë,�®ì.î)%\ô+ì.ô�÷�ñ�ï.ô,� � ó�ô±õ�ô�ô�ð/'MîUï¥ï.ô��·îUò=ô±ñ�ì=ô�ï�ëUñ�ò.ó�ô�õ%ò.ö¤÷�ëeò.öÀî�õö®ì�üUï.ô�ëeò��Àú�ö®õ�÷oï.ô�ëUì.ö®õ�ü�øeð�ñ�ôW�·ëUö®õ��®ú�ò=î�ò.ó�ô�ôoûZ�]�Àî�ì.öf"UôüUï.î�í ò.ó�î,'�ò.ó�ô7SAõ%ò=ô�ï�õ�ô�ò�ëUõ�ðàîUò.ó�ô�ï�ò§úZ�\ô�ìuî,'-õ�ô�ò§í�îUï.ùEì�øì.ñ�÷nótëUìí+öÀï.ô��Àô�ì.ì÷oî ����ñ�õ�ö®÷�ëeò.öÀî�õtõ�ô�ò�íîUï�ùWìY�æSAõ¯ëUõ%ú²î,'4ò.ó�ô�ì=ô�ô�õN"EöÀï.î�õ��gô�õ%ò.ì�øEö®òö®ì�ì.ë9'^ô�ì=ò¥ò=î�ëUì�ì.ñ��gô+ò.ó�ëeòò.ó�ô9ñ�õ�ð�ô�ïH�ÀúEö®õ�üÍ�®ö®õ�ùEì±îUïwõ�ô�ò�íîUï�ùWì�ëeï.ô9ö®õ�ì=ô�÷�ñ�ï.ôUøuëUõ�ð�íô²ì.ó�î�ñ��®ðÏï�ô�ë,�®ö®ì=ò.ö®÷�ë,�-�Àú¶ôoû1�)ô�÷oòwò.ó�ëeòwëR�\î�í�ô�ï�'�ñ��ëUð*"Uô�ï�ì�ëeï.úwí�î�ñ��®ð)%\ô÷�ë9��ë9%��®ô�î,'�ô�ë�"Uô�ì.ð�ï�î,����ö®õ�ü�î�õ��Àô�ü�öÀò.ö��9ëeò=ô�ì=ô�ì�ì.öÀî�õ�ì�øUð�ô��®ô�ò.ö®õ�ü±ëUõ�ð�ö®õ�ì=ô�ï.ò.ö¤õ�ü¸�gô�ì.ì�ëeüUô�ìö®õcò=îgò.ó�î�ì=ôwì.ô�ì.ì.öÀî�õ�ì�ø�ëUõ�ðÌôY"Uô�õËö¤õ�öÀò.ö®ëeò.ö®õ�ü�ì=ô�ì�ì.öÀî�õ�ì[ó�ô�ïnì=ô��f'{�

»+î�íË�®ô�ò·ñ�ìg÷oî�õ�ì.ö®ð�ô�ï�ò.ó�ô$+cñ�ô�ì.ò.öÀî�õ�í���Å ó�ëeò²÷�ëUõ´ë�ñ�ì=ô�ï�ùEõ�î�í���� S�ògö®ìg÷oî �!�gî�õ ùEõ�î�í¸�®ô�ð�üUôtò.ó�ëeòñ�ì=ô�ïnì;÷�ëUõ�õ�îUò+ï.ô��gô��)%\ô�ï��Àî�õ�ü9ï�ëUõ�ð�î � õWñ��)%\ô�ï�ì�ø�ó�ô�õ�÷oôàöf'�ò.ó�ôàñ�ì=ô�ï+ö®ì ï.ô�+cñ�öÀï.ô�ðÌò=î²ùWõ�îOí?ë/�®ëeï.üUôàì.ô�÷oï.ô�òùUô�ú(c^ô�öÀò.ó�ô�ï�ëQ�®ëeï.üUôwì=ú1���gô�ò=ïnö®÷±ùUô�útîUï+ëQ��ïnöf"iëeò=ô±ùUô�ú¶÷oîUï.ï�ô�ì;�\î�õ�ð�ö®õ�ü�ò=î9ëQ�-ñ*%��®ö®÷+ùUô�ú�enø�ò.ó�ô�õÌò.ó�ô�ì=ô�ùUô�úEìí;ö��-��ó�ë�"Uô9ò=î&%)ô·ì.ò=îUï.ô�ð¹î�õ�ò.ó�ô9ñ�ì=ô�ï��¾ì�ì=úEì=ò=ô��R����ñ�ï.ò.ó�ô�ïH�·îUï.ôUøuùUô�ôY��ö¤õ�ü¶ò.ó�ô�ì=ô²ì=ô�÷oï.ô�ò�ï.ô�+Wñ�öÀï�ô�ì�ëUõ�ôoûEò=ï�ëì=ô�÷�ñ�ïnöÀò§úÏëUì.ì.ñ�����ò.öÀî�õ�ëUõ�ð�ö®õcò=ï.îEð�ñ�÷oô�ì#ë¶õ�ô�í �\î�ö®õ%ò±î,'�íô�ëeùEõ�ô�ì.ì����Õ"Uô�õÚöf'ë¶ñ�ì=ô�ï�ö®ì±ï.ô�+Wñ�öÀï.ô�ðÏò=îËùWõ�îOíì=î �gô/��ñ*%��¤ö®÷d%�ñ�òàõ�î�õEÿ«üUô�õ�ô�ï�ö®÷9ð�ëeò.ëEøÕ�®öÀùUô·ò.ó�ô²ì=ô�ï�"Uô�ï��¾ìº��ñ�%��®ö®÷�ùUô�úUø/ò.ó�ö®ì)�àñ�ì=òº%\ô9ì=ò=îUï�ô�ð�î�õ�ò.ó�ô¯ñ�ì=ô�ï��¾ìì=úEì=ò=ô���ëUõ�ð8ï.ô�+Wñ�öÀï.ô�ì±ëUõÏôoûEò=ï�ëtëUì.ì.ñ�����ò.öÀî�õ8ò.ó�ëeò±ò.ó�ô���ñ*%��¤ö®÷#ùUô�úÏ÷�ëUõ�õ�îUò«%\ôd�·îWð�öfÓ�ô�ð�� S�õ8ô�öÀò.ó�ô�ï�÷�ëUì=ôUøc ¨ e+ò.ó�ô�ï.ôgö®ì±ëtì.öÀü�õ�ö¶Ó-÷�ëUõcò�ö®õ�÷oï.ô�ëUì=ôgö®õ8ëUð��·ö®õ�ö¤ì=ò=ï�ëeò.öÀî�õÎî#"Uô�ï�ó�ô�ëUðT%\ô�÷�ëUñ�ì=ô�%\îUò.ó8ì.ô�÷oï.ô�ò�ëUõ�ðÂ��ñ*%��¤ö®÷#ùUô�úEìó�ë#"UôÌò=îT%)ô¯üUô�õ�ô�ï�ëeò=ô�ðØëUõ�ð¬ì=ô�÷�ñ�ï.ô��ÀúÚð�ö®ì=ò=ï�ö�%�ñ�ò=ô�ð¹ò=îÏò.ó�ôÌñ�ì.ô�ï��¾ì�ì=úWì.ò=ô�� ëUõ�ð¬ò.ó�ôÌì=ô�ï�"Uô�ï�øëUõ�ð cG° eàò.ó�ö®ìí�î�ñ��®ð9õ�îUò�ë,���®î�í 'MîUï¥ñ�ì=ô�ïnì0ò=î�í�ë,�®ù9ñ*�¯ò=î�ëàüUô�õ�ô�ï�ö®÷�ì=ò.ëeò.öÀî�õ¯ò.ó�ëeò�ï�ñ�õ�ì¦ò.ó�ô±ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õÍ��ï.îUò=îE÷oî �\ëUõ�ð%\ô#ë9%��Àô±ò=îQ�\ô�ï�'MîUï4� ì.ô�÷�ñ�ï.ô#ï.ô��gîUò=ô�ëUñ�ò.ó�ô�õ%ò.ö¤÷�ëeò.öÀî�õÌò=î·ëgì=úEì=ò=ô���ò.ó�ëeò[í¥ëUìÃ��ï�ôY"WöÀî�ñ�ì��Àú·ñ�õ�ùEõ�îOí;õ¯ò=îgò.ó�ëeòì=ò.ëeò.öÀî�õ c�ì.ñ�÷nó¶ëUì�ø��\ô�ï�ó�ë9�-ì�øEò.ó�ô�ñ�ì=ô�ï��¾ì;ó�î �gôwì=úEì=ò=ô��/e4�

� î�ì.î �f"Uô0ò.ó�ô�ì.ô\��ï�î,%��Àô��·ìCî�õ�ôW�·ë�ú#í;ö®ì.ówò=î�ñ�ì=ô0ë+ò=ï�ñ�ì=ò=ô�ðàò.ó�öÀï�ð���ëeï.ò§úUøUô�ö®ò.ó�ô�ïuî�õEÿ��¤ö®õ�ô�c�ëUì�ö®õ)`#ô�ï�%\ô�ï.î�ì4eîUï/î9h)ÿ��®ö®õ�ô«c�öG� ô,�Àø%ë±÷oô�ï.ò.ö¶Ó)÷�ëeò.öÀî�õgëUñ�ò.ó�îUï�ö®ò§ú�e4���+î�í�ôY"Uô�ï�øWò.ó�ôg'^ëU÷oò/ò.ó�ëeò�ò.ó�ô¥ò.ó�ö®ï�ðº�-ëeï.ò§ú�ö®ì��Aò=ï�ñ�ì=ò=ô�ð �#ö-�Q���®öÀô�ìëUõ�îUò.ó�ô�ï[ì=ô�÷�ñ�ï�öÀò§úgï�ô�+cñ�ö®ï.ô��gô�õcòY��¼a�®ì=î�øWò.ó�ô±ñ�ì=ô�ï�ìîUï[ì=ô�ï�"Uô�ï�ìg��ñ�ì=ò�ëeò�ì=î �·ôa�\î�ö®õcò0ö®õcò=ô�ï�ëU÷oò¥í;öÀò.ó9ò.ó�ô�ò.ó�öÀï�ð��ëeï.ò�úª%)ôY'^îUï.ô·ò.ó�ô�úÏ÷�ëUõÚ÷oî ����ñ�õ�ö®÷�ëeò=ô²ï.ô��gîUò=ô��ÀúUø�í;ó�ö®÷nó�ö®õ�÷oï.ô�ëUì.ô�ì�ò.ó�ô·ît"Uô�ï�ó�ô�ëUðÚî,'¥ò.ó�ô·í;ó�î �®ô9ì=úEì=ò=ô��R�»�ëeò.ñ�ï�ë,���ÀúUø�öf'ëUõ�îUï�ü�ëUõ�ö"!�ô�ð¹ëUõ�ð�÷oî �Q��ï.ô�ó�ô�õ�ì.öf"Uô·ê7`�S;ô��gô�ï.üUô�ì�ø�ò.ó�ö¤ì«�·ë�úª%\ôQ�Àô�ì.ì#î,'¥ëR��ï.î,%]�Àô��R��·Wò.ö����qø��ëUì.ì.íîUï�ð�ÿ«î�õ��ÀúÍ��ï.îUò=îE÷oî �®ì+ì.ô�ô��Ë"Uô�ï.ú¶ö¤õN"EöÀò.ö®õ�üQ%\ô�÷�ëUñ�ì.ô�ò.ó�ô�ú¶ëeï.ô)%�ëUì=ô�ð¶î�õ8ð�öÀï�ô�÷oò ò=ï�ñ�ì=ò¸%)ô�ò�íô�ô�õÏë²ñ�ì=ô�ïëUõ�ðÎë·ì=ô�ï�"Uô�ï�ø)ëUõ�ðËð�î9õ�îUò ï.ô�+Wñ�öÀï�ô#ò.ó�ôwñ�ì=ô�ï+ò=î²ì=ò=îUï�ôº�Àî�õ�ü9ì.ô�÷oï.ô�ò.ì;îUï�ð�ëeò.ë·î�õËò.ó�ôàñ�ì=ô�ï��¾ì ì=úEì=ò=ô��R� � ó�ô�úëeï.ô¯ò.ócñ�ìà÷nó�ô�ë9�\ô�ï�øÕ�gîUï.ô�#�ôoû�öf%��ÀôUø�ëUõ�ð �Àô�ì.ì�ëUð��·ö®õ�ö¤ì=ò=ï�ëeò.öÀî�õEÿ§ö¤õ%ò=ô�õ�ì�öf"Uô,� � ó�ô�ú¹ë,�®ì.îÎë,���ÀîOí 'MîUï�ëËüUô�õ�ô�ï�ö®÷��ï.îUò=îE÷oî �Cí;ó�ö®÷�óÌ÷�ëUõ&%)ô«��ï.ôoÿ��Àî�ëUð�ô�ðÌî�õcò=î9ñ�ì.ô�ï�ì$��ì=úEì=ò=ô��·ìY�

Ü�Ý Ü %�ë�à3à'&�ì�â)(+*CãTäæå ç7á�è�å,éUê1ë�å,é�ìpè,%!â ì�å,ìæê1ì.-Uà[8ëUõ%ú8ôoûEö¤ì=ò.ö®õ�ü/��ëUì.ì=í�îUï�ð�ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õª��ï.îUò=îW÷oî �¤ì�ø��®öÀùUô0/21235461)/ËëUõ�ð87)/)9Cø\ì.ô�õ�ð8ò.ó�ô���ëUì.ì=í�îUï�ðÏö®õ8ò.ó�ô÷Y�Àô�ëeï ëUõ�ðtëeï.ô#ò.óWñ�ìW"Eñ��®õ�ô�ï�ë9%]�Àô;ò=îgô�ë#"Uô�ì.ð�ï.î,���\ô�ï�ì���:¹·Wô�õ�ð�ö®õ�üwò.ó�ô ��ëUì.ì.íîUï�ðtö®õ¯ò.ó�ô#÷Y�Àô�ëeï ÷�ëUõ�%\ô±ë�"Uî�ö®ð�ô�ð%Wú8ñ�ì�ö®õ�üR�gîUï.ô·ì=î,�-ó�ö®ì=ò.ö®÷�ëeò=ô�ð�ì�÷�ó�ô��gô�ì�ø�ì.ñ�÷nó¹ëUì�î�õ�ôoÿ«ò.ö��gôQ��ëUì.ì.íîUï�ð�ì#ì=úWì.ò=ô��·ì/c^ô,� ü*�ÀøÕ· ;3`<�>= i®°3j,l@enø�îUïì.ö������Àôw÷nó�ë,���Àô�õ�üUôoÿ«ï�ô�ì;�\î�õ�ì=ô�ì.÷�ó�ô��·ô�ì�c^ô,� ü*�Àø�Ég��¼�ê i®±,´3l@e4���+î�í�ôY"Uô�ï�ø4ò.ó�ô�ì.ô)��ï�îUò=îW÷oî �®ì±ëeï.ôgì.ñ�ì.÷oôY��ò.öf%��®ô�ò=î6�?^<�@ D B�Ad:9DGF�>EDG69B]0,84K�0,>G>_0 FCIt2,í\[8ëUõ%útñ�ì=ô�ï�ì[÷nó�îWî�ì=ô«��ëUì.ì=í�îUï�ð�ì¥î,'�ï.ô��®ëeò.ö�"Uô��Àú/�ÀîOí�ô�õ%ò=ï�î,�cúUø�ì.î·öÀò[ö®ìW�)î�ì�ì.öf%��Àô'^îUï+ò.ó�ô�ëUð*"Uô�ï�ì�ëeï.úÌò=î¯÷oî ����ö��Àô�ë9ð�ö®÷oò.ö®î�õ�ëeï.úÌî,'æ�\î�ì.ì.öf%]�Àô«��ëUì.ì=í�îUï�ð�ì���A © %P"EöÀî�ñ�ìH�ÀúUø�í�ôà÷�ëUõB� ò ��ï�ôY"Uô�õ%ò�ò.ó�ôëUð*"Uô�ï�ì�ëeï.ú½'Mï�î � ò=ï.úEö®õ�ü�ë,��� ò.ó�ô$��ëUì.ì.íîUï�ð�ì·î�õEÿ��®ö¤õ�ôUø7%�ñ�ò9ì.ñ�÷nóØëUõØëeò=ò.ëU÷�ù ÷�ëUõ¬%)ô¹�·ëUð�ôËö®õ�'Mô�ëUì.ö�%��Àô�%cú

C �q4|G�tuwotxW�_�3y��9q4|G|Eñ�}4s�v«v#}Yy�|�o3}4�p}ED y{spùÃ}4s_y��#s_}4�_y��{�_u~}4oPóF ÷�y�y��]�¶}4s¸y�GtqHùÃ�3�~y����_�tyay�G#�,y{s_u~ùÃy�oY�W�,y{sG�¶}Hs_ùÃy;v/rY� ð �¹ú �C�Hü-ó � s_u~y�H3�Y���3|Gu~o3xdq4o/}ID,ô-�~uwoty«vtu~�{�_u~}4o9qHsG�/q��G��q4��õ ���3yañÊq4|

q4rt�~y��_}gvtu~|G��}�zCyUs��4�I�CûW�9qH|G|EñÊ}4s�v#|�u~oaq7s_y;qH�wù½}H�*|G�~u~x��Y�_�®�a}�zCy{s�� ñÊy�oY� �#ôKJ3zCyp�_�t}��t|_q4o9v¸�3|Gy{s_|�rY�¸zCy{s_u®�Ä�tu~otxgq4r,}4�t�+�����gùÃu~�~�wu~}4o�;qHo9vtuwvtqH�_yæ�9qH|G|EñÊ}Hs�vt|�ó

±

Page 4: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ì.ö������Àú����®ëU÷�ö®õ�ü�ë��®ö��9öÀò0î�õtò.ó�ô#õWñ��)%)ô�ï¥î,'�ñ�õ�ì.ñ�÷�÷oô�ì�ì;'^ñ���ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õÌëeò=ò=ô�����ò.ìY� © õ²ò.ó�ô�îUò.ó�ô�ï ó�ëUõ�ðCøëUõ�î9h)ÿ��®ö®õ�ô¥ì=ô�ëeï�÷nó�ò.ó�ï.î�ñ�ü�ó�ò.ó�ô[ð�ö®÷oò.ö®î�õ�ëeï.úwö®ì�+Wñ�öÀò=ô¥ð�î�ë9%��Àô,���+ô�ï.ô[ö®ì�ëUõ�ôoûEë,�Q�]�Àô¥î,'-ëUõ�î9h-ÿ��¤ö®õ�ô¥ð�ö®÷oò.öÀî�õ�ëeï�úëeò=ò.ëU÷.ù·ëeü�ëUö¤õ�ì=ò¦ë#ì.ö������Àô÷nó�ë,���Àô�õ�üUôoÿ«ï.ô�ì;�\î�õ�ì=ôg��ï.îUò=îE÷oî �Gí � ó�ô[ëUð*"Uô�ï�ì�ëeï.úàît"Uô�ï�ó�ô�ëeï�ì0ë#÷�ó�ë,���®ô�õ�üUôML ëUõ�ð�ò.ó�ôëUì.ì=îE÷�ö®ëeò=ô�ðgï�ô�ì;�\î�õ�ì=ôONæcQPORSLºe�ò.ó�ëeò¦ö®õP"Uî �f"Uô�ì�ò.ó�ôÃ��ëUì�ì=íîUïnð���»+î�í ì.ó�ô[÷�ëUõgüUî#î9h)ÿ��®ö®õ�ô[ëUõ�ð�ï�ñ�õ�ò.ó�ï�î�ñ�ü�ógë,���ò.ó�ô���ëUì.ì=í�îUï�ð�ì>P<T*'Mï.î �Õëwð�ö¤÷oò.öÀî�õ�ëeï.ú�î,'��®öÀùUô��Àúd��ëUì.ì.íîUï�ð�ì�ø%÷oî �Q��ëeïnö®õ�ü�ò.ó�ô�"ië,�¤ñ�ô�NæcQP�TURSLºe�í;ö®ò.ó�NæcQPORSLºe4�S{'�î�õ�ôwî,'�ò.ó�ôº"ië,�®ñ�ô�ìÃ�·ëeò.÷�ó�ô�ì+ò.ó�ô#ï.ô�ì��)î�õ�ì=ôUø�ò.ó�ô�õÌò.ó�ôwò=ï�ñ�ô«��ëUì.ì.íîUï�ðËó�ëUìÃ%\ô�ô�õÌð�ö®ì.÷oît"Uô�ï.ô�ð��

¼�ð�ô�÷�ëUð�ô+ëeüUî�øWV4î �·ëUìô�òY�¾ë,�G��i®°,­3l]��ï.ô�ì=ô�õcò=ô�ð9ò.ó�ô¸Ó�ï�ì=ò7��ï.îUò=îE÷oî �®ì0í+ó�ö®÷�ó·íô�ï.ô+ï.ô�ì.ö®ì.ò.ëUõ%òò=îàò.ó�ô�ì.ô;ò§úZ�\ô�ìî,'0î9h)ÿ��®ö®õ�ô�ð�ö¤÷oò.öÀî�õ�ëeï.úËëeò=ò.ëU÷�ùWì�� � ó�ôd��ï.îUò=îE÷oî �®ì#ëUì.ì.ñ��·ô�ðÎò.ó�ëeò�ò.ó�ô·÷Y�®öÀô�õcò�ó�ëUð8ò.ó�ô·ì.ô�ï�"Uô�ï��¾ì ��ñ*%]�®ö®÷#ùUô�úëUõ�ðÎò.ócñ�ì í�ô�ï.ô�õ�îUò+ì=ò=ï�ö¤÷oò��ÀúR��ëUì.ì=í�îUï�ðEÿ«î�õ��Àú���ï.îUò=îE÷oî �®ìY��X�î�õ�ü9ô�òY�¾ë,�G�Õi®°,°3l��®ëeò=ô�ï���ï.ô�ì=ô�õcò=ô�ðËò.ó�ô�ö®ï�"Uô�ï�ì�öÀî�õ�ìî,' ò.ó�ô�ì.ô¯ò�úP�\ô�ì�î,'^��ï�îUò=îW÷oî �®ì��ª¿;ô�÷oô�õ%ò��®úUø7�+ë,�®ôY"Wö�ëUõ�ðJ`#ï�ë�í�÷Y!�úWùÌi®°,±3lg��ï.ô�ì.ô�õ%ò=ô�ð ��ï.îUò=îE÷oî �®ì�ëUõ�ð '^îUïH�·ë,���ï.îWî,'�ì�î,'[ì=ô�÷�ñ�ï�ö®ò§úT'^îUïwò.ó�ô¯ì.ë,�gô²ì�÷oô�õ�ëeï�öÀîËëUì�ëUð�ð�ï�ô�ì.ì=ô�ð(%Wú i®°,­9l«ø�öG� ô,�Àø�í;ó�ô�ï.ô9ò.ó�ô²÷Y�®ö®ô�õ%òwëUñ�ò.ó�ô�õ%ò.ö¤÷�ëeò=ô�ìí;öÀò.ó9ë���ëUì.ì.íîUï�ð²ëUõ�ð·ò.ó�ô;ì=ô�ï�"Uô�ï�í;öÀò.ó·ëº��ñ*%��¤ö®÷�ùUô�ú,�7î�î�ú�ëeï�ì=ùWú¹i ¨ °3l\ó�ëUì0ëUð�ð�ï.ô�ì.ì=ô�ð²ì=î �gô^��ï.î,%��Àô��·ì¦í;öÀò.óò.ó�ôº��ë,�ÀôY"Eö�ÿ�`#ï�ë�í�÷Y!�úWù���ï.îUò=îE÷oî �®ì ö®õtò.ó�ôº�àñ��Àò.ö�ÿ§ñ�ì=ô�ï[ì.÷oô�õ�ëeï�öÀî*�

� ó�ôZ�7`[� ��ï.îUò=îW÷oî �Qi®­3l�í�ëUì¯ò.ó�ô¹Ó�ï�ì.ò!��ëUì.ì.íîUï�ð�ÿ§ëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ð ùUô�úØôoû�÷�ó�ëUõ�üUôª��ï�îUò=îW÷oî �+ò.ó�ëeòÌð�ö®ðõ�îUòàï.ô�+cñ�öÀï.ôgò.ó�ô9ñ�ì=ô�ïwò=îÎùWõ�îOí ò.ó�ô¯ì=ô�ï�"Uô�ï��¾ì)��ñ*%]�®ö®÷àùUô�ú,� � ó�ô9ö®ð�ô�ëÌî,'O�7`<�?í�ëUìàò=îÎñ�ì=ô·ò.ó�ô/��ëUì.ì=í�îUï�ðò=îËì=ú1���gô�ò=ïnö®÷�ë,���ÀúÎô�õ�÷oï.úZ��ò#ò.ó�ô���ï�îUò=îW÷oî �Õ�·ô�ì.ì.ëeüUô�ì�î,'[ë¶ì.ò.ëUõ�ð�ëeï�ðÏùUô�ú�ôoû�÷�ó�ëUõ�üUô¹c^ô,� ü*�Àø/ý�öÀþ9ôoÿ��;ô��-���·ëUõi ¨ ²tl@e4� � ó�ô�õ¬ëUõ¬ëeò=ò.ëU÷.ùUô�ï��·ëeùWö¤õ�ü8ëÂ��ëUì�ì=íîUïnðÚü�ñ�ô�ì.ìg÷oî�ñ��®ð¬ð�ô�÷oï.úZ��ò�ò.ó�ôÌì=ú1���gô�ò=ï�ö®÷¯ô�õ�÷oï�úP��ò.ö®î�õCøæ%�ñ�ò÷oî�ñ��®ðÏõ�îUò %�ï�ô�ëeùËò.ó�ôgëUì=ú1���gô�ò=ï�ö¤÷wô�õ�÷oï�úP��ò.ö®î�õ8ö¤õËò.ó�ôQ�gô�ì�ì.ëeüUô�ì�øuëUõ�ð8ò.óWñ�ì#÷oî�ñ��®ð8õ�îUò«"Uô�ï�ö�'Mú¶ò.ó�ô�ü�ñ�ô�ì.ìY���î ���®î�í;ö®õ�ü[�7`<�;øP�·ëUõcúQ��ï.îUò=îE÷oî �®ì7'MîUïW��ëUì.ì=í�îUï�ðEÿ§ëUñ�ò.ó�ô�õ%ò.ö¤÷�ëeò=ô�ð9ùUô�ú·ôoû�÷�ó�ëUõ�üUô+í�ô�ï.ôa��ï.î,�\î�ì=ô�ðgí+ó�ö®÷�ó²ð�ö®ðõ�îUò±ï.ô�+Wñ�öÀï.ô�ò.ó�ôgñ�ì=ô�ï#ò=îtùEõ�î�í ò.ó�ôgì=ô�ï�"Uô�ï��¾ì ��ñ�%��®ö®÷wùUô�ú i®¯Eø�°,°Eøp° ¨ øp± ²Wø�°,³Eø�°,´Eø�°,¯Eø�±,¯3l_�Q·Wî �gô�î,'0ò.ó�ô�ì=ô��ï.îUò=îE÷oî �®ì/í�ô�ï.ôUøWö®õgëUð�ð�öÀò.ö®î�õCø�ð�ô�ì.öÀü�õ�ô�ð�ò=îº��ï.îUò=ô�÷oòëeü�ëUö®õ�ì=ò0ì.ô�ï�"Uô�ï0÷oî �Q��ï�î �·ö®ì=ôUø%ì.î�ò.ó�ëeò0ëUõ·ëeò=ò.ëU÷�ùUô�ï¥ò.ó�ëeòí¥ëUì0ë9%��Àô[ò=îàì=ò=ô�ë,��ð�ëeò.ë�'Mï.î � ë�ì=ô�ï�"Uô�ï�÷oî�ñ��®ð·õ�îUòÕ�¤ëeò=ô�ï\�·ëUì�+Wñ�ô�ï�ëUð�ô ëUì0ë�ñ�ì.ô�ï¦í;öÀò.ó�î�ñ�ò�ó�ë�"Eö®õ�ü«�\ô�ï�'^îUïH�gô�ðëÏð�ö®÷oò.öÀî�õ�ëeï.ú¹ëeò=ò.ëU÷.ù���\˼a���î,';ò.ó�ô�ì=ô���ï�îUò=îW÷oî �W��ï.î,�\î�ì.ë,�¤ìà÷oî�õcò.ëUö®õ�ô�ð ö®õ�'MîUïH�9ë,�0ëeï.ü�ñ��·ô�õ%ò.ì�'^îUïgì=ô�÷�ñ�ï�öÀò�ú,��+î�í�ôY"Uô�ï�øò.ó�ô/'�ëU÷oògò.ó�ëeògì=î �gôtî,' ò.ó�ô�ì.ôÍ��ï.îUò=îW÷oî �¤ìàí�ô�ï.ôÌì.ñ*%-ì=ô�+cñ�ô�õ%ò��Àú¹ì�ó�î�í;õbò=îª%\ô¯ö¤õ�ì=ô�÷�ñ�ï.ôªi®± ¨ øÕ±,°3lì.ó�î�ñ��®ð¯ô��Q��ó�ëUì.öK!�ô#ò.ó�ôwö��Q�\îUï.ò.ëUõ�÷oô�î,'�'^îUïH�·ë,�Ê��ï�îcî,'�ì[î,'�ì=ô�÷�ñ�ï�öÀò�ú,�

Ü�Ý] ^ ì+(Õá_-�àa`�ì�âcb�á]ê*äÕâ á½ãTäæå ç7á�è�å,éUê1ë�å,é�ìpè ëÊèd(feVá gih0jæêPçÕë�è>kpáî�ô����®ëeï.ô+ëUõ�ð�¿ îUü�ë�í�ë�ú¹i j,l���ï.ô�ì=ô�õcò¦ò.ó�ôÃÓ�ïnì=òæ'MîUï4�·ë,���gîEð�ô���î,'Cì=ô�÷�ñ�ïnöÀò§ú�'^îUï¦ô�õ%ò.ö®ò§ú·ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õ²ëUõ�ðgùUô�úôoû�÷�ó�ëUõ�üUôUø�'^îUï±ò.ó�ô�ì=úZ�!�gô�ò=ï�ö®÷wò§í�îÍ�-ëeï.ò§úË÷�ëUì.ô,�«S�õJi~²#l�ò.ó�ô�ú¶ôoûWò=ô�õ�ð8ö®ò+ò=î¯ò.ó�ô�ò.ó�ï.ô�ôd��ëeï.ò§ú8÷�ëUì=ô,�«îg�®ëeùUôoÿÅ ö��®ì=î�õ�ô�òY�¾ë,�_�Wi ¨ k9l7'�ñ�ï.ò.ó�ô�ï�ôoûWò=ô�õ�ð¹ò.ó�ô!�·îWð�ô��¦ò=îÎ÷oî#"Uô�ï�ò.ó�ô²ëUì=úZ�!�gô�ò=ï�ö®÷·ì.ô�ò=ò.ö®õ�ü*�ÍS�õ�ð�ôY�)ô�õ�ð�ô�õ%ò��®úUø\i®±9k9lëUõ�ð&i®±9l���ï.ô�ì=ô�õcò¦ôoûEò=ô�õ�ì.öÀî�õ�ì/ò=îwò.ó�ô��gîWð�ô��Eò=îàë,���ÀîOí '^îUï7��ëUì.ì.íîUï�ð9ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õ��æ��ë,�ÀôY"Wö-ëUõ�ð�`#ïnë�í¥÷Y!�úcùi®°,±3l0ëUõ�ðTî�îOú�ëeï�ì=ùWú½i ¨ °9l���ï.ô�ì=ô�õcò��gîWð�ô��®ì�í;ó�ö®÷nó8ö¤õ�÷Y�®ñ�ð�ô)%\îUò.óª��ëUì.ì=í�îUï�ð�ì±ëUõ�ð�ëUì=ú1���gô�ò=ïnö®÷�ùUô�úWì!c�ì�ö®õ�÷oô%\îUò.óÌî,'�ò.ó�î�ì=ô���ë9�\ô�ï�ì[ð�ô�ë,�Cí;öÀò.ó���ï�îUò=îW÷oî �®ì ò.ó�ëeò;ëeï.ô��-ëUì.ì=í�îUï�ðEÿ_%�ëUì=ô�ð4ø*%�ñ�ò[ï.ô��Àú²î�õËì=ô�ïH"Uô�ï^��ñ*%��¤ö®÷;ùUô�úEì4e4�

î�ô����®ëeï�ôUøPÉ¥ëUõ�ô�ò=ò.öqø�ëUõ�ð�`#ïnë�í¥÷Y!�úcùRi®°tl*��ï.ô�ì=ô�õcò/ë�ð�ö¶h)ô�ï�ô�õ%ò��gîEð�ô��N'^îUï/ì=ô�÷�ñ�ï�ö®ò§úwî,'�ô�õ%ò.öÀò�ú�ëUñ�ò.ó�ô�õ%ò.ö¤÷�ëeò.öÀî�õëUõ�ðbùUô�úbôoûE÷nó�ëUõ�üUôUøW%�ëUì=ô�ð¬î�õ¬ò.ó�ôR��ñ��Àò.ö�ÿ_��ëeï�ò§úÚì�ö��àñ��®ëeò.ë9%�ö��®ö®ò§úÏò=ï�ëUð�öÀò.ö®î�õ i ¨ l_�½·Eó�î�ñ*� i®±,³3l[ï.ôCÓ)õ�ô�ìgëUõ�ðôoûEò=ô�õ�ð�ì�ò.ó�ô�öÀïÃ�gîEð�ô��G��Å�ô«��ï.ô�ì.ô�õ%ò¥ëd'^ñ�ï�ò.ó�ô�ïôoûEò=ô�õ�ì.ö®î�õ²î,'gi®±,³3lCò.ó�ëeò[ö®õ�÷Y�®ñ�ð�ô�ìÕ��ëUì�ì=íîUïnð¯ëUñ�ò.ó�ô�õ%ò.ö¤÷�ëeò.öÀî�õ��

l m ���onqp

��îUï[î�ñ�ïW��ï.îWî,'�ì�øcí�ô�ôoûWò=ô�õ�ð¯ò.ó�ôa'^îUïH�·ë,�)õ�îUò.öÀî�õ¯î,'uì=ô�÷�ñ�ïnöÀò§úQ'^îUï¥ùUô�ú9ôoû�÷�ó�ëUõ�üUô ��ï�îUò=îW÷oî �®ìW'^ï.î � ·Eó�î�ñ*�Ti®±,³3lò=îª��ëUì.ì=í�îUï�ðEÿ§ëUñ�ò.ó�ô�õ%ò.ö¤÷�ëeò=ô�ð¬ùUô�ú�ôoû�÷�ó�ëUõ�üUô,�VÅ�ô¯í+ö����Õ��ï.î#"UôÌì=ô�÷�ñ�ïnöÀò§ú�ëeü�ëUö¤õ�ì=ògëÎì.ò.ëeò.ö®÷tëUð*"Uô�ï�ì.ëeï.úUø�öG� ô,�Àøî�õ�ôàí;ó�î�ì=ô�÷�ó�î�ö®÷oô�î,'¦í;ó�î � ò=ît÷oîUï.ï�ñ*��ò+ö®ì+ö¤õ�ð�ôY�\ô�õ�ð�ô�õcò¥î,'0öÀò.ì^"EöÀô�í í;ó�ö��®ô�ëeò=ò.ëU÷.ùEö®õ�ü¯ò.ó�ô)��ï.îUò=îW÷oî �_�^Å�ôëUì.ì.ñ��gô#ò.ó�ôwëUð*"Uô�ïnì.ëeï.ú¯ò=îUò.ë,���ÀúÌ÷oî�õ%ò=ï�î �®ì[ò.ó�ôwõ�ô�ò§í�îUï.ù-ø-ë��®ë$i j,l_�

r�s qH�_�#s�q4�~�®�Y�3x4uwz�y�oa�_�3yÕvtqH��q\�Äs_}�ù¬qW|Gy{s_z�y{s;�,qHo«qH�G��qH�UõCyUs��{}��3�wva�,yUsG�¶}4s_ù¬qHo }ID,ô-�~u~o3yÕvtu~�{�_u~}4o9qHsG�aqH�G��qH�Uõ,�3|Guwot��y��_�3yæ|GyUs_zCy{sùW�t|E��õ�o3};ñ&|G}�ùÃy{�_�tu~o3x\�_�3qH��ñÊ}4�3�wv qH�w�~};ñ¹zCy{s_u�J9�;q��_u~}�o }H��qW�3|GyUs�t |p�9qH|G|EñÊ}Hs�vNó

j

Page 5: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

·Wô�÷�ñ�ï�öÀò§ú&'MîUï#ùUô�úÎôoûE÷nó�ëUõ�üUô9ö®õJi®±,³3l¦ö®ì±ð�ôCÓ-õ�ô�ð8ñ�ì.ö®õ�ü¯ëUõ�ö®ð�ô�ë,��ì=úWì.ò=ô��Ìø4í;ó�ö¤÷�ó8ð�ô�ì.÷oï�öf%\ô�ì+ò.ó�ôgì=ô�ï�"Eö®÷oôc^î,'4ùUô�ú·ôoû�÷�ó�ëUõ�üUôte0ò.ó�ëeò�ö¤ì0ò=îd%\ô^��ï.ît"Wö®ð�ô�ðCøcëUõ�ð¯ëàï.ô�ë,�-ì.úWì=ò=ô��¶øcí;ó�ö®÷�ó²ð�ô�ì.÷oï�öf%\ô�ì0ò.ó�ô;í�îUïH�®ð¯ö®õ·í+ó�ö®÷�ó9ò.ó�ô��ï.îUò=îE÷oî ���-ëeï.ò.ö®÷�öf��ëUõcò.ì0ëUõ�ð9ëUð*"Uô�ï�ì�ëeï�öÀô�ì¦í�îUï.ù�� � ó�ô;ö¤ð�ô�ë,��ì=úEì=ò=ô�� ì�ó�î�ñ��®ðQ%\ô;ð�ôCÓ-õ�ô�ð·ì.ñ�÷�ó·ò.ó�ëeòëUõu�=ö®ð�ô�ë,�í�îUïH�®ð�ëUð*"Uô�ï�ì�ëeï.úv�Ë÷�ëUõ�õ�îUòÍc@%WúÏð�ôCÓ-õ�öÀò.ö®î�õ]e¸%�ï.ô�ëeù8ò.ó�ô9ì=ô�÷�ñ�ïnöÀò§ú,� � ó�ô�õCøuö®õcò.ñ�öÀò.ö�"Uô��ÀúUø4ëR��ï.îWî,'�î,'�ì=ô�÷�ñ�ï�öÀò§úí�î�ñ��®ð�ì�ó�î�í ò.ó�ëeò�ëUõ%úWò.ó�ö®õ�üÎëUõÚëUð*"Uô�ïnì.ëeï.ú�÷�ëUõbð�îÎö¤õ¹ò.ó�ô²ï.ô�ë,�ì.úWì=ò=ô��H÷�ëUõ¬ë,�®ì=î¹%)ô²ð�î�õ�ô²ö¤õ¹ò.ó�ô¯ö®ð�ô�ë,�ì=úEì=ò=ô��Ìø�ëUõ�ðÌò.ócñ�ì öÀò¥íî�ñ��®ðR'^î ���Àî�í�ò.ó�ëeò ò.ó�ô���ï�îUò=îW÷oî �4ö¤ì[ì=ô�÷�ñ�ï.ôwö¤õtò.ó�ô�ï.ô�ë,�4ì.úWì=ò=ô��$�

]�Ý�Þ wTáWxgè7é_å,é�ìpè ìy`ob�á�ê*äÕâNé_å�g� ó�ô�ð�ôCÓ-õ�öÀò.öÀî�õ¯î,'�ì=ô�÷�ñ�ï�ö®ò§ú�'MîUï;ùUô�ú¯ôoû�÷�ó�ëUõ�üUôwü�öf"Uô�õËö®õ(i®±,³3luï.ô�+Wñ�öÀï�ô�ì

¨ �{z%å_|~}��^â���âv��âWè�è,í�'^îUïàëUõcúÏï.ô�ë,�/í�îUïH�®ð¹ëUð*"Uô�ïnì.ëeï.ú8ò.ó�ëeòº'�ëUöÀò.ó*'�ñ����Àú¶ð�ô��®öf"Uô�ï�ì��·ô�ì.ì.ëeüUô�ì�%\ô�ò�íô�ô�õÚò§í�îñ�ì=ô�ï;ö®õ�ì.ò.ëUõ�÷oô�ì[í;öÀò.óÌ÷oî �����®ö��gô�õcò.ëeï.ú²ï.î �Àô�ì ëUõ�ðËö®ð�ô�õcò.öÀò.öÀô�ì�ø1%\îUò.ó¶ñ�ì=ô�ï+ö®õ�ì=ò.ëUõ�÷oô�ì[ëU÷�÷oôY��òYÔ)ëUõ�ð

°Z�;è'�U|����U�W��� ���Q�Q���Qãæí('^îUï²ôY"Uô�ï�úØôoþ²÷�öÀô�õcòtï.ô�ë,��íîUï4�®ð ëUð�"Uô�ï�ì.ëeï.ú��¯ø ò.ó�ô�ï�ô8ôoû�ö®ì=ò.ì¯ëUõ ôoþ²÷�öÀô�õcòÌö®ð�ô�ë,�í�îUïH�®ðÎëUð*"Uô�ï�ì.ëeï�ú��o�#ì.ñ�÷�ó¶ò.ó�ëeò��^AH0�@��¹698I@f:1cU�Qe[ëUõ�ð��C:NAH0�@��&698�@¶:1cU�o�Ce ëeï.ôà÷oî ����ñ�ò.ëeò.öÀî�õ�ë,�-�Àú¯ö¤õ�ð�ö®ìAÿò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��ÀôRc�ó�ô�ï.ô��^AH0�@��&698�@¶:1c��Äe#ëUõ�ð~�C:NA�0�@��&6,8I@f:1c��Äe�ï.ôY'^ô�ïwò=î¶ï.ô�ë,�ëUõ�ð¹ö®ð�ô�ë,��íîUïH�¤ð�ò=ï�ëUõ�ì.÷oïnöf��ò.ì�øï�ô�ì;�\ô�÷oò.öf"Uô��ÀúUø�ëUõ�ðÌëeï�ôwð�ôCÓ-õ�ô�ðÌö¤õ&·Wô�÷oò.öÀî�õ�츱Z�w±9ëUõ�ð&±Z�w° e4�

Å�ô�í;ö����\ñ�ì.ôwò.ó�ö®ì;ð�ôCÓ-õ�öÀò.ö®î�õ�'MîUï���ëUì.ì=í�îUï�ðEÿ§ëUñ�ò.ó�ô�õ%ò.ö®÷�ëeò=ô�ðÎùUô�úÌôoû�÷�ó�ëUõ�üUô�ëUì+íô����«ø�í;öÀò.óËõ�î!�gîEð�ö¶Ó-÷�ëiÿò.öÀî�õ�ì���Å�ô#÷�ëUõtð�îàò.ó�ö®ì\%)ô�÷�ëUñ�ì=ôUøWëUì�í;ö-���*%\ô+ì=ô�ô�õ/%\ô��Àî�íwøcî�ñ�ï¥ö®ð�ô�ë,�]�gîEð�ô��-ö¤õ�÷Y�®ñ�ð�ô�ìÕ��ëUì.ì=í�îUï�ð�ìôoûZ�]�®ö®÷�öÀò��Àú,�S{'4öÀò0ð�ö®ð9õ�îUò�øEíô+íî�ñ��¤ð9ó�ë#"Uô+ò=î�ì=î �gô�ó�îOí ôoûZ���¤ö®÷�öÀò��Àú�ì=ò.ëeò=ô±ò.ó�ô¸��ï�î,%�ë9%�ö��®ö®ò§ú�î,'4ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ö¤õ�ü;ï.ô�ë,�-í�îUïH�®ð'^ï.î � ö®ð�ô�ë,�¥í�îUïH�®ð¬ò=ï�ëUõ�ì.÷oï�öf��ò.ì�ø¦ü�öf"Uô�õ´ó�îOíË�·ëUõcúbö-�Q�\ô�ï�ì=î�õ�ëeò.öÀî�õ¬ëeò=ò=ô��Q��ò.ì·ò.ó�ôÌï.ô�ë,� íîUïH�¤ð ëUð*"Uô�ï�ì.ëeï.ú�·ëUð�ô,�

Å�ô#õ�îOíÌ��ï.îW÷oô�ô�ð¯í;ö®ò.ó9ë�ð�ô�ì.÷oï�ö���ò.öÀî�õ·î,'uò.ó�ô�SAð�ô�ë,��·WúEì=ò=ô��b'MîUïg��ëUì.ì.íîUï�ð¯ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õ�� � ó�ô¸�-ëeï.ò.ìò.ó�ëeò#ëeï.ô·õ�îUò#ð�ö®ï.ô�÷oò��ÀúÌï.ô��®ëeò=ô�ðÏò=î���ëUì�ì=íîUïnð�ì±ëeï.ô�ò.ëeùUô�õT'Mï�î � i®±,³3l«øCôoûE÷oôY��òa'^îUï�ëtì��®öÀü�ócò �gîWð�ö¶Ó-÷�ëeò.öÀî�õÎò=îó�ëUõ�ð��Àô«�àñ�ò.ñ�ë,�4ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õ��

]�Ý Ü �'(7á�ëB-[b�gÕàtå9á_�� ó�ôa%�ëUì.ö¤÷+ëUì.ì�ñ��Q��ò.öÀî�õ9î,'uò.ó�ô±ö®ð�ô�ë,�\ì=úEì=ò=ô�� ö®ìò.ó�ëeò¥ò.ó�ô±ùUô�ú9ôoû�÷�ó�ëUõ�üUô�ö®ìð�î�õ�ô�%Wú²ëàò=ï�ñ�ì.ò=ô�ð²ò.ó�öÀï�ð/��ëeï.ò§úc�÷�ë,���Àô�ð½>@?*A�8�D@BPO¹XQ092�>�AC8 e4í � ó�ô�ïnö®õ�üR�·ëUì=ò=ô�ï�üUô�õ�ô�ï�ëeò=ô�ìwë,����ò.ó�ôgùUô�úWì�ø�ëUõ�ð�ð�ô��®ö�"Uô�ï�ì�ò.ó�ô���ò=î¶ò.ó�ô·ñ�ì=ô�ï�ìY�� ó�ô¶÷oî �!�àñ�õ�ö®÷�ëeò.öÀî�õ½%\ô�ò§í�ô�ô�õ´ò.ó�ôËñ�ì=ô�ï�ì9ëUõ�ð ò.ó�ô¶ïnö®õ�üT�·ëUì=ò=ô�ï¯ö®ìQ��ï.ô�ì�ñ��gô�ð¬ò=î(%\ôR�\ô�ï�'^ô�÷oò��Àúbì.ô�÷�ñ�ï.ô,�� óWñ�ì�ø�ò.ó�ô#ùUô�útôoû�÷�ó�ëUõ�üUôàö®õtò.ó�ôàö®ð�ô�ë,�Cì=úEì=ò=ô�� ö®ì^�)ô�ïH'Mô�÷oò��Àú¯ì=ô�÷�ñ�ï.ô,�

Vuô�ò�ñ�ìõ�î�í ��ï�ô�ì=ô�õ%òò.ó�ô+ð�ô�ò.ëUö��®ìY��Å�ô#ëUì.ì.ñ��·ô;ò.ó�ô�ï.ô�ö®ì0ë�ì=ô�ò�î,'7c�ó�î�õ�ô�ì=ò4e^=Z2YAY8H2QøEö¤õ�ð�ôoûEô�ðo��� ¨ RH°vR$�$�$�3��0ëU÷nóÎñ�ì=ô�ïM�\�9ë�ú¶ó�ë#"Uôàì=ôY"Uô�ï�ë,�\D@B*2�>_09B�F4A�2���� ¨ RH°vR$�$�$�t� � ó�ô�õLcU�SR��Pe ï.ôY'^ô�ï�ì ò=î9ë9ü�öf"Uô�õ(=Z2�AC8�D@B*2�>_0,B]F4AY�g¼ñ�ì=ô�ï�ö®õ�ì=ò.ëUõ�÷oô/cU�SR��Pe;ö®ì;ò=î �®ð¶ò.ó�ôàö®ð�ô�õcò.öÀò§útî,'¦öÀò.ìÃ�-ëeï.ò.õ�ô�ï�ø)öG� ô,�Àø�ò.ó�ôàñ�ì=ô�ï+ö®ò;ö®ì ì.ñ����\î�ì=ô�ðÌò=î²÷oî�õ�õ�ô�÷oò;ò=îTc^îUïï.ô�÷oô�öf"Uô�ë·÷oî�õ�õ�ô�÷oò.ö®î�õ$'^ï.î �/e4�\¼�õËö¤õ�ì=ò.ëUõ�÷oô�ö®ì;ë,�®ì=î·ò=î �®ðÎöÀò.ì«8;6�@�A�ö®õtò.ó�ôwì.ô�ì.ì.öÀî�õCø-öG� ô,�Àø�í;ó�ô�ò.ó�ô�ï;öÀò;ö®ì üUî�ö®õ�üò=î¹64.�ACB¹öÀò.ì=ô���'p'^îUï;÷oî�õ�õ�ô�÷oò.öÀî�õ4ø�îUï í;ó�ô�ò.ó�ô�ï;öÀò ö®ì¥üUî�ö®õ�ü·ò=î¹FH6,B�B�A�F#>¥ò=î9ëUõ�îUò.ó�ô�ï+ö®õ�ì=ò.ëUõ�÷oô,�

� ó�ô�ï.ô ö®ì�ë,�®ì=î�ëUõ&0N:��9AY8H2Y0984K�ò.ó�ëeò\�·ë�úd�\ô�ï�'MîUï4� ÷oô�ï�ò.ëUö®õgî,�\ô�ï�ëeò.öÀî�õ�ì�ø%ëUõ�ðgë�8�D BPOdX�032C>�AC8±ò.ó�ëeò0ó�ëUõ�ð��Àô�ìò.ó�ô�ì=ô9î,�)ô�ïnëeò.öÀî�õ�ì %WúÎüUô�õ�ô�ïnëeò.ö®õ�ü¶÷oô�ï.ò.ëUö®õ�ï�ëUõ�ð�î �È"eëeï�ö®ë9%]�Àô�ì#ëUõ�ðÏô�õ*'^îUï�÷�ö®õ�ü¶÷oô�ï�ò.ëUö®õ�ü �Àî,%�ë,�/÷oî�õ�ì.ö®ì=ò=ô�õ�÷oú÷oî�õ�ì=ò=ïnëUö®õ%ò.ì��W·Wî �gô#î,�\ô�ï�ëeò.öÀî�õ�ì[ï.ô�ì.ñ��®ò¥ö¤õÌëgï.ô�÷oîUï�ðR%\ô�ö®õ�üd�]�®ëU÷oô�ð¶ö®õÌë$>E8;09B*2YFY8�D~.Ê>E�

� ó�ô+ï�ö¤õ�ü)�·ëUì.ò=ô�ï�ùUô�ôY�-ì¥ò=ï�ëU÷.ù²î,'�ì=ô�ì.ì�öÀî�õ9ùUô�úEì� �¡£¢�¤�¥±ò.ó�ëeò�ëeï.ô#ì=ô�ò[ñ*�të,�gî�õ�ügñ�ì.ô�ï�ö®õ�ì=ò.ëUõ�÷oô�ì«c�ëUì¥í;ö����%\ô±ôoûZ���¤ëUö®õ�ô�ð�%\ô��Àî�íwøWò.ó�ô#ùUô�ú¯î,'�ëUõ¶ö®õ�ì=ò.ëUõ�÷oô�ö®ì[ì=ô�ò[í+ó�ô�õtò.ó�ëeò;ö®õ�ì=ò.ëUõ�÷oô#ì=ò.ëeï.ò.ì+ëgì=ô�ì.ì.öÀî�õ�e4�æS�õÌëUð�ð�öÀò.öÀî�õCøò.ó�ô#ï�ö¤õ�üd�9ëUì=ò=ô�ï;ó�ëUì[ëU÷�÷oô�ì.ì;ò=î9ë�ï�ëUõ�ð�î � %-öÀò[ì=ò=ï�ö®õ�üoL î,'�ì=î �gô�ëeüUï.ô�ô�ðEÿ§ñ��)î�õR�®ô�õ�üUò.ó(c^ò.ó�ö®ì[ì=ò=ïnö®õ�ü�ö®ì[õ�îUòï.ôY"Uô�ë,�Àô�ð²ò=îwò.ó�ô+ëUð*"Uô�ï�ì�ëeï.ú*e4�æÅ�ô�í;ö��-�Eï.ôY'Mô�ïò=î0L ëUì�>@?1AºACB �tD 8;69B�X!ACB]>E� � ó�ô^�-ñ�ï��\î�ì=ô[î,'Cò.ó�ô ô�õP"EöÀï.î�õ��gô�õcòö®ì¥ò=îÍ�gîWð�ô��Cö®õ*'^îUïH�·ëeò.öÀî�õtì.ó�ëeï�ô�ðR%cútñ�ì=ô�ïnì ö®õÌó�öÀü�ó�ô�ï=ÿ��ÀôY"Uô��Ê��ï.îUò=îE÷oî �®ìY�

·Eö¤õ�÷oô�í�ô�ð�ô�ë,��í;öÀò.ó$��ëUì.ì=í�îUï�ð8ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õCø\ëUõ�ð$%\ô�÷�ëUñ�ì.ôº��ëUì.ì.íîUï�ð�ì+ëeï.ô�õ�îUò±÷oï.úP��ò=îUüUï�ë9��ó�ö®÷�ë,�-�Àúì=ô�÷�ñ�ï�ôUø�î�ñ�ï�ì=úEì=ò=ô�� ��ñ�ì=òwì.î �gô�ó�î�í ë,���ÀîOí ëËõ�î�õEÿ§õ�ô�ü �®öÀü�ö�%��Àôd��ï.î,%�ë9%�ö-�®öÀò§úÎî,'[ëUõÚëUð*"Uô�ïnì.ëeï.ú�ì.ñ�÷�÷oô�ì.ì�'^ñ��-�Àú

³

Page 6: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ö��Q�\ô�ï�ì.î�õ�ëeò.ö®õ�ü·ëUõ8ó�î�õ�ô�ì=ò+ñ�ì=ô�ï��ÃÅ�ô�ð�î9ò.ó�ö®ì^%Wú¶ö®õ�÷Y�®ñ�ð�ö®õ�üd��ëUì.ì=í�îUï�ð�ì;ôoûZ�]�®ö®÷�öÀò��Àútö®õÌî�ñ�ïa�gîEð�ô��G�gÅ�ô��Àô�ò¦ ð�ô�õ�îUò=ô²ò.ó�ô!'�ñ�õ�÷oò.öÀî�õÚëUì.ì.öÀü�õ�ö¤õ�üR��ëUì.ì=í�îUï�ð�ìwò=î¹�-ëUöÀï�ì�î,' ñ�ì=ô�ï�ìY� � îÎì.ö-�Q���®öf'^úÎõ�îUò.ëeò.öÀî�õCø�íô²í;ö����¦í ï�öÀò=ô¦ i §¨RS©ºl�ò=î!�gô�ëUõ ¦ iª �§¨RS©�¥YlWc�öG� ô,�Àø ¦ i §[RS©)luö®ìÃ%Wútð�ôCÓ-õ�öÀò.ö®î�õ²ô�+Wñ�öf"eë,�Àô�õcò[ò=î ¦ i ©�RS§^l@e4�

� ó�ô�ëUð*"Uô�ï�ì.ëeï.úR�·ë�ú��)ô�ïH'MîUïH� ò.ó�ô«'Mî ���®î�í;ö®õ�ü�ò�úP�\ô�ì[î,'�î,�\ô�ï�ëeò.öÀî�õ�ìYí�Q����'�U�6�Q�U«�â8�uè�âcæ i � ï�ëUõ�ì.÷oï�ö���òYí^cI¬'­'4®­�/_­�¯232­�°21�±B²�1)³�¬'R��SRI��´ ¢ e�l

� ó�ô·ëUð*"Uô�ï�ì.ëeï�úÏëUì�ì.öÀü�õ�ì�ö¤ð�ô�õ%ò.ö®ò§úÏì=ò=ï�ö®õ�üZ��´M¢¥ò=îLc�õ�ô�íae#ñ�ì=ô�ï<���/S�õ�ëUð�ð�öÀò.öÀî�õCø�ëÌï�ëUõ�ð�î � ��ëUì.ì=í�îUï�ð¦ i���´{¢�RI��´ ¢¶µ lEö¤ì�÷nó�î�ì=ô�õd%cúwò.ó�ôïnö®õ�ü��9ëUì=ò=ô�ï�'MîUï�ô�ëU÷�ó�ôoû�ö®ì=ò.ö¤õ�ü+ñ�ì.ô�ï��·TE� � ó�ô\��ëUì.ì=í�îUï�ð�ì�ëeï.ô¥õ�îUò��]�®ëU÷oô�ðö¤õ¶ò.ó�ôàò=ï�ëUõ�ì.÷oï�ö���òY� � ó�ö®ì^�gîEð�ô��®ì;ò.ó�ô�î�ñ�òAÿ«î,'Mÿ_%�ëUõ�ð8÷oî ����ñ�õ�ö®÷�ëeò.ö®î�õ¶ï.ô�+Wñ�öÀï.ô�ð¶ò=î¯ì=ô�ò�ñ*�&�-ëUì.ì=í�îUï�ð�ì%\ô�ò�íô�ô�õÎñ�ì=ô�ï�ìY�

è�â���}���è�è�ä�å�æiçÑi � ï�ëUõ�ì�÷oï�öf��òYí¸cI¬�²�1)/¸96¯ ²v²�¹ º)³v».¬�R��SRI��´ T R ¦ e�l� ó�ô�ö®ð�ô�õcò.öÀò§ú¼��´{T)ö®ì¥ï�ô�+cñ�ö®ï.ô�ð¯ò=î�%\ô±õ�ô�í�ø�öG� ô,�Àø�õ�îUò ëUì.ì�öÀü�õ�ô�ðtò=î9ëUõcú¯ñ�ì=ô�ï�� � ó�ö¤ì�ì.ô�ò.ì ¦ i���´{¢½RI��´{TÄl4ò=î¦ ëUõ�ð����®ëU÷oô�ì+ë�ï.ô�÷oîUï�ðËö¤õtò.ó�ô#ò=ï�ëUõ�ì.÷oïnöf��òY�¼�'^ò=ô�ï¨��´MT�ó�ëUìa%\ô�ô�õ8ì��)ô�÷�öfÓ�ô�ðÎö¤õÎë¹2YA�>�.103242457698;:�î,�\ô�ï�ëeò.ö®î�õCøCöÀò�÷�ëUõ�õ�îUò«%\ô�ñ�ì.ô�ðÎö®õÏëtì.ñ*%-ì=ô�+cñ�ô�õ%òD@B�DE>EDE0�@ÄDK¾#A)=Z2YAY8�î,�)ô�ïnëeò.öÀî�õ��

�Q����'�U�6�Q�U«�â8�uè�âcæ¿�Q�uè$�'�6�.z%â i � ï�ëUõ�ì�÷oï�öf��òYí^cI¬5­�4À­5/ÂÁ�±B²�1)³Ã­�4B²'/ÂÁ�¬'R��SR��ÄRY8�6�@�A9cU�SR��ZeIRIÅq��´�¢�¤te�l� ó�ôwëUð*"Uô�ï�ì�ëeï.úÌëUì.ì.öÀü�õ�ì+ë·ñ�ì=ô�ï�ö®õ�ì=ò.ëUõ�÷oô/cU�SR��Pe;ëgï.î �®ô/c^î�õ�ôwî,'Æ �î,�\ô�õBR.÷oî�õ�õ�ô�÷oò�¥3e¥ëUõ�ðÎë9ñ�ì.ô�ï�Åq��´M¢�¤ò.ó�ëeòàö®ìàì.ñ*���\î�ì=ô�ðÏò=î¹%)ô²öÀò.ì«��ëeï.ò.õ�ô�ï��/S{'{Åq��´{¢�¤9ö¤ì�õ�îUòwì=ô�òàò=îÎëUõbö®ð�ô�õcò.öÀò§ú8î,' ëUõ�ö¤õ�öÀò.ö®ë,�®öK!�ô�ð8ñ�ì=ô�ï�øò.ó�ô�õ²í�ô�ï.ô�+cñ�öÀï.ô;ò.ó�ëeò¥ë!2YA�>�.103242457698;:Ìî,�\ô�ï�ëeò.ö®î�õ²ó�ëUìW%\ô�ô�õ/��ï.ôY"EöÀî�ñ�ì��Àú��\ô�ï�'^îUïH�gô�ð/'MîUïÆ�¦ëUõ�ð¼Åq��´M¢�¤c�ëUõ�ð¶ó�ô�õ�÷oô�ò.ó�ô�ï.ô�÷�ëUõ$%\ô�õ�îQ'�ñ�ò.ñ�ï.ôQD@B�DE>EDE0�@ÄDK¾#A)=Z2YAY8àî,�\ô�ï�ëeò.ö®î�õÌí;öÀò.óÇÅd��´O¢�¤�ëUì;ò.ó�ô�ñ�ì=ô�ï¸S�ý�e4�

��âWæ5|u�Q�.� ��âÇ��è�âcæ¿�Q�uè����6��z�â i � ï�ëUõ�ì.÷oï�öf��òYí¸cI¬Y/W1ij�ÈB­'46¯Ä/W1�±B²�1ijɭ'4À²5/W¯�4ÀÊ�1y¬eø��.ø �Pe�l� ó�ô�ëUð*"Uô�ï�ì.ëeï�útì��)ô�÷�öfÓ�ô�ì[ë&c@��ï.ôY"EöÀî�ñ�ìH�Àú9ö®õ�ö®ò.ö®ë,�®ö"!�ô�ð]e0ñ�ì=ô�ï ö¤õ�ì=ò.ëUõ�÷oô!cU�SR��Ze[ò=î9ò=ô�ïH�·ö®õ�ëeò=ô,�

��âWè$���Q�uè����6��z�âZ}���è�è�ä�å-æOç� ó�ö®ìÌö®ìÌ÷�ë,���®ô�ð í;öÀò.ó�ëUõFö®õ�ì=ò.ëUõ�÷oô¬cU�SR��ZeÌëUõ�ð�ë½�-ëUì.ì=í�îUï�ð ü�ñ�ô�ì.ì ¦ � � ó�ô¹ëUð*"Uô�ï�ì.ëeï�úÌ+Wñ�ô�ï�öÀô�ìÌö�'¦ � ¦ i���´�¢�RIÅq��´M¢�¤Yl_�\S{'�ò.ó�ö®ì ö®ì ò=ï�ñ�ôUø�ò.ó�ô)+cñ�ô�ï�útö¤ì ÷�ë,���Àô�ð¶ëR24=�FHF�A�2H2UË4=2@ÊO,=�A�242�6,B8 5��´M¢�RIÅq��´{¢�¤�¥�c�õ�îUò=ôò.ó�ëeò;ë·ì.ñ�÷�÷oô�ì�ì;'^ñ��\ü�ñ�ô�ì.ì î�õ� �§[RS©�¥àö®ì;ë,�®ì=î·ë·ì.ñ�÷�÷oô�ì.ì;'�ñ��\ü�ñ�ô�ì.ì[î�õ� �©�RS§[¥3e4�� ó�ö®ìg+cñ�ô�ï.úÍ�9ë�ú¯î�õ��Àú!%\ô#ëUì=ùUô�ðËî�õ�÷oô«�\ô�ï ñ�ì=ô�ï ö®õ�ì.ò.ëUõ�÷oô,� � ó�ô#ö®õ�ì=ò.ëUõ�÷oô#ó�ëUì[ò=î�%\ô#ö®õ�ö®ò.ö®ë,�®ö"!�ô�ð¯ëUõ�ðõ�îUògúUô�ò·ô�õ�ü�ëeüUô�ðØö¤õbë�ì.ô�ì.ì.öÀî�õ c�öG� ô,�Àø¥õ�î 2�>_0,8�>º2YAC2H24DG69B î,�\ô�ï�ëeò.öÀî�õ ó�ëUìQ%\ô�ô�õJ�\ô�ï�'^îUïH�gô�ð '^îUïgò.ó�ëeòö¤õ�ì=ò.ëUõ�÷oôte4�$»+îUò=ôtò.ó�ëeòwò.ó�ô¯ëUð*"Uô�ï�ì.ëeï�ú¹ö®ìwë,���®î�í�ô�ð�ò=îÏëUì=ù¹ëV>�AC2�>aD@B*2�>_09B�F4Aº.1092H24576,8�:½+Wñ�ô�ï.úÏî�õbëUõö¤õ�ì=ò.ëUõ�÷oô#ò.ó�ëeò+ó�ëUìÃ%\ô�ô�õÌò=ô�ïH�·ö¤õ�ëeò=ô�ð��� ó�ö®ìÃ+Wñ�ô�ï.útð�îcô�ì;õ�îUò^�Àô�ë�"Uô�ëUõ%útï.ô�÷oîUïnð�ì ö®õtò.ó�ôwò=ï�ëUõ�ì.÷oï�ö���òY�

è$����æ��·è�âWè�è��^å®� i � ï�ëUõ�ì.÷oï�öf��òYí^cI¬�²'/W¯)³�/f²�1 ²v²�­�º�4�¬'R��SR��Pe�l� ó�ôwëUð*"Uô�ï�ì�ëeï.ú¶ì;�\ô�÷�ö¶Ó�ô�ì;ò.ó�ëeò+ë²ì=ô�ì.ì.öÀî�õËùUô�úa¡£¢�¤º'MîUï±ñ�ì=ô�ï�ö®õ�ì=ò.ëUõ�÷oôÍcU�SR��Pe+ì.ó�î�ñ��®ð�%\ôw÷oî�õ�ì=ò=ï�ñ�÷oò=ô�ð��� ó�ô�ëUð�"Uô�ï�ì.ëeï.úwì��)ô�÷�öfÓ�ô�ì4í;ó�ö®÷�ó�FH69B�B�A�F#>EDE69BR032424DfO,B�X!ACB]>�ì.ó�î�ñ��®ð�%\ô�ñ�ì=ô�ð�� � ó�ô�ï.ô�ëeï.ô�ò.ó�ï.ô�ôW�)î�ì�ì.öf%��Àô÷oî�õ�õ�ô�÷oò.öÀî�õËëUì�ì.öÀü�õ��gô�õcò.ì�ø�ëUì+ì.ó�î�í+õÌö®õ � ë9%��Àô ¨ �»+îUò=ôwò.ó�ëeò ò.ó�ôw÷oî�õ�õ�ô�÷oò.öÀî�õ¶ëUì.ì.ö®ü�õ��gô�õcò ö®ì õ�îUò[ï.ô�÷oîUïnð�ô�ð¶ö®õÌò.ó�ô#ò=ï�ëUõ�ì.÷oï�ö���òY�

� }�}��Q�UzÄ�W�5�Må®�Èi � ï�ëUõ�ì.÷oï�öf��òYí^cI¬�¯�9v9_32­vÊ�¯)/_­�º�4�¬�REN®RENæcQL�RY �¡�¢�¤�¥3e;e�l� ó�ô9ëUð*"Uô�ï�ì�ëeï.ú�ö®ì�ë,���ÀîOíô�ð�ò=îËî,%�ò.ëUö¤õ¹ëUõ%ú¹ö¤õ*'MîUï4�·ëeò.öÀî�õ�ì.ó�ô9í;ö®ì.ó�ô�ì#ë9%\î�ñ�òwò.ó�ô·ô�õP"WöÀï�î�õ��gô�õcòwëUõ�ðò.ó�ô�ì=ô�ì�ì.öÀî�õ¶ùUô�úEìY��c � ó�ö®ì^�·îWð�ô��¤ì¸�Àô�ëeùeëeüUôàî,'ì=ô�ì.ì.öÀî�õËùUô�úËö®õ*'^îUïH�·ëeò.ö®î�õ¶ö®õËë²ï.ô�ë,����ï.îUò=îE÷oî �uò.ó�ï.î�ñ�ü�óò.ó�ô�ñ�ì=ôàî,'0ò.ó�ô�ùUô�úÎö®õCø�'^îUï�ôoû�ë,�Q���®ôUø)ô�õ�÷oï.úP��ò.öÀî�õ�ì+î,'7�gô�ì.ì.ëeüUô�ì��Äe � ó�ôd'^ñ�õ�÷oò.öÀî�õ8N¹ö®ì�ì;�\ô�÷�ö¶Ó�ô�ð¹%cúò.ó�ôwëUð*"Uô�ï�ì.ëeï�ú¯ëUõ�ðËö®ì ëUì.ì.ñ��gô�ðtò=î�%\ô#ôoþ²÷�öÀô�õcò��Àút÷oî �Q��ñ�ò.ë9%��®ô,�

´

Page 7: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

¨ �%å_}¦âv�~̧å-æ[z�å®����âvz��'�^å_�u̧æiå_| cU� T R�� T eIÍ � ó�ö®ìï.ô�+Wñ�öÀï.ô�ì¥ò.ó�ëeò

Î 8;6�@�A#cU�ER��Pe;ö®ìo�Aî,�\ô�õCø��

Î cU��TUR��ÄT e¦ó�ëUì7%\ô�ô�õ¯ö®õ�öÀò.ö®ë,�¤ö"!�ô�ð·ëUõ�ð¯ó�ëUì¥õ�îUò%\ô�ô�õÌò=ô�ï4�·ö®õ�ëeò=ô�ðCø

Î 8;6�@�A#cU��TUR��ÄT e�ö®ì£�=÷oî�õ�õ�ô�÷oò�ø��Î Åd��´{¢�¤��Ï��´ ¢ µ ø

Î Åd��´ ¢�µ ¤Sµ �Ï��´{¢�øÎ õ�îÎîUò.ó�ô�ï·ö¤õ�ì=ò.ëUõ�÷oô¯ö®ì�î,�)ô�õL'^îUï�÷oî�õ�õ�ô�÷Qÿò.ö®î�õR'Mï�î � cU�·TQR���T-enø�ëUõ�ð

Î õ�îÏ>�A�2�>ªD@B*2C>_09B]F4AJ.103242457698;: î,�)ô�ïnëeò.öÀî�õó�ëUìÃ%\ô�ô�õR�\ô�ï�'MîUï4�gô�ðtî�õVcU�SR��Ze4�

� ó�ôØï�ö®õ�ü �·ëUì.ò=ô�ïÚüUô�õ�ô�ïnëeò=ô�ìu¡ ¢�¤ ï�ëUõ�ð�î ���Àú,�Å�ôËõ�îOí ì.ë�úbò.ó�ëeò&cU�SR��Pe·ö®ì�î,�\ô�õJ'MîUï9÷oî�õ�õ�ô�÷Qÿò.öÀî�õR'^ï.î � cU��TUR��ÄT-e4�

°Z�6z�å®����âvz�����åÎcU� T R�� T e4� � ó�ö®ì�ï.ô�+cñ�öÀï.ô�ì¥ò.ó�ëeòÎ 8;6�@�A#cU�ER��Pe;ö®ìo�=÷oî�õ�õ�ô�÷oò�ø��Î cU� T R�� T e¦ó�ëUìW%\ô�ô�õ¯ö®õ�öÀò.ö®ë,�¤ö"!�ô�ð·ëUõ�ð¯ó�ëUì�õ�îUò%\ô�ô�õÌò=ô�ï4�·ö®õ�ëeò=ô�ðCø

Î 8;6�@�A#cU� T R�� T e�ö®ì£�Aî,�\ô�õCø��

Î Åd��´O¢�¤��Ï��´ ¢�µ øÎ Åd��´ ¢ µ ¤ µ �Ï��´{¢�øÎ cU��TUR��ÄT-etí¥ëUì¶î,�\ô�õ '^îUïÎ÷oî�õ�õ�ô�÷oò.ö®î�õ '^ï.î �

cU�ER��Pe[ë9'^ò=ô�ïdcU�ER��Pe í�ëUì ö¤õ�öÀò.ö®ë,�®öK!�ô�ðCøWëUõ�ð

Î õ�îÏ>�A�2�>ªD@B*2C>_09B]F4AJ.103242457698;: î,�)ô�ïnëeò.öÀî�õó�ëUìÃ%\ô�ô�õR�\ô�ï�'MîUï4�gô�ðtî�õVcU�SR��Ze4�

� ó�ô ï�ö¤õ�ü �·ëUì=ò=ô�ï ì.ô�ò.ì�¡£¢�¤Ð� ¡ ¢�µ�¤Eµ � Å�ôõ�îOí ì.ë�ú ò.ó�ëeòLcU��TR��ÄT e¯ö®ìÌõ�î½�Àî�õ�üUô�ï¶î,�\ô�õ '^îUï÷oî�õ�õ�ô�÷oò.ö®î�õ��

±Z�â�Ñy}¦å-è�â6Í � ó�ö®ìgï.ô�+Wñ�öÀï.ô�ì9ò.ó�ëeò9ô�ö®ò.ó�ô�ï¿Åd��´O¢�¤8ó�ëUì9õ�îUò!%\ô�ô�õØëUì.ì�öÀü�õ�ô�ð´ò=îbëUõ ö¤ð�ô�õ%ò.ö®ò§ú¬î,'�ëUõö®õ�ö®ò.ö®ë,�®ö"!�ô�ðtñ�ì=ô�ï�ø�îUï;ò.ó�ô�ï�ôàó�ëUì¸%)ô�ô�õËë9ì.ñ�÷�÷oô�ì�ì;'^ñ��Cü�ñ�ô�ì.ì;î�õ� 5��´{¢½RIÅd��´{¢�¤�¥ � � ó�ô�ï�ö®õ�ü��·ëUì=ò=ô�ï±ì=ô�ò.ì¡£¢�¤�ò=î·ò.ó�ô�"eë,�®ñ�ô�ì;�\ô�÷�ö¶Ó-ô�ð/%Wútò.ó�ô�ëUð*"Uô�ï�ì�ëeï.ú,�

� ë9%��Àô ¨ í>Ò¦ë,�®ö¤ðÌ÷oî�õ�õ�ô�÷oò.öÀî�õÎëUì.ì.öÀü�õ��·ô�õ%ò.ìÃ'^îUï ò.ó�ô�2�>_098C>\2YA�2424DG69BÏî,�\ô�ï�ëeò.öÀî�õ

²

Page 8: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

�Q|c}��^âv|Úâ2�®���W�'�^å_�Ëi � ï�ëUõ�ì.÷oï�öf��òYí¸cI¬5­�È29_3À¬5R#FYX�B�> e�l� ó�ô�ëUð*"Uô�ï�ì.ëeï.ú ö®ìtë,���ÀîOíô�ð ò=î½��ñ�òtö®õ ëUõÓ�=ö��Q�]�Àô��gô�õcò.ëeò.öÀî�õ ÷oî ���gô�õcòS�¬í;ó�ö®÷nó ð�îcô�ìtõ�îUòÌë3h\ô�÷oòëUõcúWò.ó�ö®õ�üÌô��®ì.ô9ö®õÏò.ó�ô·ö®ð�ô�ë,�/íîUï4�®ð�� � ó�ö¤ì+í+ö�����%\ô·õ�ô�ô�ð�ô�ðT'^îUï�üUô�õ�ô�ï�ëeò.ö¤õ�üËö®ð�ô�ë,��í�îUïH�®ð("WöÀô�í+ì±ò.ó�ëeòëeï�ô�ô�+cñ�öf"ië,�®ô�õ%ò[ò=î·ï�ô�ë,�CíîUï4�®ð�"Wö®ô�í;ì�ø�ëUì í+ö����]%)ô�ð�ö®ì.÷�ñ�ì.ì.ô�ðÍ�¤ëeò=ô�ï��

��îUïtëUõØëUð�"Uô�ï�ì.ëeï.ú�� � øM�C:NAH0�@��¹698I@f:1cU� � egö®ìgò.ó�ô¶ïnëUõ�ð�î � "eëeï�ö®ë9%��®ô¶ð�ô�õ�îUò.ö®õ�ü�ò.ó�ô¶ò=ï�ëUõ�ì.÷oïnöf��ògî,'±ò.ó�ôëUð*"Uô�ï�ì�ëeï.ú_�¾ì;î,�\ô�ï�ëeò.öÀî�õ�ìY�Ôa�^è�z)��è�è��^å_�ÖÕ�×�â2�uâWæ5�6�®Ø�âcãËâ)Ñyz�Ù��6�.×-â ÚOé î�ô�÷�ëUñ�ì=ô�ùUô�úWì�ôoû�÷�ó�ëUõ�üUô�ð�%\ô�ò�íô�ô�õ�ò§í�î#ó�î�õ�ô�ì=ò�ñ�ì=ô�ï�ì�ëeï.ô¥õ�îUòò=ï�ëUõ�ìH�·öÀò=ò=ô�ðtð�ñ�ï�ö¤õ�ü�ò.ó�ô)2�>_098C>æ2�A�2424DG69BËî,�\ô�ï�ëeò.öÀî�õ�ì�ø�öÀò�ì�ó�î�ñ��®ð!%)ô±÷Y�Àô�ëeï¥ò.ó�ëeò¥ùUô�ú9ôoû�÷�ó�ëUõ�üUô�ö®ì�÷oî �Q���Àô�ò=ô��Àúì=ô�÷�ñ�ï�ôàö®õËò.ó�ôàö®ð�ô�ë,�4í�îUïH�®ð��^»�ëeò.ñ�ï�ë,���®úUø�04. .®@ÄDGFH0,>EDG69Bbî,�\ô�ï�ëeò.öÀî�õ�ìa�·ë�úÌï�ôY"Uô�ë,��ùUô�úEìY� � ó�ö®ì^�·îWð�ô��¤ì ò.ó�ô�ñ�ì=ôî,'4ò.ó�ô�ùUô�úEì�ö¤õ9ë�ó�öÀü�ó�ô�ï=ÿ��®ôY"Uô�����ï.îUò=îE÷oî �G�æÅ ó�ëeò�íô±ï.ô�+Wñ�öÀï.ô¸'Mï.î � ë�ì=ô�÷�ñ�ï.ô�ùUô�ú·ôoû�÷�ó�ëUõ�üUô ��ï�îUò=îW÷oî �\ö®ì0ò.ó�ëeòôY"Uô�õ·ü�ö�"Uô�õ9ì=î �gô¸��ëeï.ò.ö®ë,��ö®õ�'MîUïH�9ëeò.öÀî�õgë9%\î�ñ�ò¦ò.ó�ô ùUô�úEì�øcò.ó�ô;ëUð*"Uô�ï�ì�ëeï.úgì.ó�î�ñ��®ð�õB� ò�%\ô ë9%��®ô ò=îwð�îwëUõcúWò.ó�ö®õ�üö®õËò.ó�ôwï.ô�ë,��í�îUïH�®ðÎò.ó�ëeò�ó�ôà÷oî�ñ��®ð�õB� ò;ð�î¯ö®õ¶ò.ó�ô�ö®ð�ô�ë,�uíîUï4�®ð��ÃSAõËîUò.ó�ô�ï�í�îUï�ð�ì�ø\öf'/ë²ó�öÀü�ó�ô�ï=ÿ��ÀôY"Uô��p��ï.îUò=îE÷oî �ö®ì#ì=ô�÷�ñ�ï.ô&c�ö®õ�ì=î �gô·ë9����ï.î,��ï�ö¤ëeò=ô�ì.ô�õ�ì=ôte�ö®õÏëUõ¹ö®ð�ô�ë,��ì.úWì=ò=ô�� í;öÀò.óÏùUô�úEì#üUô�õ�ô�ï�ëeò=ô�ðV%cú8ò.ó�ôgï�ö®õ�üÍ�·ëUì.ò=ô�ï�øò.ó�ëeò^��ï.îUò=îW÷oî �uì.ó�î�ñ��®ðÌë,�¤ì=îQ%\ô�ì=ô�÷�ñ�ï.ô�öf'�í�ô�ñ�ì=ô�ë·ì=ô�÷�ñ�ï.ô�ùUô�útôoûE÷nó�ëUõ�üUô�ì.÷�ó�ô��·ô,�Û¯âv|~��æ5ØCè å_�Ü|��y�'���6���6�.�'Ùuâ2�®�'�UzÄ�W�5�Må®�¦é ¼�ì��·ë�úÎ%\ôÎì=ô�ô�õ '^ï.î ��ò.ó�ô�ð�ôCÓ-õ�öÀò.ö®î�õCø¥ò.ó�ôÏü�ñ�ëeï�ëUõcò=ô�ô�ì��ï.ît"Wö¤ð�ô�ð¹ò=îÏò.ó�ôtö®õ�ì=ò.ëUõ�÷oô�ìàö®õÌ64.*AYB ëUõ�ð FH69B�B�A�F#>�ï.î �Àô�ì�ëeï.ôtõ�îUò�÷oî �Q���Àô�ò=ô��®ú¹ì=úZ�!�gô�ò=ï�ö®÷9�T·Z�\ô�÷�ö¶Ó-÷�ë,���ÀúUøëUõ¶ö®õ�ì=ò.ëUõ�÷oô�ö®õ¶ë$F469B�B�AHF�>[ï�î �Àô�ö®ì¥ü�ñ�ëeï�ëUõcò=ô�ô�ðÎò.ó�ëeò;ë·÷oî�õ�õ�ô�÷oò.öÀî�õÌí;ö��-�]%\ô#ô�ì=ò.ë9%]�®ö®ì.ó�ô�ð(c�ì�ö®õ�÷oô�öÀò.ìÃ�-ëeï.ò.õ�ô�ïö®ì9ï.ô�ëUð�ú ò=î¬ëU÷�÷oôY��òtò.ó�ô8÷oî�õ�õ�ô�÷oò.öÀî�õ]e4� © õ´ò.ó�ôÎîUò.ó�ô�ïÌó�ëUõ�ðCø[ëUõ ö®õ�ì.ò.ëUõ�÷oôLcU�SR��Ze¯ö®õØëUõ 64.*AYBFï.î �Àô8ó�ëUìõ�îtü�ñ�ëeï�ëUõcò=ô�ôgò.ó�ëeò#ëUõcúUî�õ�ôgí;ö�����ôY"Uô�ï�÷oî�õ�õ�ô�÷oò#ò=îÌöÀòY�)¼�����ò.ó�ëeò�ö®ì�ï.ô�+Wñ�öÀï�ô�ðÎö®ì+ò.ó�ëeò#ò.ó�ô�ï�ô���ñ�ì=ò�ôoû�ö®ì=ò#ëUõö®õ�ì.ò.ëUõ�÷oô�cU� T R�� T e�î,')ò.ó�ôÃ��ëeï.ò.õ�ô�ï/ò.ó�ëeò¦ó�ëUì¦õ�îUò/úUô�òÕ%\ô�ô�õ�ò=ô�ïH�9ö®õ�ëeò=ô�ðCø�ëUõ�ð�ò.ó�ô[î�õ��Àúà÷oî�õ�õ�ô�÷oò.öÀî�õgò.ó�ëeò/ô�ö®ò.ó�ô�ïcU�SR��Ze�îUïRcU�·TUR���T e�÷oî�ñ��®ð¹ôY"Uô�ï�ô�ì=ò.ë9%��¤ö®ì.ó�í�î�ñ��®ðV%)ô9ò=îËô�ëU÷�óbîUò.ó�ô�ï#�$S�òàë9���\ô�ëeï�ìwö����)î�ì�ì.öf%��Àô�ò=î8÷oî �Q���Àô�ò=ô��Àúô��®ö��9ö®õ�ëeò=ô±ò.ó�ôwëUì=ú1���gô�ò=ï�ú²î,'�ò.ó�ôwð�ôCÓ)õ�öÀò.öÀî�õ¯í;öÀò.ó�î�ñ�ò[ñ�õ�ï.ô�ë,�®ö¤ì=ò.ö®÷±ëUì.ì.ñ�����ò.öÀî�õ�ìY�

� ó�ôtñ�õ�ö��®ëeò=ô�ï�ë,�Àÿ§ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õ½�gîEð�ô���î,'«·�ó�î�ñ*� i®±,³9l;ö®ì�ð�öfh)ô�ï.ô�õcòQ'^ï.î � ò.ó�ôÌî�õ�ôR��ï�ô�ì=ô�õ%ò=ô�ðØë9%)ît"Uôö®õ�ò.ó�ô�'Mî �-�Àî�í;ö¤õ�ütí�ë�ú]í � ó�ô&64.�ACB´÷oî�õ�õ�ô�÷oò.ö®î�õ�ëUì.ì.ö®ü�õ��gô�õcòwð�îWô�ì�õ�îUòàì��)ô�÷�ö�'MúÎò.ó�ô9ö®õ�ì.ò.ëUõ�÷oô�'^ï.î ��í;ó�ö¤÷�óò.ó�ô9÷oî�õ�õ�ô�÷oò.öÀî�õ�ö¤ì#ôoûZ�\ô�÷oò=ô�ðCø�ëUõ�ð¹ëUõcú�ö®õ�ì=ò.ëUõ�÷oô9î,'�ò.ó�ôQ��ëeï.ò.õ�ô�ï�ö®ì#ë,���ÀîOíô�ð�ò=îË÷oî�õ�õ�ô�÷oòY� © õ�ò.ó�ô9îUò.ó�ô�ïó�ëUõ�ð4ø)ò.ó�ô&FH69B�BÊA�F�>�÷oî�õ�õ�ô�÷oò.ö®î�õ¹ëUì.ì.öÀü�õ��gô�õ%ò#ì=ò.ö-����ì��)ô�÷�öfÓ�ô�ì+ëUõ�ö¤õ�ì=ò.ëUõ�÷oô,�)S�ò#ö®ì#ñ�õ�÷Y�Àô�ëeï±ò=î¶ñ�ì±ëUì#ò=îtí;ó%úî�õ�ô·í�î�ñ��®ð�õ�ô�ô�ð¹ëR�gîEð�ô���ò.ó�ëeò���ï�î#"Eö®ð�ô�ì�ëUñ�ò.ó�ô�õ%ò.ö®÷�ëeò.ö®î�õ�ò=î¶î�õ��ÀúÎî�õ�ô·î,'�ò.ó�ô���ëeï�ò.öÀô�ìY�QSAõ�ëUõ%ú�÷�ëUì=ôUø�ëUì·Eó�î�ñ���ï.ô��·ëeï.ùEì�ø�ëUñ�ò.ó�ô�õ%ò.ö¤÷�ëeò.öÀî�õ�ö®ìwõ�îUòwëUõ�ö-�Q�\îUï.ò.ëUõ%ò�ö¤ì.ì.ñ�ôgö®õ�îUïnð�ö®õ�ëeï.úÎùUô�úÏôoûE÷nó�ëUõ�üUô,��Å�ô9í;ö-����ì=ô�ôUøó�îOíôY"Uô�ï�ø-ò.ó�ëeò ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õËö®ìÃ�gîUï.ô#î,'�ëUõ¶ö®ì.ì�ñ�ô±í;öÀò.óÍ��ëUì.ì=í�îUï�ð�ì�� � ó�ö®ì�í;ö��-�]%\ô�÷oî �gô�ë9����ëeï.ô�õcò[í;ó�ô�õí�ôw÷oî�õ�ì.ö®ð�ô�ï[ò.ó�ô���ëUì.ì.íîUï�ðtùUô�úÌôoû�÷�ó�ëUõ�üUôº�gîEð�ô��Cí;ö®ò.óÌö��Q���®ö¤÷�öÀòëUñ�ò.ó�ô�õ%ò.ö®÷�ëeò.ö®î�õËö®õ&·Wô�÷oò.ö®î�õ&³Z� ¨ �Ôa�^è�z)��è�è��^å_�ÝÕS}���è�è�ä�å-æOçÞ�6�.�'Ù�âv�®�5�z)�W�'�^å_�>Ú�é � ó�ôª�·ë'ß=îUï¶ð�ö�þ²÷�ñ��®ò§úØö®õ ð�ô�ì.ö®ü�õ�ö®õ�übëUõ�ö®ð�ô�ë,�±ì=úEì=ò=ô��'^îUïº��ëUì.ì.íîUï�ð�ÿ§ëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ð�ùUô�ú�ôoû�÷�ó�ëUõ�üUô¯ö¤ì�ò.ó�ëeòàò.ó�ô�ï.ô/�9ë�úT%\ô9ë¶õ�î�õ�ÿ§õ�ô�ü �®öÀü�öf%]�Àô���ï.î,%�ë9%�ö-�®öÀò§úÎî,' ëUõëUð*"Uô�ï�ì�ëeï.ú�ü�ñ�ô�ì�ì.ö®õ�üÏëÂ��ëUì.ì=í�îUï�ð¬ëUõ�ð¬ö��Q�\ô�ï�ì=î�õ�ëeò.ö®õ�üËëÏñ�ì=ô�ï#� � ócñ�ìwô�öÀò.ó�ô�ï�ò.ó�ôtð�ôCÓ-õ�öÀò.öÀî�õ�î,'+ì=ô�÷�ñ�ï�öÀò§ú��ñ�ì=ò;ë,���®î�í '^îUï;ë·õ�î�õ�ÿ§õ�ô�ü �®öÀü�öf%]�Àô�ì�ö��àñ��®ëeò.öÀî�õtô�ï.ï.îUï�ø�îUï;ò.ó�ôwö¤ð�ô�ë,�Cì=úEì=ò=ô�� ö®ì^'MîUï�÷oô�ð¶ò=î²ó�ë#"Uôwì=î �gôwõ�îUò.öÀî�õî,'���ëUì.ì=í�îUï�ð�ìg%-ñ�ö��Àò¥ö®õ��

© ñ�ï±ö¤ð�ô�ë,��ì=úWì.ò=ô�� 'MîUï«�-ëUì.ì=í�îUï�ðEÿ§ëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ð�ùUô�ú8ôoû�÷�ó�ëUõ�üUô9ôoûZ���¤ö®÷�öÀò��Àú¶ñ�ì.ô�ì�c^ï�ö®õ�üR�·ëUì=ò=ô�ï#üUô�õ�ô�ï=ÿëeò=ô�ð]e��-ëUì.ì=í�îUï�ð�ìY� � ó�ö®ì�'^îUï�÷oô�ì¦ëUõcú)��ï.îcî,'-î,')ì.ô�÷�ñ�ï�öÀò�úwò=îwó�ë#"Uô;ë#ì.ö���ñ��®ëeò=îUï�ò.ó�ëeòó�ëUì�ò=î�%\ô[õ�îUò/î�õ��Àúwë�í�ëeï�ôî,'/ëQ��ëUì.ì.íîUï�ð�ÿ«ü�ñ�ô�ì.ì.ö®õ�ü·ëeò=ò=ô��Q��ò�ø�%-ñ�ò[î,'�ôoûEëU÷oò��Àútí;ó�ö®÷�ó���ëUì�ì=íîUïnð¶ö®ìÃ%\ô�ö®õ�ü�ü�ñ�ô�ì�ì=ô�ð��ac@SAõÌò.ó�ôº��ï.îWî,'�'^îUïò.ó�ô�ê�¼a`b��ï.îUò=îE÷oî �p��ï.ô�ì=ô�õcò=ô�ðÎö®õËò.ó�ö®ì;ò.ó�ô�ì.ö®ì�ø)ò.ó�ô�ì.ö���ñ��®ëeò=îUï+ö¤ì+ë9%��®ô�ò=îÍ�®ô�ëeï�õËò.ó�ö®ì;ö®õ�'MîUïH�9ëeò.öÀî�õ��Äe/S{'/ò.ó�ö®ìö®ì[õ�îUò¸�)î�ì�ì.öf%��ÀôUøWò.ó�ô�õ¶÷oî�õ�ì=ò=ï�ñ�÷oò.ö®õ�ü·ëUõ�ð¶ñ�ì.ö¤õ�ügë·ð�ö¶h\ô�ï.ô�õcò¥ö¤ð�ô�ë,�4ì=úEì=ò=ô���í�î�ñ��®ð�%\ô#ï.ô�+Wñ�öÀï.ô�ð��

Å�ô[ð�ö®ð�õ�îUò�ì;�\ô�÷�öf'^ú�ó�î�í¬ò.ó�ô�ï�ö®õ�üa�·ëUì=ò=ô�ï/÷�ó�îcî�ì=ô�ì��-ëUì.ì=í�îUï�ð�ì�'MîUï���ëUöÀïnìuî,'�ñ�ì=ô�ï�ìY� � ó�ô¥ì.ö��Q���®ô�ì=òp�gîEð�ô��í�î�ñ��®ð�%\ô¥ò=îwó�ë�"Uô+ë�ð�ö®÷oò.öÀî�õ�ëeï.ú<à¯ø�í;ó�ö®÷nógö®ì/ë�ì=ô�ò/î,'\ì=ò=ï�ö¤õ�ü�ì�ø�ëUõ�ð��®ô�ò¦ë,���1��ëUì.ì=í�îUï�ð�ì�%\ô[÷�ó�î�ì=ô�õ9ñ�õ�öf'MîUï4���ÀúëUõ�ðgö®õ�ð�ôY�\ô�õ�ð�ô�õcò��Àú 'Mï.î �Ñò.ó�ëeò�ð�ö®÷oò.öÀî�õ�ëeï.ú,� � î�ëU÷�ó�öÀôY"Uô[ò.ó�ô ì=ò=ï.î�õ�üUô�ì=ò¦õ�îUò.öÀî�õ�î,')ì=ô�÷�ñ�ï�öÀò§úUø%ò.ó�î�ñ�ü�óCøUí�ô ÷�ëUõü�öf"Uô±ò.ó�ô±ëUð*"Uô�ï�ì.ëeï�ú²ë,���-ò.ó�ô �\î�í�ô�ï�ø�ëUõ�ð²ì�ö��Q���ÀúQ�Àô�ò¥ó�ô�ï[ì;�\ô�÷�öf'^úgò.ó�ô±ð�ö®ì=ò=ï�ö�%�ñ�ò.öÀî�õgî,'�ò.ó�ôa��ëUì.ì=í�îUï�ð�ì�ëUì[ëUõëeï.ü�ñ��·ô�õ%ò±ò=îÌò.ó�ô�D@B�D@>EDG0�@ D"¾tAQ=Z2�AC89î,�\ô�ï�ëeò.ö®î�õJc^ò.ó�ô�ì��)ô�÷�öfÓ-÷�ëeò.öÀî�õ8î,'0ò.ó�ôgð�ö¤ì=ò=ï�öf%�ñ�ò.öÀî�õÌí�î�ñ��®ðÂ%\ôàï.ô�÷oîUïnð�ô�ð

­

Page 9: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ö®õ�ò.ó�ô9ò=ï�ëUõ�ì.÷oï�öf��ò4e4� � ó�ô!�-ëUì.ì=í�îUï�ð�ì�î,'+ëËñ�ì=ô�ï�÷oî�ñ��®ð�ôY"Uô�õ %)ô¯ð�ôY�\ô�õ�ð�ô�õcò�î�õÚò.ó�ô/�-ëUì.ì=í�îUï�ð�ì�î,';îUò.ó�ô�ïñ�ì=ô�ïnìY��Å�ô²õ�îUò=ô9ò.ó�ëeò�î�ñ�ïº��ï.îWî,'�ì±î,'¥ì.ô�÷�ñ�ï�öÀò�úÏð�îËõ�îUò�ï.ô��®úÎî�õÚëUõ%ú�ì;�\ô�÷�ö¶Ó-÷�ð�ö¤ì=ò=ï�öf%�ñ�ò.öÀî�õ8î,'W�-ëUì.ì=í�îUï�ð�ì�øëUõ�ðÌí�î�ñ��®ðtò.óWñ�ìÃ%\ô�÷oîUï.ï�ô�÷oò ôY"Uô�õËö®õtò.ó�ôwì=ò=ï.î�õ�üUô�ï��gîWð�ô��G�

Å ó%úbð�îWô�ìàî�ñ�ï�ö¤ð�ô�ë,�¥ì=úWì.ò=ô��H÷oîUï�ï.ô�÷oò��ÀúÚð�ô�ì.÷oï�öf%\ô9ò.ó�ôtö¤ð�ô�ë,�0í�îUïH�®ðÚî,'¸�-ëUì.ì=í�îUï�ðEÿ§ëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ð¬ùUô�úôoû�÷�ó�ëUõ�üUô'�&S{'Cò§í�î�ñ�ì=ô�ï�ì�ì.ñ�÷�÷oô�ì.ì;'�ñ����®ú�÷oî �Q�]�Àô�ò=ô�ëwùUô�ú·ôoû�÷�ó�ëUõ�üUôUø�ò.ó�ô�õ9ò.ó�ô±ëUð*"Uô�ï�ì�ëeï.ú·÷�ëUõ�õ�îUò�î,%�ò.ëUö®õ²ò.ó�ôùUô�ú�îUï/ò.ó�ôg��ëUì.ì=í�îUï�ð�� � ó�ö®ì�ö®ì��gîEð�ô��Àô�ðd%Wúwò.ó�ô[ëUð*"Uô�ïnì.ëeï.ú�õ�îUò�%)ô�ö¤õ�ü�ë,�-�Àî�í�ô�ðgëUõ%úÍ>�A�2C>pD@B*2�>_0,B]F4Aæ.103242457698;:+Wñ�ô�ï�öÀô�ì�'MîUï/ë�ì.ñ�÷�÷oô�ì.ì�'^ñ��cùUô�úwôoû�÷�ó�ëUõ�üUô,� © õàò.ó�ôîUò.ó�ô�ï�ó�ëUõ�ðCøeò.ó�ô¥ëUð*"Uô�ï�ì.ëeï.úàö®ì�ë,�-�Àî�í�ô�ð�î�õ�ô¥ò=ô�ì=ò���ëUì.ì=í�îUï�ð+Wñ�ô�ï.ú½'^îUï¯ëUõcú´îUò.ó�ô�ïtùUô�ú´ôoû�÷�ó�ëUõ�üUôUø+í;ö®ò.óØì.ñ�÷�÷oô�ì�ì;'^ñ��;ö��Q�\ô�ï�ì.î�õ�ëeò.öÀî�õ î�õ��®ú´ë,���Àî�í�ô�ð öf'#ò.ó�ôÏëUð*"Uô�ï�ì.ëeï.úëU÷oò.ñ�ë,���®ú¶ü�ñ�ô�ì.ì=ô�ì�ò.ó�ô���ëUì.ì=í�îUï�ðÏ÷oîUï.ï.ô�÷oò��Àú,� � ó�ö®ì�÷oîUï.ï.ô�ì��)î�õ�ð�ì;ò=î¶ëUõÏî�õ�ÿ��®ö®õ�ô�ö��Q�\ô�ï�ì=î�õ�ëeò.ö®î�õ_;t��ëUì.ì=í�îUï�ðEÿü�ñ�ô�ì.ì�ö®õ�ü�ëeò=ò=ô��Q��ò\%cú�ò.ó�ô+ëUð*"Uô�ï�ì.ëeï.ú,�¸c © õ�ô¸�·ë�ú�ò.ó�ö®õ�ù�î,')ò.ó�ö®ì/ëUì\�·îWð�ô��¤ö®õ�ü#ëUõ·ëUð*"Uô�ï�ì�ëeï.úgí;ó�î�ëeò=ò=ô��Q��ò.ìò=î!�ÀîUü²ö®õtò=î9ë·ì=ô�ïH"Uô�ï^%cútì=ô�õ�ð�ö®õ�ügëgü�ñ�ô�ì.ì.ô�ðR��ëUì.ì=í�îUï�ð��Äe

Å�ôwë,�¤ì=îQ�gîWð�ô��-ò.ó�ô�ë9%�ö��®öÀò�ú�'^îUï ëUõ¶ëUð*"Uô�ï�ì.ëeï�ú9ò=î9ì=ô�ò ñ��Í�-ëUì.ì=í�îUï�ð�ìg%\ô�ò§í�ô�ô�õ¶ëUõcú²ñ�ì=ô�ïnì[ëUõ�ðÌó�ö��·ì.ô��f'�øñ�ì.ö¤õ�ü±ò.ó�ô«2YA�>*.*032H2�57698�:Í+Wñ�ô�ï.ú,� � ó�ö¤ì/÷�ëUõ�%\ô[ò.ó�î�ñ�ü�ócò¦î,'\ëUì7�Àô�ò=ò.ö®õ�ü#ò.ó�ô;ëUð*"Uô�ï�ì�ëeï.ú�ì.ô�ò0ñ*�·ï.îUü�ñ�ô;ëU÷�÷oî�ñ�õcò.ìî�õ�ëUõcúÎ÷oî �Q��ñ�ò=ô�ï±ì�ó�ô�í;ö®ì.ó�ô�ì�ø)ëUì«�Àî�õ�ü¯ëUì±ò.ó�î�ì.ô�ï�îUü�ñ�ôgëU÷�÷oî�ñ�õ%ò.ìwó�ë�"Uô·ð�öfh)ô�ï.ô�õcò±ñ�ì=ô�ï S�ý±ì '^ï.î � ë,����ò.ó�ô"eë,�®ö®ðÌñ�ì=ô�ïnìY�

]�Ý] áªá�ëB-[b�gÕàtå9á_� &¹éGå ç,%�ëÊà9à'&�ì�â)(7àÅ�ô�õ�îOí ð�ô�ì.÷oïnöf%\ôÎò.ó�ô�ï�ô�ë,��ì=úEì=ò=ô��&ö®õ í;ó�ö¤÷�ó í�ô¹ëUì.ì.ñ��gô¹ëJ�-ëUì.ì=í�îUï�ðEÿ§ëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ð ùUô�ú ôoû�÷�ó�ëUõ�üUô��ï.îUò=îE÷oî �Wï�ñ�õ�ì���¼+ü�ëUö®õCøeò.ó�ö®ì�ö®ì�%�ëUì.ö®÷�ë,���®ú«'Mï.î � i®±,³3l«øUôoû�÷oôY��ò�ò.ó�ëeò�íô[ð�î�õ�îUò/÷oî�õ�÷oô�ï�õ�î�ñ�ï�ì.ô��f"Uô�ì�í;öÀò.ó)��ñ*%��®ö¤÷ùUô�úEì9ëUõ�ð´÷oô�ï�ò.ö¶Ó-÷�ëeò.öÀî�õ´ëUñ�ò.ó�îUï�öÀò.öÀô�ì�ø�ì.ö¤õ�÷oôÌë,��� ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õØö®ìQ�\ô�ï�'^îUïH�gô�ð ñ�ì.ö¤õ�ü�ì.ó�ëeï.ô�ð½�-ëUì.ì=í�îUï�ð�ìY�»+îUò=ô·ò.ó�ëeò�ò.ó�ô²ì.ë,�gôgï.ô�ë,�¦ì.úWì=ò=ô�� ö®ì#ñ�ì=ô�ðCø�õ�î$�·ëeò=ò=ô�ïwí+ó�ëeò�ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õL�gîWð�ô���íô·÷nó�îcî�ì.ô!'^îUï#î�ñ�ïö®ð�ô�ë,�Cì.úWì=ò=ô��$�

â�ì=ô�ï�ì¥ëUõ�ð¯ñ�ì=ô�ï¥ö®õ�ì=ò.ëUõ�÷oô�ìëeï.ô#ð�ô�õ�îUò=ô�ð²ëUì[ö®õ9ò.ó�ô±ö®ð�ô�ë,�)ì=úWì.ò=ô��R�>â+ì.ô�ï�ö®õ�ì=ò.ëUõ�÷oô�ì¥ëeï.ô±ð�ôCÓ-õ�ô�ð¯ëUì¥ì=ò.ëeò=ô�·ëU÷nó�ö®õ�ô�ì�í;ö®ò.ó ö��Q���®ö¤÷�öÀòwëU÷�÷oô�ì.ì9ò=î�ò.ó�ô¶ñ�ì=ô�ï��¾ìoã�äËøÆP<ã)äÎøëUõ�ðJ��ëUì.ì=í�îUï�ð c�öG� ô,�Àø¥ñ�ì=ô�ï·ö®õ�ì=ò.ëUõ�÷oô(cU�SR��Pe·ö®ìü�öf"Uô�õÎëU÷�÷oô�ì.ì;ò=î ¦ i���´�¢½RIÅd��´O¢�¤Cl@e4�Ââ�ì=ô�ï;ö®õ�ì.ò.ëUõ�÷oô�ì;ë,�®ì.î·ó�ë�"Uô�ëU÷�÷oô�ì.ì�ò=î���ï�öf"eëeò=ô#ï�ëUõ�ð�î � ö®õ*��ñ�ò.ì�c�öG� ô,�Àø�ò.ó�ô�ú�·ë�ú!%\ô;ï�ëUõ�ð�î �·ö"!�ô�ð]e4�æ¼Fñ�ì=ô�ï[ö®õ�ì=ò.ëUõ�÷oô�ì=ò.ëeï.ò.ì[ö®õ¯ì=î �gô±ö®õ�ö®ò.ö®ë,��ì=ò.ëeò=ôUø�ëUõ�ð��·ë�ú9ò=ï�ëUõ�ì;'MîUï4�ÕöÀò.ì�ì=ò.ëeò=ô#î�õ��®úí;ó�ô�õ8öÀò+ï.ô�÷oô�öf"Uô�ì±ë/�·ô�ì.ì.ëeüUô,� ¼¥ò�ò.ó�ëeò��\î�ö®õcò;öÀò�ñ*�Cð�ëeò=ô�ì+ö®ò.ì+ì=ò.ëeò=ôUøCüUô�õ�ô�ï�ëeò=ô�ì#ë·ï.ô�ì��)î�õ�ì=ô)�gô�ì�ì.ëeüUôUø4ëUõ�ðï.ôY�\îUï.ò.ì ö®ò.ì[ì=ò.ëeò.ñ�ì�ø�ô�ö®ò.ó�ô�ï�å�z�å®�®�'�Q�B�uâvæ�øqå�� zÄz%â�}���æ�ø�îUï�åUæiâYç�âvz���æ�ø�í;öÀò.ótò.ó�ô�'Mî �-�Àî�í;ö¤õ�üQ�gô�ëUõ�ö®õ�ü�ì�í

Î å�z%å_�®�'�Q�B��â�æ�é[ò.ó�ôàñ�ì=ô�ï ö®õ�ì.ò.ëUõ�÷oô�ö®ìÃ��ï�ôY��ëeï.ô�ðtò=î·ï.ô�÷oô�ö�"UôwëUõ�îUò.ó�ô�ïa�gô�ì.ì.ëeüUô,�Î å��6zÄz�âv}.��æ�é[ò.ó�ô�ñ�ì=ô�ï;ö®õ�ì=ò.ëUõ�÷oô!c�ì.ë�úTcU�ER��Pe;e;ö®ìgÓ-õ�ö¤ì.ó�ô�ð¯ëUõ�ð¶ó�ëUì[üUô�õ�ô�ï�ëeò=ô�ðÎëgì.ô�ì.ì.öÀî�õÌùUô�ú¼¡�¢�¤ �

Î åUæiâYç�âvz���æ�é¥ò.ó�ôwñ�ì.ô�ï;ö®õ�ì=ò.ëUõ�÷oô�ö®ìWÓ-õ�ö®ì�ó�ô�ðCøZ%�ñ�ò ó�ëUì õ�îUò[üUô�õ�ô�ï�ëeò=ô�ð8ë·ì=ô�ì.ì.ö®î�õtùUô�ú,�� ó�ô�ëUð*"Uô�ï�ì.ëeï.úR�·ë�ú��)ô�ïH'MîUïH� ò.ó�ô«'Mî ���®î�í;ö®õ�ü�ò�úP�\ô�ì[î,'�î,�\ô�ï�ëeò.öÀî�õ�ìYí

�Q����'�U�6�Q�U«�â8�uè�âcæ i � ï�ëUõ�ì.÷oï�ö���òYí^cI¬'­'4®­�/_­�¯232­�°21�±B²�1)³�¬'R��SRI��´ ¢ e�l¼�ì�ö®õ8ò.ó�ôgö®ð�ô�ë,��ì.úWì=ò=ô�� c^í;öÀò.óÂ��ëUì.ì=í�îUï�ð�ì�enø4ò.ó�ôgëUð*"Uô�ï�ì.ëeï�ú8ëUì.ì�öÀü�õ�ì±ö®ð�ô�õcò.öÀò§ú8ì=ò=ï�ö®õ�ü¼��´{¢�ò=îVc�õ�ô�íaeñ�ì=ô�ï+�7c�ëUìæ%\ôY'MîUï�ôte4��SAõ�ëUð�ð�öÀò.ö®î�õCøUë+ïnëUõ�ð�î � ��ëUì.ì.íîUï�ð ¦ i���´{¢�RI��´ ¢�µ l�ö¤ì/÷�ó�î�ì=ô�õ�%Wúwò.ó�ô[ï�ö®õ�ü �·ëUì=ò=ô�ïæ'^îUïô�ëU÷nó¯ôoûEö®ì.ò.ö®õ�üwñ�ì.ô�ïd� T � � ó�ô¸��ëUì.ì=í�îUï�ð�ìëeï.ô�õ�îUò7���®ëU÷oô�ð¯ö®õgò.ó�ô;ò=ï�ëUõ�ì�÷oï�öf��òY� � ó�ö¤ìÕ�gîEð�ô��®ì¦ò.ó�ô;î�ñ�òAÿ«î,'Mÿ%-ëUõ�ðË÷oî ����ñ�õ�ö¤÷�ëeò.öÀî�õ¶ï.ô�+Wñ�öÀï�ô�ðÌò=î²ì=ô�ò�ñ*�$��ëUì�ì=íîUïnð�ì^%\ô�ò§í�ô�ô�õ8ñ�ì=ô�ï�ìY�ü�ì¸�gô�õcò.öÀî�õ�ô�ðÎë9%\î#"Uô�í;öÀò.óï�ô�ì;�\ô�÷oò+ò=î¯ò.ó�ôàö¤ð�ô�ë,��ì.úWì=ò=ô��¶ø-ò.ó�ô�ð�ö®ì=ò=ïnöf%�ñ�ò.öÀî�õtî,'7��ëUì.ì=í�îUï�ð�ì��·ë�ú$%\ôºÓ�ûWô�ð4ø-îUï �·ë�ú&%)ô�ì;�\ô�÷�ö¶Ó�ô�ð%Wú¹ò.ó�ôtëUð*"Uô�ï�ì�ëeï.úÚëUì�ëUõ¬ëeï.ü�ñ��gô�õcò�ò=î8ò.ó�ô²î,�\ô�ï�ëeò.öÀî�õ c�ö®õÚò.ó�ôR�®ëeò=ò=ô�ïg÷�ëUì=ôUø0ëÏð�ô�ì.÷oïnöf��ò.öÀî�õ�î,' ò.ó�ôð�ö®ì=ò=ï�öf%-ñ�ò.öÀî�õ²íî�ñ��¤ð�%)ô#ï�ô�÷oîUï�ð�ô�ð¶ö®õtò.ó�ô�ò=ï�ëUõ�ì.÷oïnöf��ò4e4�

�Q����'�U�6�Q�U«�â8�uè�âcæ¿�Q�uè$�'�6�.z%â i � ï�ëUõ�ì�÷oï�öf��òYí^cI¬5­�4À­5/ÂÁ�±B²�1)³Ã­�4B²'/ÂÁ�¬'R��SR��ÄRY8�6�@�A9cU�SR��ZeIRIÅq��´�¢�¤te�l¼�ìuö¤õ+ò.ó�ô0ö®ð�ô�ë,�Uì=úEì=ò=ô��Ìøiò.ó�ô¦ëUð*"Uô�ïnì.ëeï.ú#ëUì.ì.öÀü�õ�ìCë ñ�ì=ô�ï4ö®õ�ì=ò.ëUõ�÷oô¸cU�SR��Ze4ë¥ï.î �®ô¸c^î�õ�ô¦î,'® �î,�\ô�õÀR.÷oî�õ�õ�ô�÷oò�¥3eëUõ�ð¶ë·ñ�ì=ô�ï�Åd��´{¢�¤�ò.ó�ëeò;ö®ì[ì�ñ*���\î�ì=ô�ð¯ò=î!%\ô±ò.ó�ô���ëeï�ò.õ�ô�ï î,'ÃcU�SR��Pe4�

¯

Page 10: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ç�âv�Q�è-âWæ�|ÚâWè�è�� ×-â i � ï�ëUõ�ì.÷oïnöf��òYí¸cI¬5­$ÈW963B¬�R�¬SÈ_16²v²�¯�év1y¬�R��SR��ÄRI�4BvêÂ2;O�RÄëg=1>�êª2�OÄRC2�>_0,>E=Z2He�l� ó�ô+ëUð*"Uô�ïnì.ëeï.ú·ð�ô��®ö�"Uô�ï�ìd�4Bvêª2�Ogò=î�ñ�ì=ô�ï�ö®õ�ì=ò.ëUõ�÷oô)cU�SR��Pe4� � ó�ô;ñ�ì=ô�ï�ö¤õ�ì=ò.ëUõ�÷oô;ñ��\ð�ëeò=ô�ì0öÀò.ìì=ò.ëeò=ôUø�ëUõ�ðï�ôY���®öÀô�ì\í;ö®ò.ó¼ëg=1>�êª2�O�ëUõ�ð#ï�ôY�)îUï�ò.ì�2�>_0,>E=Z24��S{'�2C>_0,>E=Z2ö®ìO�=ëU÷�÷oôY��òS�EøUò.ó�ô0ï.ô�÷oîUï�ð!cI¬�²'/W¯)³�/ɲ�1 ²v²)­Äº�4�¬�R��ER��Peö¤ì ëUð�ð�ô�ðtò=î·ò.ó�ô�ò=ï�ëUõ�ì.÷oïnöf��ò�ø�ëUõ�ð¶öf'\2�>_0 >E=P2wö¤ì£�Aï.ô�ß=ô�÷oòS�Eø�ò.ó�ô�ï�ô�÷oîUï�ðVcI¬Y/21)³�Èy­'4 ¯)/21Ï­'4À²5/2¯�4ÀÊ�1y¬�R��SR��Zeö¤ì ëUð�ð�ô�ðtò=î·ò.ó�ô�ò=ï�ëUõ�ì.÷oïnöf��òY�

è�â���}���è�è�ä�å�æiçÑi � ï�ëUõ�ì�÷oï�öf��òYí¸cI¬�²�1)/¸96¯ ²v²�¹ º)³v».¬�R��SRI��´{TQR ¦ e�l¼�ì;ö¤õtò.ó�ô�ö®ð�ô�ë,�Cì=úEì=ò=ô��Ìø�ò.ó�ö®ì[ì=ô�ò.ì ¦ i���´M¢�RI��´ T l4ò=î ¦ ëUõ�ðR�]�®ëU÷oô�ì ëgï.ô�÷oîUïnð¶ö®õtò.ó�ô#ò=ï�ëUõ�ì.÷oï�öf��òY�

� }�}��Q�UzÄ�W�5�Må®�Èi � ï�ëUõ�ì.÷oï�öf��òYí^cI¬�¯�9v9_32­vÊ�¯)/_­�º�4�¬�REN®RENæcQL�RY �¡�¢�¤�¥3e;e�l¼�ì�ö®õ#ò.ó�ô�ö®ð�ô�ë,�%ì.úWì=ò=ô��¶øOò.ó�ô�ëUð*"Uô�ï�ì.ëeï�ú�ö®ìuë,���®î�í�ô�ð�ò=î�î,%�ò.ëUö®õwëUõcú�ö®õ*'^îUïH�·ëeò.ö®î�õ�ì.ó�ô¦í+ö®ì.ó�ô�ì4ë9%\î�ñ�ò�ò.ó�ôô�õP"EöÀï.î�õ��gô�õcòëUõ�ð9ò.ó�ô�ì=ô�ì.ì.ö®î�õ·ùUô�úEì�øEôoûE÷oôY��ò�ò.ó�ëeò�ò.ó�ô;ùUô�úEì¥ëeï.ô+õ�î�í ëU÷oò.ñ�ë,�\ì=ô�ì.ì.öÀî�õ9ùUô�úWì�üUô�õ�ô�ïnëeò=ô�ð%WúÌñ�ì=ô�ï ö®õ�ì=ò.ëUõ�÷oô�ìY�

æ5�6�uç�å_| å�æ5� z)�^â i � ïnëUõ�ì.÷oï�öf��òYí¸cI¬'­�È29_3B¬'R�¬Y³2¯�4W»2º5Èú)³W¯WÊ)3)1y¬�R��SR�ì�RSío¢�cUìÊe;e�l� ó�ô¯ëUð�"Uô�ï�ì.ëeï.ú +cñ�ô�ïnöÀô�ìwïnëUõ�ð�î �HîUï�ëU÷Y�Àô¿�#î�õ¬ëÂ%�ö®õ�ëeï.ú¹ì.ò=ï�ö®õ�üZìØëUõ�ðbï.ô�÷oô�öf"Uô�ì�ò.ó�ôtï.ô�ì�ñ��Àòwî,'+ò.ó�ôïnëUõ�ð�î �6îUï�ëU÷Y�Àô(+Wñ�ô�ï.ú¸ío¢;cUìÊe4�Ï»+îUò=ô¹ò.ó�ëeòÌí�ô¹ð�î´õ�îUò¶ë,���ÀîOí 04. ._@ DGFH0,>EDG69B î,�\ô�ï�ëeò.öÀî�õ�ìtò=îÎ+cñ�ô�ï�úïnëUõ�ð�î �2îUï�ëU÷Y�®ô�ìaí ¢ � S�õ�îUò.ó�ô�ï¶íîUïnð�ì�ø±íôÚð�î´õ�îUòÌü�öf"Uô�ó�öÀü�ó�ô�ï=ÿ��ÀôY"Uô�� ��ï.îUò=îW÷oî �¤ì¶ëU÷�÷oô�ì.ìÎò=î´ò.ó�ôïnëUõ�ð�î � îUïnëU÷Y�Àô�ìàñ�ì=ô�ðT%Wú�ò.ó�ô·ùUô�ú�ôoû�÷�ó�ëUõ�üUôtì.÷nó�ô��gô,�VcE¼a�Àò.ó�î�ñ�ü�óÚë¶ó�öÀü�ó�ô�ï.ÿ��ÀôY"Uô��Õ��ï�îUò=îW÷oî �÷oî�ñ��®ðó�ë�"UôtöÀò.ìwîOí;õÚï�ëUõ�ð�î � îUï�ëU÷Y�Àô,�Äe � ó�ô9ëUð*"Uô�ï�ì.ëeï�úUø¦ó�î�í�ôY"Uô�ï�ø¦ð�îWô�ìàó�ë�"UôtëU÷�÷oô�ì.ì�ò=î8ë,���0ò.ó�ô9ïnëUõ�ð�î �îUïnëU÷Y�Àô�ìY�

��îUï¯ëUõ´ëUð*"Uô�ï�ì�ëeï.ú��9øM�^A�0�@��&698�@f:ZcU��e�ð�ô�õ�îUò=ô�ìgò.ó�ô¶ò=ï�ëUõ�ì.÷oï�öf��ò�î,'�ò.ó�ô¶ëUð*"Uô�ï�ì�ëeï.ú_�¾ì9î,�\ô�ï�ëeò.öÀî�õ�ìY�½SAõëUð�ð�ö®ò.öÀî�õ¹ò=îÏï.ô�÷oîUï�ð�ì)�·ëUð�ô/%Wú¹ò.ó�ô¯î,�\ô�ï�ëeò.öÀî�õ�ì�ø�ò.ó�ô¯ò=ï�ëUõ�ì�÷oï�öf��òàí;ö����¦ö¤õ�÷Y�®ñ�ð�ôgò.ó�ô²ï�ëUõ�ð�î � ÷oî�ö®õ�ìàî,' ò.ó�ôëUð*"Uô�ï�ì�ëeï.úÌö®õÌëUõTD@X¸.®@fAYX�AYB�>_0,>EDG69B¹ï.ô�÷oîUïnðVcI¬'­�ÈW963B¬'R�¬5Ê�º ­'4À²_¬�R#FH6,D B*2He4�

î ïcð0ñ p4���Õ���óò �)�Bô�n7a�����æØW�Ê�H��¼õ¸ö÷ô�nÓøÇòóù øÎ���Ã���º�æ��p

úÕÝ�Þ %!âNá6-�é½�ÌéUèÕëÊâNé�á�àV4ô�ò�û¶ëUõ�ð¿ü#ð�ô�õ�îUò=ôwî�ñ�ï ì=ô�÷�ñ�ï�ö®ò§úÍ��ëeï�ë,�gô�ò=ô�ï�ì�ø�í;ó�ô�ï.ô[ûËö®ì¥ò.ó�ôÇ�;�9ëUö®õ �gì=ô�÷�ñ�ïnöÀò§úÍ��ëeï�ë,�gô�ò=ô�ï+ëUõ�ð¶÷�ëUõ$%\ôò.ó�î�ñ�ü�ócò�î,'uëUì[ëwüUô�õ�ô�ï�ë,�\ì=ô�÷�ñ�ï�öÀò�úQ��ëeï�ë,�gô�ò=ô�ïÃ'^îUï¥ó�ëUì.ó/'^ñ�õ�÷oò.öÀî�õ�ì�ëUõ�ð²ì.ô�÷oï.ô�ò¥ùUô�úWì«c�ì.ë�ú ¨ °,­àîUï ¨ ´9k)%-öÀò.ì4enøëUõ�ð�ü�ý¸ût÷�ëUõ/%\ô ò.ó�î�ñ�ü�ó%ò¥î,'4ëUì¥ë�ì=ô�÷�ñ�ï�öÀò�úQ��ëeï�ë,�gô�ò=ô�ïg'^îUï�ð�ö®ì.÷oï.ô�ò=ôoÿ��ÀîUüeÿ_%-ëUì=ô�ðÍ��ñ*%��®ö¤÷¥ùUô�úWì«c�ì.ë�ú ¨ k °3j�îUï°9k9jN­)%�öÀò.ì4e4�+Vuô�ò{ #k2R ¨ ¥ � ð�ô�õ�îUò=ô�ò.ó�ô�ì=ô�òî,'ÊÓ)õ�öÀò=ô¸%-ö®õ�ëeï.ú�ì=ò=ï�ö®õ�ü�ì0ëUõ�ðÇ #k2R ¨ ¥�þ·ò.ó�ô±ì=ô�ò�î,'�%�ö®õ�ëeï.úgì=ò=ïnö®õ�ü�ì¦î,'�Àô�õ�üUò.óÇÿæ�¸¼Ñï.ô�ë,��ÿ_"eë,�®ñ�ô�ð&'^ñ�õ�÷oò.öÀî�õ��tcUÿ�e[ö®ìºB�A_OÄ@ÄDfO,D��Y@�A�öf'�'^îUï+ôY"Uô�ï.ú��¨ý kEø)ò.ó�ô�ï.ôwôoû�ö®ì=ò.ì{ÿ��{ý k²ì�ñ�÷�óËò.ó�ëeò�#cUÿ�e� ¨� ÿ � 'MîUï+ë,���Àÿ�ý�ÿ����

Vuô�ò ��î,'�ì�ö"!�ô#ëeò^�Àô�ëUì=òMûÌëUõ�ð��¶î,'�ì�ö"!�ô�ü¸%\ôa��ï�ö��gô�ì�ì.ñ�÷nó²ò.ó�ëeò��¿������� ¨ '^îUï[ì=î �gô«"eë,�®ñ�ô��à÷oîeÿ_��ïnö��gôò=î��Z�0Vuô�ò��&%\ôgëtüUô�õ�ô�ï�ëeò=îUïwî,'¥ëÌì.ñ*%�üUï.î�ñ*�8î,'�� �� î,'ì.öK!�ô��P��É¥ë,����ò.ó�ö¤ì�ì�ñ*%�üUï.î�ñ*��� � � ! �dÅ�ô·í;ö��-�uî,'^ò=ô�õî �·öÀò£�7�gîWð��®�Q'Mï�î ��ôoûZ��ï.ô�ì.ì.öÀî�õ�ì¥í;ó�ô�õÌöÀò ö®ì¥î,%Z"EöÀî�ñ�ì[ò.ó�ëeò;íôwëeï�ô�íîUï�ùWö®õ�ü�ö¤õ"� �� �Vuô�ò�ý �Qc$#ÇR&%�ewð�ô�õ�îUò=ôtò.ó�ôÌý±ö�þ9ôoÿ��+ô������·ëUõL"eë,�®ñ�ô'�)(+*Ìî,' # �,�)(ÏëUõ�ð-% �.�)*P�ÂÅ�ô¶ëUì�ì.ñ��gô¯ò.ó�ôó�ëeï�ð�õ�ô�ì.ìàî,' ò.ó�ôÇ´�A�FYD 24DG69Bu´ºD /ÎAC<�0)A$@@ X�09BÂ.]8;6)�Y@�ACX c�ý±ý � e�ö¤õ-� � � ! � © õ�ô!'^îUïH�àñ��®ëeò.öÀî�õ¬ö®ìàò.ó�ëeò�ü�öf"Uô�õ�6R1#ZR&%qR2� ö¤õ3� � � ! ø�í;ó�ô�ï�ô4# �5�)(�ëUõ�ð6% �7�)*8ëeï.ô¶÷�ó�î�ì=ô�õ´ï�ëUõ�ð�î ���ÀúUø0ëUõ�ð8� ö¤ì�ô�öÀò.ó�ô�ï9ý �Qc$#ÇR&%�eîUïtï�ëUõ�ð�î �¶ø[ô�ëU÷�ó í;öÀò.ó ó�ë,�f' ��ï.î,%-ë9%�ö��®öÀò�úUø[ð�ô�ò=ô�ïH�·ö®õ�ôÎöf'9� � ý �Qc$#ÇR&%�e4� î�ï.ô�ëeùEö®õ�übý±ýa� ö��Q���¤öÀô�ì·ë÷oî�õ�ì=ò=ïnñ�÷oò.ö®õ�üwë)�\î �ÀúEõ�î �·ö®ë,��ÿ«ò.ö-�gô[ëUð*"Uô�ï�ì.ëeï.úgò.ó�ëeòð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ô�ì�� ��ýa�Qc$#ZR&%Qeæ'Mï�î �Õëwï�ëUõ�ð�î �:� í;öÀò.óõ�î�õEÿ§õ�ô�ü �®öÀü�öf%��®ô�ëUð*"eëUõcò.ëeüUôwî#"Uô�ï±ëgï�ëUõ�ð�î � ü�ñ�ô�ì.ìY�

úÕÝ Ü ;ÍçÕá�%!â ì�å9ìæê1ì.-ý�ôCÓ-õ�ô;ó�ëUì.óQ'�ñ�õ�÷oò.öÀî�õ�ì+í ¾1< RSí ¾1= RSí Á íW #k2R ¨ ¥ �?>  #k2R ¨ ¥�@wëUõ�ð�í µ í2 #k2R ¨ ¥ �?>  #k2R ¨ ¥BA!c^í;ó�ô�ï.ô C4D üE�aû�e4�Å�ô±í;ö�����ëUì.ì.ñ��gô�ò.ó�ëeòÂí µ øWí ¾1< øWí ¾1= øWëUõ�ð�í Á ëeï.ô#ö®õ�ð�ôY�\ô�õ�ð�ô�õ%ò/ï�ëUõ�ð�î � '�ñ�õ�÷oò.ö®î�õ�ìY�æ»;îUò=ô±ò.ó�ëeò�í;ó�ö-�Àô{í µ

¨ k

Page 11: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

§ ©

ì"FHGI� !J ���)(��NcQí µ cQ§[RS©�R ¦ e;eLK J M � ô�ì=ò J NOP kº�gîWð��

Q F G � !R �8� *S � c TUWV ï UYX � Z[� \ ]^]`_ eL*

S � R ( R Rbac a£�÷í ¾1< cQ§[RS©�R J R R R S R ¦ e� ô�ì=ò?a N� í ¾1< cQ§¨RS©�R J R R R S R ¦ eavT6�÷í ¾1= cQ§¨RS©�R J R R R S R ¦ e¡ �÷í Á cQ§¨RS©�R J R R R S R ¦ e avT M � ô�ì.ò?avT N�÷í ¾1= cQ§[RS©�R J R R R S R ¦ e

¡ �÷í Á cQ§[RS©�R J R R R S R ¦ e

��öÀü�ñ�ï.ô ¨ í � ó�ô±êʼ�` ��ï.îUò=îE÷oî �qøWí;öÀò.ó ¦ � ¦ i §¨RS©ºl_� � ó�ô;ï�ô�ì.ñ��Àò.ö®õ�üwì=ô�ì.ì.ö®î�õ²ùUô�ú²ö®ìd¡ �æS{'4ë8� � ô�ì=òS��ï.ô�ò.ñ�ï�õ�ì'�ë,�®ì=ôUø�ò.ó�ô���ï.îUò=îW÷oî �uö®ì ë9%\îUï.ò=ô�ð��

ö®ì[ð�ô�ì�÷oï�öf%\ô�ðÌëUì[ï.ô�ò.ñ�ïnõ�ö®õ�ügëQ%�ö®ò¥ì.ò=ï�ö®õ�ü�ø�í�ô#í;ö����)î,�\ô�ï�ëeò=ô�î�õËöÀò.ì[î�ñ�ò;��ñ�ò ëUì;ë·õWñ��)%)ô�ï^�·îWð�ñ��Àîd���� ó�ô�ê�¼a` ��ï�îUò=îW÷oî ��ö®ì¥ü�öf"Uô�õËö¤õ¼��ö®ü�ñ�ï.ô ¨ �

e ÙuâWå�æiâv| f Í"gp?1A�Åih?j .]8;6,>_6�F46�@¸D 2�0ª2YA�F�=18;Ad.1032H2�57698;:9<�0,=1>@?*ACB�>EDGFH0,>�AH:JI ACKVA�MPFC?Z09BZOPA).�8�6,>_6#FH6�@�D B¬>@?*AA�MC._@ DEF�D@>E<;09=*>@?1ACB]>EDEF40,>EDE6,B(X�6�:NAY@lk

� ó�ô«��ï.îWî,'�ö®ì¥ü�ö�"Uô�õ¶ö®õR¼����\ô�õ�ð�ö�û/¼)�

m on ñ pH�H�Õ���óò �)�Àô�n\a�Ê�H�æØW�Ê���a¼õ ö÷ô�nÓø øÖù ø¬���^�����æ��p

Å�ôÕÓ-ï�ì=ò4ð�ô�ì.÷oïnöf%\ô¦ëUõ«S�ð�ô�ë,�Z·WúEì=ò=ô���í;ö®ò.ó«S{�����®ö®÷�öÀòʼ�ñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õCøeëUõ�ð�ò.ó�ô�õ�ð�ô�ì.÷oï�ö�%)ô�ò.ó�ôê0ê7`¬��ï.îUò=îE÷oî �G�»+îUò=ôwò.ó�ëeò í�ôwì=ò.ö-���\ñ�ì=ô#ò.ó�ô�¿;ô�ë,��·WúEì=ò=ô�� '^ï.î �À·Wô�÷oò.ö®î�õ&±Z�w±Z�

p�Ý�Þ �'(7á�ëB-[b�gÕàtå9á_� &¹é_å,ç,�'��qÆ-�é�ê*é_åÍãTäÕå,ç7á�è�å é�ê1ë�å é_ìpè�+ô�ï.ô;í�ô+÷oî�õ�ì�ö®ð�ô�ï7��ï.îUò=îW÷oî �¤ì0ö®õgí+ó�ö®÷�ó9ò.ó�ô^��ëeï�ò.öÀô�ì0ëeï.ô)D X�._@ DGFYDE>Q@ÄK·ëUñ�ò.ó�ô�õ%ò.ö®÷�ëeò=ô�ð4øZ�gô�ëUõ�ö®õ�ü�ò.ó�ëeò�öf'\î�õ�ô;î,'ò.ó�ô#÷oî ����ñ�õ�ö®÷�ëeò.ö¤õ�ü)�-ëeï.ò.öÀô�ì¥ö®ì¥õ�îUò¥í;ó�î�öÀò¥÷Y�®ëUö��·ì�ò=î�%\ôUøEö®ò�ì.ö-�Q���Àú�í�î�õB� òg%)ô±ë9%��Àô�ò=îgî,%�ò.ëUö®õ¯ò.ó�ô#ì=ô�ì�ì.öÀî�õùUô�úÌî,'�ò.ó�ôàó�î�õ�ô�ì=ò^��ëeï�ò§ú,�Ã�;îOíôY"Uô�ï�ø)ò.ó�ôwó�î�õ�ô�ì=ò¸��ëeï.ò§úVc^í+ó�ö®÷�óË÷oî�ñ��®ðR%\ô����¤ë�úEö®õ�ügò.ó�ô�ï�î �Àô�î,'o¬�º�961�4�¬±îUï¬5Ê�º�4�461 Ê5/�¬�e;í�î�ñ��®ð¹ì.ò.ö�����î,�\ô�õ¹ò.ó�ô²ì=ô�ì.ì.öÀî�õ4øp%�ñ�òwí;öÀò.ó¹õ�îËî�õ�ô²ë9%��®ôgò=îÎëU÷oò.ñ�ë,���®úÏ÷oî �!�àñ�õ�ö®÷�ëeò=ô9í;ö®ò.ó�î�õò.ó�ëeò;ì.ô�ì.ì.öÀî�õ��sr

� óWñ�ì�ì.î �gô·î,'[ò.ó�ô9÷oî�õ�õ�ô�÷oò.öÀî�õ�ì)�·ë�úª%\ôc�=ð�ëUõ�ü �¤ö®õ�ü*��� Å�ô¯í;ö�����ë,���®î�í ò�íîÏõ�ô�í ÷oî�õ�õ�ô�÷oò.öÀî�õ�ëUì.ì�öÀü�õEÿ�gô�õcò.ìYíç��6�.×®�Q�U��×bå6}¦â2�>Í � ó�ö®ì¥ï.ô�+Wñ�öÀï.ô�ì 8;6�@�A#cU�SR��Ze¥ò=î�%\ôa�Aî,�\ô�õ����ç��6�.×®�Q�U��×uz�å_���uâvz��ÄÍ � ó�ö®ì¥ï.ô�+Wñ�öÀï.ô�ìa8;6�@�AtcU�ER��Pe¥ò=î!%)ôa�=÷oî�õ�õ�ô�÷oòY���SAõR%\îUò.óÌ÷�ëUì=ô�ì�ø�ò.ó�ô#ï�ö®õ�ü��·ëUì.ò=ô�ï üUô�õ�ô�ï�ëeò=ô�ì�¡ ¢�¤ ïnëUõ�ð�î ���Àú,�

� î9ñ�ì=ô�ö-�Q���®ö®÷�ö®òëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õËí;öÀò.ó���ëUì�ì=íîUïnð�ì�ø�í�ô�í;ö������·ëeùUôàò.ó�ô«'Mî �-�Àî�í;ö¤õ�ü�ï�ñ��Àô�ìYít � oÍq��wqH�_y{s^z�y{s_|Gu~}�o!}4�gú u�ûHü���÷#�t}��t�/qH�~|G}�vty�q4�~|gñ�u®�_�/u~ùÃ�3�~u~��u®�^qH�t�_�3y{o��_u~�;q��_u~}�oP��r3�#�gu~oÍqºvtu�D y{s_y{o��Wñ�q��Yó ð y¸�¶y�y���}4�ts

|G}��~�#�_uw}4o«u~|pùÃ}Hs_y�|E�Gs�q4u~x4���G� }4sGñÊqHs�v�q4o3v�u~oY�_�3u®�_u~zCy�ó

¨,¨

Page 12: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

Î Å�ôgõ�î��Àî�õ�üUô�ï±ï.ô�+Wñ�öÀï�ô�ò.ó�ëeò#õ�î¯ò§í�îtö¤õ�ì=ò.ëUõ�÷oô�ì�ëeï.ô�î,�)ô�õÂ'^îUï�÷oî�õ�õ�ô�÷oò.öÀî�õÂ'Mï�î � ò.ó�ô�ì.ë,�·ô�ö®õ�ì=ò.ëUõ�÷oôc�ì�ö®õ�÷oô�'^îUïàö������®ö®÷�öÀò#ëUñ�ò.ó�ô�õ%ò.ö®÷�ëeò.ö®î�õ¹í�ô²ð�î�õB� òà÷�ëeï.ô9ò.ó�ëeòàôY"Uô�ï.ú¹ëU÷�÷oôY��ò.ö®õ�üÎö®õ�ì.ò.ëUõ�÷oô9ó�ëUìàëËñ�õ�ö-+cñ�ô�-ëeï.ò.õ�ô�ï;ö®õ�ì=ò.ëUõ�÷oôte4�

Î ý±ëUõ�ü �¤ö®õ�üË÷oî�õ�õ�ô�÷oò.öÀî�õÚëUì�ì.öÀü�õ��gô�õcò.ì�ëeï.ô²ë,���®î�í�ô�ð�ôY"Uô�õ '^îUïàö®õ�ì.ò.ëUõ�÷oô�ìwî�õ�í;ó�ö®÷nó¹ò.ó�ôÂ>�A�2C>�D@B*2C>_09B]F4A.*032H2�57698�:ª+Wñ�ô�ï.ú¯ó�ëUì^%\ô�ô�õ��\ô�ï�'^îUïH�gô�ð��

Î ¼È>�AC2�>�D B*2C>_09B]F�Aº.103242457698;:J+cñ�ô�ï.ú8ö¤ì�ë,���ÀîOíô�ð�î�õ�ëUõ¹ö®õ�ì=ò.ëUõ�÷oô·ò.ó�ëeò�ó�ëUì�ì=ò.ëeï�ò=ô�ðÚë¶ì.ô�ì.ì.öÀî�õ�í+öÀò.ó¹ëð�ëUõ�ü �®ö®õ�ü¯÷oî�õ�õ�ô�÷oò.öÀî�õ�ëUì�ì.öÀü�õ��gô�õcòY�«SAõËò.ó�ëeò�÷�ëUì.ôUø4öf'¦ò.ó�ô�ò=ô�ì=ò�ö®ì�ì.ñ�÷�÷oô�ì.ì�'^ñ��«ø-ò.ó�ô�õÏò.ó�ôàï�ö¤õ�üÍ�9ëUì=ò=ô�ïï�ô�ò.ñ�ï�õ�ì�ò=îtò.ó�ôgëUð*"Uô�ï�ì.ëeï�úËò.ó�ô�ùUô�úËî,'ò.ó�ôgö®õ�ì=ò.ëUõ�÷oô�c^ò.ó�ôgëUð*"Uô�ïnì.ëeï.úÎö¤ì��Aï�ô�í�ëeï�ð�ô�ð �¯í;öÀò.ó8ò.ó�ô�ùUô�úUøì�ö®õ�÷oô·ò.ó�ô¯ñ�ì.ñ�ë,�[�Aï.ô�í�ëeïnðCø���öG� ô,�Àø�ò.ó�ô²ë9%�ö-�®öÀò§ú8ò=îª�·ëeùUô²ëUõ A�MC.1632YA¶÷oî�õ�õ�ô�÷oò.öÀî�õbëUì.ì.ö®ü�õ��gô�õcò�ø�ö®ìàõ�îUòñ�ì.ë9%��Àô#î�õ�÷oôwò.ó�ô�ð�ëUõ�ü �®ö¤õ�üg÷oî�õ�õ�ô�÷oò.öÀî�õ¶ëUì�ì.öÀü�õ��gô�õcò;ó�ëUì^%)ô�ô�õR�9ëUð�ôte4�

Å�ôtì=ò.ö����/ï�ô�ì=ò=ï�ö®÷oòàò.ó�ô¯õWñ��)%\ô�ï�î,'º>�A�2C>aD B*2C>_09B]F�A).103242457698;:½+Wñ�ô�ï�öÀô�ìwò=î8ëeò��gî�ì=òàî�õ�ôÍ�)ô�ï�ö®õ�ì=ò.ëUõ�÷oô,� � ó�ôï�ñ��®ô�ì¥ï.ô��®ëeò.ö®õ�ügò=î9îUò.ó�ô�ï;÷oî�õ�õ�ô�÷oò.ö®î�õËëUì.ì.ö®ü�õ��gô�õcò.ì ð�î·õ�îUò;÷nó�ëUõ�üUô,�

� ó�ô+ï.ô�ëUì.î�õ�'MîUï[ò.ó�ôa�\ô�ïH�·ö®ì�ì.öf"Uô�õ�ô�ì.ìö®õª>�A�2C>æD B�2�>_09B]F�AÃ.1032H2�57698;:Ëö®ìò.ó�ëeò[ëUõÌö®õ�ì.ò.ëUõ�÷oô+í+öÀò.ótë�ð�ëUõ�ü �®ö®õ�ü÷oî�õ�õ�ô�÷oò.ö®î�õÌëUì.ì.öÀü�õ��·ô�õ%ò¥÷�ëUõB� òg%\ô�ì.ñ�ï.ô+ò.ó�ëeò¥ö®ò0í¥ëUì.õB� ò¥ò.ë,�ÀùEö®õ�ü�ò=î�ò.ó�ô±ëUð�"Uô�ï�ì.ëeï.ú,�Õ¼a���-ò.ó�ëeò[ö®ì�ü�ñ�ëeï�ëUõcò=ô�ô�ðö®ì�ò.ó�ëeò¥ò.ó�ô#ëUð*"Uô�ï�ì�ëeï.ú9í�î�õB� òg%\ô�ë9%��®ô�ò=î�üUô�ò[ò.ó�ô±ùUô�ú²î,'uò.ó�ëeò[ö®õ�ì.ò.ëUõ�÷oôUø�ñ�õ��Àô�ì.ì�ì.ó�ô#÷oîUï.ï�ô�÷oò��Àú9ü�ñ�ô�ì�ì=ô�ì¥ò.ó�ô��ëUì.ì.íîUï�ð��

SAõT��ï�ëU÷oò.ö¤÷oôUøuò.ó�ö®ì«�·ô�ëUõ�ì�ò.ó�ëeòwíô9÷�ëUõy� ò�ï�ñ��Àô�î�ñ�òàëUõ¹ñ�õ�ì.ñ�÷�÷oô�ì.ì;'�ñ�����ëUì.ì=í�îUï�ð�ü�ñ�ô�ì�ì�ëeò=ò=ô��Q��òàî�õ¹ëUõö®õ�ì.ò.ëUõ�÷oô�ñ�õ%ò.ö���í�ôg÷�ëUõ�÷oî�õ1Ó�ïH�Bò.ó�ëeò#ì=î �gô���ëeï�ò.õ�ô�ï�ö®õ�ì=ò.ëUõ�÷oô�ó�ëUì±î,%�ò.ëUö®õ�ô�ð8ò.ó�ôgì.ë,�gô�ùUô�ú,�Íc@S{'ëUõ�îUò.ó�ô�ïö®õ�ì.ò.ëUõ�÷oô+ó�ëUì¥ö®õ�ð�ô�ô�ð·î,%�ò.ëUö¤õ�ô�ð9ò.ó�ô�ì.ë,�·ô+ùUô�úUøEò.ó�ëeò¥ü�ñ�ëeï�ëUõcò=ô�ô�ì¥ò.ó�ëeò¥ëàõ�î�õEÿ§ð�ëUõ�ü �®ö¤õ�üw÷oî�õ�õ�ô�÷oò.ö®î�õ²ëUì.ì�öÀü�õEÿ�gô�õcòí¥ëUìg�·ëUð�ôUøEì.ö®õ�÷oô+îUò.ó�ô�ï.í;ö¤ì=ô;ò.ó�ô�ùUô�úEìí�î�ñ��®ð/%\ô+ö®õ�ð�ôY�\ô�õ�ð�ô�õcòY�Äe S�ò\'^î ���ÀîOí;ì0ò.ó�ëeò�öf'Cí�ô±ëeï.ô+ò=ï�úWö®õ�ü�ò=î÷oî�ñ�õcò[ò.ó�ô�õWñ��º%\ô�ï¥î,'�ñ�õ�ì.ñ�÷�÷oô�ì.ì�'^ñ��Ê�ÀîUü�ö¤õ¯ëeò=ò=ô�����ò.ìºc^ô,� ü*�Àø-ì.î�ò.ó�ëeò[íô�÷�ëUõ$�®îW÷�ù²ò.ó�ô#ëU÷�÷oî�ñ�õcò í;ó�ô�õÌì=î �gôò.ó�ï.ô�ì�ó�î �®ðÌö®ì[ï�ô�ëU÷�ó�ô�ð]enø-íôà÷�ëUõB� ò;÷oî�õ�ì.ö¤ð�ô�ï;ëUõ¶ëeò=ò=ô��Q��ò+ì.ñ�÷�÷oô�ì�ì;'^ñ��4ñ�õcò.ö��)íôàüUô�ò;ì=î �gô�ùEö®õ�ðtî,'/÷oî�õ1Ó-ïH�·ëiÿò.öÀî�õÎò.ó�ëeò�ò.ó�ôwîUò.ó�ô�ï±ì.ö®ð�ôàó�ëUì+î,%�ò.ëUö®õ�ô�ðËò.ó�ô�ì.ë,�gôwùUô�ú,�aÅ�ô�ò.ócñ�ì�ì=ô�ô�ò.ó�ëeò�ùUô�úË÷oî�õ1Ó�ïH�9ëeò.öÀî�õLc^í;ó�ö®÷�óCø)ö®õî�ñ�ï¸�·îWð�ô��«øEö¤ì[ô�+cñ�öf"ië,�®ô�õ%ò[ò=î·ôoû1���®ö¤÷�öÀò�ëUñ�ò.ó�ô�õ%ò.ö¤÷�ëeò.öÀî�õ]e¥ö®ì;ö®õ�ð�ô�ô�ðtï.ô��®ôY"iëUõcò[í;ó�ô�õÌí�ô�ñ�ì=ôº��ëUì.ì=í�îUï�ð�ìY�

p�Ý Ü %�%�e %!â ì�å9ìæê1ì.-S{'uí�ô�ð�î�õB� ò[ï.ô�+Wñ�öÀï.ô�ôoû1���®ö®÷�öÀò¥ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õ4ø�íô�÷�ëUõ&�·ëeùUô�ëQ�àñ�÷�ó$�gîUï�ô#ôoþ²÷�öÀô�õcòÃ��ï.îUò=îE÷oî �G� � ó�ô�êê7`��ï.îUò=îE÷oî � ï�ô�+cñ�ö®ï.ô�ìgî�õ��Àú¬ò�íîbï.î�ñ�õ�ð�ì�î,'�÷oî ���àñ�õ�ö®÷�ëeò.öÀî�õ�� � ó�ô&��ï.îUò=îE÷oî �;ö®ì9ü�öf"Uô�õØö®õÖ��ö®ü�ñ�ï.ô¹°Z� �+ô�ï.ôíZTµ íq #k2R ¨ ¥ � >  #k2R ¨ ¥ A ö®ì�ëUõ�îUò.ó�ô�ï�ï�ëUõ�ð�î � '�ñ�õ�÷oò.öÀî�õ��¶ê0ê7` ó�ëUìàò.ó�ô¯ì�ë,�gô/%-ëUì.ö®÷·ì=ò=ïnñ�÷oò.ñ�ï.ô¯ëUì�êʼa`gøôoû�÷oôY��ò í;öÀò.ó�î�ñ�ò[ò.ó�ôa�=ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õ6��"eë,�®ñ�ô�ì aÌëUõ�ð"a T �

»+îUò=ôàò.ó�ëeò;ö®õ¶êê7`gø�ëUì;î,���\î�ì=ô�ðÌò=î¯ê�¼a`gø�%\îUò.óËò.ó�ô J ëUõ�ð R "ië,�¤ñ�ô�ì;õ�ô�ô�ð¶ò=î!%\ôÇ�Aô�õ�÷oï.úZ��ò=ô�ð �·í;öÀò.óò.ó�ôÍ��ëUì.ì=í�îUï�ð c@%cú �àñ��Àò.öf���®ö¤÷�ëeò.öÀî�õÏí;öÀò.óbëËïnëUõ�ð�î �HîUï�ëU÷Y�ÀôÍ"ië,�¤ñ�ôte4� � ó�ô²ï�ô�ëUì=î�õ¬ö®ìwò.ó�ëeò�ö¤õ�ê0ê\` ò.ó�ô�ì=ô"eë,�®ñ�ô�ì�ëeï.ô�õ�îUò+ö®õÎëUõ%ú¶í¥ë�ú8ëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ð���SU'�ø)ëUì±ö®õÎêʼ�`gø R í¥ëUì.õB� ò¿�Aô�õ�÷oï.úZ��ò=ô�ðCø��²ò.ó�ô�õ8ëUõÏëUð*"Uô�ï�ì.ëeï.ú÷oî�ñ��®ðÌ÷�ëeï�ï.útî�ñ�ò[ò.ó�ô�'^î ���ÀîOí;ö®õ�ügëeò=ò.ëU÷.ù�í

¨ �;ê�ô�ï�'^îUïH� ë�÷oî�õN"Uô�ïnì.ëeò.öÀî�õtí;öÀò.óͼa�®ö®÷oôUø�ö��Q�\ô�ï�ì=î�õ�ëeò.ö®õ�üºî�î,%�íÕ¼a�®ö®÷oô�ì=ô�õ�ð�ì J �8� ( �3cQí µ cQ§[RS©�R ¦ � e;e K �¼�ð*"Uô�ï�ì�ëeï.útï.ô�ì;�\î�õ�ð�ì�í;öÀò.ó R ���)*N�

°Z�¸¼�ð*"Uô�ï�ì�ëeï.úÌëUì=ùWì;ëUõV04. ._@ DGFH0,>EDG69BV+Wñ�ô�ï.ú¯ò=î·üUô�ò�¼a�®ö®÷oô��¾ì ùUô�ú¡Ð�¸í Á cQ§¨RS©�R J R R R#c J

cQí µ cQ§¨RS©�R ¦ � e;e K e * R ¦ � eI�±Z�¸»+î�í?ò.ó�ôwëUð*"Uô�ïnì.ëeï.úÌ÷�ëUõ¶÷�ëeï.ï.útî�ñ�ò ëUõ¶î9h-ÿ��®ö¤õ�ô�ð�ö®÷oò.öÀî�õ�ëeï.ú²ëeò=ò.ëU÷�ù-ø�%cút÷�ó�ô�÷.ùEö®õ�ü�¡ ëeü�ëUö®õ�ì.ò

í Á cQ§¨RS©�R J R R R#c JcQí µ cQ§¨RS©�R ¦ e;e K e * R ¦ e

'^îUï;ë,����"ië,�®ñ�ô�ì¥î,' ¦ �

¨ °

Page 13: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

§ ©

ì�FHGI� !J �8�)(��NcQí µ cQ§¨RS©�R ¦ e;eLK J M � ô�ì=ò J NOP k��·îWð��

Q F G � !R �8� * �PcQí Tµ cQ§¨RS©�R ¦ e;e KS � c TUlV ï UWX � Z�� \ ]^]`_ eL*

� ô�ì=ò R NOP k��gîEð�� Rc ¡Ð� í Á cQ§[RS©�R J R R R S R ¦ eS � c vUWV µï UYX � Z[� \�]w] _ eL(¡Ð� í Á cQ§[RS©�R J R R R S R ¦ e

��ö®ü�ñ�ï.ôº°Zí � ó�ô�ê0ê7` ��ï.îUò=îE÷oî �qø�í;öÀò.ó ¦ � ¦ i §[RS©)l_� � ó�ô#ï.ô�ì.ñ��Àò.ö¤õ�ügì=ô�ì.ì.öÀî�õtùUô�úÌö®ì{¡L�

� ó�ö¤ìëeò=ò.ëU÷�ù¯ö®ì¥õ�îUòg�\î�ì.ì.ö�%��Àô ëeü�ëUö®õ�ì.ò¥êʼa`gø�ì.ö®õ�÷oô ¼a�®ö®÷oô�íî�ñ��¤ð²õ�îUò¥ëU÷�÷oôY��òºc�ëUõ�ð¯í�î�ñ��®ðtõ�îUò¥÷oî �Q��ñ�ò=ô�¡(eí;öÀò.ó�î�ñ�ò±ï.ô�÷oô�öf"Eö®õ�ütë���ï.î,�\ô�ï9a¹"ië,�®ñ�ôUøuëUõ�ðÏò.ó�ô·ëUð*"Uô�ïnì.ëeï.úÎ÷�ëUõy� ò�üUô�õ�ô�ï�ëeò=ô·ò.ó�ôQ��ï.î,�\ô�ïxaÂ"ië,�®ñ�ô�í+öÀò.ó�î�ñ�òùEõ�î�í;ö¤õ�ügò.ó�ô«��ëUì.ì.íîUï�ð��e ÙuâWå�æiâv|zyÀÍ"gp?1A�ÅqÅj .�8�6,>_6#FH6�@^D 2�0T2YAHFY=18;Ad.103242457698;:9<;09=*>@?1ACB�>EDGFH0 >�A�: I ACKVA�MPFC?Z09BZOPA).�8�6,>_6#FH6�@�D B¬>@?*AD@X¸.®@ÄDGFYDE>E<�0,=1>@?*ACB�>EDGFH0,>EDG69B(X�6�:PAY@lk

� ó�ô·÷oî �Q���Àô�ò=ô�õ�ô�ì�ì�ï.ô�+Wñ�öÀï.ô��·ô�õ%ò«'^î ���ÀîOí;ì�ð�öÀï�ô�÷oò��Àú&%Wú8ö¤õ�ì;�\ô�÷oò.öÀî�õ�� � ó�ôQ��ï.îWî,'î,'[ì.ö���ñ��®ëeò.ë9%-ö��®öÀò�úËë9��ÿ�\ô�ëeï�ì�ö®õ/¼����\ô�õ�ð�öÀûQîa� � ó�ô¸%�ëUì.ö¤÷+ì=ò=ïnñ�÷oò.ñ�ï.ô�î,'4ò.ó�ôa��ï.îWî,'uö®ìò.ó�ô±ì.ë,�gô±ëUìg'MîUï¥ò.ó�ô±êʼ�` ��ï.îUò=îE÷oî �qøEôoû�÷oôY��òò.ó�ëeò í�ôwõ�îOí ó�ë#"UôàëUõ¶ëUõ�ë,�®îUü·î,'æÉÃ�®ëUö�� ¨ '^îUï^%\îUò.ó¶ö®õ�ö®ò.ö®ëeò=îUï[ëUõ�ðÌï.ô�ì;�\î�õ�ð�ô�ï ö®õ�ì=ò.ëUõ�÷oô�ì��

{ |fn�}��IpH�Sn\��+nÏ�Ê��~[nÕ����nÕ���Ì��n ñ ���?nÐ�&}®n{õ÷ö÷ô�nÓøÇòóù���� øÎ���Ã�Ê���æ��p

��Ý�Þ �'(7á�ëB-[b�gÕàtå9á_� &¹é_å,ç,%�ë�à3à'&�ì�â)(\à���áÂá]à3é½-�é�á�è7ê1áTå,ìib�á�â��pá�â��/ì.��q7âNì.� é�à3áÅ�ôËõ�îOí ð�ôCÓ)õ�ôÌë¹ì=úEì=ò=ô�� ö®õ¬í;ó�ö®÷�ó¬î�õ�ô&��ëeï.ò§ú¬ö®ìgð�ô�ì�öÀü�õ�ëeò=ô�ð´ëUì²ë�ì=ô�ï�"Uô�ï�ø[ëUõ�ð¬í;ó�ö®÷�ó ð�ô�ì�÷oï�öf%\ô�ì�ò.ó�ôë9%�ö��¤öÀò§úgî,'�ëUõÌëUð*"Uô�ï�ì.ëeï.ú²ò=îgî,%�ò.ëUö®õtö®õ*'^îUïH�·ëeò.ö®î�õ¯ë9%\î�ñ�òW��ëUì.ì.íîUï�ð�ì�ì.ò=îUï.ô�ðtî�õtò.ó�ô#ì=ô�ï�"Uô�ï�ø�ë,�®î�õ�ü�í;öÀò.ó¯ò.ó�ôï.ô�ì.ñ��Àò.ëUõ%òàì=ô�÷�ñ�ï�öÀò�ú,� � ó�ô9ö®õ�'MîUïH�9ëeò.öÀî�õ¹ì=ò=îUï.ô�ðV%cúÏò.ó�ô¯ì=ô�ï�"Uô�ï�ö®ì�÷�ë,���®ô�ð¬>@?1A��,AC8�D �WAY8(c�ì.ö®õ�÷oô¯öÀò�ë,���ÀîOí;ì�'^îUï"Uô�ï�ö¶Ó)÷�ëeò.öÀî�õgî,'\ò.ó�ô;÷Y�®ö®ô�õ%ò$�¾ìæ�-ëUì.ì=í�îUï�ð]e4� � ó�ô[üUî�ë,�-ö®õ�ò.ó�ö®ìæ�gîEð�ô���ö¤ì�ò.ó�ëeò¦ò.ó�ô;ëUð�"Uô�ï�ì.ëeï.úgì.ó�î�ñ��®ð�õB� ò�%\ô ë9%��Àôò=îwö����)ô�ïnì=î�õ�ëeò=ô¥ò.ó�ô;÷Y�®ö®ô�õ%ò�ø�ôY"Uô�õ²öf'-ì�ó�ô[î,%�ò.ëUö®õ�ì�ò.ó�ô^"Uô�ï�ö¶Ó�ô�ï¦ì.ò=îUï.ô�ð�%Wúàò.ó�ô ì=ô�ï�"Uô�ïac�÷Y�®ô�ëeïH�ÀúUø�ò.ó�ô+ëUð*"Uô�ï�ì.ëeï.úí;ö��-�*%\ô+ë9%��Àô+ò=î�ö-�Q�\ô�ï�ì=î�õ�ëeò=ô+ò.ó�ô�ì.ô�ï�"Uô�ï�e4�Õ»+îUò=ô�ò.ó�ëeòò.ó�ôa"Uô�ï�ö¶Ó-ô�ï�÷�ëUõÍ%\ô+ñ�ì.ô�ð!'^îUï�ëUõ²î9h)ÿ��®ö®õ�ô�ð�ö®÷oò.öÀî�õ�ëeï�úëeò=ò.ëU÷.ù)ø¦ì.ö®õ�÷oô·öÀò#î,%P"EöÀî�ñ�ìH�ÀúÎ÷oî�õcò.ëUö®õ�ìwô�õ�î�ñ�ü�ó¹ö®õ�'MîUïH�9ëeò.öÀî�õÏò=îÎ÷nó�ô�÷.ù�ò.ó�ô!��ëUì.ì=í�îUï�ð���Å�ô¯÷�ëUõ¹ò.óWñ�ì#î�õ��®úï.ô�+Wñ�öÀï.ôàò.ó�ëeò±ö��Q�\ô�ï�ì=î�õ�ëeò.ö¤õ�ü·ò.ó�ô�÷Y�®öÀô�õcò+ñ�ì�ö®õ�ü9ò.ó�ô)"Uô�ï�öfÓ�ô�ï�ì�ó�î�ñ��®ðR%\ô�ö��Q�\î�ì.ì.ö�%��Àô±í;öÀò.ó�î�ñ�ò+ë¯ð�ö®÷oò.öÀî�õ�ëeï�úëeò=ò.ëU÷.ù��

� ó�ô)�gîEð�ö¶Ó-÷�ëeò.ö®î�õ�ì[ò=î9ò.ó�ô)�gîEð�ô��4î,'/ò.ó�ôàö®ð�ô�ë,��ì=úEì=ò=ô�� ëeï�ôàëUì�'Mî ���®î�í;ìYí © õ�ôàï.î �Àô/c^î,�\ô�õÎîUï�÷oî�õ�õ�ô�÷oò4eö®ì±ð�ô�ì.ö®ü�õ�ëeò=ô�ðÏëUì#ò.ó�ôÍ2YAY8I�,AC8·ï.î �®ôUøCí;ó�ö��Àôàò.ó�ô�îUò.ó�ô�ï�ö®ì±ð�ô�ì.ö®ü�õ�ëeò=ô�ð�ëUì±ò.ó�ô$F$@ DGAYB�> ï�î �Àô,��Å�ô·ëUð�ðÏò.ó�ôR>�AC2�>.103242457698;:�ëUõ�ðªOPA�>q�,AC8�D �gAC8gî,�\ô�ï�ëeò.öÀî�õ�ì�ø-ëUõ�ð8÷�ó�ëUõ�üUôàò.ó�ô!2�>_098C>g2�A�2H2�DE6,B¹î,�\ô�ï�ëeò.öÀî�õ��ÃSAõ¶î�ñ�ï±ö®ð�ô�ë,��ì=úEì=ò=ô��ò.ó�ô�ï.ôgö®ì±õ�îtò.ëUõ�ü�ö�%��Àôd"Uô�ï�ö¶Ó�ô�ï#ì=ò=îUï.ô�ðª%WúËò.ó�ô�ì.ô�ï�"Uô�ï��º¿+ëeò.ó�ô�ï�ø��\î�ì.ì=ô�ì�ì.öÀî�õÎî,'0ò.ó�ô�"Uô�ï�ö¶Ó-ô�ïQc^í+ó�ö®÷�ó8ï.ô�ì�ñ��Àò.ì'^ï.î � ò.ó�ôªOPA�>[�,AC8�D �WAY8Ïî,�)ô�ïnëeò.öÀî�õ]e�ü�ö�"Uô�ì9ò.ó�ôÎëUð*"Uô�ï�ì.ëeï.ú´ë,�Aï�öÀü�ócòS�¹ò=î �\ô�ï�'MîUï4� ëUõ´î9h)ÿ��®ö®õ�ôÎð�ö®÷oò.öÀî�õ�ëeï�úëeò=ò.ëU÷.ù��

� ó�ô#î,�)ô�ïnëeò.öÀî�õ�ì ëeï.ô�ó�ëUõ�ð��Àô�ðÌëUì¸'Mî ���®î�í;ìYí��âWè$�£}���è�è�ä�å�æiç

� ó�ö®ì�+Wñ�ô�ï.ú�ò.ëeùUô�ì�ò§í�î�ñ�ì=ô�ï�ì�ø�ì.ë�ú �±ëUõ�ð �·T�ø/ëUì�ëeï.ü�ñ��gô�õcò.ì�ø/ë,�Àî�õ�üÎí;öÀò.ó�ë&��ëUì.ì=í�îUï�ðÚü�ñ�ô�ì.ì ¦ �RSU'

¨ ±

Page 14: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ë$OZAY>O�,AC8�D �gAC8/+Wñ�ô�ï.ú8ó�ëUì %\ô�ô�õª�·ëUð�ôgî�õu ��SR�� T ¥�øuò.ó�ô�õÏò.ó�ö®ì�ï.ô�ò.ñ�ïnõ�ì�í;ó�ô�ò.ó�ô�ï ¦ � ¦ i���´{¢½RI��´ ¢ µ l_�)SU'ò.ó�ôw÷oî �Q��ëeï�ö¤ì=î�õtï.ô�ò.ñ�ï�õ�ì¥ò=ï�ñ�ôUø�ò.ó�ö®ì[ö¤ì[÷�ë,���Àô�ð¶ëgì.ñ�÷�÷oô�ì.ì;'�ñ��\ü�ñ�ô�ì.ì[î�õ� 5��´M¢�RI��´ ¢¶µ ¥ �ÕS{'�õ�î!OPAY>q�9AY84D �WAC8ó�ëUì %)ô�ô�õª�·ëUð�ô�î�õu ��ER�� T ¥�øCò.ó�ô�õ�õ�îÌëUõ�ì=í�ô�ï#ö®ì�ï.ô�ò.ñ�ï�õ�ô�ðJc@%-ñ�ò#ì=ô�ô�ò.ó�ôgð�ô�ì.÷oï�öf��ò.öÀî�õËî,'gOPA�>O�9AY84D �WAC8%\ô��ÀîOíae4�� ó�ö®ì7+Wñ�ô�ï.ú·ð�îcô�ì�õ�îUò7�]�®ëU÷oô�ëwï.ô�÷oîUï�ðtö®õ9ò.ó�ô;ò=ï�ëUõ�ì.÷oï�öf��òY��S�ò÷�ëUõÍ%\ô+ëUì=ùUô�ðtëUõcú·õcñ��º%\ô�ï0î,'uò.ö��gô�ì�øEëUì�®î�õ�ü9ëUì ò.ó�ôwõ�ôoûEò�+Wñ�ô�ï.útë9'Mò=ô�ï�ôY"Uô�ï.úT>�A�2C>�.*032H2�57698�:Ïö¤ì[î,'�ò§úZ�)ô!D X�._@�ACX!ACB]>_0,>EDE6,B��ºc � ó�ôwö¤ð�ô�ëgî,'�ò.ó�ô�¤ëUì=ò ï.ô�+Wñ�öÀï.ô��·ô�õ%ò ö®ì¥ò.ó�ëeò+ë$>�AC2�>�.1032H2�57698;:¹+Wñ�ô�ï.úÌó�ëUì ò=î�%\ô�÷�ëUñ�ì=ô�ð$%WúÌë �Aï.ô�ë,��ÿ«í�îUïH�®ð6��î,�)ô�ïnëeò.öÀî�õCøí+ó�ö®÷�óR�®ô�ë�"Uô�ì�ëUõTD X�._@�ACX!AYB�>_0,>EDG69B¹ï.ô�÷oîUï�ðËö®õtò.ó�ô�ò=ï�ëUõ�ì.÷oï�öf��òY�Äe

×�â��£è)âcæ��^��âWæÌi � ï�ëUõ�ì�÷oï�öf��òYí¸cI¬$év1)/��W1ij_­�76­Ä1ij�¬�R��SR�� T e�l¼+ï.ü�ñ��·ô�õ%ò.ìYí�ñ�ì=ô�ï�ì�� ëUõ�ðZ�·TE����îUï#ô�ëU÷�ó½>�AC2�>�.1092H24576,8�:V+cñ�ô�ï�ú¶î�õ~ ��SR��·TU¥gò.ó�ëeò#ó�ëUìa��ï.ôY"EöÀî�ñ�ì��Àú�%\ô�ô�õëUì.ùUô�ðÙc�öf'+ëUõcú�enøï.ô�ò.ñ�ï�õ�ì�í;ó�ô�ò.ó�ô�ïgîUï·õ�îUò·öÀò�í�ëUì9ì.ñ�÷�÷oô�ì.ì;'�ñ��G�LSU'�ëUõ%úbî�õ�ôÌî,'�ò.ó�ô�� ëU÷oò.ñ�ë,���®úÚí¥ëUìì�ñ�÷�÷oô�ì.ì;'�ñ��qø\ò.ó�ô�õÏò.ó�ö¤ì OZAY>Â�,AC8�D �WAY8/+Wñ�ô�ï.úËö¤ì�÷�ë,�-�Àô�ðÏëÌì.ñ�÷�÷oô�ì.ì;'�ñ���ü�ñ�ô�ì.ì�î�õu 5��´{¢�RI��´ ¢�µ ¥ �)»+îUò=ôgò.ó�ëeòò.ó�ôÎö®õ*'^îUïH�·ëeò.ö®î�õ´ë9%\î�ñ�ò9ò.ó�ôÎì.ñ�÷�÷oô�ì.ì²î,'«'^ëUö-�®ñ�ï.ôÌî,'�>�AC2�>^.1032H2�57698;: +cñ�ô�ï�öÀô�ì·ö®ì&B]6,>Q�]�®ëU÷oô�ðØö®õØò.ó�ôò=ïnëUõ�ì.÷oï�öf��òY�

è$����æ��·è�âWè�è��^å®� i � ï�ëUõ�ì.÷oï�öf��òYí^cI¬�²'/W¯)³�/f²�1 ²v²�­�º�4�¬'R��SR��Pe�lSAõØëUð�ð�öÀò.öÀî�õ ò=îbò.ó�ôÎï�ñ��Àô�ì·ì��)ô�÷�öfÓ�ô�ð½��ï.ôY"EöÀî�ñ�ìH�ÀúUø�ëÚ÷oî�õ�õ�ô�÷oò.öÀî�õ ëUì.ì.ö®ü�õ��gô�õcò9î,'/A�MC.1632�Aª'^îUï²÷Y�®öÀô�õcòö¤õ�ì=ò.ëUõ�÷oôLcU�ER��Pe²ö®ì·ë,���®î�í�ô�ð ëeò¯ëUõ%ú½�\î�ö®õcò·ë9'Mò=ô�ïtëLOZAY>[�9AC8�D �WAC8(+Wñ�ô�ï.úbî�õ ñ�ì=ô�ï�ìo��îUï��·T ó�ëUì!%\ô�ô�õ�\ô�ï�'^îUïH�gô�ð4øWí+ó�ô�ï.ô¨��´ ¢¶µ �ÏÅd��´ ¢�¤ �

� ó�ô�>�A�2C>P.103242457698;:Q+Wñ�ô�ï.ú�ð�îWô�ì�õ�îUò�ë3h\ô�÷oò�ò.ó�ô\�Àô�ü�ë,�®ö®ò§ú#î,'p64.*AYB9ëUõ�ð�FH69B�B�A�F#>u÷oî�õ�õ�ô�÷oò.ö®î�õàëUì.ì�öÀü�õ��gô�õcò.ìY�

��Ý Ü áªá�ëB-[b�gÕàtå9á_����áÂá]à3é½-�é�á�è7ê1áTå,ìib�á�â��pá�â��/ì.��q7â ì��ÌéUà3á¼�ì ö®õ¯ò.ó�ô�ö®ð�ô�ë,�\ì=úEì=ò=ô��Ìø�î�õ�ô#ï.î �Àô�c^î,�\ô�õtîUï;÷oî�õ�õ�ô�÷oò4e[ö®ì[ð�ô�ì.öÀü�õ�ëeò=ô�ðÌëUì[ò.ó�ô�2YAY8I�,AC8àï.î �ÀôUø�í;ó�ö-�Àô+ò.ó�ô#îUò.ó�ô�ïö®ì[ð�ô�ì�öÀü�õ�ëeò=ô�ð¶ëUì;ò.ó�ô!F$@ DGAYB�>�ï.î �Àô,�æSAõtò.ó�ô�ï.ô�ë,�uì=úWì.ò=ô���ò.ó�ô�ì=ô�ï�"Uô�ï�ì=ò=îUï.ô�ì+ëUõ¶ëU÷oò.ñ�ë,��%�ö®ò¥ì.ò=ï�ö®õ�ü�ø�ëQ"Uô�ïnö¶Ó�ô�ï�øò=î�"Uô�ï�ö�'Múgë�÷Y�®ö®ô�õ%ò$�¾ìæ�-ëUì.ì=í�îUï�ð�� � óWñ�ì�ò.ó�ô^��ï�îUò=îW÷oî �-ó�ëUì¦ò=îwì��)ô�÷�ö�'Mú�ë��\î �ÀúEõ�î �·ö®ë,��ÿ«ò.ö-�gô\"Uô�ïnö¶Ó�ô�ï¦üUô�õ�ô�ïnëeò.öÀî�õë,�ÀüUîUï�ö®ò.ó��z���¸ACBtò.ó�ëeò�ø\ü�öf"Uô�õÏëtì=ô�ò±î,'0ñ�ì=ô�ï±ö®ð�ô�õcò.öÀò.öÀô�ì[ �§[RS©�¥�ø4ëUõ�ð8ëÍ��ëUì.ì=í�îUï�ð ¦ øÊ��ï.îEð�ñ�÷oô�ì�ë/"Uô�ïnö¶Ó�ô�ï���

¼�ì¥ë9%)ît"Uô 'MîUï ¦ i §¨RS©ºl«øEí�ô±í;ö�����í;ï�öÀò=ô��Íi §¨RS©)l)ò=îQ�gô�ëUõ��/iª �§[RS©�¥Yl«ø�ò.ó�ôa"Uô�ï�ö¶Ó�ô�ï¥î,'uñ�ì=ô�ï\�-ëUöÀï{ �§¨RS©�¥ �¼�ñ�ì=ô�ï¥ö®õ�ì.ò.ëUõ�÷oôdcU�SR��Zeö®õ·ò.ó�ô±ì=ô�ï�"Uô�ï�ï.î �Àô�ö®ìü�öf"Uô�õ²ëU÷�÷oô�ì�ì¥ò=î��/i���´ ¢ RIÅd��´ ¢�¤ l_�Õ¼ ñ�ì=ô�ïö¤õ�ì=ò.ëUõ�÷oô�cU�SR��Pe�ö®õ9ò.ó�ô÷Y�®öÀô�õcò[ï.î �Àô�ö¤ì¥ü�öf"Uô�õËëU÷�÷oô�ì.ì;ò=î ¦ i���´{¢�RIÅq��´{¢�¤�l_�

� ó�ô�÷�ó�ëUõ�üUô�ì;ò=î·ò.ó�ô�D@B�DE>EDE0�@ÄDK¾#A)=Z2YAY8�ëUõ�ðª2YA�>�.1092H24576,8�:Îî,�\ô�ï�ëeò.öÀî�õ�ì;ëeï.ôwëUìÃ'^î ���ÀîOí;ìYí�Q����'�U�6�Q�U«�â8�uè�âcæ i � ï�ëUõ�ì.÷oï�ö���òYí^cI¬'­'4®­�/_­�¯232­�°21�±B²�1)³�¬'R��SRI��´�¢_e�l

SAõ¶ëUð�ð�öÀò.öÀî�õ¯ò=î9í;ó�ëeò ö®ì[ð�î�õ�ô�ö®õ¶ò.ó�ô«%�ëUì.ö®÷±ï�ô�ë,�4ì=úEì=ò=ô��Ìø��/i���´{¢½RI��´ ¢¶µ l®�����¸ACB]c½ 5��´{¢�RI��´ ¢¶µ ¥ÄR¦ i���´{¢�RI��´ ¢ µ l@e¥ö®ì[÷oî �Q�-ñ�ò=ô�ð$'^îUï ô�ëU÷�óÇ� T �

è�â���}���è�è�ä�å�æiçÑi � ï�ëUõ�ì�÷oï�öf��òYí¸cI¬�²�1)/¸96¯ ²v²�¹ º)³v».¬�R��SRI��´{TQR ¦ e�lSAõ¶ëUð�ð�öÀò.öÀî�õ¯ò=î9í;ó�ëeò ö®ì[ð�î�õ�ô�ö®õ$%�ëUì.ö®÷�ï.ô�ë,�4ì.úWì=ò=ô��¶ø��!i���´ ¢ RI��´�Twluö¤ì ì=ô�ò ò=î8���¸ACB�c½ 5��´ ¢ RI��´MT¥ÄR ¦ e4�

Å�ô�ëUð�ðtò.ó�ô)OZAY>>�,AC8�D �gAC8�î,�\ô�ï�ëeò.öÀî�õ�í×�â��£è)âcæ��^��âWæÌi � ï�ëUõ�ì�÷oï�öf��òYí-cI¬$év1)/��W1ij_­�76­Ä1ij�¬�R��SR��·T enø�'^î ���ÀîOíô�ð$%cúTcI¬'­�ÈW963B¬'R�¬��21)³_­�76­�1)³�¬�R��SR��·T R

�Íi���´M¢�RI��´ ¢¶µ l@e�l� ó�ô¯ëUð�"Uô�ï�ì.ëeï.úL�)ô�ïH'MîUïH�9ìwò.ó�ö¤ì)+Wñ�ô�ï.ú¹í+öÀò.óc��ëUõ�ðc�·T�ëUìgëeï.ü�ñ��gô�õcò.ì�ø¦í+öÀò.ó-�/i���´{¢½RI��´ ¢¶µ lÃ%\ô�ö®õ�üÎï.ôoÿò.ñ�ï�õ�ô�ð��

¨ j

Page 15: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

§ c�÷Y�®öÀô�õcò4e © c�ì=ô�ïH"Uô�ï�e

ì�F[G�� !J �8�)(��NcQí µ cQ§[RS©�R2��e;eLK J M � ô�ì=ò J�NOP k«�gîEð��

Q F G � !R �8� *S � c TUWV ï UWX � Z[� ��]w]`_ eL*��F[G� #k2R ¨ ¥�@�øo���8� V µ  UWX � Z�� � ]

S � R ( R R&�_Rbac a��¡��¢�í ¾1< cQ§[RS©�R J R R R&�_R S R�{��ax¢�í ¾1< cQ§¨RS©�R J R R R&�_R S R&��£�R2�de � V µ  UWX � Z�� � ]�R2��e� ô�ì=òd� N�8� V µ  UYX � Z[� � ]a T �÷í ¾1= cQ§¨RS©�R J R R R S R&�_Rba®R&�5R2�!e¡ �÷í Á cQ§¨RS©�R J R R R S R&�5R2��e avT M � ô�ì.ò?avT N� í ¾1= cQ§[RS©�R J R R R S R&�_Rba®R&�5R2��e

¡Ð� í Á cQ§[RS©�R J R R R S R&�5R2�Qe

��öÀü�ñ�ï.ô�±Zí � ó�ô�êʼa`±ÿ_Òb��ï.îUò=îE÷oî �qø4í;öÀò.ó ¦ � ¦ i §[RS©)l«ø�¤Z�¥¤�i §¨RS©)l«ø�ëUõ�ð�� ���/i §[RS©)l_� � ó�ô�ï.ô�ì�ñ��Àò.ö®õ�üì=ô�ì.ì�öÀî�õtùUô�ú¶ö®ìO¡ �

��Ý] % ã�e�*�¦ %!â ì�å9ìæê1ì.-SAõàî�ñ�ï���ï.îUò=îW÷oî �«øUíô[í;ö-���%ð�ô�ì�öÀü�õ�ëeò=ô�ò.ó�ô�64.*ACB¯ï.î �Àô¥ëUì�ò.ó�ô[÷Y�®öÀô�õcò�ï.î �Àô,��Å�ô[í;ö����cñ�ì=ô§ØëUõ�ð�© ò=î±ð�ô�õ�îUò=ô[ò.ó�ôö®ð�ô�õcò.öÀò.öÀô�ìî,'4ò.ó�ô±÷Y�®öÀô�õcò¥ëUõ�ð9ò.ó�ô�ì=ô�ïH"Uô�ï�øEï.ô�ì;�\ô�÷oò.öf"Uô��Àú,�æSAõ²ëUð�ð�öÀò.öÀî�õ9ò=î�ò.ó�ô+ï�ëUõ�ð�î � îUï�ëU÷Y�Àô�ì�íô±ó�ë#"Uô�ñ�ì=ô�ð%\ôY'MîUï�ôUø4íô9í;ö�����ñ�ì=ô·ëUð�ð�öÀò.öÀî�õ�ë,��'�ñ�õ�÷oò.öÀî�õ�ì�í�§!í� #k2R ¨ ¥ ��>  #k2R ¨ ¥)¨ !�¨ ©�@ËëUõ�ðcí T§ í� #k2R ¨ ¥ ��>  #k2R ¨ ¥)¨ !�¨ ©�@�øí;ó�ö¤÷�ótí�ô�í;ö����\ëUì.ì�ñ��gô#ò=î�%\ô#ï�ëUõ�ð�î � '^ñ�õ�÷oò.öÀî�õ�ìY� � ó�ôa"Uô�ïnö¶Ó�ô�ï üUô�õ�ô�ïnëeò.öÀî�õËë,�ÀüUîUïnöÀò.ó���ö®ì

�ª�¸AYB]c½ �§[RS©�¥ÄR ¦ ed�8� £B« X � Z�¬ Rí;ó�ô�ï�ô�í�ô·ð�ôCÓ-õ�ô­¤Êi §[RS©)lq�óí § cE�9ö®õ�cQ§[RS©�eIR��·ëiû�cQ§¨RS©�eIR ¦ eQc^íô·õ�ô�ô�ðÏò=î¶îUï�ð�ô�ï�ñ�ì.ô�ï±ö¤ð�ô�õ%ò.ö®ò.öÀô�ì�øvß.ñ�ì=ò#ì=îò.ó�ëeò;ëUõcú���ëUöÀï[î,'�ñ�ì=ô�ï�ì;ó�ëUì ë·ñ�õ�ö�+cñ�ô�"Uô�ï�öfÓ�ô�ï�e4�

� ó�ô�ê�¼a`±ÿ_Ò ��ï.îUò=îE÷oî �4ö®ì ü�öf"Uô�õ¶ö®õ¼��öÀü�ñ�ï�ôº±Z�

e ÙuâWå�æiâv|¯®BÍ"gp?1A�Åih�j)<±° .]8�6 >_6�FH6�@�D-2�0�2YA�F�=18;Ag.103242457698;:9<;09=*>@?1ACB�>EDGFH0 >�A�:�I ACK/AHMNFC?109BPOPAg.]8;6,>_6�F46�@�D@B¹>@?*AA�MC._@ DEF�D@>E<;09=*>@?1ACB]>EDEF40,>EDE6,B(X�6�:NAY@³²\5æDE>@?R8;AC24DU@ÄD_ACB�F4Ad>_6/2YAY8I�,AC8ºF469X�.]8�6,XdD 2YA�k

� ó�ô·÷oî �Q���Àô�ò=ô�õ�ô�ì�ì�ï.ô�+Wñ�öÀï.ô��·ô�õ%ò«'^î ���ÀîOí;ì�ð�öÀï�ô�÷oò��Àú&%Wú8ö¤õ�ì;�\ô�÷oò.öÀî�õ�� � ó�ôQ��ï.îWî,'î,'[ì.ö���ñ��®ëeò.ë9%-ö��®öÀò�úËë9��ÿ�\ô�ëeï�ìwö¤õ(¼¸���)ô�õ�ð�ö�ûTÉ � � ó�ô�%�ëUì.ö¤÷·ì=ò=ï�ñ�÷oò.ñ�ï.ô·î,'[ò.ó�ô/��ï.îWî,'�ö®ìwò.ó�ô²ì�ë,�gô²ëUì)'MîUïàò.ó�ô²êʼa`Ë��ï.îUò=îW÷oî �_��¼�·ë'ß=îUï#ò=ô�÷�ó�õ�ö®÷�ë,�/ð�ö�þ²÷�ñ��Àò§ú¶ö®õ8ò.ó�ôgì.ö-�àñ��¤ëeò.öÀî�õÎö¤ì+ò.ó�ô�÷�ëUì.ôgí;ó�ô�õ8ò.ó�ôgëUð*"Uô�ï�ì.ëeï�úÎó�ëUì±î,%�ò.ëUö¤õ�ô�ð8ò.ó�ô�"Uô�ï�ö�ÿÓ�ô�ï�ø�ëUõ�ð�ö®ì#õ�îOí ëU÷oò.ö®õ�ü¶ëUì#ò.ó�ô9ì=ô�ï�"Uô�ï/c�ö¤õª'^ëU÷oò�ø�ò.ó�ô·ì=ô�÷�ñ�ï�ö®ò§ú8î,'ò.ó�ô/·*»�¼�êÕS�ÿ_Ò ��ï.îUò=îW÷oî ��i®±9k9l0ó�ëUì#î�õ��®ú%\ô�ô�õËì.ó�î�í;õÎñ�õ�ð�ô�ï ò.ó�ôàëUì.ì.ñ��Q��ò.öÀî�õÌò.ó�ëeò�ì.ñ�÷�óËë²ì.÷oô�õ�ëeï�ö®î²ð�îWô�ì;õ�îUò+îW÷�÷�ñ�ï�e4� � ó�ôwð�ö�þ²÷�ñ��Àò�úÌö®ì[ò.ó�ëeò�ò.ó�ôì.ö���ñ��®ëeò=îUï+õ�ô�ô�ð�ì+ò=î!"Uô�ï�öf'^útò.ó�ô�"eë,�®ñ�ô�î,'� V µ  UYX � Z[� � ]/í+öÀò.ó�î�ñ�ò ùEõ�îOí;ö®õ�ü�¤]� � ó�ö®ì ö¤ì ëU÷�ó�ö®ôY"Uô�ð¹%WúÌ÷�ó�ô�÷�ùWö¤õ�üë,���-ò.ó�ô�íÇT§ +Wñ�ô�ï�ö®ô�ì�ñ�õ%ò.ö���íôaÓ-õ�ð²ë�+Wñ�ô�ï.ú´�+ò.ó�ëeò¥ü�öf"Uô�ìµ�£�8� V µ  UYX � Z[� � ] �æÅ�ô�÷�ëUõtò.ó�ô�õtñ�ì.ô+ò.ó�ö¤ì7"eë,�®ñ�ô�î,'H�ò=îtð�ô�ò=ô�ïH�·ö®õ�ôwò.ó�ô�÷oîUï.ï.ô�÷oò "eë,�®ñ�ôwî,'µ� V µ  UYX � Z[� � ]���cE¼ ì.ö��9ö��®ëeï ò=ô�÷nó�õ�ö�+Wñ�ô�í�ëUì±ñ�ì=ô�ð8ö®õ�ð�ôY�)ô�õ�ð�ô�õ%ò��®ú²ö®õJi®°9k9lò=î·î,%�ò.ëUö¤õ¶ëUõÌôoþ²÷�öÀô�õcò ô�õ�÷oï�úP��ò.ö®î�õÌì.÷�ó�ô��·ôwì=ô�÷�ñ�ï.ôàëeü�ëUö®õ�ì=ò;ëUõËëUð�ë9��ò.öf"Uôw÷nó�î�ì=ô�õEÿ§÷�ö���ó�ô�ï.ò=ôoûEò ëeò=ò.ëU÷.ù��Äe

¨ ³

Page 16: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

¶ � ����>p4�·}��H��·} Ø^��z¸ ñ n7 ø¬���?¹opEn�nº}Å�ô¹ó�ë#"UôÂ��ï.ô�ì=ô�õcò=ô�ð�õ�ô�íÈ'MîUïH�9ë,�+ð�ôCÓ)õ�öÀò.öÀî�õ�ì9î,'àì=ô�÷�ñ�ï�öÀò§ú¬'MîUï���ëUì.ì.íîUï�ð�ÿ§ëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ð ùUô�úØôoû�÷�ó�ëUõ�üUô��ï.îUò=îE÷oî �®ì�ø�í;ö®ò.ó�ì=ôY"Uô�ï�ë,�W"eëeï�ö®ëeò.öÀî�õ�ìYí�ôoûZ���¤ö®÷�öÀòwëUñ�ò.ó�ô�õ%ò.ö®÷�ëeò.ö®î�õCø¦ö��Q���¤ö®÷�öÀò#ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õCø¦ëUõ�ð�ï.ô�ì�ö��®öÀô�õ�÷oôò=î�ì=ô�ï�"Uô�ïg÷oî �Q��ï�î �·ö®ì=ô,����îUïgô�ëU÷nóJ"iëeï�ö¤ëeò.öÀî�õ�î,'+ò.ó�ô��gîWð�ô��qø�íôÌó�ë#"UôÍ��ï.ô�ì=ô�õcò=ô�ðbëÏõ�ô�íwø/ôoþ²÷�öÀô�õcò�ø0ëUõ�ð��ï.ît"ië9%]�Àú8ì.ô�÷�ñ�ï.ô²÷oî�õ�ì=ò=ï�ñ�÷oò.öÀî�õ�í�ò.ó�ô²êʼa`gøuêê7`gøuëUõ�ð�êʼ�`#ÿ_Òb��ï.îUò=îW÷oî �¤ìY� � ó�ô���ï.îWî,'�ì#î,' ì=ô�÷�ñ�ï�ö®ò§ú�ëeï.ô%�ëUì=ô�ð¶î�õÌò.ó�ôwý±ý � ��ï.î,%��Àô���ëUõ�ðÌò.ó�ô#ï�ëUõ�ð�î ��îUï�ëU÷Y�ÀôwëUì�ì.ñ��Q��ò.ö®î�õ��

� ó�ôÕ�·ë'ßAîUïuî,�)ô�õ���ï.î,%��Àô�� ì=ô�ô��9ì4ò=î^%\ô/ò.ó�ô¦÷oî�õ�ì.ò=ï�ñ�÷oò.öÀî�õ#î,'Z��ï.ît"ië9%]�Àú�ì.ô�÷�ñ�ï.ôæ��ëUì.ì.íîUï�ð�ÿ§ëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ðùUô�ú�ôoûE÷nó�ëUõ�üUô¸��ï.îUò=îW÷oî �¤ì�í;öÀò.ó�î�ñ�ò/ñ�ì�ö®õ�ü�ï�ëUõ�ð�î �ÑîUï�ëU÷Y�®ô�ìY��S�ò¦ì=ô�ô��9ì/ñ�õ��®öÀùUô��®ú�ò.ó�ëeò/ï�ëUõ�ð�î �ÑîUï�ëU÷Y�Àô�ì¦÷�ëUõQ%\ôô�ëUì.ö��®úàï.ô��·î#"Uô�ðÍ'Mï�î � î�ñ�ï0ì�÷�ó�ô��gô�ì�øWëUìò.ó�ô^��ï�îcî,'�ì¦ï.ô��®úàî�õ²ò.ó�ô ï�ëUõ�ð�î � îUï�ëU÷Y�®ô¸�gîEð�ô���+Wñ�öÀò=ô ó�ô�ë#"Wö-�Àú,� © õ�ôî,'�ò.ó�ô)�9ë'ßAîUï�ö®ì.ì.ñ�ô�ì;ö®õR��ï.ît"Wö¤õ�ügò.ó�ôàì.ô�÷�ñ�ï�öÀò�ú¯î,'/ë!��ï.îUò=îE÷oî �uö®õÌî�ñ�ï+ì=ô�÷�ñ�ïnöÀò§úR�gîEð�ô��4ö®ì ò.ó�ôàë9%�ö-�®öÀò§ú²î,'/ò.ó�ôì.ö���ñ��®ëeò=îUï¥ò=î�ôoûEò=ï�ëU÷oò[ò.ó�ô#ëUð*"Uô�ï�ì.ëeï�ú_�¾ì[ëeò=ò=ô��Q��ò=ô�ðÌü�ñ�ô�ì.ì¥î,'�ò.ó�ô ��ëUì.ì=í�îUï�ðTc�ëUìg��ëUì.ì=í�îUï�ð�ì¥ë9���\ô�ëeï¥ôoû1���®ö®÷QÿöÀò��Àú�ö®õgò.ó�ô;ö®ð�ô�ë,��í�îUïH�®ð�e4��SAõgî�ñ�ï\��ï.îWî,'^ì�ø�ò.ó�ö®ì/ôoûEò=ï�ëU÷oò.öÀî�õ¯ö®ìëU÷�÷oî �Q���®ö®ì�ó�ô�ð�%cú�ôoû�ë,�·ö®õ�ö¤õ�ü#ò.ó�ô+ëUð�"Uô�ï�ì.ëeï.ú®�¾ìï�ëUõ�ð�î � îUï�ëU÷Y�Àôd+cñ�ô�ï�öÀô�ì�ø-í;ó�ö®÷nó¶ö®ì;÷Y�®ô�ëeïH�ÀúÌö��Q�\î�ì.ì.ö�%��Àô#ö®õ¶ë²ì=ò.ëUõ�ð�ëeï�ðÎì=ô�÷�ñ�ï�ö®ò§ú$�gîEð�ô��G�gS�ò��·ë�úUø)ó�îOíôY"Uô�ï�ø%\ô �)î�ì�ì.öf%��Àô�ò=î·÷oî�õ�ì=ò=ïnñ�÷oòÃ��ï.îUò=îE÷oî �®ìÃ%�ëUì.ô�ðÌî�õ¿!�ô�ï.îeÿ«ùEõ�î�í¸�®ô�ð�üUô�ò=ô�÷�ó�õ�ö�+Wñ�ô�ì�ø�í;ó�ô�ï�ô�ò.ó�ô�ì.ö���ñ��®ëeò=îUï[í�î�ñ��®ðôoûEò=ï�ëU÷oò+ëeò=ò=ô��Q��ò=ô�ð$��ëUì.ì.íîUï�ð�ì¥ò.ó�ï.î�ñ�ü�ótï.ô�í+ö®õ�ð�ö®õ�ü*� � ó�ô«��ï.î,%��Àô�� í;ö®ò.ótò.ó�ö®ì[ë9����ï�î�ëU÷�ó¶ö®ì¥ò.ó�ëeò ò.ó�ô«%\ô�ì=òùEõ�î�í;õ�!�ô�ï�îeÿ«ùWõ�îOí¸�Àô�ð�üUô¹��ï.îUò=îE÷oî �®ìgö®õ¬ò.ó�ôÌüUô�õ�ô�ï�ë,� ÷oî�õ�÷�ñ�ï�ï.ô�õ%ò·ì.ô�ò=ò.ö®õ�ü�ò.ëeùUôÎëª�\î �ÀúEõ�î �·ö¤ë,�õWñ��)%)ô�ïgî,'ï.î�ñ�õ�ð�ì/i®±,±3l«ø/í+ó�ö®÷�óbö®ìàò=îcîÏö®õ�ôoþ¯÷�öÀô�õ%ò)'MîUïgñ�ì.ô²ö®õL��ï�ëU÷oò.ö®÷oô,�ÂSAõÚëUõcú�÷�ëUì=ôUø0ö®ò)�·ë�úV%\ô²ëUð*"eëUõcò.ëeüUô�î�ñ�ì�ò=î÷oî�õ�ì.ö¤ð�ô�ï�"iëeï�ö¤ëeò.öÀî�õ�ìàî,';ò.ó�ôR�gîEð�ô��qø/í;ó�ô�ï.ô²ò.ó�ôÍ�-ëUì.ì=í�îUï�ð�ì�ð�î�õ�îUògõ�ô�ô�ðbò=îÂ%\ô¯ôoûWò=ïnëU÷oò=ô�ðCø\%-ñ�ò�÷�ëUõJ%\ôò=ô�ì=ò=ô�ð�ö®õ8ì=î �gôgö®õ�ð�öÀï.ô�÷oòa�·ëUõ�õ�ô�ïQc^ô,� ü*�Àø�%WúÎëUì=ùEö®õ�ü²ò.ó�ô�ï�ö®õ�üÍ�·ëUì=ò=ô�ï#í;ó�ô�ò.ó�ô�ï�ò.ó�ô)��ëUì�ì=íîUïnð8ö¤ì;ô�+Wñ�ë,��ò=îò.ó�ô�"eë,�®ñ�ô±î,'/ì=î �gôàó�ëeï�ðEÿ«ò=îeÿ§÷oî �Q�-ñ�ò=ô�ôoû1��ï.ô�ì.ì.ö®î�õ]e4�

|fn�»�n7�Bn7��+n�}i ¨ l�ýd��îô�ë#"Uô�ï�� ·Eô�÷�ñ�ï.ôº��ñ��Àò.öf�-ëeï.ò§ú���ï.îUò=îE÷oî �®ì�ëUõ�ða!�ô�ï�îeÿ«ùWõ�îOí¸�Àô�ð�üUôd��ï.îWî,'/ì=úEì=ò=ô��·ì ò=î �®ô�ï�ëeò.ö®õ�ü¯ë�'�ëUñ��Àò§ú

�9ö®õ�îUï�öÀò�ú,�µ¼169=18�B]0�@�6�Ë'½�8�KH.Ê>_6�@¶6HO,Keø]j�cG° e4íIJ9³�¾ ¨ °,°Wø ¨ ¯,¯ ¨ �i®°tld[L�]î�ô����¤ëeï.ôUø]¿º�ÊÉ¥ëUõ�ô�ò=ò.ö«ø-ëUõ�ð¹�º��`#ï�ë�í¥÷Y!�úWù]�^¼ �gîEð�ñ��¤ëeï ë9����ï.î�ëU÷nóËò=î²ò.ó�ôàð�ô�ì�öÀü�õËëUõ�ðÎëUõ�ë,�ÀúEì.ö®ì[î,'

ëUñ�ò.ó�ô�õ%ò.ö¤÷�ëeò.öÀî�õ¶ëUõ�ðÌùUô�útôoû�÷�ó�ëUõ�üUôº��ï.îUò=îE÷oî �®ìY�7S�õ&· � © É��w¯,­Ri®±,­3l«ø��-ëeüUô�ì^j ¨ ¯�¾NjN°,­Z�i®±tld[L�¸î�ô����®ëeï�ôUø±ýd� ê�î�ö®õcò.÷�ó�ôY"eë,�qø�ëUõ�ð ê���¿ îUü�ë�í¥ë�ú,�ȼ�ñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ðFùUô�ú ôoû�÷�ó�ëUõ�üUôÚì=ô�÷�ñ�ï.ô�ëeü�ëUö¤õ�ì=ò

ð�ö®÷oò.öÀî�õ�ëeï.ú¯ëeò=ò.ëU÷.ùEìY�WS�õ¼�dâ�¿ © Ég¿�=#ê � °9k,k,kÂi ¨ ¯9l_�

i j9ld[L�^î�ô����®ëeï.ô�ëUõ�ð ê��^¿ îUü�ë�í�ë�ú,� �0õcò.öÀò§ú ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õ�ëUõ�ð ùUô�ú ð�ö¤ì=ò=ï�öf%�ñ�ò.öÀî�õ�� S�õ¿h�:��30,B]F4AC2ÂD@B½�8�K4.�>_6�@f6�O,K)À�½y��ÁÀÅ�gÆëàÄ�ÅUøZ"Uî �®ñ��gô«²,²9±wî,'�ÆpA�F#>E=18;A?Ǻ6,>�AC2�D@B�½æ69X�.]=*>�AC8�È�F�DGAYB]F4A�øP�-ëeüUô�ìg°,±,°�¾Z°3jN¯Z�·1��ï�ö®õ�üUô�ï.ÿ·Ò/ô�ïH�®ëeü�ø�°,°�¾Z°,´!¼�ñ�ü*� ¨ ¯,¯,±Z�

i®³tld[L��î�ô����®ëeï.ô�ëUõ�ð¶ê���¿ îUü�ë�í¥ë�ú,�ÿ+ëUõ�ð�î � îUï�ëU÷Y�Àô�ì+ëeï.ô«��ï�ëU÷oò.ö¤÷�ë,�GíÕ¼Ù�-ëeï�ëUð�öÀü � '^îUï;ð�ô�ì.ö®ü�õ�ö®õ�ü�ôoþ²÷�öÀô�õcò��ï.îUò=îW÷oî �¤ìY�æS�õÂÉ^É^·®�w¯,±Ri ¨ ³3l«ø���ëeüUô�ì�´,°�¾1²9±Z�

i®´tld[L��î�ô����¤ëeï.ô²ëUõ�ðÚê���¿ îUü�ë�í�ë�ú,� © ��ò.ö��·ë,�0ëUì=úZ�!�gô�ò=ï�ö®÷gô�õ�÷oï.úP��ò.öÀî�õ���S�õ-h¸:��309B]F�A�2ÍD Bɽ�8�KH.Ê>_6�@¶6HO,K)ÀÊ�ËB�¨ëx½y��ÁBÅ9g�Ä+Ì�ø*"Uî �®ñ��·ôa¯,³9k�î,'[ÆpAHF�>E=18�A?Ç)6,>�A�2aD Bͽæ69X�.]=*>�AC8�È�FYD_ACB�F4AoøZ��ëeüUô�ìï,°�¾ ¨,¨,¨ ��·Z��ï�ö®õ�üUô�ï=ÿÒ/ô�ï4�®ëeü�ø ¨ ¯,¯,³Wø�¯�¾ ¨ °�[8ë�ú ¨ ¯,¯3j*�

i~²#ld[L�pî�ô����®ëeï�ô·ëUõ�ð¹ê��p¿ îUü�ë�í�ë�ú,�Ìê¦ï.ît"ië9%��®ú8ì=ô�÷�ñ�ï.ô9ì=ô�ì.ì�öÀî�õ�ùUô�ú�ð�ö®ì=ò=ïnöf%�ñ�ò.öÀî�õÏÎ ò.ó�ôwò.ó�ï.ô�ô���ëeï.ò�ú�÷�ëUì=ô,�SAõÇÅg8;6�F�AHA�:,D BPO,2�6�Ë�>@?*AÐg�5\ACB�>EK9<LÈÊAY�,ACB�>@?'haB�B�=*0�@Eh�½yêÑÈ]K3X�.16924D@=ZX 69Bª>@?1AÐgp?1AH698�K�6�Ë4½æ69X�.]=*>ED BPO�ø�-ëeüUô�ì�³ ²B¾Z´,´WøÀVuëUìOÒ/ô�ü�ëUì�ø�»;ôY"eëUð�ëEøÊ°,¯Q[Îë�ú�¾ ¨·Ò ñ�õ�ô ¨ ¯,¯,³Z�

¨ ´

Page 17: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

i®­tlQ·Ê��[L�æî�ô����Àî#"Eö®õ¬ëUõ�ð½[L�æ[Ëô�ï.ïnöÀò=òY�~�õ�÷oï.úZ��ò=ô�ðbùUô�úÚôoû�÷�ó�ëUõ�üUô,í¶ê�ëUì�ì=íîUïnðEÿ_%�ëUì=ô�ðJ��ï�îUò=îW÷oî �®ìgì.ô�÷�ñ�ï.ôëeü�ëUö¤õ�ì=òàð�ö®÷oò.öÀî�õ�ëeï.ú�ëeò=ò.ëU÷�ùWìY�ÂSAõ�ÅÃ8�6�F�AHAH:9D BZO92$6�Ë/>@?1A��1Ê�Ê�ÊÓÈ]K3X�.16924D@=ZX 69B��^A�2�A�098;FC? D B-ÈÊAHFY=18�D@>EK0,B]:oÅg8�D�90 FYKeø���ëeüUô�ì ²9°�¾Z­3j�ø ¨ ¯,¯,°Z�

i®¯tlQ·Ê�W[L�Ãîô��-�Àî#"Eö®õ ëUõ�ð [V�Ã[Îô�ï.ï�öÀò=òY� ¼�ñ�ü�ñ��gô�õcò=ô�ð ô�õ�÷oï.úZ��ò=ô�ð ùUô�úØôoû�÷�ó�ëUõ�üUô,í½¼ ��ëUì.ì.íîUï�ð�ÿ_%�ëUì=ô�ð��ï.îUò=îW÷oî �±ì=ô�÷�ñ�ï.ô8ëeü�ëUö¤õ�ì=òtð�ö®÷oò.öÀî�õ�ëeï�ú´ëeò=ò.ëU÷.ùEì¶ëUõ�ðÎ��ëUì.ì=í�îUï�ðÎÓ]�Àô8÷oî �Q��ï.î �·ö¤ì=ô,�ÙSAõ ɸÉ^·®�w¯,±Ìi ¨ ³3l«ø�-ëeüUô�ì�°3j,jÔ¾Z°,³9k1�

i ¨ k3lQ·Ê��îg�®ëeùUôoÿ_Å ö��®ì=î�õCø/ýd� Ò î�ó�õ�ì.î�õCø�ëUõ�ðL¼)��[Îô�õ�ô$!�ô�ìY�ª`#ô�ú¹ëeüUï.ô�ô��gô�õcò���ï.îUò=îE÷oî �®ì�ëUõ�ð�ò.ó�ô�öÀïàì=ô�÷�ñ�ï�öÀò§úëUõ�ë,�ÀúWì�ö®ìY��S�õÕÈ�D¶MN>@?���ê�hf�4B�>Q@lk ½æ69B�Ë+kÕ69B6½�8�K4.�>_6�O,8;04.�?PK&09B]:Õ½æ6�:9D@BPO�ø ¨ ¯,¯ ²P�

i ¨,¨ l�ýd�gî�î�õ�ô�ó�� � ó�ôÎð�ô�÷�ö¤ì.öÀî�õ´ý±ö�þ9ôoÿ��+ô������9ëUõ¬��ï�î,%��Àô��R� SAõ¸ÅÃ8�6�F�AHAH:9D BZO92(6�˹>@?1AÖgp?ND 8;:�h�@®ON6,84DE>@?NX�DEFÇ�=1X´�HAC8�gp?1AH6984K�È�K9X¸.*6324D@=1X�ø�"Uî �®ñ��gô ¨ jN°,±àî,'�ÆpAHF�>E=18�A?Ç)6,>�A�2aD B-½æ69X�.]=*>�AC8�È�F�DGAYB]F4A�øZ�-ëeüUô�ì\jN­�¾Z´,±Z�·1��ï�ö®õ�üUô�ï.ÿ·Ò/ô�ïH�®ëeü�ø ¨ ¯,¯,­Z�

i ¨ °tld[L�#î�î�ú�ëeïnì=ùcú,�Wê0ñ*%]�®ö®÷Qÿ«ùUô�ú±÷oï.úP��ò=îUüUï�ë9��ócú±ëUõ�ð«��ëUì.ì=í�îUï�ðº��ï.îUò=îE÷oî �®ìYí � ó�ô\�àñ��®ò.ö�ÿ§ñ�ì=ô�ï4÷�ëUì=ô,�NS�õ)ɸÉ^·®�w¯,¯i ¨ ´9l«ø���ëeüUô�ì�´,±�¾1²9°Z�

i ¨ ±tl¨Òd�gîîOúcùUî�ø±ê��Ã[ÎëU÷Y`#ô�õ !�öÀôUø+ëUõ�ð ·���ê�ëeò=ô��_�Ñê0ï.î#"eë9%��Àúcÿ§ì=ô�÷�ñ�ï�ô¹��ëUì�ì=íîUïnð ëUñ�ò.ó�ô�õ%ò.ö®÷�ëeò.ö®î�õ ëUõ�ðØùUô�úôoû�÷�ó�ëUõ�üUôàñ�ì�ö®õ�ügý±ö�þ9ôoÿ��+ô������·ëUõ���SAõa�qâa¿ © Ég¿�=#ê � °9k,k,kÂi ¨ ¯3l_�

i ¨ j9ld¿º��É¥ëUõ�ô�ò=ò.öqø © ��X±î �®ð�ï.ô�ö®÷nóCø±ëUõ�ðÙ·��^��ë,�ÀôY"Wö_� � ó�ô�ï�ëUõ�ð�î �6îUïnëU÷Y�Àô(�gô�ò.ó�îEð�î �ÀîUüUúUø#ï.ôY"Eö®ì.ö®ò=ô�ð�� SAõ· � © É��w¯,­Ri®±,­3l«ø���ëeüUô�ì�°9k ¯�¾Z° ¨ ­Z�

i ¨ ³tloÅÃ8�6#F4AHAH:9D@BPO92«6�Ë^>@?1A�×7D 842�>�haB�B�=�0�@�½æ69B�Ë�AC8�ACB]F�A«69Bؽæ69X�.]=*>�AC8 09B]:Ù½æ69X�X�=1B�DEF40,>EDG69B*2dÈ�A�FY=18�D@>EKeø ¨ ¯,¯,±Z�i ¨ ´tloÅÃ8�6#F4AHAH:9D@BPO92a6�Ë^>@?1AdÈ�DfM >@?�haB�B�=�0�@�½æ6,B�ËYAY8;AYB]F4A 6,BÕ½æ6,X¸.�=1>�AY8�09B]:Ù½æ69X�X�=1B�DGFH0,>EDG69B*2?ÈÊA�F�=Z8�DE>EKiø ¨ ¯,¯,¯Z�i ¨ ²#l)Å �;ý±ö�þ9ô¹ëUõ�ð [V���;ô����-�·ëUõ�� »;ô�í ð�öÀï.ô�÷oò.öÀî�õ�ìÌö®õ�÷oï.úZ��ò=îUüUï�ë9��ócú,�Ü�1Ê�ÊÊÚg�8;09B*2�k<�4B�ËC6�k�gp?*A�698�Keø

°,°*cG´ e4íw´3j,jÔ¾Z´,³3j�ø ¨ ¯ ²9´Z�i ¨ ­tl � � �7�X±ë,�9ë,�G�7¼ ��ñ*%��®ö¤÷;ùUô�ú¶÷oï.úZ��ò=î�ì=úEì=ò=ô�� ëUõ�ð¶ë·ì.ö®ü�õ�ëeò.ñ�ï.ô#ì.÷nó�ô��gôº%-ëUì=ô�ðÌî�õ¶ð�ö¤ì.÷oï.ô�ò=ôº�ÀîUü�ëeïnöÀò.ó��R�

�1ÊÊ�Ê�g*8;09B*2+k��4B�ËY6�kdgp?*A�698�Keø�± ¨ í®jN´,¯�¾NjP²9°Wø ¨ ¯,­,³Z�i ¨ ¯tl�h�:��909B]F4AC2aD@B�½�8�K4.�>_6�@f6�O,K)ÀÍÊ·Ëy�[ëx½y��ÁBÅ9gÛ ÜÞÝ�Ý)Ýiø6V4ô�÷oò.ñ�ï.ôa»+îUò=ô�ì[ö®õ�É�î �Q��ñ�ò=ô�ï^·E÷�öÀô�õ�÷oô,�*·Z��ï�ö®õ�üUô�ï=ÿ

Ò/ô�ï4�®ëeü�ø ¨ jÔ¾ ¨ ­/[Îë�úR°9k,k,k1�i®°9k3l0�¸�d��ñ�ß=ö®ì�ëeùWö ëUõ�ð � � © ùië,�·îUò=î*� ·Wô�÷�ñ�ï.ô8ö®õ%ò=ô�üUïnëeò.öÀî�õØî,'#ëUì=ú1���gô�ò=ïnö®÷ËëUõ�ð ì=ú1���gô�ò=ï�ö®÷¶ô�õ�÷oï.úZ��ò.öÀî�õ

ì�÷�ó�ô��gô�ì��ZSAõd[V�9Å öÀô�õ�ô�ï�øeô�ð�öÀò=îUï�ø�h¸:��909B]F�A�2gD BI½�84K4.�>_6�@f6�O K�À�½y��ÁÀÅ�gÆë� Ä�Äeø,"Uî �¤ñ��gô ¨ ´,´,´�î,'�ÆpAHF�>E=18;AÇ)6,>�AC2�D B3½æ69X�.]=*>�AC89È�FYD_ACB]F�Aoø*��ëeüUô�ìa³,± ²B¾Z³,³3j*�p·Z��ï�ö®õ�üUô�ï=ÿ·Ò/ô�ïH�®ëeü�ø ¨ ³�¾ ¨ ¯!¼+ñ�ü*� ¨ ¯,¯,¯Z�

i®° ¨ l0V7�vX�î�õ�ü*� © ��ò.ö��·ë,��ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õ/��ï.îUò=îE÷oî �®ì0ï.ô�ì.ö®ì=ò.ëUõcò¦ò=î��-ëUì.ì=í�îUï�ð·ü�ñ�ô�ì�ì.ö®õ�ü�ëeò=ò.ëU÷�ùWìY�pS�õ�ÅÃ8�6#F4AHAH:9<D@BPO,2�6�˺>@?1A­ß >@?��1ÊÊ�Ê�½æ69X�.]=*>�AC8xÈ�A�FY=18�D@>EK�×�69=1B]:N0,>EDE6,B*2��&6,8HIt2H?Z64.)ø]��ëeüUô�ìa°3jÔ¾Z°,¯Wø ¨ ¯,¯,³Z�

i®°,°tl0V7��X�î�õ�ü�ø � � [V�P¼º�)Vuî �·ëUì�øZ¿�� [L�N»;ô�ô�ð�ó�ë,�Ìø%ëUõ�ð Ò � �)�Z·Eë,�Àò�!�ô�ï��)ê¦ï.îUò=ô�÷oò.ö¤õ�ü��\îcîUï4�Àúw÷�ó�î�ì=ô�õ9ì=ô�÷oï�ô�ò.ì'^ï.î � ü�ñ�ô�ì.ì.ö®õ�üËëeò=ò.ëU÷.ùEìY���1ÊÊ�ÊÓ¼16,=Z8�B]0�@g69B-ÈÊA$@fAHF�>�A�:�h 8;AH032!D@B�½æ6,XdX�=1B�DGFH0,>EDG69B*2Qø ¨,¨ cG³ e4íw´3jN­�¾Z´,³,´WøÒ ñ�õ�ô ¨ ¯,¯,±Z�

i®°,±tlQ·Ê���+ë,�ÀôY"Eö4ëUõ�ðR�)��`#ïnë�í¥÷Y!�úcù��0ê0ñ�%��®ö®÷Qÿ«ùUô�ú¯÷oï.úP��ò=îUüUï�ë9��ócútëUõ�ðR��ëUì.ì=í�îUï�ð���ï�îUò=îW÷oî �®ì��æS�õZÅÃ8�6#F4AHAH:9D@BPO926�Ë�>@?1A·×ÕD ËC>@?�h B�B�=�0�@ ½æ69B�Ë�AC8�ACB]F�A�69B�½æ69X�.]=*>�AC8/09B�:ͽæ6,XdX�=1B�DGFH0,>EDG69B*2´ÈÊA�F�=Z8�DE>EKiø���ëeüUô�ì ¨ °,°�¾ ¨ ± ¨ ø¨ ¯,¯,­Z�

i®°3j9ld»)����ë,���Àô�ï�� � ó�ô�ìI;OùUô�úÌî�õ�ôoÿ«ò.ö��gô«�-ëUì.ì=í�îUï�ð¶ì=úEì=ò=ô��R�Æ�d× ½�àâáäã�Ýiø ¨ ¯,¯,³Z�

¨ ²

Page 18: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

i®°,³tl�ýd� Ò ë9%��®î�õ��P·Wò=ï.î�õ�ü���ëUì.ì=í�îUï�ðEÿ«î�õ��Àú#ëUñ�ò.ó�ô�õcò.ö®÷�ëeò=ô�ð�ùUô�ú�ôoûE÷nó�ëUõ�üUô,�åh�½yêѽæ69X�.]=*>�AY89½æ69X�Xd=1B�DGFH0 >EDE69B�¸AY�#D_AC5�²ªh�½yêÑÈW�Ô�x½ÂëqêÇêÏø�°,´*cG³ e4íw³�¾Z°9kEø ¨ ¯,¯,´Z�

i®°,´tl�ýd� Ò ë9%��Àî�õ��®�¦ûWò=ô�õ�ð�ô�ð���ëUì.ì.íîUï�ð·ùUô�ú·ôoûE÷nó�ëUõ�üUô���ï.îUò=îE÷oî �®ìö-���àñ�õ�ô[ò=îàð�ö¤÷oò.öÀî�õ�ëeï.ú�ëeò=ò.ëU÷.ù���SAõÖ�'Ê�g�<� ½�Ê´Â Äoá��¹698HIt2H?Z6�. 69B"ÊgB�>�AY8_.�84D 2YA9ÈÊAHFY=18�D@>EKeø ¨ ¯,¯ ²P�

i®° ²#l Ò ��`�ö��®ö®ëUõ4ø_�^�Cê�ô�ò=ï�ëUõ�ù)øuëUõ�ð(Éa��¿+ëU÷.ùUî9h��0Vuî�í�ô�ï�%\î�ñ�õ�ð�ì¸'MîUï�!�ô�ï.îÌùEõ�îOí¸�Àô�ð�üUô�î�õÏò.ó�ôgö®õcò=ô�ï�õ�ô�òY��SAõÅ�Ä,>@?�haB�B�=�0�@µÈ�K9X�.1632�D =1X 69B6×�69=1B]: 0 >EDE69B�2Â6�Ë�½æ69X�.]=*>�AY8ÐÈ�FYD_ACB�F4AoøW��ëeüUô�ì!jN­3jÔ¾NjN¯,°Z�WS��q�d� øÕ»+î#"��¨ ¯,¯,­Z�

i®°,­tl � ��[L��¼)��V4î �9ëUì�ø>VÕ��X±î�õ�ü�ø Ò ���º�æ·Eë,�Àò�!�ô�ï�ø/ëUõ�ðL¿���[L��»;ô�ô�ð�ó�ë,�R�$¿ ô�ð�ñ�÷�ö®õ�ü¶ï�ö¤ì=ùWì�'Mï.î �Ð�\îcîUï4�Àú÷nó�î�ì=ô�õ9ùUô�úWìY��h�½yê ë�.*AC8;0,>ED@BPO·È]Kt2C>�ACXd2Â�^A$�#D_AC5/ø1°,±*cG³ e4í ¨ jÔ¾ ¨ ­Wø�ý�ô�÷9� ¨ ¯,­,¯Z�Cê¦ï.îE÷oô�ô�ð�ö®õ�ü�ì�î,')ò.ó�ô ¨ °iò.ó¼¸ÉÃ[ ·EúZ�Q�\î�ì.ö¤ñ�� î�õ © �\ô�ï�ëeò.ö®õ�ü/·WúEì=ò=ô�� ê0ï�ö®õ�÷�ö����Àô�ìY�

i®°,¯tlQ·Ê��Vuñ�÷.ùEìY� © �)ô�õÚùUô�ú¹ôoû�÷�ó�ëUõ�üUô,íÍ�+î�í ò=î�ð�ôY'^ô�ëeò�ð�ö¤÷oò.öÀî�õ�ëeï.ú¹ëeò=ò.ëU÷�ùWìgí+öÀò.ó�î�ñ�òàô�õ�÷oï.úZ��ò.ö®õ�ü¹��ñ*%��®ö¤÷ùUô�úEìY�ÕSAõZÅÃ8�6�F�AHAH:9D BZO92d6�Ë)>@?1A��&6984I#24?Z64.J69B�ÈÊAHFY=18�D@>EKoÅg8;6,>_6�FH6�@w2Qø ¨ ¯,¯ ²P�

i®±9k3l�ê��3[ÎëU÷Y`#ô�õ !�öÀô�ëUõ�ðº¿��,·Wí¥ë,�·ö®õ�ëeò.ó�ëUõ��P·Wô�÷�ñ�ï.ô0õ�ô�ò§í�îUï.ùwëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õàí;öÀò.ó���ëUì.ì=í�îUï�ðwö¤õ*'MîUï4�·ëeò.öÀî�õ���9ëUõcñ�ì�÷oï�öf��òY�

i®± ¨ lQ·Ê�-ê�ëeò=ô��G�«»+ñ��º%\ô�ï;ò.ó�ô�îUï.ô�ò.ö®÷�ëeò=ò.ëU÷.ùEì#î�õÏì=ô�÷�ñ�ï.ô)��ëUì.ì=í�îUï�ð8ì.÷�ó�ô��gô�ìY� S�õ�Åg8;6�F�AHA�:,D BPO,2!6�Ëd>@?*A[�1Ê�ÊÊÈ]K3X�.16924D@=ZX 69BZ�^AC2YAH098�FY?$D B�ÈÊAHFY=18�D@>EK�09B]:oÅg8�D�90 FYKeø��-ëeüUô�ì�°,±,´�¾Z°3jP²cø ¨ ¯,¯ ²P�

i®±,°tlQ·Ê��ê�ëeò=ô��«ø ¨ ¯,¯,¯Z��ê�ô�ï�ì.î�õ�ë,�4÷oî ����ñ�õ�ö®÷�ëeò.ö®î�õ��i®±,±tld¿º�Z¿+ö®÷�ó�ëeï�ð�ì=î�õ²ëUõ�ð Ò �Z`wö��®ö®ëUõ�� © õ²ò.ó�ô±÷oî�õ�÷�ñ�ï.ï.ô�õcò¥÷oî �Q�\î�ì.öÀò.öÀî�õ9î,'y!�ô�ï.îeÿ«ùEõ�î�í¸�®ô�ð�üUô ��ï.îWî,'^ìY��SAõÐh¸:9<

�909B]F�A�2 D B-½�84K4.�>_6�@f6�O K�ÀÍÊ·Ëy�¨ëx½y��ÁÀÅ�g6Ä�Äeø*"Uî �¤ñ��gô ¨ ³,¯,°�î,'�ÆpAHF�>E=18�A?Ç)6,>�A�2 D@Bͽæ69X�.]=*>�AC8�ÈÊFYD_ACB]F�Aoø�-ëeüUô�ì^j ¨ ³�¾NjN± ¨ �p·Z��ï�ö¤õ�üUô�ï=ÿ·Ò/ô�ïH�®ëeü�ø ¨ ¯,¯,¯Z�

i®±3j9ld[L� ¿ îWôUøPîa�PÉ¥ó�ï�ö®ì=ò.ö®ëUõ�ì=î�õCøeëUõ�ð·ýd�,Å ó�ô�ô��Àô�ï��Ê·Eô�÷�ñ�ï.ô[ì=ô�ì.ì.ö®î�õ�ì�'Mï�î � íô�ëeù�ì=ô�÷oï.ô�ò.ì�� � ô�÷�ó�õ�ö®÷�ë,�Eï.ôY�\îUï.ò�øâ�õ�öf"Uô�ïnì.öÀò§ú²î,'7É¥ë,�º%�ï�ö®ð�üUô#ëUõ�ðaâ�õ�öf"Uô�ïnì.öÀò§ú¯î,'��;ô�ï.ò;'^îUï�ð�ì�ó�öÀï.ôUø ¨ ¯,¯,­Z�

i®±,³tl¨Òd��·Eó�î�ñ*��� © õ�'^îUïH�·ë,���gîEð�ô��®ìg'^îUï;ì=ô�÷�ñ�ï.ô#ùUô�úÌôoûE÷nó�ëUõ�üUô,�\S�õ&É^ɸ·®�w¯,¯$i ¨ ´3l«ø��-ëeüUô�ò=î9ë9���\ô�ëeï��i®±,´tl)Å ��·Eö-�Q��ì=î�õ���ê0êêØ÷nó�ë,���Àô�õ�üUôàó�ëUõ�ð�ì.ó�ëeùUô�ëUñ�ò.ó�ô�õcò.ö®÷�ëeò.öÀî�õR��ï�îUò=îW÷oî �7c_ÉÃ��¼�êWe4�O� × ½8à�Ä�Ä+Ì�ø ¨ ¯,¯,´Z�i®± ²#ld[L�Z·Wò=ô�ö¤õ�ô�ï�øvXd� � ì.ñ�ð�ö®ù-øUëUõ�ð�[L� ŹëUö®ð�õ�ô�ï��Ê¿ ôCÓ-õ�ô��·ô�õ%ò0ëUõ�ðgôoûWò=ô�õ�ì.öÀî�õgî,'\ô�õ�÷oï.úZ��ò=ô�ðgùUô�ú�ôoû�÷�ó�ëUõ�üUô,�

h�½yê ë�.*AY8�0 >ED BPOÙÈ�K32�>�ACX �^A$�#D_AC5/ø�°,¯Zíw°,°�¾Z±9kEø ¨ ¯,¯,³Z�i®±,­tloÅÃ8�6#F4AHAH:9D@BPO92«6�Ë�>@?1A´gp?ND 8C>ED_AY>@?·haB�B�=�0�@Þh�½yêºÈ�K9X�.1632�D =1XË69B�gp?1AH698�KQ6�Ë�½æ69X�.]=*>ED BZOUøEý�ë,�-�®ëUì�ø � ôoû�ëUì�ø

°,±�¾Z°,´![Îë�ú ¨ ¯,¯,­Z�

i®±,¯tl � ��Źñ�� � ó�ôtì=ô�÷�ñ�ï.ô¯ï.ô��gîUò=ôR��ëUì�ì=íîUïnðL��ï.îUò=îW÷oî �_�TS�õ Åg8;6�F4A4A�:9D@BPO,2¹6�ËÍ>@?*A�à�Ä)Ä�ß8�4B]>�AC8�B�AY>�È�6#FYD_AY>EKÇdAY>E576,8HI/09B�:£´�D 2�>E8�D��C=*>�A�:´È�K32�>�AYX,ÈÊAHFY=18�D@>EK´È�K9X¸.*6324D@=1X�ø���ëeüUô�ìa¯ ²B¾ ¨,¨,¨ ø ¨ ¯,¯,­Z�

i j k3l � �3Źñ���¼´ï.ô�ë,�Eí�îUïH�®ð�ëUõ�ë,�®úWì.ö¤ì�î,'-ùUô�ï�%\ô�ï.î�ì���ëUì.ì.íîUï�ðgì.ô�÷�ñ�ï�öÀò�ú,��S�õ£ÅÃ8�6�F�AHAH:9D BZO92a6�Ë^>@?*A�à�Ä�Ä�Ä��4B�>�AY84B�A�>ÈÊ6�FYD_AY>EK�Ç)A�>E57698HI/0,B]:£´ºD-2C>E84D��C=*>�A�:´È�K32C>�ACX,È�A�FY=18�D@>EK´È�K9X�.16324D@=1X�ø ¨ ¯,¯,¯Z�

¨ ­

Page 19: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ò ~[nÕ�Õ�����;�Þæ �d»ª�Bô�n øÇò ù øÎ���Ã�Ê���æ��p

� ó�ô ÷oî �����Àô�ò=ô�õ�ô�ì.ì0ï.ô�+Wñ�öÀï.ô��gô�õcòæ'^î ���Àî�í+ì¦ð�öÀï.ô�÷oò��®úº%Wú�ö®õ�ì;�\ô�÷oò.öÀî�õ����;ô�ï.ô;íô^��ï.î#"Uô ò.ó�ëeò0ò.ó�ô;ì�ö��àñ��®ëeò.ë9%�ö��®ö®ò§úï.ô�+Wñ�öÀï.ô��·ô�õ%ò�ó�î �®ð�ìY� � ó�ôº%�ëUì�ö®÷#ò=ô�÷�ó�õ�ö�+Wñ�ô�ö¤ì ô�ì.ì=ô�õcò.ö®ë,���®ú¯ò.ó�ëeò+î,'W·�ó�î�ñ*� i®±,³9l_� � ó�ô�ö®ð�ô�ë²ö®ì ò=ît÷oï.ô�ëeò=ôgëUõö®ð�ô�ë,��í�îUïH�®ð8ëUð*"Uô�ï�ì.ëeï.úÇ�0�º%cúÌï�ñ�õ�õ�ö®õ�ü9ò.ó�ôàï�ô�ë,�uí�îUïH�®ð8ëUð*"Uô�ï�ì.ëeï�úa� ëeü�ëUö®õ�ì.ò�ë¯ì.ö���ñ��®ëeò=ô�ðÎï.ô�ë,��ì=úEì=ò=ô��Ìøí;ó�ö¤÷�ó·ö®ìÕ%�ñ�ö��Àò�î�õ·ò=î,�²î,'Cò.ó�ô;ñ�õ�ð�ô�ïH�ÀúEö®õ�ü±ö®ð�ô�ë,��ì=úEì=ò=ô��R�æSAõQ��ëeï�ò.ö®÷�ñ��®ëeï�ø�� � c�öG� ô,�ÀøWò.ó�ô;ì.ö-�àñ��¤ëeò=îUï0÷oî �º%-ö®õ�ô�ðí;öÀò.óa�Qe[í;ö�����%\ô�ó�ë�"Uô�ö®õÌò.ó�ôàö®ð�ô�ë,�4íîUïH�¤ð0ß=ñ�ì=ò¸�®öÀùUô[�b%\ô�ó�ë#"Uô�ì+ö¤õÌò.ó�ôwï�ô�ë,�4í�îUïH�®ðCø�ôoû�÷oôY��ò+ò.ó�ëeò�ö¤ð�ô�ë,�®ö"!�ô�ðì=ô�ì.ì�öÀî�õ¶ùUô�úEì�í;ö�����%\ô�ñ�ì=ô�ðËö¤õ¶ò.ó�ôàï.ô�ë,�uí�îUïH�®ðÎì.ö���ñ��®ëeò.öÀî�õÎö®õ�ì=ò=ô�ëUðËî,'¦ò.ó�ô�ëU÷oò.ñ�ë,��ì=ô�ì.ì.öÀî�õËùUô�úWì±÷oî �Q�-ñ�ò=ô�ðö®õtò.ó�ôwï.ô�ë,�4ì=úEì=ò=ô��R�

� óWñ�ìwî�ñ�ï)��ï.îcî,'[÷oî�õ�ì�ö®ì=ò.ìàî,' ÷oî�õ�ì=ò=ï�ñ�÷oò.ö¤õ�üÎë8ì.ö���ñ��®ëeò=îUï�c^ò.ó�ëeò�ö¤ì�%�ñ�ö-�Àò#î�õbò=î,�Úî,' ëUõbö®ð�ô�ë,�ì=úWì.ò=ô��/e'^îUï ë�ï.ô�ë,�Cì=úEì=ò=ô�� ì=î�ò.ó�ëeò[ò.ó�ô#ò=ïnëUõ�ì.÷oï�öf��òî,'�ëUõÌëUð*"Uô�ï�ì.ëeï�ú¯ëeò=ò.ëU÷�ùWö®õ�ü·ò.ó�ô#ì.ö���ñ��®ëeò=îUï ö®ì¥÷oî �Q�-ñ�ò.ëeò.öÀî�õ�ë,���®úö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ôÃ'Mï.î � ò.ó�ô#ò=ï�ëUõ�ì.÷oïnöf��ò[î,'�ëUõ¶ëUð*"Uô�ï�ì.ëeï�útëeò=ò.ëU÷�ùWö¤õ�ü9ò.ó�ôwï.ô�ë,�4ì=úEì=ò=ô��R�

Vuô�òdç %\ôwò.ó�ôàï�ñ�õ�õ�ö¤õ�ügò.ö��gôàî,'¦ò.ó�ôàëUð�"Uô�ï�ì.ëeï.ú,�Qc@Å�ôàí+ö����4ë,�®ì.î²ñ�ì=ô�ò.ó�ö®ì+ëUì+ë/%\î�ñ�õ�ðÌî�õ8ò.ó�ô�õcñ��º%\ô�ïî,'[î,�\ô�ï�ëeò.öÀî�õ�ìwò.ó�ô²ëUð�"Uô�ï�ì.ëeï.úT�\ô�ï�'^îUïH�·ì�ö¤õ�ò.ó�ô9ï�ô�ë,�0ì=úEì=ò=ô��R�ÄeÖç �àñ�ì.òº%\ô��\î �ÀúEõ�î �·ö®ë,�/ö®õ¹ò.ó�ô²ì=ô�÷�ñ�ï�öÀò§ú��ëeï�ë,�·ô�ò=ô�ï�û��½Å � î*�®���0ì=ò.ëUõ�ð�ì�'MîUï~�Aí;öÀò.ó¬î#"Uô�ï�í;ó�ô����·ö¤õ�üª��ï.î,%�ë9%�ö-�®öÀò§úUø���öG� ô,�Àø0í;ö®ò.óJ��ï.î,%�ë9%�ö-�®öÀò§ú¹ëeò/�Àô�ëUì=ò¨�è ��ø*'MîUï+ì=î �gô�� í;ó�ö®÷nóÌö®ì õ�ô�ü �®ö®ü�öf%��Àô±ö®õtò.ó�ô�ì=ô�÷�ñ�ï�öÀò§úÍ��ëeï�ë,�·ô�ò=ô�ï�û��

Vuô�ò;ý ��c$#ZR&%�e�ð�ô�õ�îUò=ô�ò.ó�ôàý�öÀþ9ôoÿ��;ô��-���·ëUõ�"eë,�®ñ�ô��)(+*àî,'[#Ð�8�)(·ëUõ�ð�%É�8��*N�ãJÝ�Þ ;/ç7á b�é��¬äq-_ë�å,ì�â� ó�ôgüUô�õ�ô�ï�ë,�0ö®ð�ô�ëtî,'�î�ñ�ïwì.ö���ñ��®ëeò=îUï�ö®ì�ò=îËò=ï.ú8ò=îËð�ô�ò=ô�÷oòàü�ñ�ô�ì.ì=ô�ìwî�õ¹ò.ó�ô��-ëUì.ì=í�îUï�ð¬c@%Wú8ôoû�ë,�·ö®õ�ö®õ�ütò.ó�ôëUð*"Uô�ï�ì�ëeï.ú_�¾ì¶ï�ëUõ�ð�î �2îUïnëU÷Y�Àô(+cñ�ô�ï�öÀô�ì4e²ëUõ�ð�ò.ñ�ï�õ ò.ó�ô��&ö®õcò=î >�A�2C>�D@B*2�>_09B�F4AR.103242457698;: +cñ�ô�ïnöÀô�ìY�bSU'�ò.ó�ôì.ö���ñ��®ëeò=îUï�ð�îcô�ì�õ�îUòuõ�îUò.ö¤÷oôëÃ��ëUì�ì=íîUïnð�ü�ñ�ô�ì.ì�øOò.ó�ô�õàöÀòCô�öÀò.ó�ô�ï�ì=ô�ò.ìuñ��wë;÷oî�õ�õ�ô�÷oò.öÀî�õ�%\ô�ò§í�ô�ô�õàò§í�î+ö®õ�ì.ò.ëUõ�÷oô�ìc�öf'�ë,���\ò.ó�ôº�·ô�ì.ì.ëeüUô�ì^%\ô�ò�íô�ô�õËò.ó�ô�� ó�ë#"Uôº%\ô�ô�õÌ÷oîUï.ï.ô�÷oò��Àútï.ô��¤ë�úUô�ð]enø-îUï ï.ô�ß=ô�÷oò.ì)c^îUò.ó�ô�ï.í+ö®ì=ôte4�

� ó�ôª�9ëUö®õ ð�ö�þ²÷�ñ��Àò�úØö®õ ÷oî�õ�ì=ò=ïnñ�÷oò.ö®õ�übò.ó�ô�ì.ö���ñ��®ëeò=îUïÌö®ì¯ò.ó�ëeòÌí�ô�õ�ô�ô�ð ò=î´ì.ö���ñ��®ëeò=ô8ò.ó�ôª��ï.îUò=îE÷oî �í;öÀò.ó�î�ñ�ò[ùWõ�î�í;ö®õ�ügò.ó�ôàëU÷oò.ñ�ë,�p��ëUì.ì=í�îUï�ð�ì��7Å�ô�ì=î �f"Uô�ò.ó�ö¤ìÃ��ï.î,%��®ô�� ëUì^'^î ���ÀîOí;ìYíÕS�ò��·ë�ú�%)ôàì=ô�ô�õ¶ò.ó�ëeò+ò.ó�ô��ëUì.ì.íîUï�ð8î�õ��®úËë9���\ô�ëeï�ì±ö®õ8ò.ó�ô���ï.îUò=îE÷oî �/ëUì#ëUõ�ëeï.ü�ñ��gô�õcò±ò=îÌï�ëUõ�ð�î �BîUï�ëU÷Y�®ô�+Wñ�ô�ï�ö®ô�ìY��»;îOí�ø4í;ó�ô�õ�ôY"Uô�ïò.ó�ôtëU÷oò.ñ�ë,�W��ï.îUò=îE÷oî ��íî�ñ��¤ð�ñ�ì=ô¯ò.ó�ô¯ï.ô�ì.ñ��®òwî,' ë8ï�ëUõ�ð�î � îUï�ëU÷Y�Àô�+Wñ�ô�ï.ú�í;ó�î�ì.ô¯ëeï.ü�ñ��gô�õ%ò.ì�ö®õP"Uî �f"Uô¯ò.ó�ô��ëUì.ì.íîUï�ð4øWí�ô±í;ö����)ì.ö������Àúgì.ñ*%�ì.ò.öÀò.ñ�ò=ô±ë�ï�ëUõ�ð�î �b"eë,�®ñ�ô 'MîUï¥ò.ó�ô#îUïnëU÷Y�Àô��¾ì¥ï.ô�ì;�\î�õ�ì=ô,�æÅ�ô�÷�ëUõtò.ó�ö®õ�ù·î,'�ò.ó�ö®ìëUì�ëUõÖ�=ö��Q�]�®ö®÷�öÀòS��îUï�ëU÷Y�®ôà÷�ë,���qø-öG� ô,�Àø-î�õ�ô�í;ó�ô�ï.ôàíôàùWõ�î�í ò.ó�ôº"eë,�®ñ�ô�ï.ô�ò.ñ�ï�õ�ô�ðCø�ôY"Uô�õÎò.ó�î�ñ�ü�óÎí�ôàð�î�õB� òdc�ëUìî,'0úUô�ò�ø�ëeò �®ô�ëUì=ò4e;ùWõ�îOí ò.ó�ôgëeï.ü�ñ��gô�õcò.ìY�«SAõÏó�ëUõ�ð��®ö¤õ�ü·ò.ó�ôgëUð*"Uô�ï�ì�ëeï.ú_�¾ì±ôoû1���®ö¤÷�öÀò;ï�ëUõ�ð�î �BîUï�ëU÷Y�ÀôQ+cñ�ô�ï�öÀô�ì�øëUì+íô����uëUì;ò.ó�î�ì.ôº��ï.îUò=îE÷oî �4î,�\ô�ï�ëeò.ö®î�õ�ì ò.ó�ëeò�ñ�ì=ô�ïnëUõ�ð�î � îUïnëU÷Y�Àô�ì�ø�í�ôàõ�ô�ô�ð¶ò=î��·ëeùUôàì.ñ�ï.ô�ò.ó�ëeò+íô�ð�î�õB� òñ�ì=ô�ö¤õ�÷oî�õ�ì.ö®ì.ò=ô�õ%òg"eë,�®ñ�ô�ìg'^îUï[ò.ó�ô#ï.ô�ì.ñ��®ò�î,'�ë�ï�ëUõ�ð�î � îUï�ëU÷Y�Àô�î�õ¶ëg÷oô�ï�ò.ëUö®õ¶ö®õ*�-ñ�òY��SAõ���ëeï.ò.ö¤÷�ñ��®ëeï�øEí�ô�õ�ô�ô�ðò=î�%\ô±ë9%]�Àô+ò=îgð�ô�ò=ô�÷oò ö�'uëUõÌëUð*"Uô�ï�ì.ëeï�ú_�¾ìÃ+Wñ�ô�ï.ú·ò=îgë�ï�ëUõ�ð�î �ÕîUïnëU÷Y�Àô��·öÀü�ócòW�9ëeò.÷�ó¶ëd��ï�ö®îUï�ö������®ö®÷�öÀò/îUïnëU÷Y�Àô÷�ë,���G�dÅ�ô·í;ö-����ì�ë�ú8ò.ó�ëeòwëUõÏîUï�ëU÷Y�Àô�+Wñ�ô�ï.ú8ö®ìd2H?10 : 695\AH:(%Wú8ëUõ�ö-�Q���®ö®÷�ö®ò;îUï�ëU÷Y�Àô�+Wñ�ô�ï.ú8öf'0ò.ó�ôgò§í�î&+cñ�ô�ï�öÀô�ìí�î�ñ��®ð�%\ô#ô�+cñ�ë,��'MîUï+ì=î �gô�'^ô�ëUì.öf%��®ôQc�ö_� ô,�Àø�õ�îUò úUô�ò ïnñ��Àô�ðtî�ñ�ò4eW"eë,�®ñ�ô#î,'�ò.ó�ô��-ëUì.ì=í�îUï�ð��

SAõ�ð�ô�ô�ðCøCî�õ�ô�î,'�ò.ó�ôQ�·ëUö®õÏ÷oî�õ�÷oô�ïnõ�ì�ö®õ8ò.ó�ô���ï.îWî,'ö¤ì�ð�ô�ë,�®ö®õ�ü¯í;öÀò.ó8ò.ó�ô��\î�ì.ì.öf%]�Àôàì.ó�ëUð�î�í;ö¤õ�ü�ìYí;ô�ö®ò.ó�ô�ïð�ô�ò=ô�÷oò.ö®õ�ügò.ó�ô���í;ó�ô�õ¯ò.ó�ô�ú¯îE÷�÷�ñ�ï�ø�îUï ì.ó�îOí;ö®õ�ü�ò.ó�ëeò[ò.ó�ô�ú¯ëeï.ô�ö-�Q�\î�ì.ì.öf%��®ô,� � ó�ô �\î�ì.ì.ö�%��Àô+ì�ó�ëUð�î�í+ö®õ�ü�ì¥ö®õò.ó�ôwêʼa` ì.ö���ñ��®ëeò=îUï ëeï�ôwì.ó�îOí;õ¶ö®õ � ë9%��Àôº°Z�

SAõ¯ò.ó�ô ��ï.îE÷oô�ì.ì�î,'�ð�ô�ì.÷oïnöf%�ö®õ�üwò.ó�ô�ì�ö��àñ��®ëeò=îUï�øEíô±í;ö-����ì.ó�îOí�ò.ó�ëeò¥ò.ó�ô±ò=ï�ëUõ�ì.÷oïnöf��ò0î,'�ò.ó�ô#ì.ö���ñ��®ëeò.öÀî�õ²ö®õò.ó�ôwö¤ð�ô�ë,�\íîUï4�®ðÌö®ì[÷oî �Q��ñ�ò.ëeò.öÀî�õ�ë,���Àú¯ö®õ�ð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%��ÀôÃ'^ï.î ��ò.ó�ô�ò=ï�ëUõ�ì.÷oïnöf��ò¥î,'�ò.ó�ôwëU÷oò.ñ�ë,�uëUð�"Uô�ï�ì.ëeï.útö®õò.ó�ô�ï.ô�ë,��í�îUïH�®ðCøCì=ò=ôY�T%WúÎì=ò=ôY�uø\ñ�õ��Àô�ì.ì�ö®ì±ö®ìa�\î�ì.ì.öf%��®ô�ò=î¶÷oî�õ�ì=ò=ï�ñ�÷oò±ëUõ�ë,�®üUîUï�öÀò.ó�� ò=îR%�ï.ô�ëeù¶ò.ó�ô�ý�ô�÷�ö®ì�öÀî�õý±ö�þ9ôoÿ��+ô������·ëUõ���ï.î,%��Àô��R�

Vuô�òwñ�ì#õ�îOí ��ï.îE÷oô�ô�ðÏí;öÀò.óÏò.ó�ôgò=ô�÷nó�õ�ö®÷�ë,�0ð�ô�ò.ëUö��®ìY�!·Eë�ú8ëUõ D B�DE>EDG0,>_698Ìö®ì#ëUõ¹ö®õ�ì=ò.ëUõ�÷oô�ò.ó�ëeòwì=ô�õ�ð�ì±ò.ó�ôÓ�ï�ì.ò^�gô�ì.ì.ëeüUô�ö®õtò.ó�ô���ï�îUò=îW÷oî �qø�ëUõ�ð¶ëR8�A�2_.*69B]:NAY89ö®ì ëUõ¶ö¤õ�ì=ò.ëUõ�÷oô�ò.ó�ëeò;ì=ô�õ�ð�ì¥ò.ó�ôwì=ô�÷oî�õ�ð¹�gô�ì.ì.ëeüUôwö¤õÌò.ó�ô��ï.îUò=îE÷oî �G��Å�ô í;ö-���cë,�®í�ë�úWì0í ï�öÀò=ô�cU�SR��Ze�'^îUï¦ò.ó�ô ñ�ì=ô�ïö®õ�ì=ò.ëUõ�÷oô¥ò.ó�ëeòö®ì/ëUõ·ö®õ�ö®ò.ö®ëeò=îUï�ø�ëUõ�ð$cU�·TQR��ÄT�e�'MîUï/ò.ó�ô+ñ�ì=ô�ïö®õ�ì.ò.ëUõ�÷oôwò.ó�ëeò�ö®ì;ë²ï.ô�ì;�\î�õ�ð�ô�ï��OV4ô�ò�§Ïc^ï�ô�ì;���_©�eÃ%)ôwò.ó�ôºSAý î,'/ò.ó�ô�÷�ñ�ï.ï.ô�õcò+ö¤õ�öÀò.ö®ëeò=îUï)c^ï�ô�ì;����ï�ô�ì;�\î�õ�ð�ô�ï�enøöG� ô,�Àø+ô�öÀò.ó�ô�ïÇ��´{¢�îUïZÅq��´ ¢¶µ ¤Eµ c^ï.ô�ì;���MÅq��´{¢�¤8îUïÇ��´ ¢¶µ enø±ð�ôY�\ô�õ�ð�ö¤õ�ü¹î�õ ò.ó�ô�÷oî�õ%ò=ôoûEòY� Vuô�ò ¦ � � ¦ i §¨RS©)l_�

¨ ¯

Page 20: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

É¥ñ�ï.ï�ô�õ%ò�0ëeï4�®öÀô�ï í ¾1< í ¾1= í Á î ¨ î ¨ T ¼ °í ¾1< � �í ¾1= ÉÃ�®ëUö��ϱí Á ÉÃ�®ëUö��Ï±î ¨ Ég�®ëUö��ϱ � �î ¨ T �/û1���®ö¤÷�öÀò � �¼ ° Ég�¤ëUö�� ± ÉÃ�®ëUö�� ± �

� ó�ô�õ�ë,�gô�ì�î,'4ï.îOí;ì�ëUõ�ð²÷oî �¤ñ��·õ�ìï.ôY'^ô�ïò=î���ëeï.ò.ìî,'4ò.ó�ô±ì.ö���ñ��®ëeò=îUï#í�ó�ëUõ�ð��®ö®õ�ü#î,'uò.ó�ô�ëUð�"Uô�ï�ì.ëeï.ú®�¾ìï�ëUõ�ð�î ��îUï�ëU÷Y�Àô!+Wñ�ô�ï�ö®ô�ì�cQío¢Ge#ëUõ�ð(�gô�ì.ì�ëeüUô·ï.ô�ì;�\î�õ�ì=ô�ì/c^ô,� ü*�Àø�î ¨ e4�/¼ �gô�ì�ì.ëeüUôoÿ«ï.ô�ì;�\î�õ�ì=ô²ëU÷oò.öÀî�õí;öÀò.ó�î�ñ�ò¦ë ��ï�ö��·ô«c^ô,� ü*�Àø*î ¨ e�ð�ô�õ�îUò=ô�ì¦ò.ó�ëeò¦ò.ó�ô�ï.ô;ö®ì/ë��9ëeò.÷�ó�ö®õ�üw÷oî�õN"Uô�ïnì.ëeò.öÀî�õ·í+öÀò.ó·ëUõ·ëU÷�÷oôY��ò.ë9%]�Àô��ëeï.ò.õ�ô�ï�øEí;ó�ö��Àô�ë���ï�ö��·ô�c^ô,� ü*�Àø�î ¨ T e�ð�ô�õ�îUò=ô�ì ò.ó�ô«�®ëU÷.ù¯î,'uî�õ�ô,� © õ��Àú·ëU÷oò.öÀî�õ�ì[ò.ó�ëeò ÷oî�ñ��®ðÍ�\î�ì.ì.ö�%��Àú÷�ëUñ�ì=ôàì.ó�ëUð�îOí;ö®õ�ü·ëeï.ô�ì�ó�î�í;õËö®õtò.ó�ô�ò.ë9%��®ô,�

� ó�ô+÷oî �®ñ��·õ�ì¦î,')ò.ó�ô ò.ë9%��Àô;÷oîUï�ï.ô�ì;�\î�õ�ðgò=î�ëUõ9ëU÷oò.öÀî�õ/%\ô�ö®õ�ü#÷�ñ�ï.ï.ô�õcò��Àú�ó�ëUõ�ð��®ô�ðQ%cú�ò.ó�ô+ì.ö���ñ��®ëeò=îUï��� ó�ôÌï�î�í;ì·÷oîUï�ï.ô�ì;�\î�õ�ð¬ò=î¹ô�ëeïH�¤öÀô�ï9ëU÷oò.öÀî�õ�ì�� ¼+õ ô�õcò=ï.ú ö®õ¬ò.ó�ôÌò.ë9%]�ÀôËö®õ�ð�ö®÷�ëeò=ô�ì�í;ó�ô�ò.ó�ô�ï9îUï9õ�îUòí;ó�ö-�ÀôÌó�ëUõ�ð��®ö¤õ�üËò.ó�ôÎ÷�ñ�ï.ï.ô�õcò·ëU÷oò.öÀî�õ´í�ôËõ�ô�ô�ð´ò=î(%\ô¶÷oî�õ�÷oô�ï�õ�ô�ð¬'MîUï9ì�ó�ëUð�î�í+ö®õ�ü�÷�ëUñ�ì=ô�ð¬%cú¬ëUõô�ëeïH�®ö®ô�ï ëU÷oò.öÀî�õ��

� ó�ô#ô�õcò=ï�öÀô�ì î,'�ò.ó�ô#ò.ë9%��Àôwó�ë#"Uô�ò.ó�ô�'^î ���ÀîOí;ö®õ�üQ�gô�ëUõ�ö®õ�ü*í����_�.Ø ì�ó�ëUð�î�í+ö®õ�ügö®ì ö����)î�ì�ì.öf%��Àô�%cú¯ò.ó�ô�ì=ò=ïnñ�÷oò.ñ�ï.ô#î,'�ò.ó�ô�ì.ö-�àñ��¤ëeò=îUï�ø�Îì.ó�ëUð�îOí;ö®õ�ügö®ìg�\î�ì.ì.ö�%��ÀôUø1%�ñ�ò[ó�ëUì ë9õ�ô�ü �®öÀü�öf%]�Àô���ï.î,%�ë9%�ö��¤öÀò§ú¹c�ì.ò.ëeò.ö®ì=ò.ö®÷�ë,���®ú*enøz)�U�6�Q| öf'0ò.ó�ô·ëUð�"Uô�ï�ì.ëeï.úÏ÷�ëUõ�÷�ëUñ�ì.ô·ì.ñ�÷�ó�ì.ó�ëUð�îOí;ö®õ�ütí;öÀò.ó�õ�î�õ�õ�ô�ü �®öÀü�ö�%��Àôº��ï.î,%�ë9%�ö��¤öÀò§úUø\ò.ó�ô�õ�í�ô

÷�ëUõÎ÷oî�õ�ì=ò=ï�ñ�÷oò;ë·ý±ý � ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ï«c�ëUì;ì.ó�î�í;õÌö®õtò.ó�ô�ï.ôY'^ô�ï.ô�õ�÷oô�ð¶÷Y�®ëUö-�/enøâ�Ñy}��Q�Uz)��Úì.ó�ëUð�î�í;ö¤õ�üg÷�ëUõËö®õ�ð�ô�ô�ðtîW÷�÷�ñ�ï�ø�ëUõ�ð¶ö®ì[ôoû1���®ö¤÷�öÀò��Àú9ð�ô�ë,�®ò[í;öÀò.óÌö®õtò.ó�ôàì.ö���ñ��®ëeò=îUï��

� ë9%��Àôº°Zí0ê�î�ì.ì.ö�%��Àô#ì.ó�ëUð�îOí;ö®õ�ü�ì[ö¤õtò.ó�ôwêʼ�` ì.ö���ñ��®ëeò=îUï��

°9k

Page 21: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

¼�õ 0 FHF�AU.�>_0)�$@fA«.10,8�>EB�AY8�'MîUï#ëUõ�ö®õ�ì.ò.ëUõ�÷oô$cU�SR��Pe�c^ï.ô�ì����ÕcU� T R�� T e;e+ö®ì±ëUõ%ú8ö®õ�ì=ò.ëUõ�÷oôRcU� T R�� T e)c^ï�ô�ì;���ÕcU�SR��Pe;e±í;öÀò.óÅq��´ ¢¶µ ¤Eµ �,��´M¢/ëUõ�ð�Åq��´M¢�¤��i��´ ¢¶µ c^ï.ô�ì����_Åq��´{¢�¤��,��´ ¢¶µ ëUõ�ðZÅq��´ ¢¶µ ¤Eµ �,��´O¢�e4�7Å�ô�ì.ë�útò.ó�ëeò;ò§í�î²ö®õ�ì.ò.ëUõ�÷oô�ìó�ëUðtë/XQ0 >_FC?ND@BPO�FH69B6�9AC842C0 >EDE69BÏöf'4ë,���-ò.ó�ô �gô�ì.ì.ëeüUô�ì;ì=ô�õ%òW%Wú·î�õ�ô±íô�ï�ô�ï�ô�÷oô�öf"Uô�ðÍ%cú·ò.ó�ô�îUò.ó�ô�ï«c@��ï.ô�ì=ô�ï�"Eö®õ�üîUï�ð�ô�ïCe/ëUõ�ð!"Wö®÷oô¸"Uô�ï�ì.ë1�¸c � ó�ö¤ì0ð�ôCÓ-õ�öÀò.öÀî�õgö®ìëUì0ö®õÂi j9l«øcôoû�÷oôY��ò�ò.ó�ëeò0í�ô+ð�î�õy� ò÷�ëeï.ô�ë9%)î�ñ�ò0ò.ó�ô+ò.ö��·ö®õ�ü�ì�ø%öG� ô,�Àøí�ô�ð�î�õB� ò¥ï�ñ��Àô�î�ñ�ò¥ò.ó�ô �\î�ì.ì.öf%-ö��®öÀò�ú�î,'�ëQ�gô�ì.ì.ëeüUô«%\ô�ö®õ�üàï.ô�÷oô�ö�"Uô�ð�%)ôY'^îUï.ô#öÀò[ö®ì¥ì=ô�õcòY�7�+î�í�ôY"Uô�ï�ø�í�ô#í;ö����-ì=ô�ôò.ó�ëeò¦ò.ó�ô^��ï.î,%�ë9%-ö��®öÀò�ú�î,'\ò.ó�ö®ì¦ö®ì/õ�ô�ü �®öÀü�öf%��®ô¥ö¤õ�î�ñ�ïÕ��ï.îUò=îE÷oî �G�æ¼a�®ì=î�õ�îUò=ô+ò.ó�ëeò�øcëUì0î,���\î�ì=ô�ðgò=î/i j,l«øZ�·ëeò.÷�ó�ö®õ�ü÷oî�õP"Uô�ï�ì.ëeò.öÀî�õ�ì[ëeï�ô�õ�îUò�ñ�ì=ô�ð¯ö®õ·î�ñ�ï¥ð�ôCÓ-õ�öÀò.öÀî�õ·î,'uì=ô�÷�ñ�ï�ö®ò§úUøZ%�ñ�ò0î�õ��Àú·ëUì¥ëàõ�îUò.ö®î�õ9ò=îd%\ô�ò=ò=ô�ï¥ö-���®ñ�ì=ò=ïnëeò=ô[î�ñ�ï��ï.îWî,'{�Äe¹Å ó�ô�õ8í�ôgì.ë�ú8ò.ó�ëeò#ëUõÏö®õ�ì=ò.ëUõ�÷oôgö®õÎò.ó�ô�î,�\ô�õ8ï.î �Àô�ó�ëUì±ó�ëUðÏëÍ�9ëeò.÷�ó�ö®õ�üt÷oî�õP"Uô�ï�ì.ëeò.ö®î�õ�í;öÀò.ó8ëUõö®õ�ì.ò.ëUõ�÷oô+ö®õ·ò.ó�ô+÷oî�õ�õ�ô�÷oòï.î �®ôUøcò.ó�ö¤ì0ð�îWô�ì0õ�îUòg�·ëeùUô�ëUõ%ú·ï�ô�+cñ�ö®ï.ô��gô�õcò.ì¦î�õ²ò.ó�ô��®ëUì.ò\�gô�ì.ì�ëeüUô�c�öG� ô,�ÀøWò.ó�ôa�®ëUì=ò�gô�ì.ì�ëeüUôwö®ì õ�îUò[ï�ô�+cñ�ö®ï.ô�ðtò=î9ó�ë#"Uô�%\ô�ô�õ¶ð�ô��®öf"Uô�ï�ô�ð���ï.î,�\ô�ïH�Àú�e4�æ�;îOíôY"Uô�ï�ø\ö®õtîUï�ð�ô�ïÃ'MîUï�ëUõ¶ö®õ�ì=ò.ëUõ�÷oô�ö®õtò.ó�ô÷oî�õ�õ�ô�÷oò#ï�î �Àô�ò=î¶ó�ë�"Uô9ë��·ëeò.÷nó�ö®õ�ü¶÷oî�õP"Uô�ï�ì.ëeò.ö®î�õ�í;öÀò.óÏëUõ�ö®õ�ì.ò.ëUõ�÷oôgö®õ8ò.ó�ôgî,�\ô�õÎï�î �ÀôUø4ë,����ò.ó�ô��gô�ì.ì�ëeüUô�ìõ�ô�ô�ðÌò=î!%)ô�ð�ô��®öf"Uô�ï.ô�ð���ï�î,�)ô�ï4�Àú,�

Å�ôtõ�î�í ð�ô�ì.÷oï�ö�%)ôgò.ó�ô²ëU÷oò.öÀî�õ�ìàî,'[ò.ó�ô9ì�ö��àñ��®ëeò=îUïº'^îUïwô�ëU÷nóL�\î�ì.ì�öf%��Àô�î,�\ô�ï�ëeò.öÀî�õ�î,'[ò.ó�ô9ëUð*"Uô�ï�ì�ëeï.ú¹ö®õò.ó�ô+ï.ô�ë,����ï.îUò=îW÷oî �_��¼�õ¹D B�DE>EDG0�@ÄDK¾#A =P2�AC8aD B�2�>_09B]F�A�îUï¥ëUõÂ04.N._@ÄDGFH0 >EDE69BÎî,�\ô�ï�ëeò.öÀî�õ¯ö®ì0ì.ö-�Q���Àú)��ëUì.ì=ô�ð9î�õ9ò=î�ò.ó�ôö®ð�ô�ë,�Wì=úEì=ò=ô��R��¼ 2YA�>Z.103242457698;:gî,�\ô�ï�ëeò.ö®î�õàö®ì�ë,�®ì=îa��ëUì.ì.ô�ðwò.ó�ï�î�ñ�ü�ówò=î±ò.ó�ô¥ö®ð�ô�ë,�Wì=úEì=ò=ô�� c�ëUõ�ð�ò.ó�ôW��ëUì.ì=í�îUï�ðö®ì#ï�ô�÷oîUï�ð�ô�ðT%WúÏò.ó�ô·ì.ö���ñ��®ëeò=îUï�e4�/¼È:PAY@ D�,AC8�X!A�242C0�OZA²î,�\ô�ï�ëeò.öÀî�õ¹ö®ì#ð�ô�ë,�Àò�í;öÀò.ó�ð�ôY�)ô�õ�ð�ö®õ�ü¯î�õ¹ò.ó�ô²ì=ò.ëeò=ôî,'¥ò.ó�ô·ñ�ì=ô�ïàö®õ�ì=ò.ëUõ�÷oô·ö¤õN"Uî �f"Uô�ð�� � ó�ö®ì#ì=ò.ëeò=ô¯ö®õ�÷Y�®ñ�ð�ô�ì�ò.ó�ôgï.î �Àô·î,'�ò.ó�ô9ñ�ì=ô�ï�ö®õ�ì=ò.ëUõ�÷oôUø�ëUõ�ð�ò.ó�ôQ��ï.ôY"EöÀî�ñ�ì�gô�ì.ì�ëeüUô�ìàò=îÏëUõ�ðL'Mï�î � ò.ó�ëeò�ñ�ì=ô�ï�ö®õ�ì=ò.ëUõ�÷oô,�&¼È8�0,B]: 69X 6,8�0 F�@fAÌî,�\ô�ï�ëeò.öÀî�õbö®ìwëUõ�ì.íô�ï.ô�ðbð�ôY�\ô�õ�ð�ö¤õ�üÌî�õí;ó�ö¤÷�ó8ï�ëUõ�ð�î �BîUï�ëU÷Y�®ô�ö¤ìa+Wñ�ô�ï�ö®ô�ð�� � ó�ô�ï.ô�ì;�\î�õ�ì=ô�ì�ò=îV:NA$@ÄDU�9AY8�X�AC2H2Y0�OPA9ëUõ�ð 8�0,B]: 69X 698;0 F$@�A9î,�)ô�ïnëeò.öÀî�õ�ìëeï.ôwì��)ô�÷�öfÓ�ô�ðÍ%)ô��®î�í��

Å�ô�õ�ë,�gô#ò.ó�ôwëU÷oò.ö®î�õ�ì[î,'/ñ�ì=ô�ï ö®õ�ì=ò.ëUõ�÷oô�ì[î�õ :NAY@ D�,AC8�X!AC2H2C0#OPAwî,�\ô�ï�ëeò.öÀî�õ�ì ëUì¸'Mî �-�Àî�í;ì�íÇÙé SAõ�öÀò.ö¤ëeò=îUïàö®õ�ì.ò.ëUõ�÷oô²ëU÷oò.öÀî�õbò=î�ì=ò.ëeï.ò�ò.ó�ô/��ï.îUò=îE÷oî � c�ö_� ô,�Àø¦ëUõL¼akÎëU÷oò.ö®î�õL'^îUï�ëUõbö¤õ�öÀò.ö®ëeò=îUï�ö®õ�ì=ò.ëUõ�÷oô¯ö®ì

üUô�õ�ô�ï�ëeò.ö®õ�ü9ëUõ�ð¶ì=ô�õ�ð�ö¤õ�ü J e4�

êÙfο;ô�ì;�\î�õ�ð�ô�ï ö®õ�ì=ò.ëUõ�÷oô�ëU÷oò.öÀî�õÎñ*�\î�õtï.ô�÷oô�öf"Eö®õ�ü�ò.ó�ô«Ó�ïnì=òÃ�gô�ì.ì.ëeüUô�c�öG� ô,�Àø J e4�ÇÐy SAõ�öÀò.ö¤ëeò=îUï ö®õ�ì=ò.ëUõ�÷oô�ëU÷oò.ö®î�õËñ*�\î�õtï.ô�÷oô�öf"Eö®õ�ü�ò.ó�ô)�gô�ì.ì.ëeüUô�'^ï.î ��ò.ó�ô�ï.ô�ì;�\î�õ�ð�ô�ï�c�öG� ô,�Àø�c R Rba�e;e4�ê�®Ù¿;ô�ì;�\î�õ�ð�ô�ï ö®õ�ì=ò.ëUõ�÷oô�ëU÷oò.öÀî�õÎñ*�\î�õtï.ô�÷oô�öf"Eö®õ�ü�ò.ó�ôwì=ô�÷oî�õ�ð$�gô�ì.ì.ëeüUô)'Mï�î ��ò.ó�ô�ö®õ�ö®ò.ö®ëeò=îUïºc�öG� ô,�ÀøEavT-e4���îUï�ôoûEë,�����ÀôUø1î ¨ c J e0ð�ô�õ�îUò=ô�ì�ëUõ¯ëUð*"Uô�ï�ì.ëeï.ú®�¾ì :NAY@ D�,AC8�X�AC2H2Y0�OPA�î,�\ô�ï�ëeò.ö®î�õ·î�õ¯ì=î �gô;ï�ô�ì;�\î�õ�ð�ô�ï0ö®õ�ì=ò.ëUõ�÷oôUøí;öÀò.óÇ�4B2êÂ2�OÍ%\ô�ö®õ�ü J �

Å�ôtõ�î�í ð�ô�ì.÷oïnöf%\ô9ì=î �gô²üUô�õ�ô�ï�ë,�ï�ñ��Àô�ìº'MîUï�ó�ëUõ�ð��¤ö®õ�ü(:NAY@ DU�9AC8/X!A�2H2Y0�OPAÌî,�\ô�ï�ëeò.öÀî�õ�ìYídÅ�ôtð�ö®ì.÷�ëeï�ðÚë,���ö��Q��ï.î,�\ô�ï��gô�ì.ì.ëeüUô�ì�ò=îÏñ�ì=ô�ïàö¤õ�ì=ò.ëUõ�÷oô�ì�ø6ß.ñ�ì=òwëUì�í�î�ñ��®ðT%\ô9ð�î�õ�ô²ö®õ�ò.ó�ô9ï.ô�ë,�ì=úEì=ò=ô��R� � ó�ô�ì.ô/�gô�ì.ì�ëeüUô�ì�·ë�ú$%\ôwö��Q��ï�î,�)ô�ïÃ%\ô�÷�ëUñ�ì.ôUø]'^îUï�ö¤õ�ì=ò.ëUõ�÷oôUø-ò.ó�ô�ú¶ëeï.ôàõ�îUò¸'^îUïH�·ëeò=ò=ô�ðÏ÷oîUï.ï.ô�÷oò��ÀúUø)îUï�ò.ó�ôàñ�ì.ô�ï�ö®ð�ô�õ%ò.öÀò.ö®ô�ì ð�îõ�îUò^�·ëeò.÷nó��ÕS{'uò.ó�ô«�-ëeï.ò.õ�ô�ïÃSAý?î,'�ëgñ�ì=ô�ï ö¤õ�ì=ò.ëUõ�÷oô#ö®ì[õ�îUò ì.ô�ò[ò=î·ëUõ¶ö®ð�ô�õcò.öÀò§ú²î,'�ëUõÌö¤õ�öÀò.ö®ë,�®öK!�ô�ð²ñ�ì.ô�ï�øEò.ó�ô�õò.ó�ô�îUï�öÀü�ö®õ�ë,����ï.îUò=îE÷oî ��ö®ì�'Mî ���®î�í�ô�ðCøCëUõ�ðËò.ó�ôRAHM�.1632�A·÷oî�õ�õ�ô�÷oò.öÀî�õÏëUì.ì.öÀü�õ��gô�õ%ò±ö®ì�ñ�ì=ô�ð¹'MîUï#ë&2�>_098C>g2�A�2H2�DE6,Bî,�\ô�ï�ëeò.öÀî�õTc^ò.ó�ö®ì¥ö®ìW�\î�ì.ì.ö�%��ÀôUøcì�ö®õ�÷oô�ò.ó�ô�ì�ö��àñ��®ëeò=îUï[ó�ëUì¥ì=ô�ô�õtò.ó�ô#õ�ô�÷oô�ì.ì.ëeï�ú!��ëUì.ì.íîUï�ðtö®õ²ò.ó�ôd2YA�>�.103242457698;:î,�\ô�ï�ëeò.öÀî�õ]e4�

�+ô�ï.ôÏëeï.ôÎì=î �·ôÎüUô�õ�ô�ïnë,�;ï�ñ��Àô�ìQ'^îUï¯ó�ëUõ�ð��®ö®õ�ü½8;09B]:N69X 698;0 F$@�AÏî,�\ô�ï�ëeò.öÀî�õ�ìYí � ó�ôÎì.ö-�àñ��¤ëeò=îUï9ùUô�ôY��ìtëï.ô�÷oîUï�ð¬î,'�ë,����ï�ëUõ�ð�î �HîUï�ëU÷Y�®ô$+cñ�ô�ï�ú%ÿ«ï.ô�ì��)î�õ�ì=ô/�-ëUöÀï�ì�c^î,'�÷oî�ñ�ïnì=ôUø¦ò.ó�ö®ì�ö®ì�î�õ��®ú�ð�î�õ�ô�'^îUïgôoûZ���¤ö®÷�öÀòwîUïnëU÷Y�Àô+Wñ�ô�ï�öÀô�ì4e4��S{'4ëº+Wñ�ô�ï.ú��·ëUð�ô;ò=î�ëwï�ëUõ�ð�î � îUï�ëU÷Y�®ôa�·ëeò.÷nó�ô�ì[ë���ï.ôY"Wö®î�ñ�ì7+Wñ�ô�ï.úgò=î�ò.ó�ô+ì�ë,�gô+ïnëUõ�ð�î � îUïnëU÷Y�ÀôUøò.ó�ôwì.ò=îUï.ô�ðÌï.ô�ì;�\î�õ�ì.ô�ö®ì¥ï.ô�ò.ñ�ï�õ�ô�ð��æSU'�ëgï�ëUõ�ð�î ��îUï�ëU÷Y�Àôàö®ì¥ü�öf"Uô�õËñ�ì=ô�ï ö®ð�ô�õcò.öÀò.öÀô�ìO§ÑëUõ�ða© ëUì ëeï�ü�ñ��gô�õcò.ì�øëUõ�ð²ô�öÀò.ó�ô�ï«c^îUïÃ%\îUò.ó]e�î,'.§ ëUõ�ð�©Õö®ì0õ�îUòò.ó�ô±ö®ð�ô�õcò.öÀò�ú·î,'uë)"ië,�®ö¤ð9ñ�ì=ô�ï�øcò.ó�ô�õ¯ò.ó�ô +Wñ�ô�ï.ú·ö®ì�ëUõ�ì=í�ô�ï.ô�ð²í;öÀò.óëgï�ëUõ�ð�î ��ì=ò=ï�ö®õ�ü&c�ëUì;ö®õtò.ó�ô#ï�ô�ë,�4ì=úEì=ò=ô��/e4�

ý�ô�ò.ëUö��Àô�ð�ð�ô�ì.÷oï�öf��ò.ö®î�õ�ì9î,'�ó�î�í�ò.ó�ô¹ì.ö���ñ��®ëeò=îUïtï.ô�ì;�\î�õ�ð�ì²ò=îÙ:NA$@ÄDU�9AY8¹X!A�242C0�OZA¹ëUõ�ð 8�09B�: 69X 6,8�0 F�@fAî,�\ô�ï�ëeò.öÀî�õ�ì)c^ò.ó�ëeò;ð�î·õ�îUò¸'^ë,���Cñ�õ�ð�ô�ï[ò.ó�ô�ë9%\î#"Uôàï�ñ��Àô�ì�eÕ'^î ���ÀîOí�í

° ¨

Page 22: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

¨ �{í µ cQ§¨RS©�R ¦ eX±ô�õ�ô�ï�ëeò=ô�ëWi §¨RS©�R ¦ l�FHGI� ! ëUõ�ð·ì=ò=îUï�ô+öÀòY� � ó�ô�õ·üUô�õ�ô�ï�ëeò=ô�ì�FHG�� �� ëUõ�ð�íØFHGI��î ¾1ïñð ��ò øcëUõ�ðgï�ô�ò.ñ�ï�õcóìå!2��ôÏ« X � Z�� \�¬��gîEð��ÊeH�6ío�p�)»+îUò=ôgò.ó�ëeò#ò.ó�ö®ì�í;ö-���p%\ô�ö®õ�ð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%��Àô '^ï.î ��ë¯ï�ëUõ�ð�î �È%-öÀò�ì.ò=ï�ö®õ�üî,'æ�Àô�õ�üUò.óÐC-ø-ì.ö®õ�÷oôxì ! � ôÏ« X � Z[� \ä¬ �gîWð��8ö®ì ë�ï�ëUõ�ð�î ��ô��Àô��gô�õcò^'^ï.î �Ã� ��åõ ëUõ�ð ¾ ïBöª÷2ø �¾ ï ö®ì;õ�ô�ü �®öÀü�öf%]�Àô,�»+îUò=ôwò.ó�ëeò)cQí µ cQ§[RS©�R ¦ e;eLK�� cóì ! � ôÏ« X � Z�� \�¬ eLKM��ì ! K2�)Kñù ôÏ« X � Z[� \ä¬ �8�)Kñù ôÏ« X � Z[� \�¬ �

°Z�{í ¾1< cQ§¨RS©�R J R R R S R ¦ eú ��è�âÍfÌ·Wî �gôº��ï�öÀîUïÃî ¨ +Wñ�ô�ï.útó�ëUì¥ï.ô�÷oîUï�ð�ô�ðËëgò.ñ*���Àô±î,'�ò.ó�ô�'^îUïH� cU� T R�� T R J R R R Q Rba ¢¶µ�¤Sµ enø�í;öÀò.ó¼§ �

Åd��´ ¢�µ ¤Sµ ëUõ�ð�© � ��´ ¢�µ ø�'MîUï�ì=î �·ôd"eë,�®ñ�ô�ì±î,' Q ëUõ�ðÕa ¢�µ�¤Eµ � � ó�ö¤ì+ö������®öÀô�ì;ò.ó�ëeò�ë�î ¨ c J e«+cñ�ô�ï�úí¥ëUì��·ëUð�ô²ò=îJcU� T R�� T ewëUõ�ðÚï.ô�ò.ñ�ï�õ�ô�ðÎc R Rba ¢ µ ¤ µ enø�%-ñ�òàõ�î¼�kÂ+Wñ�ô�ï.úÏò=î8ëUõbëU÷�÷oôY��ò.ë9%��®ôÍ�-ëeï.ò.õ�ô�ïï�ô�ò.ñ�ï�õ�ô�ð J Î ì=ô�ô�ò.ó�ô�î ¨ +cñ�ô�ï.úgð�ô�ì.÷oï�öf��ò.öÀî�õ�%\ô��ÀîOí��gc@SAõ²îUò.ó�ô�ï¥íîUï�ð�ì�øcò.ó�ö®ìqí ¾1< +Wñ�ô�ï.úQ�·öÀü�ócò%\ô�ì.ó�ëUð�î�í�ô�ð$%Wú²ò.ó�ô�ö��Q���®ö¤÷�öÀòÆí ¾1< +Wñ�ô�ï.ú!'^ï.î � ÷�ëUì.ôd°�î,'�ò.ó�ôºî ¨ ëU÷oò.öÀî�õ��ÄeÅ � î*�®���Àø�ò.ó�ô�ï.ô·í+ö�����%)ô·ëeò)�gî�ì=ò#î�õ�ô9ì�ñ�÷�ó�ò.ñ����ÀôUø4ì.ö®õ�÷oô R "ië,�®ñ�ô�ì�ì=ò=îUï.ô�ð¹ö¤õÏò.ó�ô�ì=ôgò.ñ*���®ô�ì�ëeï.ôïnëUõ�ð�î � ëUõ�ðËö®õ�ð�ôY�\ô�õ�ð�ô�õcòY��SU'�í µ cQ§[RS©�R ¦ e ó�ëUìÃ%\ô�ô�õÌëUì=ùUô�ðCø)ëUõ�ð(c TUWV ï UYX � Z[� \�]w]w_ eL*�� S ø�ò.ó�ô�õ�íc�ëNeÍS{')ò.ó�ô�ï.ô;ó�ëUìÕ%)ô�ô�õ9ë�ì.ñ�÷�÷oô�ì.ì�'^ñ���ü�ñ�ô�ì.ì/î�õa �§[RS©�¥+ëUõ�ð ¦ í�ëUì0ò.ó�ôÃ��ëUì.ì.íîUï�ð9ö®õgò.ó�ëeò¦ü�ñ�ô�ì.ì�ø

÷�ë,�-�Cò.ó�ö®ìOí ¾1< +cñ�ô�ï.ú¯ëR24=�FHF�A�2H2UË4=2@ í ¾1<Ðû =�AY84K�69B(cU�·TQR���T-e4�c@%�e/S{'Eò.ó�ô�ï.ô0ó�ëUì.õB� ò�%\ô�ô�õwë;ì.ñ�÷�÷oô�ì.ì;'�ñ��Uü�ñ�ô�ì.ì4î�õ£ �§[RS©�¥�øUëUõ�ð�ò.ó�ô�ï.ô0õ�ôY"Uô�ï�í�ëUì�ëUõwñ�õ�ì.ñ�÷�÷oô�ì.ì;'�ñ��

ü�ñ�ô�ì.ì î�õ8 �§¨RS©�¥º'^îUï ¦ íöG�ÃS{'àë >�AC2�>QD@B*2C>_09B]F4A�.103242457698;:?î,�\ô�ï�ëeò.öÀî�õ�ó�ëUìÌõ�îUòR��ï.ôY"Wö®î�ñ�ì��Àú½%\ô�ô�õ �\ô�ï�'^îUïH�gô�ð î�õ

cU��TUR��ÄT-enøN�\ô�ï�'^îUïH� ë�>�A�2C>�D B*2C>_09B]F�A7.103242457698;:²î,�)ô�ïnëeò.öÀî�õgí;öÀò.ó9ëeï.ü�ñ��gô�õcò.ì�cU�·TQR��ÄT�e/ëUõ�ð ¦ �S{'4ò.ó�ô±ò=ô�ì=ò ö¤ì�ì�ñ�÷�÷oô�ì.ì;'�ñ��qøWíô#ë,�®ì.î�÷�ë,�-�-ò.ó�ö®ì\+Wñ�ô�ï.ú²ëÍ24=�FHF�A�2H2UË4=2@Wí ¾1<Ùû =�AC8�K�69BTcU� T R�� T e4�

ö®ö_�WS{'¦ëª>�A�2C>gD B*2C>_09B]F�Aa.1092H24576,8�:¹î,�)ô�ïnëeò.öÀî�õÎó�ëUì���ï.ôY"Wö®î�ñ�ì��Àú�%\ô�ô�õ&�\ô�ï�'^îUïH�gô�ðËî�õ½cU�·TQR���T-enøò.ó�ô�õ¶ë9%\îUï.òY�æÅ�ôwí;ö-���\÷�ë,���\ò.ó�ö®ì[ôY"Uô�õcòd0,B¿í ¾1< ËY09DU@Ä=18�AC�

��ö®õ�ë,���ÀúUø/öf'[ò.ó�ö®ìd+Wñ�ô�ï.ú¹ö®ì�ëÏì.ñ�÷�÷oô�ì.ì;'�ñ��Æí ¾1< +cñ�ô�ï.ú¹î�õ cU� T R�� T e�'MîUïgì=î �gôTcU� T R�� T enø/ò.ó�ô�õÚï�ô�ò.ñ�ï�õa ¢¶µ ¤Eµ � © ò.ó�ô�ï.í;ö®ì=ôUøEï.ô�ò.ñ�ï�õ�aÙFHG� #k2R ¨ ¥ @ �S{'/õ�î�í ¾1< '�ëUö��®ñ�ï.ô#îE÷�÷�ñ�ï�ì+ëUì;ë9ï.ô�ì.ñ��Àò;î,'�ò.ó�ö®ìMí ¾1< +cñ�ô�ï.úUø�ò.ó�ô�õËò.ó�ôwì.ö-�àñ��¤ëeò.öÀî�õÌí;ö��-�Ê%)ô�ö¤õ�ð�ö®ìAÿò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��Àô^'^ï.î � ò.ó�ô±ï.ô�ë,�)í�îUïH�®ðCøEëUìg'Mî �-�Àî�í;ì�í�SAõ¯ò.ó�ô±ï.ô�ë,�\í�îUïH�®ð²ò.ó�ôxa!"eë,�®ñ�ô±ì=ô�õcòÃ%cúÂcU� T R�� T eö¤ìoí ¾1< cQ§¨RS©�R J R R R.ýa��c R R TUlV ï UWX � Z�� \ m ]^]`_ eIR ¦ � e4� � ó�ô�ï.ôY'^îUï.ôUøöf'+ò.ó�ö®ìoí ¾1< +cñ�ô�ï�úbö®ìgì�ñ�÷�÷oô�ì.ì;'�ñ��qøö®ò#í;ö�����ï.ô�ò.ñ�ïnõ�ëR"ië,�¤ñ�ô·÷oî�õ�ì.ö®ì.ò=ô�õ%ò�í+öÀò.óÏò.ó�ô9ëUð*"Uô�ïnì.ëeï.ú®�¾ì�"EöÀô�í�� © õÏò.ó�ô9îUò.ó�ô�ïàó�ëUõ�ðCøuöf'ò.ó�ö®ì+Wñ�ô�ï.ú·ö¤ìõ�îUò¥ì.ñ�÷�÷oô�ì�ì;'^ñ��qøcò.ó�ô�õ9üUô�õ�ô�ïnëeò.ö®õ�ü�ëwï�ëUõ�ð�î � ï�ô�ì;�\î�õ�ì=ô+ö¤ìö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%]�Àô7'^ï.î � ò.ó�ôëUð�"Uô�ï�ì.ëeï.ú®�¾ì^"EöÀô�í ö®õtò.ó�ô#ï.ô�ë,�Cí�îUïH�®ð��� ó�ô�'^î ���Àî�í+ö®õ�ü9÷Y�®ëUö-� ì.ó�îOí;ì;ò.ó�ëeò;í�� î*�®���_��í;ö����Cõ�îUò+ëUì=ù¶ëUõZí ¾1< +Wñ�ô�ï.útò.ó�ëeò±÷�ëUñ�ì=ô�ì�ëUõ�í ¾1<'�ëUö��®ñ�ï.ô,�^c � ó�ô<í ¾1= ÷�ëUì=ôàö®õtò.ó�ôw÷Y�®ëUö-��ö®ì õ�ô�÷oô�ì.ì�ëeï.útò=î9ó�ëUõ�ð��®ô îñ�î,�\ô�ï�ëeò.ö®î�õ�ìY�Äeú ��_�U| f Í9ÆpA�> R �HA«8;A�>E=184B�AH:4�YK�0�ü�à c J e û =�AY84KQ>_6/cU�·TQR���T e�k�ÆpA�>y§÷�iÅq��´ ¢�µ�¤Eµ 09B]:[©f�i��´ ¢¶µ kgp?*ACBª5�k 6)k .�kÕD@>75æD@U@�B]6 >7?104. .*AYB(>@?Z0,>g>@?1Ad>E576R698;0 F$@�A û =�AY84D_A�2

í´ý�cQ§¨RS©�R J R R R.ýa��c R R JcQí µ cQ§[RS©�R ¦ µ e;e K

eIR ¦ µ eIR

0,B]:í�þ�cQ§¨RS©�R J R R R.ý ��c R R J

cQí µ cQ§¨RS©�R ¦ ¾ e;e KeIR ¦ ¾ e

5æDU@U@µ�HA�092HI,AH:Ô² 5æD@>@?�ÿ)R��­F  t° �6RH°���¥�²�=1B @�A�242ÍACDE>@?1AC8 ¦ µ � ¦ ¾ ²«698Ù�YK¹>@?1AR>ED X!A�6�ËÍ>@?1A!2YAHFH69B]:û =�AC8�K/>@?1AY8;Aº?Z092d0�@ 8;AH0 :9K��HA4ACB(0!24=�FHF�A�2H2UË4=2@]O =�A�2H2º69B� �§¨RS©�¥�k� � }«|Gy�y¸�_�tu~|���o3}4�_yÃ�_�3qH�����^u~|gqas�q4o3vt}4ùÙy{�wy{ùÃy�oY�7�Äs_}�ù �_�3yÃ|G�tr3x4s_}4�3�Q}H��}4s�vtyUs u~o�� m qHo9v������ ��� ��� ����u~|gqas�qHo9vt}4ùy��~y�ùÃy�oY��}H�1�_�3yæ|G�tr3x4s_}4�3��}4�*}Hs�vty{s��Wu~o�� m ó

°,°

Page 23: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

»+îUò=ô�ò.ó�ëeòö®õ·ò.ó�ö®ì¦÷Y�®ëUö-� íô�ì;�\ô�ëeù�%)îUò.ó²ë9%\î�ñ�ò7+Wñ�ô�ï�öÀô�ìÕ�9ëUð�ô^%Wú�ò.ó�ô+ëUð*"Uô�ï�ì�ëeï.úUøWëUõ�ð·ôoû1���®ö®÷�öÀò+Wñ�ô�ï�ö®ô�ì^�·ëUð�ô#í;ö®ò.ó�ö®õ¯ò.ó�ô�ì.ö���ñ��®ëeò=îUïdc^ô,� ü*�Àø-ö®õÌ÷�ëUì=ôd°�î,'�ò.ó�ô�¼a°gî,�)ô�ïnëeò.öÀî�õ]e4�� ó�ô«��ï.îWî,'�ë9���)ô�ëeïnì[ö®õR¼¸���)ô�õ�ð�ö�û/¼)�w°Z�»+îUò=ôwò.ó�ëeò+ëUõaí ¾1< +Wñ�ô�ï.út÷�ëUõ¶ï.ô�ì.ñ��Àò[ö®õ¶ë$>�AC2�>\D B*2C>_09B]F�A¸.103242457698;:ª+cñ�ô�ï.ú²î�õ cU�·TQR���T-e�î�õ��®ú¯öf'�ëò.ñ����Àô&cU� T R�� T R J R R R Q Rba ¢ µ ¤ µ e�ó�ëUì«��ï.ôY"EöÀî�ñ�ìH�Àú&%\ô�ô�õÏï.ô�÷oîUï�ð�ô�ð���S�ò�í;ö�����%\ô�÷oî �gô9ë9���-ëeï.ô�õ%òº%)ô��®î�íc�ì.ô�ô#ò.ó�ôaî ¨ +Wñ�ô�ï.ú9ð�ô�ì�÷oï�öf��ò.öÀî�õ�e�ò.ó�ëeò�ø�í�� î*�®���ÀøEò.ó�ö¤ì÷oî�ñ��¤ð²î�õ��Àú·ó�ë9���\ô�õ¯öf'7cU�·TQR���T-eó�ëUì¥õ�îUò[ó�ëUðëR�9ëeò.÷�ó�ö®õ�ü¶÷oî�õN"Uô�ï�ì�ëeò.öÀî�õ�í;öÀò.óÏëUõ¹ëU÷�÷oôY��ò.ë9%��ÀôQ��ëeï.ò.õ�ô�ï��)Å�ô·ó�ë�"Uô�ß.ñ�ì=ò ��ï.ît"Uô�õ�î�õ�ô���ëeï.ò#î,'ò.ó�ô�'Mî �-�Àî�í;ö¤õ�üg÷Y�®ëUö��Ríú ��_�U|zyÀÍ[�Ë&0bò=ô�ì=ò9ö¤õ�ì=ò.ëUõ�÷oôR��ëUì�ì=íîUïnð û =�AY84KTD 2RXQ0N:NAª69B 0(8�A�2�.169B]:NAY8&D@B*2�>_0,B]F4AÂcU�·TQR���T eb²>@?*ACB(cU�·TQR���T e«?Z032�B]6 >7?10 :�0!X�0,>_FY?ND@BPO$FH6,B �9AY8H2Y0,>EDE6,B(5æD@>@?&09B(0 F4F4A{.�>_0)�Y@�A¸.10,8�>EB�AY8�k� ó�ô9îUò.ó�ô�ï���ëeï�òàö®ìàì.ó�î�í+õÚö®õÚ÷�ëUì=ôR±3%Úî,'¸îñ c^í;ó�ö®÷nó�ö®ìwò.ó�ô¯î�õ��ÀúÏîUò.ó�ô�ï����®ëU÷oô²í;ó�ô�ï.ô¯ëL>�AC2�>D@B*2C>_09B]F4A�.1032H2�57698;:Î÷oî�ñ��®ð�%\ô��·ëUð�ô�î�õ¶ë·ï.ô�ì;�\î�õ�ð�ô�ï[ö®õ�ì.ò.ëUõ�÷oôte4�

ú ��è�âÕy »+î�ò.ñ*���Àô¯î,';ò.ó�ôR'^îUïH� cU�·TQR���TQR J R R R Q Rba ¢¶µ�¤Sµ e�ó�ëUìd%)ô�ô�õ¬ï�ô�÷oîUï�ð�ô�ð¬í;öÀò.óu§Ð� Åq��´ ¢¶µ ¤Eµ ëUõ�ð©ó�Ï��´ ¢ µ �¿;ô�ò.ñ�ï�õÖaÉFHG  #k2R ¨ ¥�@�� � ó�ôÌî�õ��Àúbí¥ë�ú ò.ó�ö®ì�ï�ô�ì;�\î�õ�ì=ô¶÷oî�ñ��®ðJ%\ô¶ð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%��Àô/'Mï�î � ò.ó�ôï�ô�ë,��ì.úWì=ò=ô��Hö®ì�öf'[ò.ó�ö®ì)+cñ�ô�ï.ú�íî�ñ��®ðV%\ô¯ì.ó�ëUð�îOíô�ð %Wú¹ëUõbö-�Q���®ö®÷�ö®ò�í ¾1< +cñ�ô�ï�úT'Mï.î �H÷�ëUì=ô ¨î,'�ì=î �gôQî ¨ ëU÷oò.öÀî�õCø4öG� ô,�Àø4öf' J ëUõ�ð R ëeï.ô�'Mï�î ��ëÍ�9ëeò.÷�ó�ö®õ�ü¯÷oî�õP"Uô�ï�ì.ëeò.öÀî�õ¹î,'0ò§í�îR"eë,�®ö®ð8ñ�ì=ô�ïö¤õ�ì=ò.ëUõ�÷oô�ì�øEëUõ�ð S � ý �Qc R R TUWV ï UYX � Z[� \ ]^] _ e4�Õ�+î�í�ôY"Uô�ï�ø*%Wú·ò.ó�ô�'Mî ���®î�í;ö®õ�üw÷Y�®ëUö��Ìøcí�� î*�®���Wò.ó�ö®ìí;ö����õ�îUò îW÷�÷�ñ�ï��ú ��_�U|¯®BÍ9ÆpA�> J �4A«8�AY>E=18�B�A�:Ù�CK!09B�h­Ý û =�AY84KQ>_6ÍcU�SR��Pe�5æD@>@?�§Ï�Ï��´ ¢ 09B�:[©ó�ÏÅd��´ ¢�¤ ²709B�:R �HA/8�AY>E=18�B�A�:��CK¹0¹2�=o�C2YA û =�ACB�>�ü�à c J e û =�AC8�K¹>_6ªcU� T R�� T e!5æDE>@?Ç©Þ� ��´ ¢ µ 09B]:¿§ �ÓÅd��´ ¢ µ ¤ µ kgp?*ACBâ²a5�k 6�k®.�k`² >@?*AÍ>@?1AC8�A/5æD@U@ÕB�A$�9AY8'�HA �_BÊACDE>@?1AC84�4AQËY698�A/B]698/0�ËC>�AC8Í>@?1A·h�ÝÂ09B�:Ùü�à û =�AY84D_A�2"!0,BT6,8�0 F�@fA û =�AC8�KÍcQ§¨RS©�R J R R R.ýa��c R R TUlV ï UWX � Z�� \ ]^] _ eIR ¦ eº>_6�í ¾1< ².í ¾1= ²\6,8{í Á ²6ËY698)09B�K ¦ k� ó�ô!��ï�îcî,'[î,' ò.ó�ô¯÷Y�®ëUö-� ë9���\ô�ëeï�ì�ö®õL¼¸���\ô�õ�ð�ö�ûª¼)�w°Z�T»;îUò=ôtò.ó�ëeò�í�ô²î�õ��®ú¹÷oî�õ�ì.ö®ð�ô�ï�î ¨ c J e+Wñ�ô�ï�ö®ô�ì ì.ñ*%�ì.ô�+cñ�ô�õcò ò=î9ëUõ¹¼�k/+cñ�ô�ï.ú²ò.ó�ëeò;ï.ô�ò.ñ�ïnõ�ì J ø�ì.ö¤õ�÷oô�ò.ó�ô���ï.î,%�ë9%�ö��¤öÀò§ú·î,'/ò.ó�ô�öÀï îE÷�÷�ñ�ï=ÿï�ô�õ�÷oô���ï�ö®îUï[ò=î9ëUõ$¼ak�+cñ�ô�ï.ú²ò.ó�ëeò ï.ô�ò.ñ�ï�õ�ì J ö®ì[õ�ô�ü �®öÀü�ö�%��ÀôQc@%cútï�ëUõ�ð�î �·õ�ô�ì.ì¥î,' J e4�

±Z�{í ¾1= cQ§¨RS©�R J R R R S R ¦ e¿;ô�ò.ñ�ï�õØavTªFHGÖ #k2R ¨ ¥ @ � � ó�ö¤ì�ö¤ì�ö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��Àô 'Mï�î � ò.ó�ô�ï.ô�ë,�/ì=úEì=ò=ô��È%cú8ò.ó�ô�'^î ���Àî�í+ö®õ�ütëeï.ü�ñEÿ�·ô�õ%òYí � ó�ô+î�õ��Àú9ö��Q�]�®ö®÷�öÀò>í ¾1= +Wñ�ô�ï.ú9ò.ó�ëeò¥÷oî�ñ��®ðtì.ó�ëUð�îOí ò.ó�ö®ì�î�õ�ô#ö®ì�ò.ó�ô«+cñ�ô�ï�ú�'Mï�î � ÷�ëUì.ô ¨ î,'�ëUõ¼ °tëU÷oò.öÀî�õ��Q�+î�í�ôY"Uô�ï�ø�ò.ó�ëeò�ì.ó�ëUð�îOí;ö®õ�üÌö®ì�øCí�� î*�®���Àøuö����)î�ì�ì.öf%��Àôº%cúTÉg�®ëUö�� ±Z�$cE»;îUò=ô9ò.ó�ëeò#ò.ó�ô£í ¾1=+Wñ�ô�ï.ú¹'Mï�î ��÷�ëUì=ô/°¯î,'¥ëUõT¼a°tëU÷oò.öÀî�õ�ö®ì±ôoûZ�]�®ö®÷�öÀò�øCöG� ô,�Àøuë,�-��î,'öÀò.ì#ëeï.ü�ñ��gô�õ%ò.ìwëeï.ôgùWõ�î�í;õCø�ëUõ�ð�ì=î¶ë+Wñ�ô�ï.úcÿ«ï.ô�ì;�\î�õ�ì.ôa�-ëUöÀï í�î�ñ��®ð�%\ô#ì=ò=îUï.ô�ð$'^îUï;öÀòY�Äe

j*�{í Á cQ§¨RS©�R J R R R S R ¦ e¿;ô�ò.ñ�ï�õa¡ FHG� #k2R ¨ ¥ @ �7¼�ìÃ'^îUï�í ¾1= +Wñ�ô�ï�öÀô�ì�ø�ö®õ�ð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ë9%�ö��Àö�ò�ú�ô�ëUì�ö��Àú!'^î ���ÀîOí;ìÃ%WúRÉÃ�®ëUö�� ±Z�

³Z�¸¼ak�+Wñ�ô�ï.ú¯ò=î¹cU�SR��ZeX±ô�õ�ô�ï�ëeò=ô²ëUõ�ð�ì=ò=îUï.ô$#,F G � ! øuëUõ�ð¹ì.ô�õ�ð J �Û�&%7�/Ég�Àô�ëeï4�ÀúUø J ö®ì#ñ�õ�öf'MîUï4���Àú¶ð�ï�ë�í;õª'^ï.î � � ��� ! øß.ñ�ì=ò ëUì+ö®õtò.ó�ô#ï.ô�ë,�uì=úWì.ò=ô��R�

´Z�¸î ¨ c J e^+cñ�ô�ï�ú²ò=î¹cU��TUR��ÄT-eX±ô�õ�ô�ï�ëeò=ô Q FHGI� ! ëUõ�ð�a ¢�µ�¤Eµ FHG8 #k2R ¨ ¥ @ �W·Wô�õ�ð R ���)*�ëUõ�ð�a���a ¢¶µ ¤Sµ �\»;îOí?÷oî�õ�ì.ö¤ð�ô�ï[ò§í�î²÷�ëUì=ô�ì�í

°,±

Page 24: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ú ��è�âÍf � ó�ô«"eë,�®ñ�ô#î,' J ó�ëUì^%)ô�ô�õÌì.ô�õ%ò^%WúÌëUõ¶ëU÷�÷oôY��ò.ë9%��®ô���ëeï.ò.õ�ô�ï#�Å�ô�÷�ëUõ¶ò.ó�ö¤õ�ù·î,'�a ¢¶µ�¤Sµ ëUì ò.ó�ô�ï.ô�ì.ñ��Àò¥î,'�ëUõËö��Q���®ö¤÷�öÀò\+Wñ�ô�ï.ú

í ¾1< cQ§[RS©�R J R R R.ý ��c R R JcQí µ cQ§¨RS©�R ¦ � e;e K eIR ¦ � eI�

·�ö®õ�÷oô R ö®ì;ë�'^ï.ô�ì.ó��Àú¯÷�ó�î�ì.ô�õËï�ëUõ�ð�î � õWñ��º%\ô�ï�ø�ò.ó�ö®ì ö��Q�]�®ö®÷�öÀòg+cñ�ô�ï.úUø�í�� î*�®�p�Àø�í;ö����Cõ�îUò;ì.ó�ëUð�îOíëUõcú!��ï�öÀîUïÂí ¾1< +cñ�ô�ï�öÀô�ì«c^í;ó�ô�ò.ó�ô�ï¥ôoû1���®ö®÷�ö®ò0îUï ö��Q�]�®ö®÷�öÀò4e4�æÉ�î�õ�ì=ô�+Wñ�ô�õcò��ÀúUøoa ¢¶µ ¤Eµ í;ö�����%\ô�ö®õ�ð�ö®ì=ò.ö®õ�ÿü�ñ�ö®ì.ó�ë9%��®ôa'^ï.î ��ò.ó�ô«"ië,�®ñ�ô�ì=ô�õ%ò+ö®õtò.ó�ô�ï.ô�ë,�uì=úWì.ò=ô��R�

ú ��è�âÕy � ó�ô«"eë,�®ñ�ô#î,' J ó�ëUì;õ�îUòÃ%\ô�ô�õ¶ì=ô�õcò^%cútëUõËëU÷�÷oôY��ò.ë9%��Àô���ëeï�ò.õ�ô�ï��SAõ8ò.ó�ö®ì±÷�ëUì=ôUø4ï�ô�÷oîUï�ðÏò.ó�ô�ò.ñ*���ÀôRcU�·TQR���TQR J R R R Q Rba ¢¶µ�¤Sµ e4�ºS�ò±ö¤ì�ö-�Q�\îUï.ò.ëUõ%ò�ò=îÌõ�îUò=ô&c@'^îUï)Ég�®ëUö��È°Wøò.ó�ëeò9öf'�ò.ó�ö®ì�ò.ñ*���®ô¶ö®ì�ï.ô�÷oîUï�ð�ô�ð4ø�ò.ó�ô�õCøíº� î*�®���Àø cU��TUR��ÄT eàí;ö����¥õ�ôY"Uô�ï/%\ô¶÷oî�õ�ì.ö®ð�ô�ï�ô�ð¬ò=îÚó�ë#"UôÎë�9ëeò.÷�ó�ö®õ�ü9÷oî�õN"Uô�ïnì.ëeò.öÀî�õÎí;öÀò.óÌëUõËëU÷�÷oôY��ò.ë9%��Àôº�-ëeï.ò.õ�ô�ï�ø�ð�ñ�ô#ò=î·ò.ó�ô�'�ëU÷oò;ò.ó�ëeò¸"ië,�®ñ�ô�ì[î,' J ëeï.ôüUô�õ�ô�ï�ëeò=ô�ð¹ï�ëUõ�ð�î ���Àú$%WúÎö¤õ�öÀò.ö®ëeò=îUï#ö®õ�ì.ò.ëUõ�÷oô�ìY�ÍcE¿;ô�÷�ë,���/ò.ó�ëeò�ö¤õÎî�ñ�ï�ð�ôCÓ-õ�öÀò.ö®î�õËî,'0�;�·ëeò.÷�ó�ö¤õ�ü÷oî�õP"Uô�ï�ì.ëeò.ö®î�õ �·í�ôwëeï.ôwõ�îUò ÷oî�õ�÷oô�ï�õ�ô�ðËí;öÀò.ótò.ó�ô�ò.ö-�·ö®õ�ü�î,'/ì=ô�õ�ð�ì[ëUõ�ð¶ï.ô�÷oô�öf"Uô�ìY�Äe¼�ì;ö¤õÌ÷�ëUì=ô ¨ ø�í�ôw÷�ëUõ$"EöÀô�í¿a ¢�µ�¤Eµ ëUì ò.ó�ô#ï�ô�ì.ñ��Àò[î,'�ëUõ¶ö��Q�]�®ö®÷�öÀòg+cñ�ô�ï.ú

í ¾1< cQ§[RS©�R J R R R.ý ��c R R JcQí µ cQ§¨RS©�R ¦ � e;e K eIR ¦ � eI�

� ó�ôº"eë,�®ñ�ô�î,'�a ¢¶µ�¤Sµ í;ö��-��%\ôàö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ô¸'^ï.î � ò.ó�ôàî�õ�ô�ì=ô�õcò�ö¤õ¶ò.ó�ô�ï.ô�ë,��ì=úEì=ò=ô��Ë'^îUï±ò.ó�ôì�ë,�gô�ï.ô�ëUì=î�õÎëUìÃ%\ôY'MîUï�ô,�

²P�¸¼ °*c R Rba�eÃ+Wñ�ô�ï.ú¯ò=î¹cU�SR��Zeú ��è�âÍf cU�SR��Ze ó�ëUì;ó�ëUð¶ëQ�·ëeò.÷nó�ö®õ�ü9÷oî�õP"Uô�ï�ì.ëeò.ö®î�õ¶í;öÀò.óÌëUõÎëU÷�÷oôY��ò.ë9%��Àôº��ëeï.ò.õ�ô�ï)cU��TUR��ÄT-e4�

X±ô�õ�ô�ï�ëeò=ô4a T¢�¤ FHG¸ #k2R ¨ ¥�@�ø�ì.ô�õ�ð�a T �:a T¢�¤ ø�ì=ô�òwì=ò.ëeò.ñ�ìwò=î¹¼�÷�÷oôY��ò�ø/ëUõ�ðT�\ô�ï�'^îUïH��ëª2C>_098�>�2�A�24<2�DE6,B î,�)ô�ïnëeò.öÀî�õ¹í;ö®ò.ó¹ò.ó�ô9÷oî�õ�õ�ô�÷oò.öÀî�õbëUì.ì.öÀü�õ��·ô�õ%ò/6�.*ACBaËY698�FH69B�BÊA�F�>EDG69B¼Ë�8�6,X cU��TUR��ÄT-e4� � ó�ö®ì÷oîUï�ï.ô�ì;�\î�õ�ð�ì¥ò=î·ò.ó�ô�'Mî �-�Àî�í;ö¤õ�ügö��Q���®ö¤÷�öÀò0îUï�ëU÷Y�®ôº+cñ�ô�ï�öÀô�ìYí

a T¢�¤ � í ¾1= cQ§[RS©�R J R R R.ý ��c R R JcQí µ cQ§¨RS©�R ¦ � e;e K eIR ¦ � eIR

¡£¢�¤ � í Á cQ§[RS©�R J R R R.ý ��c R R JcQí µ cQ§¨RS©�R ¦ � e;e K eIR ¦ � eIR

í+ó�ô�ï.ô�¡�¢�¤+ö¤ì0ò.ó�ô�ï�ëUõ�ð�î � ì=ô�ì.ì�öÀî�õ9ùUô�ú²ëUì.ì.öÀü�õ�ô�ð/%Wúgò.ó�ô+ïnö®õ�üº�·ëUì.ò=ô�ï¥ëeò�ò.ó�ô�ò.ö��gô+î,'4ò.ó�ô)2�>_098C>2�A�2424DG69BÏî,�)ô�ïnëeò.öÀî�õ��î�ú!Ég�®ëUö-� ±Wøcò.ó�ô�ì=ô;ö-�Q���®ö®÷�ö®ò�+Wñ�ô�ï�öÀô�ì/÷oî�ñ��¤ð�õB� ò¦ì.ó�ëUð�î�íØëUõcú)�-ëUì=ò¦îUïÕ'�ñ�ò.ñ�ï.ô¥ôoû1���®ö®÷�ö®ò�+Wñ�ô�ï�ö®ô�ìY��S�òö¤ì�ë,�¤ì=îàô�ëUì.ú²ò=îgì=ô�ô±ò.ó�ëeò¥ò.ó�ô�ì=ô#ö������®ö®÷�öÀò\+cñ�ô�ïnöÀô�ì0í+ö�����õ�îUò¥ì�ó�ëUð�î�í�ëUõcú9îUò.ó�ô�ï ö-�Q���®ö®÷�ö®ò7+cñ�ô�ï�öÀô�ì�øñ�õ��Àô�ì.ì�ò.ó�ô�ï.ô¶ö¤ì�ë�÷oî �-�®ö®ì.öÀî�õÚî,' J "eë,�®ñ�ô�ì�%\ô�ò§í�ô�ô�õ ò�íî�ö¤õ�öÀò.ö®ëeò=îUïgö®õ�ì.ò.ëUõ�÷oô�ì$c�ëUõ�ð¬ò.ó�ëeògî�õ��®úîE÷�÷�ñ�ï�ì í;öÀò.óÌõ�ô�ü �®ö®ü�öf%��Àôa��ï.î,%�ë9%-ö��®öÀò�ú*e4�� ó�ô¹64.*AYB´÷oî�õ�õ�ô�÷oò.öÀî�õÚëUì.ì.öÀü�õ��gô�õ%òwí;ö�����%\ô!�Àô�ü�ë,�qø�ì.ö®õ�÷oô9ò.ó�ô·î�õ��ÀúÂ���®ëU÷oô9ò.ó�ëeòwò.ó�ô²ì.ö���ñ��®ëeò=îUï÷oî�ñ��®ð½�\ô�ï�'^îUïH� ë >�A�2C>ºD@B*2C>_09B]F4A�.*032H2�57698�: î,�\ô�ï�ëeò.öÀî�õ´î�õ cU�SR��Ze�í�î�ñ��®ð½%\ô¶ö®õ ÷�ëUì=ôª°Ïî,'±ò.ó�ô¼ °ª+Wñ�ô�ï.úÎc�ì=ô�ôÌò.ó�ô�ï.ôte4� ¼a�®ì=î�ø0í�� î*�®���Àø0í�ôÌí;ö��-�0õ�ôY"Uô�ï·ó�ë#"Uô¶ò§í�î¹ö®õ�ö®ò.ö®ëeò=îUïgö®õ�ì=ò.ëUõ�÷oô�ìRcU� µ R�� µ eëUõ�ðVcU� ¾ R�� ¾ eò.ó�ëeò;ëeï.ô#î,�\ô�õ�'MîUï+÷oî�õ�õ�ô�÷oò.öÀî�õR'^ï.î � ò.ó�ôàì.ë,�gô#ï.ô�ì;�\î�õ�ð�ô�ï¥ö¤õ�ì=ò.ëUõ�÷oô!cU� T R�� T enø-ì.ö®õ�÷oôò.ó�ëeò+í�î�ñ��®ð¶ö-�Q���Àú¯ò.ó�ëeòQcU� µ R�� µ e ëUõ�ðLcU� ¾ R�� ¾ e¥üUô�õ�ô�ï�ëeò=ô�ð8ò.ó�ôàì.ë,�·ô J "eë,�®ñ�ôÍc^îUò.ó�ô�ï.í;ö®ì.ôUø-ò.ó�ô�ú÷oî�ñ��®ð�õB� òÃ%\îUò.óÌó�ë#"Uôàó�ëUð$�9ëeò.÷�ó�ö®õ�ü·÷oî�õN"Uô�ï�ì�ëeò.öÀî�õ�ì+í;öÀò.ó(cU�·TQR���T-e;e4�

ú ��è�âÕy cU�SR��Ze ó�ëUì;õ�îUò ó�ëUð¶ë��9ëeò.÷�ó�ö®õ�ü·÷oî�õN"Uô�ï�ì�ëeò.öÀî�õËí+öÀò.óÌëUõ¶ëU÷�÷oôY��ò.ë9%��®ôº��ëeï.ò.õ�ô�ï��VuîcîUù!'MîUï¥ëº"eë,�®ñ�ô�î,' ¦ 'MîUï�í;ó�ö®÷nó²ëUõ�í µ cQ§¨RS©�R ¦ e\+Wñ�ô�ï.ú·ó�ëUì\%\ô�ô�õ/�9ëUð�ôUø�ëUõ�ð²ëUõ�îUò.ó�ô�ïÃ+cñ�ô�ï�úí ¾1< cQ§¨RS©�R J R R R R %('oK ôÏ« X � Z�� \�¬ R ¦ e�ó�ëUìg%\ô�ô�õR�·ëUð�ô#ëUõ�ðtï.ô�ò.ñ�ï�õ�ô�ðÐa���c@Å � î*�®����ò.ó�ô�ï.ô#í;ö-����%\ô±ëeò

°3j

Page 25: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

�·î�ì=ò#î�õ�ô·ì.ñ�÷nóª"ië,�¤ñ�ôàî,' ¦ ø4ð�ñ�ô�ò=îÌò.ó�ô�ï�ëUõ�ð�î �·õ�ô�ì.ì±î,'Æí ¾1< �ÄeTSU'�õ�îÌì.ñ�÷nó ¦ ö®ìa'Mî�ñ�õ�ðCø\ò.ó�ô�õï�ô�ßAô�÷oòY� � ó�ö¤ìCö®ìuö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%]�Àô�'Mï�î �Fò.ó�ôï.ô�ë,�%ì=úEì=ò=ô��Ìøeì.ö®õ�÷oô¦í�� î*�®����ò.ó�ô a±ï.ô�÷oô�ö�"Uô�ðwí�î�ñ��®ð«%\ôö¤õ�÷oîUï.ï.ô�÷oò�ö®õ#ò.ó�ô¦ï�ô�ë,�%ì=úEì=ò=ô�� c�öG� ô,�Àøeò.ó�ô0÷oîUï.ï.ô�÷oòªa£�÷í ¾1< cQ§[RS©�R J R R R.ý �Qc R R TUWV ï UYX � Z[� \ m ]w] _ eIR ¦ � eí�î�ñ��®ð�%\ô�ö®õ�ð�ôY�\ô�õ�ð�ô�õcòî,'�ò.ó�ô�ëUð*"Uô�ïnì.ëeï.ú®�¾ì^"EöÀô�íae4�© ò.ó�ô�ï.í;ö®ì.ôQc�ö�'�ì.ñ�÷nó¶ë ¦ ö®ìg'^î�ñ�õ�ð]enø1�\ô�ï�'^îUïH� ë$>�A�2C>ÕD@B*2�>_0,B]F4A^.1092H24576,8�:Îî,�\ô�ï�ëeò.öÀî�õtí;ö®ò.óÌëeï.ü�ñEÿ�·ô�õ%ò.ì¸cU�ER��Pe�ëUõ�ð ¦ c�õ�îUò=ô[ò.ó�ëeò/ò.ó�ö®ì�ö®ì�ò.ó�ô[î�õ��Àúº���®ëU÷oô¥í;ó�ô�ï.ô¥í�ô[÷oî�ñ��®ð��\ô�ï�'^îUïH� ò.ó�ö®ì�î,�)ô�ïnëeò.öÀî�õ'^îUï;ëUõÎö®õ�öÀò.ö®ëeò=îUï ö¤õ�ì=ò.ëUõ�÷oôUø�ëUõ�ðËõ�î·ì=ô�ì.ì.ö®î�õ¶ó�ëUìÃ%\ô�ô�õÌì=ò.ëeï.ò=ô�ðËúUô�ò�ø-ì=î9ò.ó�ô#î,�\ô�ï�ëeò.öÀî�õ¶ö®ì¸�Àô�ü�ë,� e4�S{'�ò.ó�ô±ü�ñ�ô�ì.ì ö®ì[õ�îUò ì.ñ�÷�÷oô�ì.ì;'�ñ��qøEò.ó�ô�õtï�ô�ßAô�÷oò)c^ò.ó�ö®ì[ö®ì[ö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ôW'^ï.î � ò.ó�ô#ï�ô�ë,�4ì=úEì=ò=ô��Ìø%WúÌëUõ¶ëeï.ü�ñ��·ô�õ%ò;ì�ö��·ö��®ëeï�ò=î·ò.ó�ôwî�õ�ôwë9%\î#"Uôte4�\SU'�ò.ó�ô#ü�ñ�ô�ì.ì+ö®ì[ì.ñ�÷�÷oô�ì�ì;'^ñ��qø�ò.ó�ô�õ�íc�ëNe$·Eô�ò?a T �÷í ¾1= cQ§[RS©�R J R R R R %('oK ôÏ« X � Z[� \ä¬QR ¦ e4�c@%�eR·Eô�õ�ð�a T �c�÷#e�¼�÷�÷oôY��òY�c�ð]eR·Eô�ò{¡ �÷í Á cQ§[RS©�R J R R R R %('oK ôÏ« X � Z[� \ä¬QR ¦ e4�c^ôte¿�¦ûZ�\î�ì=ô·ñ�ì.ö®õ�ütì=ô�ì.ì.ö®î�õ�ùUô�ú�¡ c^ò.ó�ö¤ì#ö®ì#ë,���ÀîOíô�ðCø�ì.ö®õ�÷oô�ò.ó�ô�ï�ôgí�ëUìàëÌì.ñ�÷�÷oô�ì.ì;'�ñ���ü�ñ�ô�ì�ì#î�õ

ò.ó�ô���ëUì.ì=í�îUï�ð]e4�»+îUò=ô�ò.ó�ëeò+ò.ó�ôº"eë,�®ñ�ô�ì î,'�avT4ëUõ�ðÇ¡ ëeï.ô�÷oî �Q��ñ�ò=ô�ðÎò.ó�ï.î�ñ�ü�óËôoûZ�]�®ö®÷�öÀò[îUï�ëU÷Y�®ô)+Wñ�ô�ï�öÀô�ìdc^íô�÷�ëUõò.ó�ö®õ�ùÌî,'0ò.ó�ô�ì=ôgëUì�ì�ñ*%�ï.î�ñ�ò.ö¤õ�ôà÷�ë,���¤ì;í;ö®ò.ó�ö®õ¶ò.ó�ô�ì�ö��àñ��®ëeò=îUï�enø\ëUõ�ð8ò.ó�ôQ+cñ�ô�ïnöÀô�ì+ëUõ�ðÎï�ô�ì;�\î�õ�ì=ô�ìëeï�ôwï.ô�÷oîUï�ð�ô�ðCø�ëUì�ñ�ì.ñ�ë,�G�\S�ò+ö®ì;÷Y�Àô�ëeï+ò.ó�ëeò;ò.ó�ô�"ië,�¤ñ�ô�ì î,'�avT4ëUõ�ðZ¡Ð��ï.îWð�ñ�÷oô�ð¶ö®õÌò.ó�ö®ì ÷�ëUì=ô�ëeï.ôò.ó�ôwì.ë,�gôwëUì íî�ñ��¤ð�%)ô�÷oî ����ñ�ò=ô�ð¶ö®õtò.ó�ô�ï.ô�ë,�4ì=úEì=ò=ô��R�

­Z�¸îñ*cóa T eg+Wñ�ô�ï.ú²ò=îÂcU� T R�� T e

ú ��è�âÍf cU� T R�� T e�ó�ëUì ó�ëUð¶ë��9ëeò.÷�ó�ö®õ�ü·÷oî�õN"Uô�ï�ì�ëeò.öÀî�õËí+öÀò.óÌëUõ¶ëU÷�÷oôY��ò.ë9%��®ôº��ëeï.ò.õ�ô�ïºcU�SR��Pe4�·Eô�ò¶ì=ò.ëeò.ñ�ìtò=î ¼�÷�÷oôY��òËëUõ�ð �\ô�ï�'^îUïH�6ëÎ2�>_098C>Q2�A�2H2�DE6,B?î,�\ô�ï�ëeò.öÀî�õ í+öÀò.ó ë FH69B�BÊA�F�>!>_6¬cU�SR��Ze÷oî�õ�õ�ô�÷oò.öÀî�õËëUì�ì.öÀü�õ��gô�õcòY� � ó�ö¤ì[ö®ìÃ�Àô�ü�ë,��%\ô�÷�ëUñ�ì=ôc�ëNe¯íº� î*�®���Àø4ò.ó�ô·ö®õ�ì=ò.ëUõ�÷oô&cU�SR��Ze�í;ö�����ì=ò.ö��-��%\ô�î,�\ô�õª'MîUï�÷oî�õ�õ�ô�÷oò.öÀî�õT%WúËò.ó�ôgïnëUõ�ð�î �·õ�ô�ì�ì+î,' R

"eë,�®ñ�ô�ì�ì=ô�õcò�%cúÚï.ô�ì;�\î�õ�ð�ô�ï�ö®õ�ì.ò.ëUõ�÷oô�ìRc�ì=îÏò.ó�ëeò�ø0í�� î*�®�p�ÀøÕ'MîUïgô�ëU÷nó´ö®õ�ö®ò.ö®ëeò=îUï�cU�ER��Penø�ò.ó�ô�ï.ôí+ö����*%\ô+ëeòÃ�gî�ì.òî�õ�ôQcU�·TQR���T-e¦í;öÀò.ó²í;ó�ö®÷nó9öÀò�ó�ëUì¥ó�ëUð¯ë)�·ëeò.÷nó�ö®õ�ü�÷oî�õP"Uô�ï�ì.ëeò.öÀî�õCø�ëUõ�ð¯ì=î�ëeò�·î�ì=ò î�õ�ôwö¤õ�ì=ò.ëUõ�÷oô#í;ö-����ò=ï�ú¯ò=î²÷oî�õ�õ�ô�÷oò ò=î¹cU�ER��Pe;enø\ëUõ�ð

c@%�e/%WúJÉÃ�®ëUö�� °Wø0ò.ó�ô�ï.ôÌ÷oî�ñ��¤ðÚõ�îUògó�ë#"UôR%\ô�ô�õbë½>�AC2�> D@B*2�>_0,B]F4A�.103242457698;:¬+Wñ�ô�ï.ú�î�õ cU�·TQR���T-enøì�ö®õ�÷oô!cU� T R�� T e¥ó�ëUì ó�ëUð¶ë��9ëeò.÷�ó�ö®õ�ü·÷oî�õN"Uô�ï�ì�ëeò.öÀî�õËí+öÀò.óÌëUõ¶ëU÷�÷oôY��ò.ë9%��®ô���ëeï.ò.õ�ô�ï#�

ú ��è�âÕy � ó�ôg÷�ñ�ï�ï.ô�õ%ò "eë,�®ñ�ô J ó�ëUì %\ô�ô�õÏì=ô�õ%ò«%WúÎì.î �gôgëU÷�÷oôY��ò.ë9%��Àô��-ëeï.ò.õ�ô�ï�cU�SR��Penø�ëUõ�ð R ëUõ�ðØaó�ë�"Uôd%)ô�ô�õËï.ô�÷oô�öf"Uô�ð¹%cúVcU�ER��PenøÊ%�ñ�ò ò.ó�ôº"eë,�®ñ�ô�î,'�avTCò.ó�ëeò+í�ëUì+ï.ô�÷oô�öf"Uô�ð8ó�ëUì�õ�îUò¸%\ô�ô�õÎì=ô�õ%ò�%cúcU�ER��Pe4�¿;ô�ßAô�÷oòY� � ó�ö®ì[ö¤ì[ö®õ�ð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ë9%��ÀôÃ'^ï.î ��ò.ó�ôwï.ô�ë,�4ì=úEì=ò=ô�� ì.ö¤õ�÷oô9a T ö®ì[ö®õP"ië,�®ö¤ð��

ú ��è�âI® »+ô�öÀò.ó�ô�ïaÉ¥ëUì.ô ¨ õ�îUïaÉ[ëUì=ôº°gó�î �®ð�ìY�VuîcîUù¬'MîUïÌë "ië,�¤ñ�ôËî,' ¦ ì.ñ�÷nó ò.ó�ëeòÌëUõ¸í µ cQ§¨RS©�R ¦ e/+cñ�ô�ï�ú´ó�ëUìÍ%)ô�ô�õ ëUì=ùUô�ð4ø+ëUõ�ð ëJ+cñ�ô�ï�úí ¾1= cQ§¨RS©�R J R R R#c TUWV ï UWX � Z[� \�]w] _ e * R ¦ e¥ó�ëUìg%)ô�ô�õÌëUì.ùUô�ðËëUõ�ðtï.ô�ò.ñ�ï�õ�ô�ðÐa T �¸c@Å � î*�®���-ò.ó�ô�ï.ô±í;ö��-�]%\ôëeò��·î�ì=ògî�õ�ô¶ì.ñ�÷nóJ"ië,�¤ñ�ôtî,' ¦ ø�ð�ñ�ô¯ò=î¹ò.ó�ôtï�ëUõ�ð�î �9õ�ô�ì.ì�î,'�í ¾1= �Äe S{'+õ�î�ì.ñ�÷�ó ¦ ö®ìd'^î�ñ�õ�ðCøò.ó�ô�õÎï�ô�ßAô�÷oòY� � ó�ö¤ì;ö®ì�ö®õ�ð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%��Àôa'^ï.î � ò.ó�ôàï.ô�ë,��ì=úEì=ò=ô��ÌøCì.ö¤õ�÷oôwí�� î*�®�p�-ò.ó�ô�avTuï�ô�÷oô�öf"Uô�ðí�î�ñ��®ðÂ%\ôgö®õ�÷oîUï.ï�ô�÷oò±ö¤õÎò.ó�ô�ï�ô�ë,�/ì=úWì.ò=ô�� c�öG� ô,�ÀøCò.ó�ô·÷oîUï.ï�ô�÷oò9avT�í�î�ñ��®ðÂ%\ô�ö¤õ�ð�ôY�\ô�õ�ð�ô�õcò;î,'�ò.ó�ôëUð�"Uô�ï�ì.ëeï.ú®�¾ìQ"EöÀô�íae4� c � ó�ôÌî�õ��ÀúÚí�ë�ú-a T ÷oî�ñ��®ðJ%\ôÌ÷oîUï.ï.ô�÷oò�ø�îUò.ó�ô�ï·ò.ó�ëUõ ò.ó�ï.î�ñ�ü�ó ëÏïnëUõ�ð�î �ü�ñ�ô�ì.ì�øCö®ì;ö�'¦öÀò+ö®ì+ò.ó�ôàï.ô�ì.ñ��Àò+î,'0ëUõ8ö��Q���®ö¤÷�öÀòMí ¾1= +Wñ�ô�ï.ú¶ö®õ8÷�ëUì=ô ¨ î,'\¼a°Z� �;îOíôY"Uô�ï�øuöÀò+ö¤ì ô�ëUì=úò=î²ì=ô�ô�ò.ó�ëeò;ö�'�ò.ó�ëeò;í�ëUì[ò.ó�ôw÷�ëUì=ôUø�í�ô�÷oî�ñ��®ð�õB� ò[üUô�ò;ò=î9÷�ëUì.ô)±�î,'�îg±Z�Äe© ò.ó�ô�ï.í;ö®ì.ôQc�ö�'�ì.ñ�÷�ó¶ë ¦ ö¤ìÃ'Mî�ñ�õ�ð]enø�÷�ó�ô�÷�ù¶öf'�ò.ó�ô�ï.ô#í¥ëUì;ë·ì.ñ�÷�÷oô�ì.ì;'�ñ��\ü�ñ�ô�ì.ì[î�õ� �§[RS©�¥ �

°,³

Page 26: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ú ��è�âI® � � ó�ô�ï.ô#í�ëUì+ë·ì.ñ�÷�÷oô�ì�ì;'^ñ��\ü�ñ�ô�ì.ì[î�õ8 �§¨RS©�¥ �7S{'�ò.ó�ëeò ü�ñ�ô�ì.ì[í¥ëUì;õ�îUò ¦ ø�ò.ó�ô�õÌï.ô�ß=ô�÷oòY�ú ��è�âI® � � ó�ô�ï.ô í¥ëUì�õ�îàì.ñ�÷�÷oô�ì.ì;'�ñ���ü�ñ�ô�ì.ìî�õ¼ �§¨RS©�¥ �ÕS{')ò.ó�ô�ï.ô+ë,�Àï�ô�ëUð�ú�í�ëUì�ëUõ9ñ�õ�ì.ñ�÷�÷oô�ì.ì;'�ñ��

ü�ñ�ô�ì.ìgî�õ÷ �§¨RS©�¥¹'^îUï ¦ ø0ò.ó�ô�õ´ï.ô�ßAô�÷oòY� © ò.ó�ô�ï.í;ö¤ì=ôUø7�\ô�ï�'^îUïH� ë >�A�2C>�D@B*2�>_0,B]F4AQ.103242457698;:î,�\ô�ï�ëeò.ö®î�õËí;ö®ò.óËëeï.ü�ñ��·ô�õ%ò.ì�cU� T R�� T e[ëUõ�ð ¦ �)cE»+îUò=ô�ò.ó�ëeò�ö¤õ¶ò.ó�ö®ì+÷�ëUì=ôRcU� T R�� T e[ó�ëUì�õ�îUò±ó�ëUðë¹�·ëeò.÷�ó�ö®õ�üË÷oî�õP"Uô�ï�ì.ëeò.öÀî�õÚí;öÀò.ó�ëUõ�ëU÷�÷oôY��ò.ë9%��®ô/��ëeï�ò.õ�ô�ï�� � ó�ö®ì#÷oî �Q���®ô�ò=ô�ìwò.ó�ô!��ï.îWî,'�î,'ÉÃ�®ëUö��Ï°Z�ÄedS{'�ò.ó�ô�ü�ñ�ô�ì.ì ö¤ì õ�îUò ì.ñ�÷�÷oô�ì�ì;'^ñ��qø�ò.ó�ô�õÌï.ô�ß=ô�÷oòY�Å�ô#÷�ëUõ¯ô�ëUì.ö��®ú�ì.ô�ô�%WúÍÉg�®ëUö-� ¨ c�ñ�ì.ö®õ�ü·ÿ�� ° �·ëUõ�ð��>� °��YenøEò.ó�ëeò�øEí�� î*�®���ÀøEò.ó�ö®ì7��ï.îE÷oô�ð�ñ�ï.ôí+ö�����õ�îUò7�9ëeùUô�ë�>�AC2�>�D@B*2�>_09B�F4A\.*032H2�57698�:�+Wñ�ô�ï.ú�î�õÂcU� T R�� T e/öf')î�õ�ô�ó�ëUì0ë,�Àï�ô�ëUð�ú)%\ô�ô�õ/�·ëUð�ô%\ôY'^îUï.ô,�

S{'�íôwó�ë�"Uô�õB� ò+ï.ô�ßAô�÷oò=ô�ðËúUô�ò�ø�ò.ó�ô�õc�ëNetì.ô�ò;ì=ò.ëeò.ñ�ì;ò=î!¼+÷�÷oôY��ò�øc@%�e¯ì.ô�ò{¡ �÷í Á cQ§[RS©�R J R R R#c TUlV ï UYX � Z[� \ ]^] _ e * R ¦ enø�ëUõ�ðc�÷#e¯ôoû1�\î�ì=ô²ñ�ì.ö®õ�ü¶ì=ô�ì�ì.öÀî�õ¹ùUô�ú ¡ c^ò.ó�ö®ìwö®ìwë,���Àî�í�ô�ðCø/ì.ö®õ�÷oô·ò.ó�ô�ï.ô·í¥ëUì�ëËì.ñ�÷�÷oô�ì�ì;'^ñ��/ü�ñ�ô�ì.ìàî�õ

ò.ó�ô���ëUì.ì=í�îUï�ð]e4�»+îUò=ô�ò.ó�ëeò;ò.ó�ôº"eë,�®ñ�ôwî,'>¡ ö¤ì;÷oî �Q��ñ�ò=ô�ðËò.ó�ï�î�ñ�ü�óËëUõÎôoûZ�]�®ö®÷�öÀò îUïnëU÷Y�Àô)+Wñ�ô�ï.ú,�ÃS�ò+ö®ì+÷Y�Àô�ëeï�ò.ó�ëeòò.ó�ô/"eë,�®ñ�ô¯î,'M¡ ��ï�îWð�ñ�÷oô�ð�ö®õÚò.ó�ö®ìà÷�ëUì=ôÌëeï.ô²ò.ó�ô¯ì.ë,�·ô¯ëUì�í�î�ñ��®ðL%)ô¯÷oî �Q��ñ�ò=ô�ð¬ö®õ�ò.ó�ô¯ï.ô�ë,�ì.úWì=ò=ô��$�

ãJÝ Ü %!â ì�ìy`;àRì.`���-�ëÊé½� àÅg8;6�6�Ë�6�Ë'½�@f09D@X7à�k�Å�ô�í;ö-����÷�ë,���CëUõtîUïnëU÷Y�Àô«+cñ�ô�ï�ú9î,'p'^îUïH�Óí´ý#cQ§[RS©�R J R R R S R ¦ enø�'^îUïdÿ9F� t° �6RH°���¥�øÆ��%�ëUð �öf' S � ý �dc R R TUWV ï UYX � Z[� \ ]^] _ e4�·Eñ����\î�ì=ôò.ó�ëeò¦í;öÀò.ó�ì=î �gô+õ�î�õ�õ�ô�ü �®ö®ü�öf%��Àô\��ï.î,%�ë9%�ö-�®öÀò§ú9�¦ò.ó�ô�ï.ô[í;ö-���N%\ô[ì=î �gô;ï.ô�ì;�\î�õ�ð�ô�ï/ö®õ�ì.ò.ëUõ�÷oô�c*)�·TQR�)��T ec^í;öÀò.ó¼©ó�Ï��´,+¢¶µ ëUõ�𼧠�iÅq��´,+¢�µ +¤Eµ e¥ì.ñ�÷nóÌò.ó�ëeò ò.ó�ôº'Mî ���®î�í;ö®õ�ü8��%-ëUðÌôY"Uô�õ%òS�9îW÷�÷�ñ�ï�ìYí

¨ �¸+Wñ�ô�ï.ú�î ¨ c )J e¥ö®ìÃ�9ëUð�ô�ò=î¹c-)�·TQR.)�ÄT�e[ëUõ�ðtï.ô�ò.ñ�ï�õ�ì )R ø�ëUõ�ð°Z�;ëeò«�Àô�ëUì.ò+ò�íî ��%�ëUð �Í+Wñ�ô�ï�öÀô�ì�ëeï.ô��·ëUð�ô�í;öÀò.óJcQ§[RS©�R )J R )R e;ëUõ�ð8ð�ö®ì=ò.ö®õ�÷oò^"ië,�¤ñ�ô�ì�î,' ¦ ø]%\ôY'^îUï.ô�ò.ó�ô�ï.ôö¤ì ëgì.ñ�÷�÷oô�ì.ì�'^ñ��4ü�ñ�ô�ì.ì[î�õ8 �§¨RS©�¥ �

Å�ôwí+ö����-ò.ó�ô�õ¶ì.ó�îOí?ó�îOíFò=î9÷oî�õ�ì.ò=ï�ñ�÷oò;ë·ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ïÆäË'^îUï ò.ó�ôwý±ý � ��ï.î,%��®ô��R�� ó�ôtö¤ð�ô�ë8î,'+ò.ó�ôÌð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ô�ï¨ä�ö®ì�ëUìQ'^î ���Àî�í+ìYí/Å�ô¶ì.ò.ëeï.ògí;öÀò.ó¬ëÏò=ï�öf�]�Àôªc$#ZR&%qR2� e�ëUìgö¤õ*��ñ�ò�øæ'^îUï

í;ó�ö¤÷�óÎíôgõ�ô�ô�ð8ò=îÌð�ô�ò=ô�ïH�·ö¤õ�ôwí;ó�ô�ò.ó�ô�ï±îUï±õ�îUò �É�Ñý ��c$#ÇR&%!e4� Å�ôgí;ö����4ï�ñ�õÎò.ó�ôgëUð*"Uô�ï�ì.ëeï.úÎëeü�ëUö®õ�ì=ò#ë24D@X�=2@¶0,>EDG69B8î,'4ò.ó�ô±îUï�öÀü�ö¤õ�ë,�-êʼa`Ñì.ö���ñ��®ëeò=îUï���SAõ²ò.ó�ô±ì�ö��àñ��®ëeò.öÀî�õCøcíô±í;ö��-��ñ�ì=ô�# ëUõ�ðÙ% ö®õÍ���¤ëU÷oô+î,'�ì=î �gôï�ëUõ�ð�î �À"eë,�®ñ�ô�ì��aS{'qä�ïnñ�õ�ì�ö®õ�ð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ë9%��Àú�'^ï.î �Bò.ó�ô�ì.ö���ñ��®ëeò=îUï#ñ*�8ò=îtò.ó�ô�%�ëUð8ôY"Uô�õ%ò�ø4ò.ó�ô�õÎí�ô�í;ö����%\ô�ë9%��Àô#ò=î9ñ�ì=ô#ò.ó�ô��ÀîUü�ì;ò=î9ð�ô�ò=ô�ïH�·ö¤õ�ô±í;ó�ô�ò.ó�ô�ï îUï+õ�îUò��÷� ý �dc$#ZR&%!e4�

[ÎîUï.ô+ì��)ô�÷�öfÓ-÷�ë,���ÀúUø�í�ô;í+ö����+�=ö®õ�÷oîUïH�)îUïnëeò=ô��x#�ö®õcò=îàó�ë,�f')î,'Cò.ó�ô�í µ ï.ô�ì;�\î�õ�ì=ô�ìac^ï�ëUõ�ð�î �!�Àú*enøcëUõ�ð´% ö®õcò=îî ¨ ï.ô�ì;�\î�õ�ì.ô�ì�c�öG� ô,�Àø�ò.ó�ô R "eë,�®ñ�ô�ì�e4�7¼Ù%-ëUð$+cñ�ô�ï.ú²í+ö����-ò.ó�ô�õ¶ó�ë#"Uôwò=î9÷oî�õcò.ëUö®õ

S � ý �Qc R R JcQí µ cQ§¨RS©�R ¦ e;e K e>��ýa�Qc±%9�&/�R J

# = « \�¬ K � ô eIRí;ó�ô�ï�ô0�9i ¦ l�F� #k2R ¨ ¥�ø�1àëUõ�ð�ë�ëeï.ô;ïnëUõ�ð�î � "eë,�®ñ�ô�ì¦ùWõ�îOí;õ·ò=î�ñ�ì�øWëUõ�ð J ÷oî �·ô�ì7'^ï.î � ò.ó�ô;ëUð*"Uô�ï�ì.ëeï�ú,� © õ�ô%�ëUð(+Wñ�ô�ï.ú8ð�îWô�ì�õ�îUò#ü�öf"Uô9ñ�ì#ö®õ*'^îUïH�·ëeò.öÀî�õ�ë9%\î�ñ�ò#ý �Qc$#ÇR&%�enø�ì.ö¤õ�÷oôgíô·ð�î�õB� ò#ùWõ�î�í J ���+î�í�ôY"Uô�ï�ø�ò§í�î%�ëUðÍ+cñ�ô�ï�öÀô�ìí;öÀò.ó9ð�ö¶h)ô�ï�ô�õ%òW"ië,�¤ñ�ô�ì0î,'2�3i ¦ l\í;ö��-��ü�öf"Uô#ñ�ìô�õ�î�ñ�ü�ó¯ö®õ*'^îUïH�·ëeò.öÀî�õ���S{'��9i ¦ l\ö®ìï�ëUõ�ð�î ���Àúg÷�ó�î�ì.ô�õ'^îUï�ô�ëU÷nó ¦ ø4ëUõ�ð8ò.ó�ôgëUð*"Uô�ï�ì�ëeï.úÎëUì=ùEì�ò§í�îR%�ëUðª+cñ�ô�ï�öÀô�ìa'MîUï#ð�öfh)ô�ï.ô�õcò±÷�ó�î�ö®÷oô�ì�î,'¦ò.ó�ô���ëUì.ì=í�îUï�ðCø\ò.ó�ô�õ8í�ôí;ö��-��üUô�òàö®õ*'^îUïH�·ëeò.öÀî�õÏë9%\î�ñ�ò�ý �Qc$#ÇR&%�e4� � ó�ôQ�·ëUö¤õ�ð�ö�þ²÷�ñ��®ò§úÎö¤õÏò.ó�ô·÷oî�õ�ì=ò=ï�ñ�÷oò.öÀî�õ¹ö®ì#ó�îOí ò=î$�\ô�ï�'^îUïH�ò.ó�ô·ì.ö-�àñ��¤ëeò.öÀî�õ8í;öÀò.ó�î�ñ�ò�ùEõ�î�í;ö¤õ�ütò.ó�ô·ð�ö®ì.÷oï�ô�ò=ô��®îUü�ëeï�öÀò.ó��·ì±î,'Âí µ ëUõ�ð R "eë,�®ñ�ô�ìY����îUï�ò.ó�ëeò#ï�ô�ëUì=î�õCø4í�ô

°,´

Page 27: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

í¥ëUõ%ò+ò=î!�·ö®õ�ö-�·ö"!�ô±ò.ó�ôwõWñ��)%)ô�ï;î,'��]�®ëU÷oô�ì í;ó�ô�ï.ô #HëUõ�ð�% üUô�ò+ñ�ì.ô�ðCø�ëUõ�ðËì.î·íôàõ�ô�ô�ð¶ò=îÍ�·ëeùUôàëgü�ñ�ô�ì.ìëUì ò=î9í;ó�ô�ï.ô#ò.ó�ôa��%-ëUðÌôY"Uô�õ%òS�²í;ö��-��îE÷�÷�ñ�ï��

»+î�í �Àô�ò;ñ�ì¥ü�öf"Uôwò.ó�ôwð�ô�ò.ëUö��¤ìY� © ñ�ï ð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ô�ïÆäÀ'^îUï;ö®õ*��ñ�ò«c$#ZR&%qR2� e�ïnñ�õ�ì[ëUì^'^î ���ÀîOí;ìYí¨ ��X±ô�õ�ô�ï�ëeò=ôwïnëUõ�ð�î �43!%)ô�ò�íô�ô�õ ¨ ëUõ�ðÙç)�°Z�^SAõ�öÀò.ö¤ë,�®ö"!�ô±ò§í�î!�®ö®ì.ò.ìÃîW¼�ý §#ëUõ�ð$îg¼�ý µ c�ö®õ�öÀò.ö®ë,�-�Àú·ô��Q��ò�ú*e4�±Z�^Å�ô¯í;ö��-��%)ô9ï�ñ�õ�õ�ö¤õ�ütò.ó�ô9ì.ö���ñ��®ëeò=îUï�ö®õ�ò.ó�ô¯õ�îUïH�·ë,�7�·ëUõ�õ�ô�ï�ø�%�ñ�ò«�]�®ë�úEö®õ�ü¶ò.ó�ô9ï�ö®õ�ü$�·ëUì=ò=ô�ï�ë,�®ì=î*�

c � ó�ëeò0ö®ì�øUí�ô í;ö-���c÷nó�îWî�ì=ô^��ëUì.ì.íîUï�ð�ì�'MîUï0ñ�ì=ô�ïÕ��ëUöÀïnì�ø�ëUõ�ðgëUõ�ì=í�ô�ï0ëUõcúàò=ô�ì.òÕ��ëUì.ì=í�îUï�ð�+Wñ�ô�ï�ö®ô�ìY�Äe�¿+ñ�õò.ó�ô�ì.ö-�àñ��¤ëeò.öÀî�õ¶ñ�õcò.ö��Cò.ó�ô�3�ò.ó¹��ëUöÀï+î,'0ñ�ì=ô�ï�ìdcQ§[RS©�e;ö®ì¸�·ô�õ%ò.öÀî�õ�ô�ð��ºc � ó�ö®ì��·ë�úR%\ô)'Mï.î � ëUõËîUïnëU÷Y�Àô+Wñ�ô�ï.ú�í µ cQ§[RS©�R$�Äenø�îUï«'Mï.î ��ëUõJD@B�DE>EDE0�@ÄDK¾#A!=Z2YAY8dD@B*2C>_09B]F4A/+Wñ�ô�ï.úÎí;öÀò.óÏñ�ì=ô�ï SAý §ÕëUõ�ðª��ëeï.ò.õ�ô�ï«S�ý©¯ø�îUï^"Eö®÷oôoÿ_"Uô�ï�ì�ë1�ÄedSU'�í�ô#ü�ñ�ô�ì.ì=ô�ð53²÷oîUï.ï.ô�÷oò��ÀúUø�ò.ó�ö®ìg��ëUöÀï¥í;ö��-��%\ô#ò.ó�ô#ö®ð�ô�õcò.öÀò.öÀô�ì¥î,'�ò.ó�ô#ñ�ì=ô�ïnì[ö®õtò.ó�ô��%-ëUðÌôY"Uô�õ%òY���

j*� © õ�÷oô[§ ëUõ�ða© ëeï.ô�ì=ô�ò�ø)÷oî�õ%ò.ö®õWñ�ô�ëUì+ö®õtò.ó�ô#îUï�öÀü�ö¤õ�ë,�Cì.ö���ñ��®ëeò=îUï�ø�ôoû�÷oôY��òYíc�ëNe�î ¨ c J e7+cñ�ô�ï.úàò=î�ö®õ�ì=ò.ëUõ�÷oô)cU�·TQR���T e�í+öÀò.ó���´ ¢ µ �÷© ëUõ�ð¿Åq��´ ¢ µ ¤ µ �÷§ºí�üUô�õ�ô�ïnëeò=ô61 ¢ µ ¤ µ FHG"� ! ëUõ�ða ¢ µ ¤ µ FHG  #k2R ¨ ¥�@�ø�ì=ô�ò R �¡%x� /"7 µ 8�µ ø�ëUõ�ð¶ï.ô�ì;�\î�õ�ð¯í;öÀò.ó(c R Rba ¢ µ ¤ µ e4�c@%�e�í µ cQ§¨RS©�R ¦ e4íæSU' ¦ � ¦ � ø%ò.ó�ô�õgì=ô�ò��9i ¦ lÀ�9�9i ¦ � l®� k1� © ò.ó�ô�ï.í;ö®ì=ôUø �®ô�ò:�3i ¦ lHFHG8 #k2R ¨ ¥ �7¿;ô�ì;�\î�õ�ð

í+öÀò.ó(c$#"= « \ä¬ ��ì ! � ôÏ« X � Z[� \ä¬ �·îWð��Êei�-íâ�uø�'^îUïdëgi §[RS©�R ¦ lHF G � ! øåì�F G � �� ø�ëUõ�ð�íØF G ��î ¾ ï ð ��ò �c�÷#e�¼ °*c R Rba�e¸+cñ�ô�ï�ú¯ò=î¯ö®õ�öÀò.ö¤ëeò=îUï;ö®õ�ì=ò.ëUõ�÷oô/cU�SR��Penø\í;ó�ô�ï.ô0��´{¢��ϧÑëUõ�ð8Åq��´{¢�¤��i©Íí\î�ô�ó�ë#"Uô�ëUì+ö®õ

ò.ó�ô�îUï�öÀü�ö®õ�ë,�)ì�ö��àñ��®ëeò=îUï�ø�ôoû�÷oôY��ò;öf'�íô#üUô�ò�ö®õcò=î·÷�ëUì=ôd°Wø�ò.ó�ô�õ$�ÀîWîUù/'^îUï¸+Wñ�ô�ï.úí ¾1< cQ§¨RS©�R J R R R R %�'oK ôÏ« X � Z[� \ m ¬ R ¦ � eIR

ö_� ô,�Àø�öÀü�õ�îUï.ô�ëUõcú ¦ O� ¦ � �»+îUò=ô9ò.ó�ëeò�íôgùEõ�îOí ¦ � ø�ëUõ�ðÏò.ó�ëeò/cQí µ cQ§[RS©�R ¦ � e;e K �¥� Kñù ôÏ« X � Z[� \ m ¬qøuì.ö®õ�÷oô��3i ¦ � lq� k1� � óWñ�ì�øò.ó�ô�îUï�öÀü�ö®õ�ë,�4ì.ö���ñ��®ëeò=îUï í+ö����)íîUï�ùt÷oîUï�ï.ô�÷oò��ÀúÌö®õÌò.ó�ö¤ì ÷�ëUì=ô,�gS�ò+ö®ì ì.ë9'^ô�ò=î²ö®ü�õ�îUï.ô#îUï�ëU÷Y�Àôd+cñ�ô�ï�öÀô�ìí+öÀò.ó ¦ O� ¦ � øEì.ö®õ�÷oô;ò.ó�î�ì=ô;í�î�ñ��®ð�õB� òÕ�Àô�ëUð·ò=î�ëUõ²ëU÷�÷oôY��ò c�ëUìò.ó�ô)>�AC2�>�D@B*2�>_09B�F4A\.*032H2�57698�:$+cñ�ô�ï�úí�î�ñ��®ð�'�ëUö�� e4�

c�ð]eÍîñ*cóavT ep+cñ�ô�ï.ú�ò=î±ï.ô�ì;�\î�õ�ð�ô�ï�ö®õ�ì=ò.ëUõ�÷oô cU�·TQR��ÄT�enøUí+ó�ô�ï.ôMÅq��´ ¢�µ ¤Sµ �¸§ØëUõ�ðo��´ ¢¶µ �÷©Íí�S{'�ò.ó�ô�ï.ô¥ö®ì�õ�î�9ëeò.÷�ó�ö®õ�üw÷oî�õN"Uô�ïnì.ëeò.öÀî�õ²í;öÀò.ó·ëUõ²ëU÷�÷oôY��ò.ë9%��Àô���ëeï.ò.õ�ô�ï�ø%ò.ó�ô�õ·ï.ô�ì��)î�õ�ð�í;öÀò.ógï.ô�ß=ô�÷oòY� © ò.ó�ô�ï�í;ö®ì=ôUø%\ô�ó�ë#"UôwëUì;ö¤õtò.ó�ô�îUï�öÀü�ö¤õ�ë,�\ì.ö���ñ��®ëeò=îUï��S{'\ò.ó�ô���%�ëUð9ôY"Uô�õ%òS��ö®ìë9%)î�ñ�ò¦ò=î�îE÷�÷�ñ�ïëUõ�ð;3àó�ëUìÕ%\ô�ô�õ·ü�ñ�ô�ì�ì=ô�ð9÷oîUï.ï�ô�÷oò��ÀúUøcò.ó�ô�õ·ò.ó�ö®ì¦ï.ô�ì;�\î�õ�ì=ôö¤ì�ë9����ï.î,��ï�ö®ëeò=ô,í SU'�ò.ó�ô�ï.ôgí¥ëUìwõ�î$�·ëeò.÷�ó�ö¤õ�ü¶÷oî�õN"Uô�ïnì.ëeò.öÀî�õÚí;öÀò.ó�ëUõ¹ëU÷�÷oôY��ò.ë9%]�Àô���ëeï.ò.õ�ô�ïwëUõ�ðò.ó�ö®ìæ+cñ�ô�ï.úàí¥ëUì0ì�ñ*���\î�ì=ô�ð�ò=î�ï.ô�ì.ñ��Àò/ö®õgëUõ·ëU÷�÷oôY��ò�øWò.ó�ô�õgò.ó�ô�ï�ô íî�ñ��®ð�%\ô¥ëwì.ñ�÷�÷oô�ì.ì;'�ñ��Eü�ñ�ô�ì�ì/î�õ �§¨RS©�¥�%\ôY'MîUï.ô�ò.ó�ôgì=ô�÷oî�õ�ð ��%�ëUð �¯îUï�ëU÷Y�Àô�+Wñ�ô�ï.úUø4ëUõ�ð8ò.ó�ëeò#í�î�ñ��®ð8÷oî�õcò=ï�ëUð�ö®÷oò#ò.ó�ôgð�ôCÓ)õ�öÀò.öÀî�õî,'\ò.ó�ô���%�ëUð·ôY"Uô�õcòY��� © õgò.ó�ô;îUò.ó�ô�ï�ó�ëUõ�ðCø%ö�'-ò.ó�ô���%�ëUðgôY"Uô�õcòS�àó�ëUìë,�Àï.ô�ëUð�ú�îE÷�÷�ñ�ï.ï.ô�ðCøcò.ó�ô�õgí�ôð�î�õB� ò�÷�ëeï�ô�í+ó�ô�ò.ó�ô�ï�îUï¥õ�îUò�ò.ó�ô+ï.ô�ì��)î�õ�ì=ô;í¥ëUì¥÷oîUï.ï.ô�÷oòºc�ëUì�í;ö�����%)ô±ì=ô�ô�õÍ%\ô��Àî�íwøWöÀò�ö®ì�ì.ñEþ²÷�öÀô�õcò'^îUï¥ñ�ì¦ò=î�ó�ë�"Uô�ò.ó�ô���%-ëUð·ôY"Uô�õcòS��ëeò�ëUõ%úQ�\î�ö®õcò0ö®õ·î�ñ�ï0ôoûEô�÷�ñ�ò.öÀî�õCøEëUõ�ð9íô�ð�î�õB� òõ�ô�ô�ð9ò=îàùWõ�îOíò.ó�ô��\î�ö®õ%ò[ëeò í+ó�ö®÷�óÌö®ò ëU÷oò.ñ�ë,���Àú¯îW÷�÷�ñ�ï.ï.ô�ð]e4�

c^ôteTcQ§¨RS©�R J R R R S R ¦ e^+Wñ�ô�ï.ú¯ò=î�í ¾1< îUï{í ¾1= íS{'6í µ cQ§¨RS©�R ¦ e�í�ëUì�+Wñ�ô�ï�öÀô�ð�ëUõ�ð�ò.ó�ô�ï.ô¥ö®ì�ëUõ�ö®õ�ì=ò.ëUõ�÷oô«cU�·TQR���T-euí;öÀò.ó0©f�Ï��´ ¢�µ ò.ó�ëeò�í¥ëUì�+cñ�ô�ï�öÀô�ðí+öÀò.óRî ¨ c J e[ëUõ�ðtï.ô�ò.ñ�ï�õ�ô�ð R �¡%9� / 7 µ<8·µ ø�ò.ó�ô�õ¶ð�îgò.ó�ô«'^î ���ÀîOí;ö®õ�ü$c�ëUõ�ð¶îUò.ó�ô�ï.í;ö®ì.ôUø�ëUõ�ì=í�ô�ï ò.ó�ô+Wñ�ô�ï.útëUì;ö¤õtò.ó�ô#îUï�öÀü�ö®õ�ë,�Cì.ö���ñ��®ëeò=îUï�e4í��öÀïnì=ò õ�îUò=ô�ò.ó�ëeò+öf'uò.ó�ö¤ì ö®ì[ëQ%�ëUð&+cñ�ô�ï�úUø�ò.ó�ô�õ

S �÷ä�íJc R R JcQí µ cQ§¨RS©�R ¦ e;e K eq�÷ä�íJc±%9� / 7 µ 8�µ R J

# = « \�¬ K � Kñù ôÏ« X � Z�� \�¬ eI�

° ²

Page 28: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

»+î�í ÷oî �Q��ñ�ò=ô

= � S J ' / 7 µ 8�µ # = « \ä¬ K / 7 µ 8�µ � = « \�¬ K % K ôÏ« X � Z[� \�¬ � Kñù ôÏ« X � Z[� \�¬ / 7 µ 8·µ �êñ�ò = î�õÌò.ó�ôº�®ö¤ì=òÃîW¼�ý = « \ä¬ � � ó�ô�õtï.ô�ì;�\î�õ�ðtí;ö®ò.óÌëgï�ëUõ�ð�î �,a��S{'uò.ó�ô«%�ëUðtôY"Uô�õ%ò+ö®ì[ë9%\î�ñ�ò[ò=îgîW÷�÷�ñ�ï�ø�ò.ó�ô�õtò.ó�ö®ì¥ï�ô�ì;�\î�õ�ì=ô�í;ö����]%\ô±ö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��ÀôÃ'^ï.î � ò.ó�ôîUïnöÀü�ö®õ�ë,�Cì.ö-�àñ��¤ëeò=îUï�ø�ì.ö®õ�÷oô�õ�î·ì�ñ�÷�÷oô�ì.ì;'�ñ��\ü�ñ�ô�ì.ì;î�õ8 �§¨RS©�¥�÷�ëUõ¶îE÷�÷�ñ�ï^%\ôY'MîUï�ô#ò.ó�ô�%�ëUðÌôY"Uô�õcòY�

¼¥ò�ò.ó�ô9ô�õ�ð�î,'[ò.ó�ô²ì�ö��àñ��®ëeò.öÀî�õCø�÷�ó�ô�÷�ù�í;ó�ô�ò.ó�ô�ïwò.ó�ôÍ�®ö®ì=ò.ì�îg¼�ý §9ëUõ�ðLîg¼+ý µ ö¤õ%ò=ô�ï�ì.ô�÷oò�c�õ�îUò=ô¯ò.ó�ëeòàò.ó�ö®ì÷�ó�ô�÷.ù¬÷�ëUõJ%)ôtð�î�õ�ôtö®õÚò.ö��gô?>�c^ç¹�®îUü�ç enøÕ%Wú�ì=îUï�ò.ö®õ�ü8ò.ó�ôR�®ö®ì=ò.ìàò=îUüUô�ò.ó�ô�ï�e4�(S{' úUô�ì�øò.ó�ô�õbî�ñ�ò;��ñ�ò8� � ï�ñ�ôý �wø��9îUò.ó�ô�ï.í;ö¤ì=ô±î�ñ�ò;��ñ�ò£�;¿+ëUõ�ð�î �R���

»+îUò=ôÌò.ó�ëeò�ò.ó�ô/"eë,�®ñ�ô�ì�ì=ò=îUï�ô�ðbö¤õLîg¼�ý §9ëUõ�ðJîg¼+ý µ ëeï.ôtì.ö��Q���®ú8ü�ñ�ô�ì.ì=ô�ì�î,'�ä�í c J R&%Qenø¦ëUì.ì.ñ��·ö®õ�ü�÷�÷ä�í c$#ZR&%Qe4�æS{'��Fö®ì¥ï�ëUõ�ð�î �Ìøcò.ó�ô�õtò.ó�ô ��ï.î,%�ë9%�ö-�®öÀò§úgî,'�ëUõÌö®õcò=ô�ï�ì=ô�÷oò.öÀî�õ�%\ô�ò§í�ô�ô�õÌò.ó�ô«�®ö¤ì=ò.ì�íî�ñ��¤ð/%\ôëeò^�gî�ì=òµça¾ �d%Wú9ò.ó�ô#ñ�õ�öÀî�õÍ%)î�ñ�õ�ðCøEì.ö®õ�÷oôx�dK;í�î�ñ��®ðÍ%\ô±ë�ïnëUõ�ð�î � ô��Àô��gô�õcò[î,'�� � � ! c�õ�îUò=ô�ò.ó�ëeò �àëUõ�ð4�ëeï.ô�ï�ô��®ëeò.öf"Uô��Àú/��ï�ö��gôUø�ëUõ�ð J O� k��gîEð��&%\ô�÷�ëUñ�ì=ô#î,'�ò.ó�ô#ò=ô�ì.ò^%cú¼©�e4�

© õËò.ó�ô�îUò.ó�ô�ï±ó�ëUõ�ð4ø�ì.ñ*���\î�ì=ô�� � ý �dc$#ZR&%�e4�WS{'�ò.ó�ôàëUð�"Uô�ï�ì.ëeï.ú$�·ëeùUô�ì+ò§í�î���%�ëUð ��+Wñ�ô�ï�öÀô�ì¸'MîUï+ò.ó�ô��ëUöÀï#î,'[ñ�ì.ô�ï�ì!cQ§¨RS©Qenø�'^îUï���ëUì.ì=í�îUï�ð�ì ¦ µ R ¦ ¾ í;ö®ò.ó@�9i ¦ µ l O�A�3i ¦ ¾ l«ø�ò.ó�ô�õ¹ò.ó�ô9ð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ô�ï+í+ö�����÷oîUï.ï.ô�÷oò��ÀúëUõ�ì=í�ô�ï¼� � ïnñ�ô�ý ���Tc�ì.ö®õ�÷oô�ô�ëU÷�ó ��%�ëUð6�Í+Wñ�ô�ï.úÌí+ö����4ï�ô�ì.ñ��Àò�ö®õ = � ý ��c J R&%Qe;e4� � ó�ôd��ï.î,%-ë9%�ö��®öÀò�ú²î,'ò.ó�ô��%�ëUðËôY"Uô�õ%òS�tö®ìd��� � ó�ô���ï�î,%�ë9%�ö��®ö®ò§ú9î,'�ü�ñ�ô�ì�ì.ö®õ�ü�3¯÷oîUï.ï.ô�÷oò��®ú¶ö®ì µB � � ó�ôº��ï.î,%�ë9%�ö-�®öÀò§ú²î,':�9i ¦ µ l O�C�9i ¦ ¾ lp'^îUï¦ µ O� ¦ ¾ ö®ì µ¾ �Õ¼a���\î,'�ò.ó�ô�ì=ô�ôY"Uô�õcò.ì;ëeï�ôwö®õ�ð�ôY�\ô�õ�ð�ô�õ%òY�»+î�í�ø�ò.ó�ô���ï.î,%-ë9%�ö��®öÀò�ú·ò.ó�ëeò ò.ó�ô�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ïÂä ü�ñ�ô�ì.ì=ô�ì+÷oîUï.ï.ô�÷oò��ÀúÌö®ì[ëeò¸�®ô�ëUì=ò

ê0ïtcQäBö®ì[÷oîUï.ï.ô�÷oòYe � ê¦ï#cQäBü�ñ�ô�ì�ì=ô�ì£�=ý � � ïnñ�ô��ED ý � ö¤õ�ì=ò.ëUõ�÷oôteWê0ïtc�ý � ö¤õ�ì=ò.ëUõ�÷oôte�Ïê0ï#cQä ü�ñ�ô�ì.ì=ô�ì£�;¿+ëUõ�ð�î �£�FD ¿+ëUõ�ð�î � ö¤õ�ì=ò.ëUõ�÷oôteWê0ïtcE¿;ëUõ�ð�î � ö®õ�ì=ò.ëUõ�÷oôte

D G �°äç;HJI ¨°LK � I ¨ è ç�¾

�MKCI ¨°LK �

� óWñ�ì ò.ó�ô)��ï�î,%�ë9%�ö��®ö®ò§ú¯ò.ó�ëeò�ä�ö®ì;÷oîUï.ï�ô�÷oò±ö¤ì+ëeò �Àô�ëUì=ò µ¾ � N: B è B ø¾ ! ø-í+ó�ö®÷�óÎö®ì�õ�î�õEÿ§õ�ô�ü �®ö®ü�öf%��ÀúÍ�gîUï.ô�ò.ó�ëUõµ¾ �Åg8;6�6�Ë�6�Ë'½�@f09D@XÃÅ)k�S{'¦ì.ñ�÷�óÏëÍ+cñ�ô�ï.ú¶ö®ì;ö¤õ�ð�ô�ô�ðÂ�·ëUð�ôwí+öÀò.óÎì.î �gô�õ�î�õEÿ§õ�ô�ü �®öÀü�ö�%��Àô«��ï.î,%-ë9%�ö��®öÀò�úÙ��ø-ò.ó�ô�õËí�ôí;ö��-�)÷oî�õ�ì=ò=ï�ñ�÷oò ë·ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ïÂäË'^îUï;ý±ý �º�®V4ô�ò)c$#ZR&%qR2� eW%\ô#ò.ó�ô�÷nó�ë,���Àô�õ�üUôwý±ýa�Ñö®õ�ì=ò.ëUõ�÷oô,�

� ó�ô·ö®ð�ô�ëtî,'�ò.ó�ô·÷oî�õ�ì=ò=ï�ñ�÷oò.öÀî�õ¹ö®ì#ì.ö-�·ö��®ëeï±ò=î¶ò.ó�ôgî�õ�ô·ö®õÏò.ó�ô���ï�ôY"WöÀî�ñ�ì���ï.îcî,'{� � ó�ôQ�·ëUö¤õ�ð�ö¶h\ô�ï.ô�õ�÷oôö®ì�ò.ó�ëeò#õ�îOí íô��=ö®õ�÷oîUïH�)îUïnëeò=ô��'#�ëUõ�ðI% ö®õcò=îtò.ó�ô J ëUõ�ð R "ië,�¤ñ�ô�ì�øCï.ô�ì;�\ô�÷oò.öf"Uô��®úUø\ì.ô�õ%ò#ö®õÏë��·ëeò.÷�ó�ö®õ�ü÷oî�õP"Uô�ï�ì.ëeò.öÀî�õ��

� ó�ô�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ï�ï�ñ�õ�ì�ëUì¸'Mî �-�Àî�í;ì�í¨ ��X±ô�õ�ô�ï�ëeò=ôwïnëUõ�ð�î �43!%)ô�ò�íô�ô�õ ¨ ëUõ�ðÙçàø�ëUõ�ðÌï�ëUõ�ð�î �4��F� #k2R ¨ ¥ �°Z�^Å�ô¯í;ö��-��%)ô9ï�ñ�õ�õ�ö¤õ�ütò.ó�ô9ì.ö���ñ��®ëeò=îUï�ö®õ�ò.ó�ô¯õ�îUïH�·ë,�7�·ëUõ�õ�ô�ï�ø�%�ñ�ò«�]�®ë�úEö®õ�ü¶ò.ó�ô9ï�ö®õ�ü$�·ëUì=ò=ô�ï�ë,�®ì=î*�

c � ó�ëeò0ö®ì�øUí�ô í;ö-���c÷nó�îWî�ì=ô^��ëUì.ì.íîUï�ð�ì�'MîUï0ñ�ì=ô�ïÕ��ëUöÀïnì�ø�ëUõ�ðgëUõ�ì=í�ô�ï0ëUõcúàò=ô�ì.òÕ��ëUì.ì=í�îUï�ð�+Wñ�ô�ï�ö®ô�ìY�Äe�¿+ñ�õò.ó�ô·ì.ö���ñ��®ëeò=îUï�ñ�õcò.ö���ò.ó�ô$3�ò.óV¼�kR+Wñ�ô�ï.ú,�!·Eë�úÎò.ó�ö¤ì«+cñ�ô�ï�úÎö®ì±ò=îVcU�SR��Ze4��V4ô�ò<§ � ��´M¢�ø.©Ü� Åq��´M¢�¤UøëUõ�ð ¦ � � ¦ i §¨RS©ºl_�\¿ ôY���Àú²ò=î9ò.ó�ö¤ìü�k�+Wñ�ô�ï.ú¯í;öÀò.ó J �¡#V�

±Z�aÉ¥î�õ%ò.ö®õWñ�ô#í;ö®ò.ótò.ó�ôwì.ö���ñ��®ëeò.ö®î�õCøP%-ñ�ò[í;öÀò.ótò.ó�ôº'Mî ���®î�í;ö®õ�ü�÷nó�ëUõ�üUô�ìYíc�ëNe�î ¨ c J e^+cñ�ô�ï�ú²ò=î9ö¤õ�ì=ò.ëUõ�÷oô!cU�·TQR��ÄT�e¥í;ó�ô�ï.ô J ��#Úø®��´ ¢�µ �÷©¯ø�ëUõ�ðZÅd��´ ¢¶µ�¤Sµ � §ºí

X±ô�õ�ô�ï�ëeò=ô�ë·ï�ëUõ�ð�î �41 ¢¶µ�¤Sµ FÕ� ! ø)ëUõ�ð¶ì=ô�ò R ��%9� / 7 µ<8·µ �^É¥î �Q��ñ�ò=ô�a��¿a ¢�µ�¤Eµ ëUì;ö¤õÌò.ó�ôwîUïnöÀü�ö®õ�ë,�ì�ö��àñ��®ëeò=îUï;ëUõ�ðtï.ô�ò.ñ�ï�õVc R Rba�e4�

°,­

Page 29: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

c@%�eͼ�õcú í ¾1< ø�í ¾1= îUï¿í Á +Wñ�ô�ï.ú cQ§¨RS©�R1#ÇR R R S R ¦ e¯í;ó�ô�ï.ô R ��%9�&/ 7 µ 8 µ '^îUïÌì=î �gô cU� T R�� T e²ëUõ�ðS �É�d# / 7 µ 8�µ R K ôÏ« X � Z[� \�¬ íW·Wò=î,�Ëò.ó�ôwð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ô�ïëUõ�ð¶ü�ñ�ô�ì.ì£� � ï�ñ�ôwý �)���

c�÷#e�¼ °*c R Rba�eg+Wñ�ô�ï.ú·ò=î$cU�SR��Ze¥õ�îUòg��ëeï.ò¥î,'�ëd�9ëeò.÷�ó�ö®õ�ü�÷oî�õP"Uô�ï�ì.ëeò.ö®î�õtí;öÀò.ótëUõtëU÷�÷oôY��ò.ë9%��Àô«��ëeï�ò.õ�ô�ï�íÉ[ó�ô�÷.ùgò.ó�ëeò�ëUõ�í µ cQ§¨RS©�R ¦ � e�+Wñ�ô�ï.úgó�ëUìÕ%\ô�ô�õ²ëUì=ùUô�ð²ëUõ�ð9ëº+Wñ�ô�ï.úoí ¾1< cQ§[RS©�R J R R R S R ¦ � e¦ó�ëUì%\ô�ô�õbëUì=ùUô�ð¬ëUõ�ðÚï.ô�ò.ñ�ï�õ�ô�ðÍaÎc^íº� î*�®���Àø/ò.ó�ô�ï.ô²í;ö����æ%\ô¯ëeòd�gî�ì.òàî�õ�ô¯ì.ñ�÷nó~í ¾1< +Wñ�ô�ï.úUø�%Wú¹ò.ó�ôïnëUõ�ð�î �·õ�ô�ì�ì¥î,'�í ¾1< ï.ô�ì;�\î�õ�ì.ô�ì4e4�æSU'�õ�îUò�ø�ò.ó�ô�õÌï.ô�ß=ô�÷oòY�© ò.ó�ô�ï.í;ö®ì.ôUø�öf'2�O� kEø�ï�ô�ßAô�÷oò�ø)ëUõ�ðÌöf'O�Â� ¨ øöG��·Eô�ò?avT¢�¤ � í ¾1= cQ§[RS©�R J R R R S R ¦ � e4�ö®ö_�^·Eô�õ�ð�a T ��a T¢�¤ �ö®ö¤öG�W¼�÷�÷oôY��òY�öf"]��·Eô�ò{¡£¢�¤�� í Á cQ§[RS©�R J R R R S R ¦ � e4�"]�M�¦ûZ�\î�ì=ô�ñ�ì.ö®õ�üo¡ �÷¡£¢�¤ �

c�ð]eÍîñ*cóa T e¸+cñ�ô�ï.útò=î¯ö®õ�ì=ò.ëUõ�÷oôÍcU� T R�� T e¥í;ó�ô�ï.ô J �¿#�ø)í;ó�ö®÷nóËö®ì�õ�îUò���ëeï.ò�î,'¦ë/�·ëeò.÷nó�ö®õ�ü¯÷oî�õN"Uô�ï.ÿì�ëeò.öÀî�õ�í¿;ô�ßAô�÷oòY�gS{'�ò.ó�ôwì.ö���ñ��®ëeò=îUï;ì�ó�î�ñ��®ðÌó�ë#"UôàëU÷�÷oôY��ò=ô�ð4ø�ò.ó�ôwëUð�"Uô�ï�ì.ëeï.útí�� î*�®���-íî�ñ��®ðÌó�ë�"Uô�ë,�Àï.ô�ëUð�ú+Wñ�ô�ï�ö®ô�ð¼í ¾1= í;öÀò.ótò.ó�ô�÷oîUï�ï.ô�÷oò+ý±ö�þ9ôoÿ��+ô������9ëUõ�"ië,�®ñ�ô,�

j*�^S{'�ò.ó�ôwì.ö���ñ��®ëeò.ö®î�õ²ô�õ�ð�ì[í;öÀò.ó�î�ñ�ò¥î�ñ�ò;��ñ�ò=ò.ö®õ�ü � � ï�ñ�ô�ýa�àø��·ò.ó�ô�õÌî�ñ�ò;��ñ�ò£�;¿+ëUõ�ð�î �R���»+îUò=ô#ò.ó�ëeò öf'Cò.ó�ô#ëUð*"Uô�ïnì.ëeï.ú²ð�îcô�ìÃ�·ëeùUô#ëd%�ëUð�+Wñ�ô�ï.úUø�í�ô±ó�ë�"Uô«��ï.î,%-ë9%�ö��®öÀò�úgëeò^�Àô�ëUì=ò ¨� ç î,'uü�ñ�ô�ì�ì.ö®õ�ü

ò.ó�ô¹÷oîUï.ï�ô�÷oòËö®õ�öÀò.ö¤ëeò=îUï¶ñ�ì=ô�ï¶ö®õ�ì.ò.ëUõ�÷oôUø�ëUõ�ð ��ï.î,%�ë9%-ö��®öÀò�ú´ëeò&�Àô�ëUì=ò ¨� °¬î,'�ëUõ�ì=í�ô�ï�ö®õ�übò.ó�ô(¼a°½+Wñ�ô�ï.ú ò=îò.ó�ëeò¯ñ�ì=ô�ï9ö®õ�ì=ò.ëUõ�÷oô¶÷oîUï.ï.ô�÷oò��®úÙc^ò.ócñ�ì²ë,���ÀîOí;ö®õ�üÏò.ó�ôËý±ý ��ð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ô�ï�ò=î�÷oî�õ%ò.ö¤õcñ�ôÎö®õ´ë�í¥ë�ú ò.ó�ëeò¯ö®ìö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ôÃ'Mï.î � ò.ó�ô#ï.ô�ü�ñ��®ëeï+ì.ö���ñ��®ëeò=îUï�e4�

»+î�í�ø�ò.ó�ô���ï.î,%-ë9%�ö��®öÀò�ú·ò.ó�ëeò ò.ó�ô�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ïÂä ü�ñ�ô�ì.ì=ô�ì+÷oîUï.ï.ô�÷oò��ÀúÌö®ì[ëeò¸�®ô�ëUì=òê0ïtcQäBö®ì[÷oîUï.ï.ô�÷oòYe � ê¦ï#cQäBü�ñ�ô�ì�ì=ô�ì£�=ý � � ïnñ�ô��ED ý � ö¤õ�ì=ò.ëUõ�÷oôteWê0ïtc�ý � ö¤õ�ì=ò.ëUõ�÷oôte

�Ïê0ï#cQä ü�ñ�ô�ì.ì=ô�ì£�;¿+ëUõ�ð�î �£�FD ¿+ëUõ�ð�î � ö¤õ�ì=ò.ëUõ�÷oôteWê0ïtcE¿;ëUõ�ð�î � ö®õ�ì=ò.ëUõ�÷oôteD G �

°äç HJI ¨° K � I ¨ è ç� KCI ¨° K R

í;ó�ô�ï�ô#ò.ó�ô#ò=ô�ïH�:ç �g÷oî �gô�ì^'^ï.î ��ò.ó�ô«��ï.î,%�ë9%�ö-�®öÀò§ú9î,'�ò.ó�ôàëUð*"Uô�ï�ì.ëeï.ú��Aü�ñ�ô�ì.ì�ö®õ�üÄ�·ë�ï�ëUõ�ð�î �Ã�?÷oîUï.ï.ô�÷oò��Àúî�õ8ë·ï�ëUõ�ð�î � îUï�ëU÷Y�®ô)+Wñ�ô�ï.ú,� � óWñ�ì�ø-ò.ó�ôº��ï.î,%�ë9%�ö��¤öÀò§ú¯ò.ó�ëeò�ä ü�ñ�ô�ì.ì=ô�ì±÷oîUï.ï.ô�÷oò��Àú¶ö¤ì;ëeò �Àô�ëUì=ò µ¾ � N: B è B¾ ! øí;ó�ö¤÷�óÌö®ì õ�î�õEÿ§õ�ô�ü �®öÀü�ö�%��Àú��gîUï.ô#ò.ó�ëUõ µ¾ �

Û¯âv|~��æ5Ø å_� �'Ù�â¸��è�â å6Ì ú å_|~}��y��� �'�^å_���6�[Ôa�QPbâSRUTÎâv�Q�Q|c�_�¦é S�ò·ö®ì�ô�ëUì=ú¬ò=î¹ì=ô�ô¶ò.ó�ëeògò.ó�ôR��ï.îcî,'�ì÷oî�ñ��®ð�%\ô^�gîEð�ö¶Ó-ô�ðàò=î)%�ëUì=ô ì=ô�÷�ñ�ï�öÀò§ú�î�õ·ò.ó�ô�É�î �Q��ñ�ò.ëeò.ö®î�õ�ë,��ý±ö�þ9ôoÿ��+ô������·ëUõQ��ï.î,%��Àô��Ïc�öG� ô,�Àøcò.ó�ô ó�ëeï�ð�õ�ô�ì.ìî,';÷oî �Q�-ñ�ò.ö®õ�ü��Ó� ý �Qc$#ÇR&%�e«'^îUï�ï�ëUõ�ð�î � #&ëUõ�ð�%Qe4�¹î¥ëUì.ö¤÷�ë,���ÀúUø/ö®õ�ì=ò=ô�ëUð�î,';÷�ó�ô�÷.ùEö®õ�ü8í;ó�ô�ò.ó�ô�ï�ò.ó�ôï�ëUõ�ð�î � îUïnëU÷Y�Àô$+cñ�ô�ï�öÀô�ì��·ëeò.÷�óØëÎü�ö�"Uô�õJ'MîUïH�¶ø¦íôÌí�î�ñ��®ðaß.ñ�ì=ò�ü�ñ�ô�ì.ì�í;ó�ö®÷�óbî,';ò.ó�ô¯îUïnëU÷Y�Àô$+cñ�ô�ï�öÀô�ì�ëeï.ô�Aï�öÀü�ócò�ø��gëUõ�ð¯ò.ó�ô�ï.ôY%Wú·ôoûEò=ï�ëU÷oò��º�æ�;îOíôY"Uô�ï�ø�ò.ó�ö®ì¥ë9����ï�î�ëU÷�ótí�î�ñ��®ð²î�õ��Àú·ü�öf"UôV>!c NB � eì.ñ�÷�÷oô�ì.ìW��ï.î,%-ë9%�ö��®öÀò�úö®õ&Ég�¤ëUö�� ¨ ø�ì.ö®õ�÷oô�í�ô�í�î�ñ��®ðÌõ�ô�ô�ðËò=î·ü�ñ�ô�ì.ì ò.ó�ôº�ÀîE÷�ëeò.öÀî�õÌî,'�%\îUò.óÌî,'�ò.ó�ô�%�ëUðÌîUï�ëU÷Y�®ôº+cñ�ô�ï�öÀô�ìY�

× ~[nÕ�Õ�����;�Þæ �?»T�Bô�n øÖø ù ø¬���Ã�Ê���æ��p

W Ý�Þ ;/ç7á b�é��¬äq-_ë�å,ì�â� ó�ô ��ï�îcî,'�î,'�ì.ö-�àñ��¤ëeò.ë9%�ö��®öÀò�úgî,'�êê7` ö®ì[ì.ö-�·ö��®ëeï¥ö®õtì=ò=ï�ñ�÷oò.ñ�ï.ô±ò=î·ò.ó�ëeò[î,'�ê�¼a`Q�*Å�ôwõ�ë,�gô±ò.ó�ô�ëU÷oò.öÀî�õ�ì[î,'ñ�ì=ô�ï+ö®õ�ì=ò.ëUõ�÷oô�ì î�õV:NAY@ DU�9AC8ºX�AC2H2Y0�OPAwî,�\ô�ï�ëeò.öÀî�õ�ì;ëUì^'^î ���Àî�í+ìYí

°,¯

Page 30: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

É¥ñ�ï.ï�ô�õ%ò�ëeïH�®öÀô�ï í Á î ¨ î ¨ T ¼ °5Tí Á � �î ¨ Ég�®ëUö��Ï­ � �î ¨ T �/û1���®ö¤÷�öÀò c�÷�ëUì.ô ¨ î,'�í Á e � �¼ °5T �/û1���®ö¤÷�öÀò c�÷�ëUì.ôd°�î,'�í Á e � � �

� ë9%��Àô¸±Zí�ê�î�ì�ì.öf%��Àô[ì.ó�ëUð�î�í;ö¤õ�ü�ì/ö®õ�ò.ó�ô ê0ê\`Fì.ö���ñ��®ëeò=îUï#� � ó�ö®ì�ò.ë9%��Àô ö®ì�ò=î«%\ô ö®õcò=ô�ï���ï.ô�ò=ô�ðgö¤õàò.ó�ô;ì.ë,�gô[í¥ë�úëUì � ë9%��Àô�°�c�ì=ô�ô«��ëeüUôº°9kNenø�ôoû�÷oôY��òÃ'^îUï�î�õ�ô#ò=ô�÷�ó�õ�ö¤÷�ë,�®öÀò§ú�í>��îUï;÷Y�¤ëeï�öÀò§ú9î,'p��ï.ô�ì.ô�õ%ò.ëeò.öÀî�õ4ø�ò.ó�ô¼�;î ¨ �·ô�õ%ò=ï.ú¯ö®õò.ó�ô�ò.ë9%��Àôg÷oî#"Uô�ïnì#÷�ëUì=ô�ì ¨ ëUõ�ðT°·î,'ò.ó�ôdî ¨ ëU÷oò.öÀî�õCø\í;ó�ö��Àôwò.ó�ô��;î ¨ T �²ô�õ%ò=ï.ú8÷oî#"Uô�ï�ìw÷�ëUì=ô�±Wø)ôY"Uô�õÏò.ó�î�ñ�ü�óö®õÏ÷�ëUì=ô!°¯ò.ó�ô�ï�ô·ö®ì±õ�îR�·ëeò.÷�ó�ö¤õ�üÌ÷oî�õN"Uô�ï�ì�ëeò.öÀî�õÎc�ëUõ�ðÏò.óWñ�ì#öÀò#ì.ó�î�ñ��®ðCø\ì=ò=ï�ö®÷oò��®úÎì;�\ô�ëeùEö®õ�ü�øÊ%\ô�ö¤õ�÷Y�®ñ�ð�ô�ðÎö®õ�;î ¨ TK�Ne4�

ÇÙé SAõ�öÀò.ö¤ëeò=îUïàö®õ�ì.ò.ëUõ�÷oô²ëU÷oò.öÀî�õbò=î�ì=ò.ëeï.ò�ò.ó�ô/��ï.îUò=îE÷oî � c�ö_� ô,�Àø¦ëUõL¼akÎëU÷oò.ö®î�õL'^îUï�ëUõbö¤õ�öÀò.ö®ëeò=îUï�ö®õ�ì=ò.ëUõ�÷oô¯ö®ìüUô�õ�ô�ï�ëeò.ö®õ�ü9ëUõ�ð¶ì=ô�õ�ð�ö¤õ�ü J e4�

êÙfο;ô�ì;�\î�õ�ð�ô�ï ö®õ�ì=ò.ëUõ�÷oô�ëU÷oò.öÀî�õÎñ*�\î�õtï.ô�÷oô�öf"Eö®õ�ü�ò.ó�ô«Ó�ïnì=òÃ�gô�ì.ì.ëeüUô�c�öG� ô,�Àø J e4�ÇÐy SAõ�öÀò.ö¤ëeò=îUï ö®õ�ì=ò.ëUõ�÷oô�ëU÷oò.ö®î�õËñ*�\î�õtï.ô�÷oô�öf"Eö®õ�ü�ò.ó�ô)�gô�ì.ì.ëeüUô�'^ï.î ��ò.ó�ô�ï.ô�ì;�\î�õ�ð�ô�ï�c�öG� ô,�Àø R e4�� ó�ô«�\î�ì.ì�öf%��Àô±ì.ó�ëUð�îOí;ö®õ�ü�ì[ö¤õtò.ó�ôwê0ê\` ì.ö���ñ��®ëeò=îUï;ëeï�ô�ì.ó�î�í+õ¶ö®õ � ë9%��Àôº±Z�

Å�ôàí;ö������Àô�òºcU�ER��PenøÕcU� T R�� T enø_§àø6©¯ø�ëUõ�ð ¦ � ó�ë�"Uôàò.ó�ôwì.ë,�·ôº�gô�ëUõ�ö®õ�ü9ëUì;ö®õtò.ó�ô���ï.îWî,'�î,'�êʼa`Àc�ì=ô�ôàò.ó�ô%\ô�ü�ö®õ�õ�ö¤õ�ü;î,'ʼ¸���)ô�õ�ð�ö�û)¼)� ¨ e4� � ó�ô[õ�îUò.öÀî�õ�ì/î,'�0NFHF4A{.�>_0)�$@fA7.*098�>EBÊAC8�ëUõ�ð�X�0,>_FY?ND BZO�FH69B6�9AC842C0 >EDE69BÌí+ö����Wë,�®ì=îï.ô�ò.ëUö®õ¶ò.ó�ô�öÀï^�gô�ëUõ�ö¤õ�ü*�

� ó�ô�ì�ö��àñ��®ëeò=îUï±í;ö�����'Mî �-�Àî�íÑò.ó�ô·ì.ë,�·ôgüUô�õ�ô�ï�ë,��ï�ñ��®ô�ì�ëUì#ð�ô�ì.÷oï�öf%\ô�ðÏö®õª¼¸���)ô�õ�ð�ö�û$¼º� ¨ �Q¿;ô�ì;�\î�õ�ì=ô�ì�ò=î:NA$@ÄDU�9AY8ÃX�AC2H2Y0�OPA+ëUõ�ðÍ8;09B]: 69X 698;0 F$@�A+î,�\ô�ï�ëeò.öÀî�õ�ì�ò.ó�ëeò¦ð�î±õ�îUò�'�ë,���Eñ�õ�ð�ô�ï�ò.ó�î�ì=ô¥ï�ñ��Àô�ì�ëeï.ô[ð�î�õ�ô[ëUìæ'^î ���ÀîOí;ìYí

¨ �{í µ cQ§¨RS©�R ¦ e·�ë,�gôËëUì/'MîUï¯ê�¼a`QíÆX±ô�õ�ô�ï�ëeò=ôIëWi §¨RS©�R ¦ l·F[GÓ� ! ëUõ�ð ì=ò=îUï.ôËöÀòY� � ó�ô�õ´üUô�õ�ô�ï�ëeò=ô�ìÛFHG¥� �� ëUõ�ðí¡FHG6� î ¾1ï+ð ��ò øuëUõ�ðÏï�ô�ò.ñ�ï�õ cóìo!2��ôÏ« X � Z[� \ä¬��gîWð���eH�Öíâ�p�Q»+îUò=ô·ò.ó�ëeò#ò.ó�ö¤ì±í;ö�����%\ô�ö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��Àô'^ï.î �Bë·ï�ëUõ�ð�î �Ï%�ö®ò;ì=ò=ï�ö®õ�ü·î,'Õ�Àô�õ�üUò.ó"C-ø)ì.ö®õ�÷oô·ì ! � ôÏ« X � Z[� \�¬ �gîEð��Ïö®ì;ë²ï�ëUõ�ð�î � ô��Àô��gô�õcò¸'^ï.î ��� ��YXëUõ�ð ¾ ïBöª÷2ø �¾1ï ö®ì;õ�ô�ü �®öÀü�öf%]�Àô,�

°Z�{í Tµ cQ§¨RS©�R ¦ e·�ë,�gô¶ëUì�'^îUï·êʼ�`QíÂX�ô�õ�ô�ï�ëeò=ô�ë T i §[RS©�R ¦ l­FHGÛ� ! ëUõ�ð ì=ò=îUï.ôËö®òY� � ó�ô�õ¬üUô�õ�ô�ï�ëeò=ô"ì�FHGÛ� �� ëUõ�ðí.T�F[G�� î ¾1ï+ð ��ò ø�ëUõ�ðÌï.ô�ò.ñ�ï�õVcóì ! � ô µ « X � Z[� \�¬ �gîEð��Êe��Íí.T �p�\»;îUò=ô�ò.ó�ëeò ò.ó�ö®ì[í+ö�����%\ô±ö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��Àô'^ï.î � ëàï�ëUõ�ð�î �b%�öÀò�ì=ò=ï�ö®õ�üwî,'p�Àô�õ�üUò.ó'C)ø�ì.ö®õ�÷oô�ì ! � ô µ « X � Z�� \�¬ �gîEð��Ìö¤ìë�ï�ëUõ�ð�î � ô��Àô��·ô�õ%òg'^ï.î �:� �� µ

§ëUõ�ð ¾ ï öª÷2ø �¾1ï ö®ì;õ�ô�ü �®öÀü�öf%]�Àô,�

±Z�{í Á cQ§¨RS©�R J R R R S R ¦ eZ � }«|Gy�y¸�_�tu~|���o3}4�_yÃ�_�3qH��� � u~|gqas�q4o3vt}4ùÙy{�wy{ùÃy�oY�7�Äs_}�ù �_�3yÃ|G�tr3x4s_}4�3�Q}H��}4s�vtyUs u~o�� m qHo9v�� ��� ��� ��� ��� u~|gqas�qHo9vt}4ùy��~y�ùÃy�oY��}H�1�_�3yæ|G�tr3x4s_}4�3��}4�*}Hs�vty{s��Wu~o���m óïw  � } |Gy�yÃ�_�3u~|��1ot}4�_yg�_�3qH��� � u~|Wq¸s�q4o9v#}�ù y��~y�ùÃy{o��æ�Äs_}�ù �_�tyÃ|G�3r3xHs_}��t�d}4��}Hs�vty{s:�uwo[� m q4o3vV� ��\]� ��� �Y� ��� uw|\q�s�qHo9vt}4ùy��~y�ùÃy�oY��}H�1�_�3yæ|G�tr3x4s_}4�3��}4�*}Hs�vty{s��Wu~o�� m ó±9k

Page 31: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ú ��è�âÍfÌ·Wî �gôW��ï�ö®îUïpî ¨ +Wñ�ô�ï.ú�ó�ëUì�ï.ô�÷oîUï�ð�ô�ðàë;ò.ñ*���Àôî,'�ò.ó�ô7'^îUïH� cU� T R�� T R J R R R^1PenøUí;ö®ò.ó[§ �ÏÅq��´ ¢ µ ¤ µëUõ�ð¼©f�i��´ ¢¶µ ø1'^îUï ì=î �gô«"eë,�®ñ�ô±î,'(1�� � ó�ö®ì¥ö��Q�]�®öÀô�ì¦ò.ó�ëeò ëQî ¨ c J eW+Wñ�ô�ï.ú²í�ëUìÃ�9ëUð�ô±ò=î&cU�·TQR���T eëUõ�ð�ï.ô�ò.ñ�ï�õ�ô�ð R øN%�ñ�ò�õ�î�¼�k«+Wñ�ô�ï.úàò=îwëUõgëU÷�÷oôY��ò.ë9%��®ô^��ëeï.ò.õ�ô�ï/ï�ô�ò.ñ�ï�õ�ô�ð J Î ì=ô�ô[ò.ó�ô^î ¨ +cñ�ô�ï�úð�ô�ì.÷oï�öf��ò.ö®î�õ�%)ô��®î�í��^c@SAõgîUò.ó�ô�ï0í�îUï�ð�ì�ø%ò.ó�ö®ìqí Á +cñ�ô�ï.úd�9öÀü�ó%ò7%)ô ì�ó�ëUð�î�í�ô�ð�%Wú�ò.ó�ô;ö������®ö®÷�öÀò�í Á+Wñ�ô�ï.úQ'^ï.î � ÷�ëUì=ô�±#î,'4ò.ó�ôaî ¨ ëU÷oò.öÀî�õ��Äe)SAõ�ì=ò.ëUõ�÷oôQcU�·TQR���T-e7�àñ�ì.ò�ó�ë#"Uô�ë,�®ï.ô�ëUð�úgî,�\ô�õ�ô�ð¯ëàì=ô�ì�ì.öÀî�õí+öÀò.ótò.ó�ô/: 0,BPO�@ D BZOR64.*ACB¹÷oî�õ�õ�ô�÷oò.öÀî�õ¶ëUì.ì�öÀü�õ��gô�õcò)c�ì=ô�ôw÷�ëUì.ô)±�î,'æî ¨ e4�Å � î*�®���Àø�ò.ó�ô�ï.ô·í+ö�����%)ô·ëeò)�gî�ì=ò#î�õ�ô9ì�ñ�÷�ó�ò.ñ����ÀôUø4ì.ö®õ�÷oô R "ië,�®ñ�ô�ì�ì=ò=îUï.ô�ð¹ö¤õÏò.ó�ô�ì=ôgò.ñ*���®ô�ì�ëeï.ôïnëUõ�ð�î � ëUõ�ðÎö®õ�ð�ôY�\ô�õ�ð�ô�õ%òY�æS{'�+Wñ�ô�ï�ö®ô�ìMí µ cQ§[RS©�R ¦ e ëUõ�ðaí Tµ cQ§¨RS©�R ¦ e ó�ë�"Uôd%\ô�ô�õ¶ëUì=ùUô�ðCø)ëUõ�ðc TUlV ï UYX � Z[� \ ]^]`_ e / 'oK ô µ « X � Z[� \ä¬ � S ø�ò.ó�ô�õ�íc�ëNeÍS{'¦ë&>�AC2�>gD@B*2�>_0,B]F4Aa.1032H2�57698;:Ïî,�\ô�ï�ëeò.öÀî�õ8ó�ëUì+õ�îUò¸��ï.ôY"EöÀî�ñ�ìH�Àú/%\ô�ô�õ&�)ô�ïH'MîUïH�·ô�ð¶î�õJcU� T R�� T enø

�\ô�ï�'^îUïH�Õë!>�A�2C>�D B*2C>_09B]F�A\.103242457698;:tî,�\ô�ï�ëeò.öÀî�õ9í;öÀò.ó²ëeï.ü�ñ��gô�õcò.ìacU��TUR��ÄT-e/ëUõ�ð ¦ �æSU'\ò.ó�ô+ò=ô�ì=òö¤ì/ì.ñ�÷�÷oô�ì.ì;'�ñ��qøeò.ó�ô[ïnö®õ�ü �·ëUì=ò=ô�ï¦í;ö-���%ü�ö�"Uô ñ�ì�ò.ó�ô¥ùUô�úo¡ ¢ µ ¤ µ î,')ö¤õ�ì=ò.ëUõ�÷oô�cU� T R�� T egc�ì.ö¤õ�÷oô�cU� T R�� T eó�ëUì ë·ð�ëUõ�ü �¤ö®õ�üg÷oî�õ�õ�ô�÷oò.öÀî�õËëUì.ì.öÀü�õ��·ô�õ%ò4e4�7¿;ô�ò.ñ�ï�õa¡ ¢¶µ ¤Eµ �

c@%�e/S{'¦ëª>�A�2C>gD B*2C>_09B]F�A�.103242457698;:�î,�\ô�ï�ëeò.ö®î�õËí;ö®ò.ó ¦ ó�ëUì+ë,�®ï.ô�ëUð�ú$%\ô�ô�õ¹�)ô�ïH'MîUïH�·ô�ð¶î�õJcU� T R�� T eëUõ�ð¶í¥ëUì+ì.ñ�÷�÷oô�ì.ì;'�ñ��qø�ò.ó�ô�õ¹�Àô�ò{¡ ¢¶µ�¤Sµ %\ô#ò.ó�ôwùUô�úÌî,%�ò.ëUö¤õ�ô�ð$'^ï.î ��ò.ó�ôàï�ö®õ�ü��9ëUì=ò=ô�ï+ö®õ¶ò.ó�ëeòî,�\ô�ï�ëeò.ö®î�õ��Õ¿ ô�ò.ñ�ïnõa¡ ¢¶µ�¤Sµ �

c�÷#eÍS{'¦ëUõ8ñ�õ�ì.ñ�÷�÷oô�ì�ì;'^ñ��Õ>�A�2C>gD B*2C>_09B]F�A�.103242457698;:Ïî,�\ô�ï�ëeò.öÀî�õÎó�ëUì�ë,�Àï.ô�ëUð�úR%\ô�ô�õ$�\ô�ï�'^îUïH�gô�ðËî�õcU��TUR��ÄT euí;öÀò.ó�ëa��ëUì.ì=í�îUï�ð ¦ T O� ¦ ø�ò.ó�ô�õgë9%\îUï.òY��Å�ô í;ö��-�%÷�ë,���Eò.ó�ö¤ì�ôY"Uô�õcò¦ë�8�A�2_.*69B]:NAY8.ËY09D@ =18;Ac�õ�îUò=ôwò.ó�ëeò)cU� T R�� T e¥ö®ì[ëgï.ô�ì��)î�õ�ð�ô�ï[ö®õ�ì=ò.ëUõ�÷oôte4�

S{'�íôwó�ë�"Uôàõ�ô�öÀò.ó�ô�ïÃ'�ëUö��Àô�ðÌõ�îUï ï�ô�ò.ñ�ï�õ�ô�ðÌëUõcúcò.ó�ö®õ�ügúUô�ò�ø�ò.ó�ô�õÌï.ô�ò.ñ�ï�õ�a4F[G� #k2R ¨ ¥ @ �S{'õ�îÌï.ô�ì;�\î�õ�ð�ô�ï '�ëUö��®ñ�ï.ôàîW÷�÷�ñ�ï�ì�ëUì#ëtï.ô�ì.ñ��Àò±î,'0ò.ó�ö®ì�í Á +Wñ�ô�ï.úUø4ò.ó�ô�õÏò.ó�ô·ì.ö���ñ��®ëeò.öÀî�õ8í;ö-���p%\ôö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��Àôg'Mï�î �Õò.ó�ô+ï.ô�ë,�\í�îUïH�®ð4øWëUìg'^î ���ÀîOí;ìYí�S�õ¯ò.ó�ô�ï.ô�ë,�\í�îUïH�®ð²ò.ó�ô±ùUô�ú9üUô�õ�ô�ïnëeò=ô�ðR%cúcU��TUR��ÄT e�ö®ì

í Á I §¨RS©�R J R R R.ý � I RcQí Tµ cQ§[RS©�R ¦ � e;e K R

JcQí µ cQ§[RS©�R ¦ � e;e K K R ¦ � K �

� ó�ô�ï.ôY'^îUï.ôUø�öf'\ò.ó�ö®ìÆí Á +Wñ�ô�ï.ú9ö®ìì.ñ�÷�÷oô�ì.ì�'^ñ��«øWöÀòí;ö�����ï.ô�ò.ñ�ï�õ¯ëº"eë,�®ñ�ô�÷oî�õ�ì.ö®ì.ò=ô�õ%ò�í;öÀò.ó9ò.ó�ô�ëUð�"Uô�ï=ÿì�ëeï.ú_�¾ì7"Wö®ô�í�� © õgò.ó�ô îUò.ó�ô�ïó�ëUõ�ð4ø%öf')ò.ó�ö®ìæ+Wñ�ô�ï.úgö®ì¦õ�îUòì.ñ�÷�÷oô�ì.ì;'�ñ��qø%ò.ó�ô�õgüUô�õ�ô�ï�ëeò.ö¤õ�üwë�ïnëUõ�ð�î �ï�ô�ì;�\î�õ�ì=ô�ö®ì[ö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%]�ÀôÃ'Mï�î ��ò.ó�ôwëUð*"Uô�ïnì.ëeï.ú®�¾ìÃ"Wö®ô�í ö®õtò.ó�ô�ï�ô�ë,�CíîUï4�®ð��� ó�ô«'Mî �-�Àî�í;ö¤õ�üg÷Y�®ëUö���ì.ó�îOí;ì ò.ó�ëeò[í�� î*�®��� � í;ö����\õ�îUò ÷�ëUñ�ì=ôwëgï.ô�ì��)î�õ�ð�ô�ïÃ'^ëUö-�®ñ�ï.ô,�ú ��_�U|`_yÍ���k@6�k®.�kl²\B]6/8;AC2_.169B�:NAC8ÆËC0,D@ =18;Ad5æDU@U@�6�FHF�=18�k� ó�ô/��ï.îcî,' ë9���)ô�ëeïnìàö®õL¼¸���)ô�õ�ð�ö�û(îa�w°Z�ª»+îUò=ôtò.ó�ëeò�÷�ëUì=ô ¨ î,'�í Á ö®ìàò.ó�ô¯î�õ��ÀúT���®ëU÷oôtö®õÚò.ó�ôì�ö��àñ��®ëeò.öÀî�õtí;ó�ô�ï�ô�ë�ï.ô�ì;�\î�õ�ð�ô�ïÃ'�ëUö��®ñ�ï�ô±÷�ëUõ¶îW÷�÷�ñ�ï#�¼�ì0÷�ëUõ!%\ô;ì=ô�ô�õCøWëUõ£í Á +Wñ�ô�ï.úgö®ì�ò.ó�ô+î�õ��Àúd���®ëU÷oô ö®õgò.ó�ô;ì.ö���ñ��®ëeò.öÀî�õ�ò.ó�ëeò0ë!>�AC2�>�D B�2�>_09B]F�A7.1032424<576,8�:Â+Wñ�ô�ï.út÷�ëUõ&%\ôº�·ëUð�ô�î�õËëgï�ô�ì;�\î�õ�ð�ô�ï;ö®õ�ì=ò.ëUõ�÷oô,�WÅ�ôà÷�ëUõÎò.ó�ô�ï.ôY'^îUï.ôwì=ò.ëeò=ô�ò.ó�ô�'^î ���ÀîOí;ö®õ�ü÷Y�¤ëUö�� c�ì.ö��9ö��®ëeïH�Àúgò=î²ê�¼a`)e4íú ��_�U|baÀÍ[�Ë&0bò=ô�ì=ò9ö¤õ�ì=ò.ëUõ�÷oôR��ëUì�ì=íîUïnð û =�AY84KTD 2RXQ0N:NAª69B 0(8�A�2�.169B]:NAY8&D@B*2�>_0,B]F4AÂcU�·TQR���T eb²>@?*ACBT>@?1A J �30�@ =�A�8�A�F�ACDU�9AH:��CKÍcU��TUR��ÄT-e«57032�B�6,>\2YACB]> �CK�09B(0 FHF�AU.�>_0��Y@�A¸.1098C>EB�AC8+k� ó�ô�ï.ô�ëUì=î�õ�ö®ì±ò.ó�ëeò#ëUõ�í Á +Wñ�ô�ï.úË÷�ëUõ¹ï.ô�ì.ñ��Àò±ö®õÏëª>�A�2C>^D@B*2�>_09B�F4A«.103242457698;:V+Wñ�ô�ï.úËî�õ cU� T R�� T eî�õ��Àú öf'�ë�ò.ñ*���ÀôVcU��TUR��ÄT R J R R R^1Pegó�ëUì���ï.ôY"EöÀî�ñ�ìH�ÀúL%\ô�ô�õ ï�ô�÷oîUï�ð�ô�ð�� S�ò·í;ö����g%\ô�÷oî �gô8ë9����ëeï.ô�õcò%\ô��ÀîOí c�ì=ô�ô±ò.ó�ô«î ¨ +Wñ�ô�ï.ú9ð�ô�ì.÷oï�öf��ò.ö®î�õ]e�ò.ó�ëeò�ø�íº� î*�®���ÀøEò.ó�ö®ì¥÷oî�ñ��®ð²î�õ��Àú9ó�ë9���\ô�õ²öf'Cò.ó�ô J "eë,�®ñ�ôï�ô�÷oô�öf"Uô�ð$%WúªcU��TUR��ÄT eí�ëUì+õ�îUò;ì=ô�õcòÃ%WútëUõËëU÷�÷oôY��ò.ë9%��Àô��-ëeï.ò.õ�ô�ï��

ú ��è�âÕyÙ·Wî �gô���ïnöÀîU﫼a°Í+Wñ�ô�ï.úÎó�ëUì±ï.ô�÷oîUï�ð�ô�ð�ë¯ò.ñ*���®ôàî,'ò.ó�ôQ'MîUï4� cU�ER���R J R R R�# enø�í;ö®ò.óZ§ � ��´M¢ëUõ�ð�©ó� Åq��´{¢�¤eøZ'MîUï0ì.î �gô¸"eë,�®ñ�ô[î,'c#)� � ó�ö®ì¦ö������®öÀô�ì�ò.ó�ëeò cU�SR��Pe0ì=ô�õcò J ëUõ�ð9ï.ô�÷oô�öf"Uô�ð R %�ëU÷.ù)ø

± ¨

Page 32: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

%-ñ�ò0ð�ö®ð9õ�îUòó�ë#"Uô+ë)�·ëeò.÷�ó�ö¤õ�üà÷oî�õP"Uô�ï�ì.ëeò.öÀî�õ¯í;ö®ò.ó·ëUõ9ëU÷�÷oôY��ò.ë9%]�Àô��-ëeï.ò.õ�ô�ï Î ì.ô�ô;ò.ó�ô¸¼ °)+cñ�ô�ï�úð�ô�ì.÷oï�öf��ò.ö®î�õª%)ô��®î�í��ªc@S�õ�îUò.ó�ô�ïwí�îUï�ð�ì�ø�ò.ó�ö®ì[í Á +cñ�ô�ï.úÂ�9öÀü�ó%òº%)ô·ì�ó�ëUð�î�í�ô�ðL%cúÏò.ó�ô9ö-�Q���®ö®÷�ö®òí Á +cñ�ô�ï.úQ'Mï�î � ÷�ëUì=ô«°eëwîUïð3%¯î,'Cò.ó�ô�¼ °wëU÷oò.ö®î�õ��Äe)S�õ�ì=ò.ëUõ�÷oôdcU�ER��Pe\�àñ�ì=òó�ë#"Uô�ë,�®ï.ô�ëUð�úgî,�\ô�õ�ô�ðë9ì=ô�ì.ì.öÀî�õ¶í;öÀò.ótò.ó�ô!: 0,BPO�@ D BZO$FH69B�B�A�F#>[÷oî�õ�õ�ô�÷oò.öÀî�õ¶ëUì�ì.öÀü�õ��gô�õcòºc�ì=ô�ô�÷�ëUì=ô�ì�°eë·ëUõ�ð&°3%¶î,'æ¼a° e4�cE»+îUò=ôtò.ó�ëeòwò.ó�ö®ì�÷�ëUì=ôt÷�ëUõ�õ�îUòàî#"Uô�ïH�®ë9�bí;öÀò.ó�ò.ó�ô���ï�ôY"WöÀî�ñ�ì#î�õ�ôUø/öG� ô,�Àø�í�� î*�®���Àø�íô²íî�õy� ò�ó�ë#"Uô%\îUò.ó¶ë·ò.ñ*���Àô!cU�·TQR��ÄTUR J R R R^1Ze[ëUõ�ðÌò.ñ����Àô!cU�SR��ÄR J R R R�# e ï.ô�÷oîUï�ð�ô�ðCø�í;öÀò.óR�·ëeò.÷nó�ö®õ�ü�"eë,�®ñ�ô�ì î,'�§ëUõ�ðÇ©Í� � ó�ëeò ï.ô�ëUì=î�õ8ö®ì[ò.ó�ëeò�öf'�ò.ó�ô�"eë,�®ñ�ô�ì î,' J ëUõ�ð R ö®õÌò.ó�ôwò.ñ*���®ô�ìÃ�·ëeò.÷�óÏñ*�4ø�ò.ó�ô�õLcU�SR��ZeëUõ�ð$cU� T R�� T e�í;ö��-�có�ë#"Uô ó�ëUðgë«�·ëeò.÷nó�ö®õ�ü�÷oî�õP"Uô�ï�ì.ëeò.öÀî�õ��Õ¼��®ì.î�ø�ò.ó�ô[ò§í�îwö®õ�ì=ò.ëUõ�÷oô�ì/ëeï.ô ëU÷�÷oôY��ò.ë9%]�Àô�-ëeï.ò.õ�ô�ï�ìY�Ã�+î�í�ôY"Uô�ï�øCëUõÎö¤õ�öÀò.ö®ëeò=îUï;ö¤õ�ì=ò.ëUõ�÷oô�ò.ó�ëeò+ó�ëUì+ó�ëUðËë/�·ëeò.÷�ó�ö¤õ�ü²÷oî�õP"Uô�ï�ì.ëeò.öÀî�õ8í;ö®ò.ó¶ëUõëU÷�÷oôY��ò.ë9%��Àôº�-ëeï.ò.õ�ô�ï í;ö-���\õ�îUò ï.ô�÷oîUï�ðËëgò.ñ*���ÀôñÎ öÀò¥í;ö�����%\ô�ö®õ¶÷�ëUì=ô ¨ î,'+§a°Wø�í+ó�ö��Àô#ëUõËö¤õ�öÀò.ö®ëeò=îUïò.ñ����Àô�÷�ëUõÌî�õ��®ú/%\ô±ï.ô�÷oîUï�ð�ô�ðÎö®õÌ÷�ëUì=ô)°gî,'�§ °Z�ÄeÅ � î*�®���Àø4ò.ó�ô�ï.ô�í;ö����p%)ô�ëeò��gî�ì=ò±î�õ�ôgì.ñ�÷�ó8ò.ñ*���ÀôUøCì.ö¤õ�÷oô J "eë,�®ñ�ô�ì±ì=ò=îUï.ô�ðÏö®õ8ò.ó�ô�ì.ô�ò.ñ����Àô�ì±ëeï.ôïnëUõ�ð�î � ëUõ�ðÎö®õ�ð�ôY�\ô�õ�ð�ô�õ%òY�æS{'�+Wñ�ô�ï�ö®ô�ìMí µ cQ§[RS©�R ¦ e ëUõ�ðaíZTµ cQ§¨RS©�R ¦ e ó�ë�"Uôd%\ô�ô�õ¶ëUì=ùUô�ðCø)ëUõ�ðc vUlV µï UYX � Z[� \ ]^] _ e %('oK ôÏ« X � Z[� \ä¬6� S ø�ò.ó�ô�õ�íc�ëNeÍS{'[ë(>�A�2C>aD B*2C>_09B]F�A�.1032H2�57698;:bî,�)ô�ïnëeò.öÀî�õ�ó�ëUìàõ�îUò���ï�ôY"WöÀî�ñ�ì��Àú&%\ô�ô�õT�\ô�ï�'^îUïH�gô�ð¹î�õÎcU�SR��Zenø

�\ô�ï�'^îUïH��ë$>�AC2�>\D B�2�>_09B]F�A¸.103242457698;:Îî,�\ô�ï�ëeò.öÀî�õÌí;ö®ò.ó¶ëeï.ü�ñ��gô�õcò.ì)cU�ER��Pe[ëUõ�ð ¦ �ÕS{'�ò.ó�ôwò=ô�ì=òö¤ì�ì�ñ�÷�÷oô�ì.ì;'�ñ��qø\ò.ó�ô�ï�ö®õ�ü��·ëUì=ò=ô�ï#í+ö����4ü�ö�"Uô�ñ�ì+ò.ó�ô�ùUô�ú�¡£¢�¤�î,'�ö®õ�ì=ò.ëUõ�÷oôRcU�SR��ZeQc�ì.ö®õ�÷oôRcU�SR��Zeó�ëUì ë·ð�ëUõ�ü �¤ö®õ�üg÷oî�õ�õ�ô�÷oò.öÀî�õËëUì.ì.öÀü�õ��·ô�õ%ò4e4�7¿;ô�ò.ñ�ï�õa¡�¢�¤,�

c@%�e/S{'¦ëª>�A�2C>gD B*2C>_09B]F�A�.103242457698;:�î,�\ô�ï�ëeò.ö®î�õËí;ö®ò.ó ¦ ó�ëUì+ë,�®ï.ô�ëUð�ú$%\ô�ô�õ¹�)ô�ïH'MîUïH�·ô�ð¶î�õJcU� T R�� T eëUõ�ð¶í¥ëUì+ì.ñ�÷�÷oô�ì.ì;'�ñ��qø�ò.ó�ô�õ¹�Àô�ò{¡ ¢¶µ�¤Sµ %\ô#ò.ó�ôwùUô�úÌî,%�ò.ëUö¤õ�ô�ð$'^ï.î ��ò.ó�ôàï�ö®õ�ü��9ëUì=ò=ô�ï+ö®õ¶ò.ó�ëeòî,�\ô�ï�ëeò.ö®î�õ��Õ¿ ô�ò.ñ�ïnõa¡ ¢ µ ¤ µ �

c�÷#eÍS{'¦ëUõ8ñ�õ�ì.ñ�÷�÷oô�ì�ì;'^ñ��Õ>�A�2C>gD B*2C>_09B]F�A�.103242457698;:Ïî,�\ô�ï�ëeò.öÀî�õÎó�ëUì�ë,�Àï.ô�ëUð�úR%\ô�ô�õ$�\ô�ï�'^îUïH�gô�ðËî�õcU�ER��Penøuò.ó�ô�õ8ë9%\îUï.òY�«Å�ô�í;ö-���u÷�ë,����ò.ó�ö¤ì;ôY"Uô�õcò�ëUõJD B�D@>EDG0,>_698OËY09DU@Ä=18�A&c�õ�îUò=ô�ò.ó�ëeò�cU�SR��Ze±ö®ì�ëUõö¤õ�öÀò.ö®ëeò=îUï�ö®õ�ì=ò.ëUõ�÷oô,ÔEö®õ²ëUð�ð�öÀò.öÀî�õ4øcì=ô�ô±÷�ëUì=ô«°e÷;î,'p¼ °º'MîUï¥ëUõ�îUò.ó�ô�ïW���®ëU÷oô+í;ó�ô�ï.ô�ëUõ¯ö¤õ�öÀò.ö®ëeò=îUï'�ëUö��®ñ�ï.ô#÷�ëUõÌîW÷�÷�ñ�ï�e4�

S{'�íôwó�ë�"Uôàõ�ô�öÀò.ó�ô�ïÃ'�ëUö��Àô�ðÌõ�îUï ï�ô�ò.ñ�ï�õ�ô�ðÌëUõcúcò.ó�ö®õ�ügúUô�ò�ø�ò.ó�ô�õÌï.ô�ò.ñ�ï�õ�a4F[G� #k2R ¨ ¥ @ �S{';õ�î�ö®õ�öÀò.ö®ëeò=îUïd'^ëUö��¤ñ�ï.ô·îE÷�÷�ñ�ï�ì�ëUìgë8ï.ô�ì.ñ��®òwî,';ò.ó�ö®ì¨í Á +Wñ�ô�ï.úUø/ò.ó�ô�õ¬ò.ó�ô¯ì.ö-�àñ��¤ëeò.öÀî�õ�í+ö����Õ%\ôö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��ÀôÃ'^ï.î ��ò.ó�ô�ï�ô�ë,�CíîUï4�®ðCø�ì.ö��·ö-�®ëeïH�Àúgò=î9÷�ëUì.ô ¨ �� ó�ô«'Mî �-�Àî�í;ö¤õ�üg÷Y�®ëUö���ì.ó�îOí;ì ò.ó�ëeò[í�� î*�®��� � í;ö����\õ�îUò ÷�ëUñ�ì=ôwëUõËö¤õ�öÀò.ö®ëeò=îUïg'�ëUö��®ñ�ï.ô,�ú ��_�U|edBÍ���k@6�k®.�kl²\B]6/D B�DE>EDG0,>_698qËY09DU@Ä=18�Ad5æDU@@�6#FHFY=18���5�?1AY>@?*AC8ºD@B(FH032�A�Ü$6�Ë{í Á 698�D@BTF4032YA�ÜZF6�Ë�h Ü�! k� ó�ô«��ï.îWî,'�ë9���)ô�ëeïnì[ö®õR¼¸���)ô�õ�ð�ö�û/îa�w°Z�»+îUò=ô¯ò.ó�ëeòwò.ó�ô¹>�A�2�>�D@B*2�>_09B�F4Aº.1092H24576,8�:J+Wñ�ô�ï.úÏî�õÎcU�ER��Pe�í;ö�����î�õ��®ú¹%\ô!�·ëUð�ô9ó�ô�ï.ô9ö�'�ëËò.ñ*���ÀôcU�ER���R J R R R�# e�ó�ëUì¸��ï�ôY"WöÀî�ñ�ì��ÀúÍ%)ô�ô�õËï.ô�÷oîUï�ð�ô�ð�� � ó�ëeò�ø-ö¤õ¶ò.ñ�ï�õ4ø�ö��Q���¤öÀô�ì¥í�� î*�®���-ò.ó�ëeò�cU�ER��Pe+ð�ö®ðõ�îUò�ó�ë�"Uô·ëR�·ëeò.÷nó�ö®õ�üÌ÷oî�õP"Uô�ï�ì.ëeò.öÀî�õ�í;öÀò.óÏëUõ�ëU÷�÷oôY��ò.ë9%��®ôQ��ëeï.ò.õ�ô�ï!c�ì=ô�ôgò.ó�ô�õ�îUò=ô·ëeò#ò.ó�ôgô�õ�ðî,'/÷�ëUì=ôd°3%¶î,'æ¼a° e4�\Å�ôwó�ë�"UôMß=ñ�ì=òÃ��ï.ît"Uô�õÌî�õ�ô���ëeï�ò[î,'�ò.ó�ô«'Mî ���®î�í;ö®õ�ü�÷Y�¤ëUö��Ríú ��_�U|gf_Í[�ËR0¹ò=ô�ì=ò·ö¤õ�ì=ò.ëUõ�÷oôÍ��ëUì.ì=í�îUï�ð û =�AY84KªD 2/X�0 :NA¹69BÎ0,BÎ698�D¶O D B]0 >_698RD B�2�>_09B]F�A&cU�ER��Peb²>@?*ACB(cU�SR��Peº?1032ºB]6,>7?Z0 :R0/X�0,>_FY?ND BZORFH69B �,AC842C0,>EDG69B(5æDE>@?&09BV0 F4F4AU.Ê>_0)�Y@�A¸.1098C>EB�AY8�k� ó�ô9îUò.ó�ô�ï���ëeï�òàö®ìàì.ó�î�í+õÚö®õÚ÷�ëUì=ô$°eëËî,'^¼ ° c^í;ó�ö®÷nóÚö®ìwò.ó�ô¯î�õ��ÀúÏîUò.ó�ô�ï����®ëU÷oô²í;ó�ô�ï.ô¯ëL>�AC2�>D@B*2C>_09B]F4A�.1032H2�57698;:Î÷oî�ñ��®ð�%\ô��·ëUð�ô�î�õ¶ëUõ¶îUï�öÀü�ö®õ�ëeò=îUï+ö®õ�ì=ò.ëUõ�÷oôte4�

ú ��è�âI® © ò.ó�ô�ï�í;ö®ì=ô,�¿;ô�ò.ñ�ï�õ�a4F[G� #k2R ¨ ¥ @ �Vuô�ò$�¾ì9ì.ó�î�í�ò.ó�ëeò·ò.ó�ö®ì�ï.ô�ì;�\î�õ�ì=ôÌö®ì�"eë,�®ö®ðCø¦ö_� ô,�Àøò.ó�ëeògò.ó�ö®ìoí Á +cñ�ô�ï�úÚ÷�ëUõB� ò�%\ôÌì.ó�ëUð�î�í�ô�ð½%cúëUõcúR��ï�ö®îUï ö��Q���®ö¤÷�öÀòW+Wñ�ô�ï�ö®ô�ìY�ÕS��Q���®ö®÷�ö®òÂí Á +cñ�ô�ïnöÀô�ì ëeï.ôº�9ëUð�ôwö®õ¶÷�ëUì.ô�ì ¨ øÊ°Wø�ëUõ�ð¹±gî,'�î ¨ ø\ëUõ�ð

±,°

Page 33: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

÷�ëUì.ô�ìa°eë·ëUõ�ð&°3%¶î,'æ¼a°Z�7S�ò;ö¤ì¥ô�ëUì=útò=î9ì=ô�ô�ò.ó�ëeò+ëUõ%ú¼í Á ÷�ë,���Cò.ó�ëeò¸�·öÀü�ócò ì.ó�ëUð�îOí?ëUõ¶ö-�Q���®ö®÷�ö®ò+Wñ�ô�ï.úÂ'^ï.î � ÷�ëUì=ô�±tî,'Ãî ¨ íî�ñ��®ð¹õ�îUò�%\ô·ð�ô�ë,�®ò�í;öÀò.ó�ó�ô�ï�ô¹c^ï�ëeò.ó�ô�ï�ø�öÀò�í�î�ñ��®ðª%\ô9ð�ô�ë,�®ò#í;öÀò.óö¤õ ÷�ëUì=ô ¨ î,'�í Á e4�ηEö��·ö-�®ëeïH�ÀúUø/í�ôËð�î�õB� ò·õ�ô�ô�ð ò=î(%\ôÌ÷oî�õ�÷oô�ï�õ�ô�ð½'^îUï9ö������®ö®÷�öÀòd+cñ�ô�ï�öÀô�ì�'^ï.î �÷�ëUì.ô�ì�°eë·ëUõ�ð$°3%Ëî,'�¼ °Wø�ì.ö®õ�÷oô�ò.ó�ô�ú¯ëeï.ô#î�õ��Àú9ï.ô��®ôY"iëUõcò[ò=î9÷�ëUì=ô)°�î,'�í Á � � óWñ�ì�øEí�ô#î�õ��Àú¯õ�ô�ô�ðò=îÌì.ó�î�íÑò.ó�ëeò�ò.ó�ô�ï.ô�ö®ì+õ�î¯ì.ó�ëUð�î�í;ö¤õ�ü!'^ï.î � ÷�ëUì=ô�ì ¨ ëUõ�ð°9î,'7î ¨ � � ó�ô�ì.ôàëeï.ôgð�ô�ë,�Àò+í;öÀò.ó¹%cúò.ó�ô�'Mî �-�Àî�í;ö¤õ�ü*íú ��_�U|ehBÍ9ÆpA�> J �HAÃ8;A�>E=184B�AH:��YK«0,B·h­Ý û =�AC8�K«>_6ºcU�SR��Zeg5æDE>@?�§ �Ï��´{¢�0,B]:M©ó�ÏÅd��´O¢�¤ ²p09B�: R�4A¸8;A�>E=Z8�B�AH:­�YK)0«2�=å��2YA û =�ACB]>Eü�à c J e û =�AY84K�>_6dcU�·TQR���T-eÃ5æD@>@?�©ó�Ï��´ ¢�µ 09B]:�§ �ÏÅq��´ ¢¶µ ¤Eµ k·gp?1ACBâ²5�k@6�k®.�k`²«>@?*A�>@?1AC8�AÍ5æDU@@\B�AY�,AC84�4A�0 û =�AC8�K¿í Á cQ§[RS©�R J R R R.ý �Qc vUWV µï UYX � Z[� \�]w] _ R TUWV ï UYX � Z[� \ ]^] _ eIR ¦ eb²ËY698)0,B�K ¦ k� ó�ô«��ï.îWî,'�î,'�ò.ó�ôw÷Y�¤ëUö���ë9���\ô�ëeï�ì ö®õR¼����\ô�õ�ð�öÀû/îa�w°Z�

j*�¸¼ak�+Wñ�ô�ï.ú¯ò=î¹cU�SR��Ze·�ë,�gôgëUì 'MîUï#êʼ�`�íyX±ô�õ�ô�ï�ëeò=ô·ëUõ�ðÏì=ò=îUï.ôi#�F G � ! ø4ëUõ�ðÏì=ô�õ�ð J ���j%W�)Ég�Àô�ëeï4�ÀúUø J ö®ì±ñ�õ�öf'MîUï4���Àúð�ï�ë�í;õ$'Mï.î �7� � � ! ø�ß=ñ�ì.ò ëUì ö®õtò.ó�ô�ï�ô�ë,�4ì=úEì=ò=ô��R�

³Z�¸î ¨ c J e^+cñ�ô�ï�ú²ò=î¹cU��TUR��ÄT-eX±ô�õ�ô�ï�ëeò=ô²ëUõ�ð¹ì=ò=îUï.ôk1IF G � ! ø�ëUõ�ð¹ì=ô�õ�ð R �Ó� / c^í;ó�ö®÷nó¹÷Y�Àô�ëeïH�®ú8ó�ëUì�ò.ó�ô9÷oîUï.ï.ô�÷oò�ð�ö®ì=ò=ïnöf%�ñ�ò.öÀî�õ�e4�»+î�í ÷oî�õ�ì.ö®ð�ô�ï ò.ó�ï.ô�ô�÷�ëUì=ô�ì�íú ��è�âÍf � ó�ôº"ië,�®ñ�ô#î,' J ó�ëUì^%\ô�ô�õ¶ì=ô�õcò¸%WútëUõËëU÷�÷oôY��ò.ë9%��®ôº��ëeï.ò.õ�ô�ïdcU�SR��Zenø)ëUõ�ðËõ�î!¼ °·ëU÷oò.öÀî�õÎó�ëUì

úUô�ò!%)ô�ô�õ �\ô�ï�'^îUïH�gô�ðL'MîUï&cU�ER��Pe4� cE»;îUò=ôËò.ó�ëeòQ%cúÚò.ó�ôtï�ëUõ�ð�î �9õ�ô�ì.ì�î,' J "eë,�®ñ�ô�ì�ø¦ò.ó�ô�ï.ôtí;ö����qøíº� î*�®���Àø�%\ô�ëeò¸�gî�ì=ò;î�õ�ô�ì.ñ�÷nóVcU�SR��Pe4�Äe·Eô�ò ì=ò.ëeò.ñ�ì¥ò=î�¼�÷�÷oôY��ò�ø�ëUõ�ðÍ�\ô�ï�'^îUïH� ëÍ2�>_098C>æ2�A�2H2�DE6,BÎî,�\ô�ï�ëeò.öÀî�õtí+öÀò.ó¯ò.ó�ô#÷oî�õ�õ�ô�÷oò.öÀî�õÌëUì.ì�öÀü�õEÿ�·ô�õ%ò)6�.*ACBoËY698)F469B�B�AHF�>EDG69BoË48;69X cU�SR��Pe4� � ó�ö¤ì�÷oîUï�ï.ô�ì;�\î�õ�ð�ì¥ò=î·ò.ó�ôwö��Q���¤ö®÷�öÀò0îUïnëU÷Y�Àôº+Wñ�ô�ï.ú

¡ ¢ µ ¤ µ �÷í Á I §[RS©�R J R R R.ý � I JcQí µ cQ§¨RS©�R ¦ � e;e K R

RcQí Tµ cQ§[RS©�R ¦ � e;e K K R ¦ � K R

í+ó�ô�ï.ôM¡ ¢¶µ ¤Sµ ö¤ì�ò.ó�ô[ï�ëUõ�ð�î � ì.ô�ì.ì.öÀî�õ�ùUô�úgëUì.ì.ö®ü�õ�ô�ð�%cúàò.ó�ô[ï�ö®õ�ü �9ëUì=ò=ô�ï0ëeò¦ò.ó�ô[ò.ö-�gô[î,'-ò.ó�ô 2�>_098C>2�A�2424DG69B9î,�\ô�ï�ëeò.öÀî�õ���·Eö®õ�÷oô R ö¤ìuë�'Mï.ô�ì�ó��Àú#÷�ó�î�ì.ô�õàïnëUõ�ð�î � õcñ��)%\ô�ï�øiò.ó�ö®ì�ö��Q���®ö¤÷�öÀò�+cñ�ô�ï�úUøiíº� î*�®���Àøí+ö����)õ�îUò[ì.ó�ëUð�îOí ëUõ%ú/��ï�öÀîUïOí Á +Wñ�ô�ï�öÀô�ì«c^í;ó�ô�ò.ó�ô�ï[ôoûZ���¤ö®÷�öÀò�îUï ö��Q���®ö¤÷�öÀò4e4�æÉ¥î�õ�ì=ô�+Wñ�ô�õ%ò��®úUø ¡ ¢¶µ ¤Eµí+ö�����%\ô�ö®õ�ð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ë9%��ÀôÃ'^ï.î ��ò.ó�ô«"eë,�®ñ�ô�ñ�ì=ô�ð¶ö®õtò.ó�ô#ï�ô�ë,�4ì=úEì=ò=ô��R�� ó�ô²÷oî�õ�õ�ô�÷oò.öÀî�õÚëUì�ì.öÀü�õ��gô�õcòàö¤ìº�Àô�ü�ë,�\%\ô�÷�ëUñ�ì=ôUø�%cúLÉÃ�®ëUö�� ³Wø�ò.ó�ô�ï.ôt÷oî�ñ��®ðÚõ�îUòàó�ë�"UôÍ%)ô�ô�õbë>�AC2�>gD@B*2�>_0,B]F4A .103242457698;:T+Wñ�ô�ï.úÌî�õ½cU�·TQR���T-enøCì.ö®õ�÷oô�cU�·TQR���T-e;ó�ëUì;ï�ô�÷oô�öf"Uô�ð J '^ï.î � ëUõÏëU÷�÷oôY��ò.ë9%]�Àô�-ëeï.ò.õ�ô�ï��

ú ��è�âÕy � ó�ô)"ië,�¤ñ�ô�î,' J ó�ëUì^%\ô�ô�õÎì.ô�õ%ò�%cú¶ëUõ8ëU÷�÷oôY��ò.ë9%��Àôd��ëeï.ò.õ�ô�ïdcU�SR��Zenø\ëUõ�ðÎëUõ¹¼a°*c R T-e;ëU÷oò.öÀî�õó�ëUìÃ%\ô�ô�õR�\ô�ï�'MîUï4�gô�ð�'MîUïdcU�SR��Penø�'MîUï+ì=î �gô R T �·Eô�ò ì=ò.ëeò.ñ�ì¥ò=î�¼�÷�÷oôY��ò�ø�ëUõ�ðÍ�\ô�ï�'^îUïH� ëÍ2�>_098C>æ2�A�2H2�DE6,BÎî,�\ô�ï�ëeò.öÀî�õtí+öÀò.ó¯ò.ó�ô#÷oî�õ�õ�ô�÷oò.öÀî�õÌëUì.ì�öÀü�õEÿ�·ô�õ%ò):N09BPO�@ D@BPOR64.*AYB�� � ó�ö®ì[÷oîUï.ï.ô�ì;�\î�õ�ð�ì¥ò=î·ò.ó�ôwö������®ö®÷�öÀòîUï�ëU÷Y�Àôº+Wñ�ô�ï.ú

¡ ¢ µ ¤ µ �÷í Á I §[RS©�R J R R R.ý � I JcQí µ cQ§¨RS©�R ¦ � e;e K R

RcQí Tµ cQ§[RS©�R ¦ � e;e K K R ¦ � K R

í+ó�ô�ï.ô¿¡ ¢¶µ ¤Eµ ö®ìwò.ó�ô²ï�ëUõ�ð�î � ì.ô�ì.ì.öÀî�õÚùUô�ú�ëUì.ì.ö®ü�õ�ô�ðV%Wú¹ò.ó�ô¯ï�ö®õ�ü¹�·ëUì=ò=ô�ïgëeò�ò.ó�ô¯ò.ö��gô¯î,' ò.ó�ô2C>_098C>Õ2�A�2H2�DE6,BÎî,�\ô�ï�ëeò.öÀî�õ��Õ¼+ì[ö®õt÷�ëUì=ô ¨ ø�öÀò[ö®ì�ô�ëUì=ú²ò=î·ì.ô�ô#ò.ó�ëeò[ò.ó�ô«"eë,�®ñ�ô�ì¥î,' R ëUõ�𼡠¢ µ ¤ µ í;ö����%\ô�ö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%]�ÀôÃ'Mï�î ��ò.ó�î�ì=ôwñ�ì=ô�ðÌö®õtò.ó�ô�ï�ô�ë,�4ì=úEì=ò=ô��R�

±,±

Page 34: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ú ��è�âI® � ó�ô«"eë,�®ñ�ô#î,' J ó�ëUì;õ�îUòÃ%\ô�ô�õ¶ì=ô�õcò^%cútëUõËëU÷�÷oôY��ò.ë9%��Àô���ëeï�ò.õ�ô�ï��¿;ô�÷oîUï�ð¬ò.ó�ôtò.ñ*���®ôÂcU� T R�� T R J R R R^1Ze4� � ó�ô�õbì=ô�ògì=ò.ëeò.ñ�ì�ò=î(¼�÷�÷oôY��ò�ø�ëUõ�ð �)ô�ïH'MîUïH�HëL2�>_098C> 2�A�24<2�DE6,B¹î,�\ô�ï�ëeò.öÀî�õÎí;öÀò.ó¶ò.ó�ô�÷oî�õ�õ�ô�÷oò.öÀî�õÎëUì�ì.öÀü�õ��gô�õcòQ: 09BPOÄ@ÄD@BPO&6�.*ACB�� � ó�ö¤ì;÷oîUï.ï.ô�ì��)î�õ�ð�ì ò=î¯ò.ó�ôö-�Q���®ö®÷�ö®òîUï�ëU÷Y�®ô�+cñ�ô�ï�ú

¡ ¢¶µ ¤Eµ �÷í Á I §[RS©�R J R R R.ý � I JcQí µ cQ§¨RS©�R ¦ � e;e K R

RcQí Tµ cQ§[RS©�R ¦ � e;e K K R ¦ � K R

ëUõ�ð¶ö®ìg"eë,�®ö®ð�'^îUï ò.ó�ôwì.ë,�·ô�ï.ô�ëUì=î�õ¶ëUì+ö®õÌ÷�ëUì=ô)°Z�S�ò�ö®ìwö����)îUï�ò.ëUõ%òàò=î8õ�îUò=ôTc@'^îUïQÉg�¤ëUö��г enø/ò.ó�ëeò�öf'[ëÎò.ñ*���Àô9ö¤ìwï.ô�÷oîUïnð�ô�ðCø�ò.ó�ô�õCø�í�� î*�®���Àø/ò.ó�ô J"eë,�®ñ�ô;ï.ô�÷oô�öf"Uô�ð/%cú&cU�·TQR��ÄT�e¦õ�ô�öÀò.ó�ô�ï0í�ëUì�õ�îUï0ôY"Uô�ï�úgí;ö����1%\ô;ì=ô�õcò7%Wú·ëUõ9ëU÷�÷oôY��ò.ë9%��Àôa��ëeï.ò.õ�ô�ï�øWð�ñ�ôò=î9ò.ó�ô�'�ëU÷oò ò.ó�ëeò^"eë,�®ñ�ô�ì[î,' J ëeï.ô#üUô�õ�ô�ï�ëeò=ô�ðËïnëUõ�ð�î ���Àú/%cútö®õ�ö®ò.ö®ëeò=îUï ö®õ�ì=ò.ëUõ�÷oô�ìY�

´Z�¸¼ °*c R eÃ+Wñ�ô�ï.ú²ò=îÂcU�SR��ZeÉ¥î�õ�ì.ö®ð�ô�ï[ò�íî¯÷�ëUì=ô�ìYíú ��è�âÍf cU�SR��Ze ó�ëUì;ó�ëUð¶ëQ�·ëeò.÷nó�ö®õ�ü9÷oî�õP"Uô�ï�ì.ëeò.ö®î�õ¶í;öÀò.óÌëUõÎëU÷�÷oôY��ò.ë9%��Àôº��ëeï.ò.õ�ô�ï)cU��TUR��ÄT-e4�

·Eô�ò9ì=ò.ëeò.ñ�ì²ò=îV¼�÷�÷oôY��ò²ëUõ�ð¬�\ô�ï�'MîUï4� ë½2�>_0,8�>º2YAC2H24DG69B�î,�\ô�ï�ëeò.öÀî�õ´í;öÀò.ó´ë¬F469B�B�AHF�>d>_6JcU� T R�� T e÷oî�õ�õ�ô�÷oò.öÀî�õËëUì�ì.öÀü�õ��gô�õcòY�Vuô�ò$�¾ìgì.ó�îOí ò.ó�ëeò�ò.ó�ö®ì�÷oî�õ�õ�ô�÷oò.öÀî�õ¬ëUì.ì.ö®ü�õ��gô�õcò�ö®ì��Àô�ü�ë,�_�(·�ö®õ�÷oôÂcU�ER��Pe�ó�ëUð¬ëª�·ëeò.÷�ó�ö®õ�üÏ÷oî�õEÿ"Uô�ïnì.ëeò.öÀî�õÏí;öÀò.óJcU�·TQR���T-enøCöÀòa'Mî �-�Àî�í;ì�ò.ó�ëeòQcU�·TQR���T e;ó�ëUì�ï.ô�÷oô�öf"Uô�ðÏò.ó�ô J ì=ô�õcòa%WúLcU�SR��ZenøuëUõ�ð½cU�SR��Zeï�ô�÷oô�öf"Uô�ðËò.ó�ô R ì=ô�õcò¸%Wú(cU� T R�� T e4�÷�ö®õ�÷oô R í¥ëUì+ë�'Mï.ô�ì�ó¶ï�ëUõ�ð�î � õcñ��º%\ô�ï üUô�õ�ô�ïnëeò=ô�ð&%Wú(cU� T R�� T enøö®ò^'Mî �-�Àî�í;ì ò.ó�ëeò;í�� î*�®�p��cU�SR��Pe;ï.ô�÷oô�ö�"Uô�ð R ë9'^ò=ô�ï�cU��TUR��ÄT-e[ì=ô�õcò;öÀòY�WS�ò+ö®ì õ�îOí?ô�ëUì=útò=î¯ì=ô�ôwò.ó�ëeò+ò.ó�ôîð*c J e�ëU÷oò.ö®î�õ�'MîUï¸cU� T R�� T e4í¥ëUì�ø�íº� î*�®���Àø%ö®õ�÷�ëUì=ô ¨ � � óWñ�ì�ø�cU� T R�� T e�í¥ëUì�î,�\ô�õ�'MîUï¦÷oî�õ�õ�ô�÷oò.öÀî�õ�'^ï.î �cU�ER��Pe4�ÃÅ � î*�®���Àø�cU��TUR��ÄT-eW%\ô�÷�ë,�gôwî,�\ô�õR'^îUï+÷oî�õ�õ�ô�÷oò.öÀî�õ$'^ï.î �ÐcU�ER��Pe;ë9'Mò=ô�ïQcU�SR��Pe;ì=ô�õcò J ø-ì�ö®õ�÷oô Jí¥ëUì;ë�'Mï.ô�ì�ótï�ëUõ�ð�î � õWñ��)%\ô�ï��SAõ¶ëUð�ð�öÀò.öÀî�õCø1%WúRÉg�¤ëUö��ϲcø�õ�î&>�AC2�>\D B*2C>_09B]F�A^.1032H2�57698;:Î÷oî�ñ��®ð¶ó�ë#"Uô�%\ô�ô�õR�\ô�ï�'MîUï4�gô�ð¯î�õLcU�SR��Zenøì�ö®õ�÷oô!cU�SR��Ze[ó�ëUì ó�ëUð¶ë��·ëeò.÷nó�ö®õ�ü·÷oî�õP"Uô�ï�ì.ëeò.öÀî�õÎí;öÀò.óÌëUõËëU÷�÷oôY��ò.ë9%��Àô)��ëeï.ò.õ�ô�ï��

ú ��è�âÕy cU�SR��Ze ó�ëUì;õ�îUò ó�ëUð¶ë��9ëeò.÷�ó�ö®õ�ü·÷oî�õN"Uô�ï�ì�ëeò.öÀî�õËí+öÀò.óÌëUõ¶ëU÷�÷oôY��ò.ë9%��®ôº��ëeï.ò.õ�ô�ï��»+î�í ÷oî�õ�ì.ö®ð�ô�ï ò§í�î9÷�ëUì=ô�ìYíú ��è�âÕyW� � ó�ô�ï.ô[ôoûEö¤ì=ò.ì/ôoû�ëU÷oò��Àú�î�õ�ô ¦ ì.ñ�÷nógò.ó�ëeò7+Wñ�ô�ï�öÀô�ì+í µ cQ§¨RS©�R ¦ e/ëUõ�ðoí Tµ cQ§¨RS©�R ¦ e/ó�ë#"Uô

%\ô�ô�õ¶ëUì.ùUô�ðCø�ëUõ�ð$+Wñ�ô�ï.ú¿í Á cQ§¨RS©�R J R R R#c vUlV µï UYX � Z[� \ ]^] _ e"%('oK ôÏ« X � Z�� \�¬ R¦ e[ó�ëUìÃ%\ô�ô�õ¶ëUì=ùUô�ðÎëUõ�ðÌï.ô�ò.ñ�ïnõ�ô�𼡠�ê�ô�ï�'^îUïH� ëÍ>�A�2�>�D@B*2C>_09B]F4Ag.103242457698;:tî,�\ô�ï�ëeò.öÀî�õ¯í;ö®ò.ó9ëeï.ü�ñ��·ô�õ%ò.ì«cU�SR��Ze0ëUõ�ð ¦ �¸cE»+îUò=ô±ò.ó�ëeòö¤õ¶ò.ó�ö®ì+÷�ëUì=ôÍcU�ER��Pe+ó�ëUì�õ�îUò+ó�ëUðÎë!�·ëeò.÷nó�ö®õ�ü¯÷oî�õN"Uô�ïnì.ëeò.öÀî�õ8í;öÀò.óÎëUõËëU÷�÷oôY��ò.ë9%��®ô)��ëeï�ò.õ�ô�ï��� ó�ö®ì�÷oî �Q�]�Àô�ò=ô�ì�ò.ó�ô!��ï.îWî,'�î,'¸Ég�¤ëUö�� ²P�Äe � ó�ö®ì#ö®ìº�Àô�ü�ë,�Õ'^îUïwò.ó�ô!'Mî ���®î�í;ö®õ�üÌï.ô�ëUì=î�õ�í � ó�ôî�õ��Àú�îUò.ó�ô�ï!���®ëU÷oôÌí;ó�ô�ï�ô¶ë½>�A�2�>�D B*2C>_09B]F�A�.1032H2�57698;:Ø÷oî�ñ��¤ðJ%)ô¶ëUì.ùUô�ð î�õ´ëUõ îUï�ö®ü�ö®õ�ëeò=îUïö¤õ�ì=ò.ëUõ�÷oô¯ö®ìwö®õÚ÷�ëUì=ôR°Ìî,'Mí Á �&�+î�í�ôY"Uô�ï�ø¦ò.ó�ëeò�÷�ëUì=ôÌ÷�ëUõ�î�õ��ÀúT�Àô�ëUð�ò=î8ëËò=ô�ì.ò�öf'[ëËò.ñ*���ÀôcU�ER���R$�$�$�#e±ó�ëUì)%\ô�ô�õ�ï.ô�÷oîUï�ð�ô�ð��$·�ñ�÷�óÚë¶ò.ñ*���®ô9÷�ëUõ�î�õ��Àú¹%\ô·ï�ô�÷oîUï�ð�ô�ð(%Wú¹ëUõV¼ °¶ëU÷oò.ö®î�õ��»+î�íwø�÷Y�Àô�ëeïH�Àú¯õ�îgò.ñ*���®ô±ó�ëUìg%)ô�ô�õtï�ô�÷oîUï�ð�ô�ðÌò.óWñ�ìÃ'�ëeïÃ%cú¯ò.ó�ö®ìü °�ëU÷oò.öÀî�õCø-ëUõ�ðÌë,�®ì=î·õ�îQ¼ °ëU÷oò.ö®î�õ¯÷oî�ñ��®ð9ó�ë#"Uô±îW÷�÷�ñ�ï�ï.ô�ð9î�õªcU�SR��ZeÕ%\ôY'^îUï.ôdc^í�ô±ð�î�õB� ò¥ë,���Àî�íÌ�gîUï.ô�ò.ó�ëUõ²î�õ�ôa¼ °àëU÷oò.öÀî�õò=î!%)ô«�\ô�ï�'^îUïH�gô�ðtî�õËëUõ%ú���ëeï.ò.ö¤÷�ñ��®ëeï ö®õ�ì.ò.ëUõ�÷oôte4�c�ëNe�S{'Cò.ó�ô�ò=ô�ì=ò¥ö®ìì�ñ�÷�÷oô�ì.ì;'�ñ��qøcò.ó�ô�õ²ì.ô�ò�ì=ò.ëeò.ñ�ìò=îQ¼�÷�÷oôY��ò¥ëUõ�ð9ôoû1�\î�ì=ô±ñ�ì.ö®õ�üwùUô�ú�¡ � � ó�ö®ì

ö¤ì[ëU÷�÷oôY��ò.ë9%��Àô)'MîUï ò.ó�ô�ì.ë,�gô�ï.ô�ëUì.î�õ�ì;ëUì ë9%\ît"Uô,�c@%�e © ò.ó�ô�ï.í;ö®ì.ôUø)ï�ô�÷oîUï�ð�ò.ó�ô�ò.ñ*���®ôRcU�ER���R J R R R�# enø/ì=ô�ò�ì.ò.ëeò.ñ�ì#ò=î$¼�÷�÷oôY��ò�ø�ëUõ�ðª�\ô�ï�'^îUïH� ë

2C>_098C>72�A�2424DG69BÏî,�)ô�ïnëeò.öÀî�õÌí;öÀò.ótò.ó�ô�÷oî�õ�õ�ô�÷oò.öÀî�õÎëUì.ì.öÀü�õ��·ô�õ%òº: 0,BPO�@ D BZORFH69B�BÊA�F�>E�

±3j

Page 35: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

� ó�ö®ì¥÷oîUï.ï.ô�ì;�\î�õ�ð�ì¥ò=î·ò.ó�ôwö������®ö®÷�öÀòîUï�ëU÷Y�Àôº+Wñ�ô�ï.ú

¡ ¢�¤ �÷í Á I §¨RS©�R J R R R.ýa� I JcQí µ cQ§[RS©�R ¦ � e;e K R

RcQí Tµ cQ§¨RS©�R ¦ � e;e K K R ¦ � K R

í+ó�ô�ï.ô>¡£¢�¤0ö®ì\ò.ó�ô¦ï�ëUõ�ð�î ��ì=ô�ì.ì.ö®î�õ#ùUô�ú#ëUì.ì.öÀü�õ�ô�ð %Wú�ò.ó�ô¦ï�ö®õ�üg�9ëUì=ò=ô�ï�ëeò4ò.ó�ô/ò.ö��gô/î,'Eò.ó�ô2C>_098C>�2YA�2424DG69B¶î,�\ô�ï�ëeò.öÀî�õ��ÕÉÃ�Àô�ëeïH�ÀúUø�ò.ó�ö®ì0ö������®ö®÷�öÀò�+Wñ�ô�ï.ú�í;ö�����õ�îUò�øcí�� î*�®�p�ÀøWì.ó�ëUð�î�í ëUõ%ú��ï�öÀîUï�ôoûZ���¤ö®÷�öÀò�+Wñ�ô�ï�ö®ô�ì�ø\îUï#ô��®ì=ô�íô�í�î�ñ��®ðÏó�ë�"Uôgôoû1�\î�ì=ô�ð��«Å � î*�®���ÀøuöÀò±í�î�õB� ò#ì.ó�ëUð�îOíëUõ�îUò.ó�ô�ïö������®ö®÷�öÀò�+Wñ�ô�ï.úd'Mï.î �ÕëUõ!¼ °#ëU÷oò.öÀî�õCøZ%Wú�ò.ó�ô ï�ëUõ�ð�î �9õ�ô�ì.ì/î,' J "eë,�®ñ�ô�ìY�æ¼a�®ì=î�øö®ò0í�î�õB� ò�ì�ó�ëUð�î�í�ëUõ¯ö��Q���¤ö®÷�öÀòæ+cñ�ô�ï.úQ'Mï�î � ë)î ¨ ëU÷oò.ö®î�õ²î,'4ëUõcú9ö®õ�ì=ò.ëUõ�÷oôQcU�·TQR���T-enø�ì.ö®õ�÷oôò.ó�ëeògíî�ñ��¤ðbö-�Q���Àú�ò.ó�ëeò&cU�ER��Pe�ó�ëUð ëT�9ëeò.÷�ó�ö®õ�üÏ÷oî�õP"Uô�ï�ì.ëeò.ö®î�õ´í;öÀò.ó¬ëUõ ëU÷�÷oôY��ò.ë9%]�Àô�-ëeï.ò.õ�ô�ï�c�ëUì�§wøy©¯ø J øCëUõ�ð R í�î�ñ��®ðÏó�ë#"Uô�ò=î$�·ëeò.÷�ó]enø4ëUõ�ð8ì.î¯í�ô�íî�ñ��®ðÏõ�îUò�%\ô�ö®õ÷�ëUì.ô)°�î,'æ¼a°Z�

ú ��è�âÕyW�b»;î9ì�ñ�÷�ó ¦ ôoûEö®ì.ò.ìY�¿;ô�÷oîUï�ðÌò.ó�ô±ò.ñ*�]�Àô�cU�ER���R J R R R�# e4� � ó�ô�õ¯ì.ô�ò ì=ò.ëeò.ñ�ì¥ò=î�¼�÷�÷oôY��ò�ø�ëUõ�ðÍ�\ô�ï�'^îUïH� ëÍ2�>_098C>æ2�A�24<2�DE6,B�î,�)ô�ïnëeò.öÀî�õ¶í;ö®ò.óÌò.ó�ôw÷oî�õ�õ�ô�÷oò.öÀî�õÎëUì�ì.öÀü�õ��gô�õcò): 0,BPO�@ D BZO$FH69B�B�A�F#>E� � ó�ö®ì[÷oîUï.ï�ô�ì;�\î�õ�ð�ìò=î9ò.ó�ôwö��Q�]�®ö®÷�öÀòîUï�ëU÷Y�Àôº+Wñ�ô�ï.ú

¡�¢�¤��÷í Á I §¨RS©�R J R R R.ý � I JcQí µ cQ§¨RS©�R ¦ � e;e K R

RcQí Tµ cQ§¨RS©�R ¦ � e;e K K R ¦ � K R

ëUõ�ð¶ö®ìg"eë,�®ö®ð�'^îUï ò.ó�ôwì.ë,�·ô�ï.ô�ëUì=î�õ¶ëUì+ë9%\î#"Uôwëeò+ò.ó�ô#ô�õ�ðÌî,'�÷�ëUì=ôd°eë1�S�ò�ö¤ìuö��Q�\îUï.ò.ëUõcòuò=î�õ�îUò=ô«c@'MîUïÕÉg�®ëUö�� ²,enøUò.ó�ëeò�ö�'Eë;ò.ñ*���Àôö®ì4ï.ô�÷oîUïnð�ô�ðÍc^ô�ö®ò.ó�ô�ï�ö¤õ�÷�ëUì=ôðeë;îUï�ö®õ÷�ëUì.ô¸°3%�enøUò.ó�ô�õCøUí�� î*�®�p�Àø�cU�SR��Pe�í;ö-���%õ�ôY"Uô�ïæ%\ô¥÷oî�õ�ì.ö®ð�ô�ï.ô�ðwò=î#ó�ë#"Uô ë��9ëeò.÷�ó�ö®õ�ü±÷oî�õP"Uô�ï�ì.ëeò.ö®î�õí+öÀò.ó9ëUõtëU÷�÷oôY��ò.ë9%��®ô���ëeï�ò.õ�ô�ï�øEð�ñ�ô ò=î�ò.ó�ôa'^ëU÷oò�ò.ó�ëeòW"ië,�®ñ�ô�ì0î,' R ëeï.ô+üUô�õ�ô�ï�ëeò=ô�ð¯ï�ëUõ�ð�î ���®ú%WúÏï.ô�ì;�\î�õ�ð�ô�ïàö®õ�ì=ò.ëUõ�÷oô�ì��ªcE¿;ô�÷�ë,���¦ò.ó�ëeò�ö®õ�î�ñ�ï�ð�ôCÓ-õ�ö®ò.öÀî�õÏî,'£�;�·ëeò.÷�ó�ö®õ�üË÷oî�õP"Uô�ï�ì.ëeò.öÀî�õ6�í�ôwëeï.ôàõ�îUò ÷oî�õ�÷oô�ï�õ�ô�ðËí;öÀò.ótò.ó�ôwò.ö��·ö®õ�ü�î,'�ì=ô�õ�ð�ì[ëUõ�ðÌï.ô�÷oô�öf"Uô�ìY�Äe

ú ��è�âÕyWz � ó�ô�ï.ô�ö®ìÃ�gîUï�ô�ò.ó�ëUõÌî�õ�ô�ì�ñ�÷�ó ¦ �¼�%\îUï.ò[í;öÀò.óÌëUõVD B�D@>EDG0,>_698>ËY09DU@Ä=18�AC�\Å � î*�®���Àø-ò.ó�ö®ì[÷�ëUì=ôwí;ö����\õ�îUò îE÷�÷�ñ�ï�ø*%Wú$Ég�®ëUö��Ï´Z�

W Ý Ü %!â ì�ìy`;àRì.`���-�ëÊé½� àÅg8;6�6�Ë�6�Ë'½�@f09D@X�Ìåk�Å�ôwí+ö����)÷�ë,���4ëUõÌîUï�ëU÷Y�®ôº+cñ�ô�ï.ú²î,'�'^îUïH� í Á cQ§¨RS©�R J R R R S R ¦ eo��%�ëUð �9öf'

S � ý ��c RcQí Tµ cQ§[RS©�R ¦ e;e K R

JcQí µ cQ§¨RS©�R ¦ e;e K eI�

·Eñ����\î�ì=ôÌò.ó�ëeò¯í;öÀò.ó´ì=î �·ô8õ�î�õ�õ�ô�ü �®öÀü�öf%]�Àô���ï.î,%�ë9%�ö-�®öÀò§ú-�²ò.ó�ô�ï.ôËí+ö����g%\ôÎë�ï.ô�ì;�\î�õ�ð�ô�ï�'�ëUö��®ñ�ï.ô,� � ó�ö®ìö��Q�]�®öÀô�ì�ò.ó�ëeò�ò.ó�ô�ï�ô·í;ö�����%\ô9ì=î �·ô·ï.ô�ì;�\î�õ�ð�ô�ï�ö¤õ�ì=ò.ëUõ�÷oô&c-)�·TQR.)�ÄT eQc^í;öÀò.ó�©Ð�Ó��´l+ ¢�µ ëUõ�ð §Ó�ÓÅq��´l+¢¶µ +¤Eµ e±ì.ñ�÷nóò.ó�ëeò ò.ó�ô�'Mî �-�Àî�í;ö¤õ�ü���%-ëUð¶ôY"Uô�õcòS�·îE÷�÷�ñ�ï�ìYí

¨ �¸+Wñ�ô�ï.ú�î ¨ c )J e¥ö®ìÃ�9ëUð�ô�ò=î¹c )�·TQR )�ÄT�e[ëUõ�ðtï.ô�ò.ñ�ï�õ�ì )R ø�ëUõ�ð°Z�;ëeò«�Àô�ëUì.ò+ò�íî ��%�ëUð �Í+Wñ�ô�ï�öÀô�ì�ëeï.ô��·ëUð�ô�í;öÀò.óJcQ§[RS©�R )J R )R e;ëUõ�ð8ð�ö®ì=ò.ö®õ�÷oò^"ië,�¤ñ�ô�ì�î,' ¦ ø]%\ôY'^îUï.ô�ò.ó�ô�ï.ôö¤ì;ô�öÀò.ó�ô�ï±ë¯ì.ñ�÷�÷oô�ì�ì;'^ñ��\>�AC2�>gD@B*2�>_09B�F4A .1032H2�57698;:�î�õ½c*) � T R.)� T e îUï±ëUõÏö®õ�öÀò.ö®ëeò=îUïa'^ëUö��¤ñ�ï.ô,�)cE»+îUò=ôgò.ó�ëeò±ò.ó�ôì�ö��àñ��®ëeò=îUï+ë9%\îUï.ò.ì+í;ó�ô�õÎöÀò ô�õ�÷oî�ñ�õcò=ô�ï�ì�ëUõÎö¤õ�öÀò.ö®ëeò=îUï^'�ëUö��®ñ�ï.ô,� � ócñ�ì�ø-öf'�ë²ï.ô�ì;�\î�õ�ð�ô�ï^'�ëUö��®ñ�ï.ô#îW÷�÷�ñ�ï�ì�øò.ó�ëeò;ö��Q���¤öÀô�ì�ò.ó�ëeò;õ�î·ö®õ�öÀò.ö®ëeò=îUïÃ'�ëUö��®ñ�ï.ô±ó�ëUì;îW÷�÷�ñ�ï�ï.ô�ðÌì=î�'�ëeï��Äe

Å�ô#í;ö��-��ò.ó�ô�õÌì.ó�î�íFó�îOí�ò=î�÷oî�õ�ì=ò=ï�ñ�÷oò[ëgð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ô�ïqä '^îUï[ò.ó�ô#ý±ýa� ��ï.î,%]�Àô��ÌøWí;öÀò.ótö®õ*��ñ�ò�c$#ÇR&%dR2� e4�� ó�ôËö®ð�ô�ë�î,'#ò.ó�ôÎ÷oî�õ�ì=ò=ïnñ�÷oò.öÀî�õØö¤ì·ì.ö��·ö-�®ëeïgò=îÚò.ó�ô¶î�õ�ôÎö¤õ ò.ó�ô&��ï.îcî,'±î,')Ég�¤ëUö�� ¨ � ¼;ü�ëUö¤õCø[íôÎí;ö����

�=ö®õ�÷oîUïH�)îUïnëeò=ô���#2ö®õcò=îÎó�ë,��'�î,';ò.ó�ô�í µ ï.ô�ì;�\î�õ�ì=ô�ìÍc^ï�ëUõ�ð�î ���®ú*enø�ëUõ�ðÍ%�ö®õ%ò=îÂî ¨ ï.ô�ì��)î�õ�ì=ô�ì/c�öG� ô,�Àø/ò.ó�ô R±,³

Page 36: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

"eë,�®ñ�ô�ì4e4� � ó�ô��·ëUö®õ¶ð�öfh)ô�ï.ô�õ�÷oô±ö¤ì ö®õtò.ó�ô�ð�ôCÓ)õ�öÀò.öÀî�õ¯î,'�ò.ó�ô«%�ëUðÌôY"Uô�õcòYí7SAõ¹Ég�¤ëUö�� ¨ ø�ò.ó�ô«%�ëUð¶ôY"Uô�õ%ò�÷oî�ñ��®ðõ�îUò îE÷�÷�ñ�ï�ë9'Mò=ô�ï±ë9ì.ñ�÷�÷oô�ì.ì;'�ñ��Õ>�A�2C>7D@B*2C>_09B]F4A�.1032H2�57698;:Ïî�õ� �§¨RS©�¥ �WSAõÌò.ó�ö¤ì ÷Y�®ëUö��Ìø�ò.ó�ô�%�ëUðËôY"Uô�õ%ò±ö®ì[î�õ��®úü�ñ�ëeï�ëUõcò=ô�ô�ðËõ�îUò�ò=î9îW÷�÷�ñ�ï ë9'^ò=ô�ï;ëgì.ñ�÷�÷oô�ì.ì;'�ñ��æ>�A�2C>ÕD@B*2�>_09B�F4AÃ.103242457698;:Îî�õtò.ó�ô�2_.*AHFYD �\FdD@B*2�>_09B�F4Aàö®õP"Uî �f"Uô�ð��c � ó�ô¯ï.ô�ëUì=î�õJ'^îUïgò.ó�ôtð�ö¶h\ô�ï.ô�õ�÷oôtó�ëUì�ò=î�ð�î8í;öÀò.óbò.ó�ôtì;�\ô�÷�ö®ë,�¥ó�ëUõ�ð��®ö¤õ�üÌî,')>�AC2�>«D@B*2�>_0,B]F4A�.103242457698;:½'^îUïð�ëUõ�ü �¤ö®õ�üà÷oî�õ�õ�ô�÷oò.öÀî�õtëUì.ì.öÀü�õ��gô�õ%ò.ì��ÄeQ·Eö®õ�÷oô+ò.ó�ô %�ëUð9ôY"Uô�õcò ö®ì�ò.óWñ�ì\�®ô�ì.ì�ï.ô�ì=ò=ï�ö®÷oò=ô�ð4ø2ä õ�ô�ô�ð�ìò=î�ü�ñ�ô�ì.ì¥ò.ó�ôëU÷oò.ñ�ë,�4ö¤õ�ì=ò.ëUõ�÷oô#í;ó�ô�ï.ô±ò.ó�ô«%�ëUðÌôY"Uô�õcò í;ö��-�-îE÷�÷�ñ�ï�ø�ëUì î,���\î�ì=ô�ðtò=î�ß.ñ�ì=ò¥ü�ñ�ô�ì.ì.ö¤õ�ü�ò.ó�ô«��ëUöÀï[î,'�ñ�ì=ô�ï�ì�� � ó�ö®ìï.ô�ð�ñ�÷oô�ì[ò.ó�ôwì.ñ�÷�÷oô�ì.ìÃ��ï.î,%-ë9%�ö��®öÀò�ú·î,'+ä c�ëUì+÷oî �Q��ëeï.ô�ð¶ò=îÍÉg�®ëUö�� ¨ eg%cútëQ'�ëU÷oò=îUï;î,' µB �© ñ�ï ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ïÂäÀ'MîUï;ö¤õ*��ñ�ò�c$#ÇR&%dR2� e�ï�ñ�õ�ì[ëUì^'^î ���Àî�í+ìYí

¨ ��X±ô�õ�ô�ï�ëeò=ôwïnëUõ�ð�î �43 µ ëUõ�ð53 ¾ %\ô�ò�íô�ô�õ ¨ ëUõ�ðÙçº�°Z�^SAõ�öÀò.ö¤ë,�®ö"!�ô±ò§í�î!�®ö®ì.ò.ìÃîW¼�ý §#ëUõ�ð$îg¼�ý µ c�ö®õ�öÀò.ö®ë,�-�Àú·ô��Q��ò�ú*e4�±Z�^Å�ô¯í;ö��-��%)ô9ï�ñ�õ�õ�ö¤õ�ütò.ó�ô9ì.ö���ñ��®ëeò=îUï�ö®õ�ò.ó�ô¯õ�îUïH�·ë,�7�·ëUõ�õ�ô�ï�ø�%�ñ�ò«�]�®ë�úEö®õ�ü¶ò.ó�ô9ï�ö®õ�ü$�·ëUì=ò=ô�ï�ë,�®ì=î*�

c � ó�ëeò0ö®ì�øUí�ô í;ö-���c÷nó�îWî�ì=ô^��ëUì.ì.íîUï�ð�ì�'MîUï0ñ�ì=ô�ïÕ��ëUöÀïnì�ø�ëUõ�ðgëUõ�ì=í�ô�ï0ëUõcúàò=ô�ì.òÕ��ëUì.ì=í�îUï�ð�+Wñ�ô�ï�ö®ô�ìY�Äe�¿+ñ�õò.ó�ô�ì.ö���ñ��®ëeò.öÀî�õtñ�õcò.ö��)ò.ó�ôm3 µ ò.ó$��ëUöÀï¥î,'�ñ�ì=ô�ï�ì�cQ§¨RS©Qe[ö®ìg�gô�õ%ò.ö®î�õ�ô�ð��¸c � ó�ö¤ìÃ�·ë�úÍ%\ôa'^ï.î � ëUõtîUïnëU÷Y�Àô+Wñ�ô�ï.ú�í µ cQ§[RS©�R$�Äenø�îUï«'Mï.î ��ëUõJD@B�DE>EDE0�@ÄDK¾#A!=Z2YAY8dD@B*2C>_09B]F4A/+Wñ�ô�ï.úÎí;öÀò.óÏñ�ì=ô�ï SAý §ÕëUõ�ðª��ëeï.ò.õ�ô�ï«S�ý©¯øWîUï\"Eö®÷oôoÿ_"Uô�ï�ì�ë1�ÄedSU'Cí�ô�ü�ñ�ô�ì.ì=ô�ðn3 µ ÷oîUï.ï.ô�÷oò��ÀúUøEò.ó�ö¤ìÕ��ëUöÀïí;ö�����%)ô+ò.ó�ô+ö¤ð�ô�õ%ò.ö®ò.öÀô�ì¦î,'4ò.ó�ô+ñ�ì=ô�ïnìö®õ9ò.ó�ô��%-ëUðÌôY"Uô�õ%òY���

j*� © õ�÷oô[§ ëUõ�ða© ëeï.ô�ì=ô�ò�ø)÷oî�õ%ò.ö®õWñ�ô�ëUì+ö®õtò.ó�ô#îUï�öÀü�ö¤õ�ë,�Cì.ö���ñ��®ëeò=îUï�ø�ôoû�÷oôY��òYíc�ëNe�î ¨ c J e�+cñ�ô�ï�úÚò=î¹ò.ó�ô?3 ¾ ò.ó ï.ô�ì��)î�õ�ð�ô�ï·ö®õ�ì=ò.ëUõ�÷oôVc )�·TQR )��T-e�í;öÀò.óÖ��´,+¢ µ � © ëUõ�ðÖÅd��´l+¢ µ +¤ µ � §)í

ï�ô�ì;�\î�õ�ðtí;öÀò.ó )R �¡%/�qVuô�ò )J � J �S{'�íôwü�ñ�ô�ì.ì=ô�ðo3 ¾ ÷oîUï.ï�ô�÷oò��ÀúUø�ò.ó�ö¤ì[í;ö����Ê%\ô#ò.ó�ôwï.ô�ì;�\î�õ�ð�ô�ï ö®õ�ì=ò.ëUõ�÷oôwö®õ¶ò.ó�ôÇ��%�ëUðËôY"Uô�õ%òY���½»+îUò=ôò.ó�ëeò;öÀò ö®ì © `Ñò=î9ì=ô�ò )R �¡%²ø�ì.ö¤õ�÷oôx%Õö¤ì[ëUì.ì.ñ��gô�ð¶ò=î�%\ô�ñ�õ�öf'^îUïH���Àú·ð�ö®ì=ò=ï�öf%-ñ�ò=ô�ð��

c@%�e�í µ cQ§¨RS©�R ¦ e4íæSU' ¦ � ¦ � ø%ò.ó�ô�õgì=ô�ò��9i ¦ lÀ�9�9i ¦ � l®� k1� © ò.ó�ô�ï.í;ö®ì=ôUø �®ô�ò:�3i ¦ lHFHG8 #k2R ¨ ¥ �7¿;ô�ì;�\î�õ�ðí+öÀò.óÂc$#�= « \�¬ �2ì ! � ôÏ« X � Z[� \ä¬ �·îWð��Êeå�Iíâ�uø1'^îUï ì�FHG�� �� øâëgi §[RS©�R ¦ l[FHG�� � '�µ ëUõ�ð'í�FHG�� î ¾ ï ð ��ò �

c�÷#e�¼ °*c R e7+cñ�ô�ï�ú�ò=î�ö®õ�ö®ò.ö®ëeò=îUï0ö®õ�ì.ò.ëUõ�÷oô)cU�SR��Zenø�í;ó�ô�ï.ô���´{¢y�÷§�ëUõ�ð¿Åq��´{¢�¤{�÷©Ííæîô�ó�ë�"Uô±ëUìö®õ9ò.ó�ôîUïnöÀü�ö®õ�ë,�Cì.ö-�àñ��¤ëeò=îUï�øEôoûE÷oôY��ò�öf'uí�ô�üUô�ò;ö¤õ%ò=î9÷�ëUì.ô)°Wø�ò.ó�ô�õ$�®îcîUùÍ'MîUï�+cñ�ô�ï�ú

í Á cQ§¨RS©�R J R R R#c RcQí Tµ cQ§[RS©�R ¦ � e;e K e %�'oK ôÏ« X � Z[� \ m ¬ R ¦ � eIR

ö_� ô,�Àø�öÀü�õ�îUï.ô�ëUõcú ¦ O� ¦ � �»+îUò=ô9ò.ó�ëeò�íôgùEõ�îOí ¦ � ø�ëUõ�ðÏò.ó�ëeò/cQí µ cQ§[RS©�R ¦ � e;e K �¥� Kñù ôÏ« X � Z[� \ m ¬qøuì.ö®õ�÷oô��3i ¦ � lq� k1� � óWñ�ì�øò.ó�ô�îUï�öÀü�ö®õ�ë,�4ì.ö���ñ��®ëeò=îUï í+ö����)íîUï�ùt÷oîUï�ï.ô�÷oò��ÀúÌö®õÌò.ó�ö¤ì ÷�ëUì=ô,�gS�ò+ö®ì ì.ë9'^ô�ò=î²ö®ü�õ�îUï.ô#îUï�ëU÷Y�Àôd+cñ�ô�ï�öÀô�ìí+öÀò.ó ¦ O� ¦ � øEì.ö®õ�÷oô;ò.ó�î�ì=ô;í�î�ñ��®ð�õB� òÕ�Àô�ëUð·ò=î�ëUõ²ëU÷�÷oôY��ò c�ëUìò.ó�ô)>�AC2�>�D@B*2�>_09B�F4A\.*032H2�57698�:$+cñ�ô�ï�úí�î�ñ��®ð�'�ëUö�� e4�S�òÌö®ì²ô�ëUì=ú´ò=î ì=ô�ôÏò.ó�ëeòtò.ó�ô8î�õ��Àú í¥ë�úØò.ó�ö®ìÍ%)ô�ó�ë�"EöÀîUïÍ�9öÀü�ó%òÍ%\ôÎð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%��Àô�'^ï.î � ò.ó�ôîUïnöÀü�ö®õ�ë,��ì.ö���ñ��®ëeò=îUïtö®ìtöf'#ò.ó�ö®ì�+Wñ�ô�ï.ú´í¥ëUìÌì.ñ*���)î�ì.ô�ð´ò=î´÷�ëUñ�ì=ô�ëUõ ë9%\îUï.ò(c�öG� ô,�Àø+ëUõ�ö¤õ�öÀò.ö®ëeò=îUï'�ëUö��®ñ�ï.ôte4�æ�;îOíôY"Uô�ï�ø�ò.ó�ö®ì¥ö®ì¥õ�îUò[ë���ï.î,%��®ô��Rí�S{'4ò.ó�ô %�ëUðtôY"Uô�õcò ó�ëUì[ë,�Àï�ô�ëUð�ú·îE÷�÷�ñ�ï.ï.ô�ðCøEò.ó�ô�õ¯í�ôëeï�ô�õ�îd�Àî�õ�üUô�ï�ö®õ%ò=ô�ï�ô�ì=ò=ô�ð²ö¤õ���ï.ô�ì.ô�ï�"Wö¤õ�ü�ö®õ�ð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%�ö��¤ö�ò§ú,� © õ9ò.ó�ô;îUò.ó�ô�ï[ó�ëUõ�ðCø%öf'\ò.ó�ôa%�ëUðôY"Uô�õcò¥ö®ì0ì=ò.ö-����ë9%\î�ñ�ò0ò=îàîW÷�÷�ñ�ï�øcò.ó�ô�õ9ò.ó�ö®ìÕ+Wñ�ô�ï.úg÷oî�ñ��¤ð�õB� ò0÷�ëUñ�ì.ô+ëUõ¯ö®õ�öÀò.ö®ëeò=îUï7'^ëUö��¤ñ�ï.ô�c�ì.ö®õ�÷oô+ò.ó�ô%-ëUðÌôY"Uô�õ%ò�ø]%cútð�ôCÓ-õ�öÀò.öÀî�õCø�÷�ëUõB� ò îE÷�÷�ñ�ï;ë9'^ò=ô�ï+ëUõËö®õ�öÀò.ö®ëeò=îUïÃ'�ëUö��®ñ�ï.ôte4�

c�ð]e�í Á cQ§¨RS©�R J R R R S R ¦ ea+cñ�ô�ï.úUø-í+öÀò.óËë²ò.ñ*���ÀôÍcU�SR���R J R R R�#«e�ï.ô�÷oîUï�ð�ô�ð4ø®§É�Ã��´{¢�ø®© �fÅq��´M¢�¤,ígSU'¦ � ¦ � ø)ò.ó�ô�õ¹%\ô�ó�ë#"UôgëUì#ö®õËò.ó�ô�îUïnöÀü�ö®õ�ë,��ì.ö���ñ��®ëeò=îUïQc^ò.ó�ö®ì�í;ö����p%\ôà÷oîUï.ï.ô�÷oò�ø�ì.ö®õ�÷oôi�9i ¦ � l�� kNe4�© ò.ó�ô�ï.í;ö®ì.ôUø�ï.ô�ò.ñ�ï�õ�a4FHG  #k2R ¨ ¥�@��� ó�ö®ì«%\ô�ó�ë#"WöÀîUï�ö®ìwö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��Àôº'^ï.î � ò.ó�ô9îUï�ö®ü�ö®õ�ë,�¦ì.ö-�àñ��¤ëeò=îUïº'^îUïwò.ó�ôtì.ë,�gô²ï.ô�ëUì=î�õ�ì�ëUì�·ô�õ%ò.öÀî�õ�ô�ð¶ö®õtò.ó�ôº¼ °Q+Wñ�ô�ï.ú,�

±,´

Page 37: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

c^ôte¿í Á cQ§¨RS©�R )J R )R R S R ¦ e�+cñ�ô�ï.ú�c�õ�îUò=ô¥ò.ó�ëeò�ò.ó�ö®ìu÷�ëUì=ô�í;ö��-��õ�îUò�øeí�� î*�®���ÀøUît"Uô�ïH�®ë9��í;öÀò.ó�ò.ó�ô\��ï�ô�÷oô�ð�ö®õ�üî�õ�ô7'^îUïuï.ô�ëUì=î�õ�ì�ì.ö-�·ö��®ëeïCò=î+ò.ó�î�ì=ô\�·ô�õ%ò.öÀî�õ�ô�ðwö®õ�÷�ëUì.ôW°[î,' í Á ö®õ#ò.ó�ô�ð�ô�ì.÷oï�öf��ò.öÀî�õ#î,'Eò.ó�ô0îUïnöÀü�ö®õ�ë,�ì�ö��àñ��®ëeò=îUï�øEöG� ô,�ÀøEò.ó�ëeò�ö®òí�î�ñ��®ð¯ö��Q���®ú�ëd�·ëeò.÷nó�ö®õ�ü�÷oî�õN"Uô�ïnì.ëeò.öÀî�õtí;öÀò.ó¯ëUõtëU÷�÷oôY��ò.ë9%��Àô ��ëeï�ò.õ�ô�ï�øëUõ�ðÌò.ócñ�ì[ò.ó�ô�ò.ñ*�]�Àô�cU�SR���R$�$�$��e�í�î�ñ��®ð�õB� ò[ó�ë#"Uôº%\ô�ô�õtï.ô�÷oîUï�ð�ô�ð]e4íS{'>í µ cQ§¨RS©�R ¦ e;ëUõ�ðZíÇTµ cQ§[RS©�R ¦ e íô�ï.ô�+Wñ�ô�ï�öÀô�ðCø�ò.ó�ô�õÎð�î·ò.ó�ôd'Mî ���®î�í;ö®õ�ü&c�ëUõ�ðËîUò.ó�ô�ï.í;ö®ì=ôUø)ëUõEÿì.íô�ï+ò.ó�ô�+cñ�ô�ï.ú¯ëUì+ö®õtò.ó�ô#îUï�ö®ü�ö®õ�ë,�Cì.ö���ñ��®ëeò=îUïCe4í��öÀïnì=ò õ�îUò=ô�ò.ó�ëeò+öf'uò.ó�ö¤ì ö®ì[ëQ%�ëUð&+cñ�ô�ï�úUø�ò.ó�ô�õ

S �÷ä�í I )JcQí µ cQ§¨RS©�R ¦ e;e K R

)RcQí Tµ cQ§[RS©�R ¦ e;e K K

�÷ä�í I )J# = « \ä¬ K � Kñù ôÏ« X � Z[� \ä¬ R

%� Kñù ô µ « X � Z[� \ä¬ K �

»+î�í ÷oî �Q��ñ�ò=ô

= � S �ä� = « \�¬ K �B% K ôÏ« X � Z[� \�¬ �Nc )J �B# 'å= « \�¬ K ��� 'oK ôÏ« X � Z[� \�¬ e K ô µ « X � Z[� \ä¬ �êñ�ò = î�õÌò.ó�ôº�®ö¤ì=òÃîW¼�ý = « \ä¬ � � ó�ô�õtï.ô�ì;�\î�õ�ðtí;ö®ò.óÌëgï�ëUõ�ð�î �,a��S{'uò.ó�ô«%�ëUðtôY"Uô�õ%ò+ö®ì[ë9%\î�ñ�ò[ò=îgîW÷�÷�ñ�ï�ø�ò.ó�ô�õtò.ó�ö®ì¥ï�ô�ì;�\î�õ�ì=ô�í;ö����]%\ô±ö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��ÀôÃ'^ï.î � ò.ó�ôîUïnöÀü�ö®õ�ë,�\ì.ö���ñ��®ëeò=îUï�ø�ì.ö®õ�÷oô#õ�î·ì.ñ�÷�÷oô�ì.ì;'�ñ���>�A�2�>\D@B*2�>_09B�F4A^.103242457698;:Îî�õVc-)�·TQR.)��T-e�÷�ëUõËîW÷�÷�ñ�ïÃ%\ôY'^îUï.ôò.ó�ô�%�ëUðÌôY"Uô�õcòY�

¼¥ò�ò.ó�ô9ô�õ�ð�î,'[ò.ó�ô²ì�ö��àñ��®ëeò.öÀî�õCø�÷�ó�ô�÷�ù�í;ó�ô�ò.ó�ô�ïwò.ó�ôÍ�®ö®ì=ò.ì�îg¼�ý §9ëUõ�ðLîg¼+ý µ ö¤õ%ò=ô�ï�ì.ô�÷oò�c�õ�îUò=ô¯ò.ó�ëeòàò.ó�ö®ì÷�ó�ô�÷.ù¬÷�ëUõJ%)ôtð�î�õ�ôtö®õÚò.ö��gô?>�c^ç¹�®îUü�ç enøÕ%Wú�ì=îUï�ò.ö®õ�ü8ò.ó�ôR�®ö®ì=ò.ìàò=îUüUô�ò.ó�ô�ï�e4�(S{' úUô�ì�øò.ó�ô�õbî�ñ�ò;��ñ�ò8� � ï�ñ�ôý �wø��9îUò.ó�ô�ï.í;ö¤ì=ô±î�ñ�ò;��ñ�ò£�;¿+ëUõ�ð�î �R���

»+îUò=ôÌò.ó�ëeò�ò.ó�ô/"eë,�®ñ�ô�ì�ì=ò=îUï�ô�ðbö¤õLîg¼�ý §9ëUõ�ðJîg¼+ý µ ëeï.ôtì.ö��Q���®ú8ü�ñ�ô�ì.ì=ô�ì�î,'�ä�í c )J R&%�enø¦ëUì.ì.ñ��·ö®õ�ü�÷�÷ä�í c$#ZR&%Qe4�æS{'��Fö®ì¥ï�ëUõ�ð�î �Ìøcò.ó�ô�õtò.ó�ô ��ï.î,%�ë9%�ö-�®öÀò§úgî,'�ëUõÌö®õcò=ô�ï�ì=ô�÷oò.öÀî�õ�%\ô�ò§í�ô�ô�õÌò.ó�ô«�®ö¤ì=ò.ì�íî�ñ��¤ð/%\ôëeò^�gî�ì=òµç ¾ �d%Wú9ò.ó�ô#ñ�õ�öÀî�õÍ%)î�ñ�õ�ðCøEì.ö®õ�÷oôx� K í�î�ñ��®ðÍ%\ô±ë�ïnëUõ�ð�î � ô��Àô��gô�õcò[î,'�� � � ! c�õ�îUò=ô�ò.ó�ëeò �àëUõ�ð4�ëeï.ô�ï�ô��®ëeò.öf"Uô��Àú/��ï�ö��gôUø�ëUõ�ð J O� k��gîEð��&%\ô�÷�ëUñ�ì=ô#î,'�ò.ó�ô#ò=ô�ì.ò^%cú¼©�e4�

© õËò.ó�ô�îUò.ó�ô�ï±ó�ëUõ�ð4ø�ì.ñ*���\î�ì=ô�� � ý �dc$#ZR&%�e4�WS{'�ò.ó�ôàëUð�"Uô�ï�ì.ëeï.ú$�·ëeùUô�ì+ò§í�î���%�ëUð ��+Wñ�ô�ï�öÀô�ì¸'MîUï+ò.ó�ô��ëUöÀï#î,'[ñ�ì.ô�ï�ì!cQ§¨RS©Qenø�'^îUï���ëUì.ì=í�îUï�ð�ì ¦ µ R ¦ ¾ í;ö®ò.ó@�9i ¦ µ l O�A�3i ¦ ¾ l«ø�ò.ó�ô�õ¹ò.ó�ô9ð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ô�ï+í+ö�����÷oîUï.ï.ô�÷oò��ÀúëUõ�ì=í�ô�ï�� � ï�ñ�ôÎý ���Ìc�ì.ö®õ�÷oôÎô�ëU÷�ó ��%�ëUð �L+cñ�ô�ï.ú¬í;ö����¥ï.ô�ì�ñ��Àò9ö®õ = �Hý �Qc )J R&%�e;e4� � ó�ô$��ï.î,%-ë9%�ö��®öÀò�úÚî,'ò.ó�ô���%�ëUðÚôY"Uô�õ%òS��ö®ì­�Y� � ó�ô/��ï.î,%�ë9%�ö-�®öÀò§ú8î,' ü�ñ�ô�ì�ì.ö®õ�ü 3 µ ëUõ�ðp3 ¾ ÷oîUï.ï.ô�÷oò��®ú�ö®ì µB ø � � ó�ô!��ï.î,%-ë9%�ö��®öÀò�úÎî,'�9i ¦ µ l O�9�9i ¦ ¾ l�'MîUï ¦ µ O� ¦ ¾ ö®ì µ¾ �7¼��-�\î,'�ò.ó�ô�ì.ô�ôY"Uô�õ%ò.ì�ëeï.ô�ö®õ�ð�ôY�\ô�õ�ð�ô�õcòY�»+î�í�ø�ò.ó�ô���ï.î,%-ë9%�ö��®öÀò�ú·ò.ó�ëeò ò.ó�ô�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ïÂä ü�ñ�ô�ì.ì=ô�ì+÷oîUï.ï.ô�÷oò��ÀúÌö®ì[ëeò¸�®ô�ëUì=ò

ê0ïtcQäBö®ì[÷oîUï.ï.ô�÷oòYe � ê¦ï#cQäBü�ñ�ô�ì�ì=ô�ì£�=ý � � ïnñ�ô��ED ý � ö¤õ�ì=ò.ëUõ�÷oôteWê0ïtc�ý � ö¤õ�ì=ò.ëUõ�÷oôte�Ïê0ï#cQä ü�ñ�ô�ì.ì=ô�ì£�;¿+ëUõ�ð�î �£�FD ¿+ëUõ�ð�î � ö¤õ�ì=ò.ëUõ�÷oôteWê0ïtcE¿;ëUõ�ð�î � ö®õ�ì=ò.ëUõ�÷oôte

D G �°äç ¾ HMI ¨°LK � I ¨�è ç ¾

�qKCI ¨°LK �

� óWñ�ì[ò.ó�ô«��ï.î,%�ë9%�ö��¤öÀò§ú²ò.ó�ëeò{äBö®ì ÷oîUï.ï.ô�÷oò�ö®ì[ëeò��®ô�ëUì=ò µ¾ � N: B ø è B ø¾ ! ø�í;ó�ö¤÷�óÌö®ì õ�î�õEÿ§õ�ô�ü �®öÀü�ö�%��Àú��gîUï.ôwò.ó�ëUõµ¾ �Åg8;6�6�Ë�6�Ë'½�@f09D@X5ã�k�Å�ôwí+ö����)÷�ë,���4ëUõÌîUï�ëU÷Y�®ôº+cñ�ô�ï.ú²î,'�'^îUïH� í Á cQ§¨RS©�R J R R R S R ¦ eo��%�ëUð �9öf'

S � ý �Qc RcQí Tµ cQ§¨RS©�R ¦ e;e K R

JcQí µ cQ§[RS©�R ¦ e;e K e

± ²

Page 38: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

·Eñ����\î�ì=ô¶ò.ó�ëeòtí;öÀò.ó ì=î �gôÏõ�î�õ�õ�ô�ü �¤öÀü�öf%��ÀôR��ï.î,%�ë9%�ö��¤öÀò§ú6�²ò.ó�ô�ï.ô8í;ö����^%)ôÏëUõ ö®õ�öÀò.ö®ëeò=îUï/'^ëUö-�®ñ�ï.ô,� � ó�ö®ìö��Q�]�®öÀô�ì+ò.ó�ëeò#ò.ó�ô�ï.ôgí;ö-���p%\ôgì=î �gô·ö¤õ�öÀò.ö®ëeò=îUï#ö®õ�ì.ò.ëUõ�÷oô$c*)�SR.)�Ze�c^í+öÀò.ó�§ � ��´,+¢ ëUõ�ð�© � Åq��´,+¢ +¤ e�ì.ñ�÷nóÏò.ó�ëeòò.ó�ô�'^î ���ÀîOí;ö®õ�ü8��%�ëUðËôY"Uô�õ%òS�9îW÷�÷�ñ�ïnìYí

¨ �¸+Wñ�ô�ï.ú�¼ak·ö®ìÃ�·ëUð�ôwò=î¹c )�ER )�1e�ëUõ�ðÌï.ô�ò.ñ�ï�õ�ì )J ø°Z�;ëeò��®ô�ëUì=ò#ò§í�îÖ��%�ëUð �R+Wñ�ô�ï�ö®ô�ì�ëeï�ô��·ëUð�ô�í;öÀò.ó cQ§¨RS©�R )J R )R e�ëUõ�ð�ð�ö®ì=ò.ö¤õ�÷oò�"eë,�®ñ�ô�ì±î,' ¦ ø�'^îUï�ì=î �gô )R ø

%\ôY'^îUï.ô#ò.ó�ô�ï.ôàö®ì¥ô�öÀò.ó�ô�ï;ë9ì.ñ�÷�÷oô�ì.ì;'�ñ��æ>�AC2�>\D B*2C>_09B]F�A^.1032H2�57698;:8î�õVc*)�ER.)�1eîUï+ë�ï.ô�ì��)î�õ�ð�ô�ïÃ'^ëUö-�®ñ�ï.ôUø�ëUõ�ð±Z�;ëeò/ì=î �·ô\�\î�ö®õcòuö®õwò.ó�ôôoûEô�÷�ñ�ò.öÀî�õ4øUò.ó�ôëUð*"Uô�ïnì.ëeï.úwëUì=ùEì�ò.ó�ôg+cñ�ô�ï�ú�¼a°*c )R e4ò=î�c-)�IR.)�Zenø�ëUõ�ðàöÀò�ö®ì���ï.îW÷oô�ì�ì=ô�ðö¤õÌ÷�ëUì=ôd°�î,'�¼ °$c^ò.ó�ö®ì ÷oî�ñ��®ð�%\ô#ô�öÀò.ó�ô�ï^%\ôY'^îUï.ôUø�ö®õ�%\ô�ò§í�ô�ô�õCø�îUï�ë9'Mò=ô�ï ò.ó�ô�%�ëUð$+Wñ�ô�ï�öÀô�ì�e4�

Å�ô#í;ö��-��ò.ó�ô�õÌì.ó�î�íFó�îOí�ò=î�÷oî�õ�ì=ò=ï�ñ�÷oò[ëgð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ô�ïqä '^îUï[ò.ó�ô#ý±ýa� ��ï.î,%]�Àô��ÌøWí;öÀò.ótö®õ*��ñ�ò�c$#ÇR&%dR2� e4�� ó�ôw÷oî�õ�ì=ò=ï�ñ�÷oò.öÀî�õ¶î,'>ä ö®ì+ì.ö��·ö��¤ëeï[ò=î9ò.ó�ëeò+î,'\Ég�®ëUö�� j�ø-ôoûE÷oôY��ò+ò.ó�ëeò�õ�î�í?ò.ó�ôwï�î �Àô�ì î,'>§ ëUõ�ðZ©�ëeï.ô

ì=í;ö®ò.÷�ó�ô�ðÏëeï.î�ñ�õ�ð��a[Îî�ì=ò#õ�îUò.ë9%��®úUøÀí µ ëUõ�ð�íZTµ ëeï.ô�ì=í;öÀò.÷nó�ô�ðÏëeï.î�ñ�õ�ð�� � óWñ�ì�ø\í�ôàí;ö-���{�=ö®õ�÷oîUï��\îUï�ëeò=ô��4#ö®õcò=î�ó�ë,�f'�î,'�ò.ó�ôÂí Tµ ï.ô�ì;�\î�õ�ì=ô�ìgc^ï�ëUõ�ð�î �!�Àú*enø�ëUõ�ð�%Fö¤õ%ò=î#ëUõ�¼�k+ï.ô�ì;�\î�õ�ì.ô c�öG� ô,�Àø J "eë,�®ñ�ôte4� © õ�ôW�)ô�÷�ñ��®ö®ëeï�öÀò�úî,'¥ò.ó�ô9÷oî�õ�ì.ò=ï�ñ�÷oò.öÀî�õV'MîUïàò.ó�ö®ì#÷Y�®ëUö�� ö®ì#ò.ó�ëeòàò.ó�ô�"eë,�®ñ�ô·î,' )R �·öÀü�ócòwõ�îUòº%)ô�÷oî �·ô9ùEõ�î�í;õ�ñ�õ%ò.ö-�/ë9'Mò=ô�ï�ò.ó�ô��%�ëUð ��+Wñ�ô�ï�öÀô�ì�ëeï.ô«�·ëUð�ô±ò=î£í Á c�ì=ô�ô#ò.ó�ô±ð�ôCÓ-õ�ö®ò.öÀî�õ9î,'�ò.ó�ôa%�ëUð¯ôY"Uô�õ%ò ë9%\î#"Uôte4�Æ��îUï ò.ó�ëeò¥ï.ô�ëUì.î�õtò.ó�ôa�¤ö®ì=ò.ìîg¼+ý §�ëUõ�ðVîW¼�ý µ ëeï.ô9õ�îOí ö®õ�ð�ôoûWô�ð8í;öÀò.óª"eë,�®ñ�ô�ì±î,' R ��¼¥ò�ò.ó�ôgô�õ�ðCø4í;ó�ô�õ )R ö¤ì#ë,�Àï.ô�ëUð�ú8ì=ô�ò�øuò.ó�ô��¤ö®ì=ò.ìîg¼+ý § i )R l�ëUõ�ð$îg¼+ý µ i )R l�ëeï.ôà÷oî �Q��ëeï.ô�ð��

© ñ�ï ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ïÂäÀ'MîUï;ö¤õ*��ñ�ò�c$#ÇR&%dR2� e�ï�ñ�õ�ì[ëUì^'^î ���Àî�í+ìYí¨ ��X±ô�õ�ô�ï�ëeò=ôwïnëUõ�ð�î �43 µ ëUõ�ð53 ¾ %\ô�ò�íô�ô�õ ¨ ëUõ�ðÙçº�°Z�^SAõ�öÀò.ö¤ë,�®ö"!�ô±ò§í�î9ëeï.ï�ë�úWì;î,'æ�®ö®ì=ò.ìgîg¼+ý § i�� l�ëUõ�ð$îg¼+ý µ i�� lWc�ö¤õ�öÀò.ö®ë,���®úgô��Q��ò§ú�e4�±Z�^Å�ô¯í;ö��-��%)ô9ï�ñ�õ�õ�ö¤õ�ütò.ó�ô9ì.ö���ñ��®ëeò=îUï�ö®õ�ò.ó�ô¯õ�îUïH�·ë,�7�·ëUõ�õ�ô�ï�ø�%�ñ�ò«�]�®ë�úEö®õ�ü¶ò.ó�ô9ï�ö®õ�ü$�·ëUì=ò=ô�ï�ë,�®ì=î*�

c � ó�ëeò0ö®ì�øUí�ô í;ö-���c÷nó�îWî�ì=ô^��ëUì.ì.íîUï�ð�ì�'MîUï0ñ�ì=ô�ïÕ��ëUöÀïnì�ø�ëUõ�ðgëUõ�ì=í�ô�ï0ëUõcúàò=ô�ì.òÕ��ëUì.ì=í�îUï�ð�+Wñ�ô�ï�ö®ô�ìY�Äe�¿+ñ�õò.ó�ô�ì.ö���ñ��®ëeò.öÀî�õtñ�õcò.ö��)ò.ó�ôm3 µ ò.ó$��ëUöÀï¥î,'�ñ�ì=ô�ï�ì�cQ§¨RS©Qe[ö®ìg�gô�õ%ò.ö®î�õ�ô�ð��¸c � ó�ö¤ìÃ�·ë�úÍ%\ôa'^ï.î � ëUõtîUïnëU÷Y�Àô+Wñ�ô�ï.ú�í µ cQ§[RS©�R$�Äenø�îUï«'Mï.î ��ëUõJD@B�DE>EDE0�@ÄDK¾#A!=Z2YAY8dD@B*2C>_09B]F4A/+Wñ�ô�ï.úÎí;öÀò.óÏñ�ì=ô�ï SAý §ÕëUõ�ðª��ëeï.ò.õ�ô�ï«S�ý©¯øWîUï\"Eö®÷oôoÿ_"Uô�ï�ì�ë1�ÄedSU'Cí�ô�ü�ñ�ô�ì.ì=ô�ðn3 µ ÷oîUï.ï.ô�÷oò��ÀúUøEò.ó�ö¤ìÕ��ëUöÀïí;ö�����%)ô+ò.ó�ô+ö¤ð�ô�õ%ò.ö®ò.öÀô�ì¦î,'4ò.ó�ô+ñ�ì=ô�ïnìö®õ9ò.ó�ô��%-ëUðÌôY"Uô�õ%òY���

j*� © õ�÷oô[§ ëUõ�ða© ëeï.ô�ì=ô�ò�ø)÷oî�õ%ò.ö®õWñ�ô�ëUì+ö®õtò.ó�ô#îUï�öÀü�ö¤õ�ë,�Cì.ö���ñ��®ëeò=îUï�ø�ôoû�÷oôY��òYíc�ëNe�¼akº+Wñ�ô�ï.ú�ò=î�ò.ó�ô03 ¾ ò.ó·ö®õ�öÀò.ö®ëeò=îUï0ö®õ�ì=ò.ëUõ�÷oôºc )�ER )�1e�í;ö®ò.ó���´l+¢ �÷©ÑëUõ�ð¿Åq��´r+ ¢ +¤ �÷§)í�ï.ô�ì��)î�õ�ð�í;öÀò.ó)J ��%!�

S{'�íôgü�ñ�ô�ì�ì=ô�ðM3 ¾ ÷oîUï.ï�ô�÷oò��ÀúUøuò.ó�ö¤ì+í+ö�����%)ô�ò.ó�ô·ö¤õ�öÀò.ö®ëeò=îUï�ö®õ�ì=ò.ëUõ�÷oôgö®õ8ò.ó�ô ��%�ëUð�ôY"Uô�õcòY��� »+îUò=ôò.ó�ëeò;öÀò ö®ì © `Ñò=î9ì=ô�ò )J �¡%²ø�ì.ö¤õ�÷oôx%Õö¤ì[ëUì.ì.ñ��gô�ð¶ò=î�%\ô�ñ�õ�öf'^îUïH���Àú·ð�ö®ì=ò=ï�öf%-ñ�ò=ô�ð��

c@%�e�íZTµ cQ§¨RS©�R ¦ e4íæSU' ¦ � ¦ � ø%ò.ó�ô�õgì=ô�ò��9i ¦ lÀ�9�9i ¦ � l®� k1� © ò.ó�ô�ï.í;ö®ì=ôUø �®ô�ò:�3i ¦ lHFHG8 #k2R ¨ ¥ �7¿;ô�ì;�\î�õ�ðí+öÀò.ó/c$# = « \�¬��lìo!2��ô µ « X � Z[� \�¬*�gîEð��Êeñ�9í T �uø3'^îUï�ì�FHG�� �� ø ë T i §¨RS©�R ¦ lHFHG�� � '�µ ëUõ�ð9í T FHG�� î ¾1ï�ð ��ò �

c�÷#e�¼ °*c R e�î�õVc-)�IR.)�Ze4í\·Eô�ò )R � R � � ó�ô�õÌð�î�2�>_098C>Õ2�A�2424DG69BÏí;öÀò.ó¯ò.ó�ô!: 09BZO�@ D BPORF469B�B�AHF�>[÷oî�õ�õ�ô�÷oò.öÀî�õëUì�ì.öÀü�õ��gô�õcòY�»+îUò=ô¯ò.ó�ëeòàöf'¥ò.ó�ô/%�ëUð¹ôY"Uô�õcò�ö®ìwë9%\î�ñ�ò�ò=îÎîW÷�÷�ñ�ï�ø�ò.ó�ô�õ¹í�ô²ð�î�õy� òàõ�ô�ô�ð�ò=î&%\ô9÷oî�õ�÷oô�ï�õ�ô�ðV'^îUï÷�ëUì.ô ¨ î,'W¼ °Z��¼��®ì.î�ø4ò.ó�ôgîUï�öÀü�ö¤õ�ë,��ì�ö��àñ��®ëeò=îUï#íî�ñ��®ðÏõ�îUò#ôoûZ�\î�ì=ôUø�ì.ö®õ�÷oô�ò.ó�ëeò#í�î�ñ��®ðÏö��Q�]�ÀúËëì�ñ�÷�÷oô�ì.ì;'�ñ��p>�AC2�>æD@B*2C>_09B]F4AW.103242457698;:Ìî�õªc )�ER )�1enøWëUõ�ð9ò.ó�ëeò¥ö®ì�ë,�®ì=îàï�ñ��Àô�ð!%cúgò.ó�ôa%�ëUð²ôY"Uô�õ%òY�\»;îOí�øö®ò�ö®ìàô�ëUì=úÚò=îÏì.ô�ô¯ò.ó�ëeò�ò.ó�ô¯î�õ��Àú�í�ë�ú�ò.ó�ôÌë9%\î#"Uô�%\ô�ó�ë#"WöÀîUïQ�·ö®ü�ó%òd%\ô²ð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ë9%��Àô�'^ï.î �ò.ó�ôàîUï�ö®ü�ö®õ�ë,�4ì.ö-�àñ��¤ëeò=îUï�ö®ì+öf'/ò.ó�ö®ì�+cñ�ô�ï.úÌí�ëUì�ì.ñ*���)î�ì.ô�ð¶ò=ît÷�ëUñ�ì=ô�ëUõÎë9%\îUï.òQc�öG� ô,�Àø\ëUõ8ö¤õ�öÀò.ö®ëeò=îUï'�ëUö��®ñ�ï.ôte4���+î�í�ôY"Uô�ï�ø%ò.ó�ö®ì4í�î�ñ��®ð�ö��Q���®ú+ò.ó�ëeò�ò.ó�ôW%�ëUðàôY"Uô�õ%ò/ó�ëUì�ë,�Àï�ô�ëUð�ú#îW÷�÷�ñ�ï.ï.ô�ðRc�öG� ô,�ÀøUò.ó�ô�ò§í�î%-ëUð¹+Wñ�ô�ï�öÀô�ì�ó�ë#"Uô�ë,�®ï.ô�ëUð�úR%\ô�ô�õÎëUì.ùUô�ð]enøCëUõ�ðÎì.î²í�ô�ëeï�ô�õ�îÍ�Àî�õ�üUô�ï#ö®õcò=ô�ï.ô�ì=ò=ô�ð8ö®õ$��ï.ô�ì=ô�ï�"Eö®õ�üö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%�ö��®ö�ò�ú,�

±,­

Page 39: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

c�ð]e�í Á cQ§¨RS©�R J R R R S R ¦ ea+cñ�ô�ï.úUø\í;öÀò.ó8ë9ò.ñ*�]�ÀôÍcU� T R�� T R J R R R^1Ze ï�ô�÷oîUï�ð�ô�ðCøB§f�fÅq��´ ¢ µ ¤ µ ø®©Ó�ó��´ ¢ µ íS{' ¦ � ¦ � øWò.ó�ô�õÍ%\ô�ó�ë�"Uô#ëUì¥ö®õ²ò.ó�ô±îUï�öÀü�ö®õ�ë,��ì.ö���ñ��®ëeò=îUï«c^ò.ó�ö®ìí;ö��-��%\ô+÷oîUï.ï�ô�÷oò�ø�ì.ö®õ�÷oôs�9i ¦ � lB� kNe4�© ò.ó�ô�ï.í;ö®ì.ôUø�ï.ô�ò.ñ�ï�õ�a4FHG  #k2R ¨ ¥�@��S�òÌö®ì²ô�ëUì=ú´ò=î ì=ô�ôÏò.ó�ëeòtò.ó�ô8î�õ��Àú í¥ë�úØò.ó�ö®ìÍ%)ô�ó�ë�"EöÀîUïÍ�9öÀü�ó%òÍ%\ôÎð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%��Àô�'^ï.î � ò.ó�ôîUïnöÀü�ö®õ�ë,�+ì.ö���ñ��®ëeò=îUïtö®ì9öf'#ò.ó�ö®ì!+Wñ�ô�ï.ú í¥ëUìtì.ñ*���\î�ì=ô�ðØò=îb÷�ëUñ�ì.ô8ëUõ ë9%\îUï.òÂc�ö_� ô,�Àø+ëÚï.ô�ì;�\î�õ�ð�ô�ï'�ëUö��®ñ�ï.ôte4�æ�;îOíôY"Uô�ï�ø�ò.ó�ö®ì¥ö®ì¥õ�îUò[ë���ï.î,%��®ô��Rí�S{'4ò.ó�ô %�ëUðtôY"Uô�õcò ó�ëUì[ë,�Àï�ô�ëUð�ú·îE÷�÷�ñ�ï.ï.ô�ðCøEò.ó�ô�õ¯í�ôëeï�ô�õ�îd�Àî�õ�üUô�ï�ö®õ%ò=ô�ï�ô�ì=ò=ô�ð²ö¤õ���ï.ô�ì.ô�ï�"Wö¤õ�ü�ö®õ�ð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%�ö��¤ö�ò§ú,� © õ9ò.ó�ô;îUò.ó�ô�ï[ó�ëUõ�ðCø%öf'\ò.ó�ôa%�ëUðôY"Uô�õcò�ö®ìwì=ò.ö-���/ë9%\î�ñ�ò�ò=î8îW÷�÷�ñ�ï�ø�ò.ó�ô�õ�ò.ó�ö®ì�+Wñ�ô�ï.ú�÷oî�ñ��¤ð�õB� òw÷�ëUñ�ì.ô²ë¶ï�ô�ì;�\î�õ�ð�ô�ï�'�ëUö��®ñ�ï�ôRc�ì�ö®õ�÷oôò.ó�ô�%�ëUðÌôY"Uô�õcò�ø�%Wú¯ð�ôCÓ-õ�öÀò.öÀî�õ4øW÷�ëUõB� ò+îW÷�÷�ñ�ï;ë9'Mò=ô�ï�ë�ï.ô�ì;�\î�õ�ð�ô�ïÃ'�ëUö��®ñ�ï.ôte4�

c^ôte¿í Á cQ§¨RS©�R )J R R R S R ¦ e�+cñ�ô�ï.ú�c�õ�îUò=ô¥ò.ó�ëeò�ò.ó�ö®ìu÷�ëUì=ô�í;ö��-��õ�îUò�øeí�� î*�®���ÀøUît"Uô�ïH�®ë9��í;öÀò.ó�ò.ó�ô\��ï�ô�÷oô�ð�ö®õ�üî�õ�ô�ì.ö¤õ�÷oô+öÀòíî�ñ��®ð9ö������Àú�ò.ó�ëeò�ì.î �gô+ï�ô�ì;�\î�õ�ð�ô�ï0ö®õ�ì=ò.ëUõ�÷oôdcU� T R�� T e/ó�ëUìï.ô�÷oô�öf"Uô�ðtöÀò.ì J '^ï.î � ëUõëU÷�÷oôY��ò.ë9%��Àôº�-ëeï.ò.õ�ô�ï�ø�ëUõ�ð¶úUô�ò;ï.ô�÷oîUï�ð�ô�ðËëgò.ñ*�]�ÀôñÎ ò.ó�ëeò ö®ì;ö��Q�\î�ì.ì.öf%]�ÀôUøcì.ö¤õ�÷oô�÷�ëUì=ô�ì ¨ ëUõ�ð&°�î,'î ¨ ð�î9õ�îUò[ï.ô�÷oîUï�ðËò.ñ*���Àô�ì�e4íS{'>í µ cQ§¨RS©�R ¦ e;ëUõ�ðZí Tµ cQ§[RS©�R ¦ e íô�ï.ô�+Wñ�ô�ï�öÀô�ðCø�ò.ó�ô�õÎð�î·ò.ó�ôd'Mî ���®î�í;ö®õ�ü&c�ëUõ�ðËîUò.ó�ô�ï.í;ö®ì=ôUø)ëUõEÿì.íô�ï+ò.ó�ô�+cñ�ô�ï.ú¯ëUì+ö®õtò.ó�ô#îUï�ö®ü�ö®õ�ë,�Cì.ö���ñ��®ëeò=îUïCe4í��öÀïnì=ò õ�îUò=ô�ò.ó�ëeò+öf'uò.ó�ö¤ì ö®ì[ëQ%�ëUð&+cñ�ô�ï�úUø�ò.ó�ô�õ

S �÷ä�í I )JcQí µ cQ§¨RS©�R ¦ e;e K R

RcQí Tµ cQ§[RS©�R ¦ e;e K K

�÷ä�í I %� Kñù ôÏ« X � Z[� \�¬ R

R# = « \�¬ K � Kñù ô µ « X � Z[� \ä¬ K �

»+î�í ÷oî �Q��ñ�ò=ô

= � S �ä� = « \�¬ K ��% K ô µ « X � Z�� \�¬ �Pc R �B# = « \�¬ K ��� Kñù ô µ « X � Z[� \ä¬ e K ôÏ« X � Z[� \ä¬ �êñ�ò�í�î�õ¶ò.ó�ôº�®ö®ì.ògîg¼�ý = « \�¬ i R l_� � ó�ô�õtï.ô�ì;�\î�õ�ðtí;öÀò.óÌë·ï�ëUõ�ð�î �.a��S{'uò.ó�ô«%�ëUðtôY"Uô�õ%ò+ö®ì[ë9%\î�ñ�ò[ò=îgîW÷�÷�ñ�ï�ø�ò.ó�ô�õtò.ó�ö®ì¥ï�ô�ì;�\î�õ�ì=ô�í;ö����]%\ô±ö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��ÀôÃ'^ï.î � ò.ó�ôîUïnöÀü�ö®õ�ë,��ì.ö���ñ��®ëeò=îUï�øCì.ö¤õ�÷oô�õ�îtì�ñ�÷�÷oô�ì.ì;'�ñ��g>�A�2C>ÃD B�2�>_09B]F�Aa.*032H2�57698�:�î�õ c-)�SR.)�1e�÷�ëUõÏîW÷�÷�ñ�ïa%\ôY'^îUï.ôò.ó�ô�%�ëUðÌôY"Uô�õcòY�

¼¥ò�ò.ó�ôgô�õ�ð�î,'ò.ó�ô9ì.ö���ñ��®ëeò.öÀî�õ4ø\÷nó�ô�÷.ù�í+ó�ô�ò.ó�ô�ï#ò.ó�ô!�¤ö®ì=ò.ì îg¼+ý § i )R l0ëUõ�ðVîW¼�ý µ i )R lö®õcò=ô�ï�ì=ô�÷oò!c�õ�îUò=ô9ò.ó�ëeòò.ó�ö®ì¥÷nó�ô�÷.ùt÷�ëUõ�%\ô�ð�î�õ�ô�ö®õ²ò.ö��gôV>!c^ç¹�ÀîUüªç enø*%Wú9ì=îUï�ò.ö®õ�ü�ò.ó�ô«�®ö®ì=ò.ìò=îUüUô�ò.ó�ô�ï�e4�\SU'4úUô�ì�ø�ò.ó�ô�õtî�ñ�ò;��ñ�ò�� � ï�ñ�ôý �wø��9îUò.ó�ô�ï.í;ö¤ì=ô�c�ëUõ�ðËë,�®ì.î·öf' )R ó�ëUì;õ�ôY"Uô�ï¸%\ô�ô�õ¶ì=ô�ò4e¥î�ñ�ò;��ñ�ò£�;¿+ëUõ�ð�î �R���

S�òö®ì0ô�ëUì=úgò=î�ì.ó�î�íwøcì.ö��9ö��®ëeïH�Àúàò=î�Ég�¤ëUö�� j�øWò.ó�ëeòÆä ö®ì÷oîUï.ï.ô�÷oò�í;öÀò.óQ��ï.î,%�ë9%�ö��¤öÀò§ú�ëeò\�Àô�ëUì.ò µ¾ � N: B ø è B ø¾ ! øí;ó�ö¤÷�óÌö®ì õ�î�õEÿ§õ�ô�ü �®öÀü�ö�%��Àú��gîUï.ô#ò.ó�ëUõ µ¾ �Åg8;6�6�Ë�6�Ë'½�@f09D@XÃß)k�S{'¦ì.ñ�÷�óÏëÍ+cñ�ô�ï.ú¶ö®ì;ö¤õ�ð�ô�ô�ðÂ�·ëUð�ôwí+öÀò.óÎì.î �gô�õ�î�õEÿ§õ�ô�ü �®öÀü�ö�%��Àô«��ï.î,%-ë9%�ö��®öÀò�úÙ��ø-ò.ó�ô�õËí�ôí;ö��-�%÷oî�õ�ì=ò=ïnñ�÷oò¦ë±ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ï�ä '^îUï¦ý�ý �)�N»+îUò=ô[ò.ó�ëeò�ø%ëUì¦ö®õ)��ï.îWî,'�ì�î,'ÊÉg�®ëUö-�·ìpj�ëUõ�ð�´Wø%íô ÷�ëUõ���ï�ô�ì.ñ��gôò.ó�ëeò;õ�îQ'^ëUö��¤ñ�ï.ô�ì¥í;ö��-��îE÷�÷�ñ�ï¸%\ôY'^îUï.ô#ò.ó�ôa��%�ëUð¶ôY"Uô�õ%òY���

� ó�ô+÷oî�õ�ì=ò=ïnñ�÷oò.öÀî�õ²î,'4ò.ó�ô±ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ï�øií+öÀò.ó²ö¤õ*��ñ�ò¸c$#ZR&%qR2� enø�ö®ìì.ö��·ö��¤ëeï¦ò=îàò.ó�ëeò¥ö¤õÍÉg�®ëUö-� ±Z� � óWñ�ì�øí�ôa�=ö®õ�÷oîUï��\îUï�ëeò=ô��·# ëUõ�ðÐ% ö¤õ%ò=îgò.ó�ô J ëUõ�ð R "eë,�®ñ�ô�ì�ø�ï.ô�ì;�\ô�÷oò.öf"Uô��ÀúUø�ì=ô�õcò ö®õÌëQ�·ëeò.÷nó�ö®õ�ü·÷oî�õP"Uô�ï�ì.ëeò.ö®î�õ��� ó�ô��·ëUö®õ9ð�ö¶h)ô�ï�ô�õ�÷oô;ö®ìö®õgò.ó�ô�ó�ëUõ�ð��®ö¤õ�ü±î,'Cò.ó�ô¸¼ °wëU÷oò.öÀî�õ²ò.ó�ëeò�ö®ì0õ�îUò7��ëeï.ò0î,'4ë)�·ëeò.÷�ó�ö®õ�üà÷oî�õP"Uô�ï�ì.ëeò.ö®î�õ�íSAõ/Ég�®ëUö�� ±WøWò.ó�ô;ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ï�ó�ëUð·ò=îwü�ñ�ô�ì.ì¦í+ó�ô�ò.ó�ô�ï0îUï�õ�îUò¦ò=î�ëU÷�÷oôY��ò�øWì�ö®õ�÷oô öÀò0÷oî�ñ��®ð�õB� ò¦÷nó�ô�÷.ù·í+ó�ô�ò.ó�ô�ïîUï±õ�îUò+ò.ó�ô S "ië,�®ñ�ôàñ�ì=ô�ð&%cúËò.ó�ôàëUð*"Uô�ïnì.ëeï.ú¶ò=ît÷oî �Q��ñ�ò=ô�a T ö®ì+÷oîUï.ï.ô�÷oòY�aSU'/ò.ó�ôàð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ô�ï ð�ô�÷�ö®ð�ô�ðËò=îëU÷�÷oôY��ò�ø)ò.ó�ô�õËö®ò íî�ñ��®ðÌôoû1�)î�ì.ôwñ�ì.ö®õ�ügò.ó�ô�ùUô�úR%�ëUì=ô�ðËî�õ¶ò.ó�ô S "eë,�®ñ�ôwñ�ì.ô�ðR%cútò.ó�ô�ëUð*"Uô�ï�ì.ëeï�úÍ'^îUï�avTE� © õò.ó�ôàîUò.ó�ô�ï+ó�ëUõ�ðCø�ö®õÎê0ê7`·ø�ò.ó�ôwëUð*"Uô�ïnì.ëeï.ú¶ð�îWô�ì;õ�îUò�ì=ô�õ�ð�a T � � ó�ô S "eë,�®ñ�ô�ì;÷�ëUõËî�õ��ÀúÌë9���\ô�ëeï+ö¤õ$+cñ�ô�ï�öÀô�ìò=î¼í Á �º·Eö®õ�÷oôàò.ó�ô�ëUð�"Uô�ï�ì.ëeï.ú8÷oî�ñ��®ð8ëUì=ù&�·ëUõcú¹+Wñ�ô�ï�öÀô�ì+ò=î¼í Á øCëUõ�ðËí�ôgð�î�õB� ò�ùWõ�î�íÑí;ó�ö®÷nóËî,'0ò.ó�ô�� ì.ó�ô

±,¯

Page 40: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ö®õcò=ô�õ�ð�ô�ðËò=î¯ì.ñ�÷�÷oô�ô�ðCø\íô�ó�ë�"Uô�ò=î���ö®÷�ù¯î�õ�ô)%WúÌü�ñ�ô�ì.ì.ö¤õ�ü*� � ó�ö¤ì ï.ô�ð�ñ�÷oô�ì;ò.ó�ô�ì.ñ�÷�÷oô�ì�ì¸��ï�î,%�ë9%�ö��®ö®ò§ú¯î,'¦ò.ó�ôð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ô�ï c�ëUì+÷oî �Q��ëeï.ô�ð¶ò=îÍÉg�®ëUö��ϱ eg%cútëQ'�ëU÷oò=îUï;î,' µB �Vuô�ò;ñ�ì õ�îOí ��ï.ô�ì.ô�õ%ò[ò.ó�ôàð�ô�ò.ëUö��®ìY� � ó�ô�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ô�ï�ø%î�õ¶ö¤õ*��ñ�ò«c$#ÇR&%dR2� enø�ï�ñ�õ�ì[ëUìÃ'Mî �-�Àî�í;ì�í

¨ ��X±ô�õ�ô�ï�ëeò=ôwïnëUõ�ð�î �43 µ ëUõ�ð53 ¾ %\ô�ò�íô�ô�õ ¨ ëUõ�ðÙçwø�ëUõ�ð¶ï�ëUõ�ð�î �t�?F� #k2R ¨ ¥ �°Z�^Å�ô¯í;ö��-��%)ô9ï�ñ�õ�õ�ö¤õ�ütò.ó�ô9ì.ö���ñ��®ëeò=îUï�ö®õ�ò.ó�ô¯õ�îUïH�·ë,�7�·ëUõ�õ�ô�ï�ø�%�ñ�ò«�]�®ë�úEö®õ�ü¶ò.ó�ô9ï�ö®õ�ü$�·ëUì=ò=ô�ï�ë,�®ì=î*�

c � ó�ëeò0ö®ì�øUí�ô í;ö-���c÷nó�îWî�ì=ô^��ëUì.ì.íîUï�ð�ì�'MîUï0ñ�ì=ô�ïÕ��ëUöÀïnì�ø�ëUõ�ðgëUõ�ì=í�ô�ï0ëUõcúàò=ô�ì.òÕ��ëUì.ì=í�îUï�ð�+Wñ�ô�ï�ö®ô�ìY�Äe�¿+ñ�õò.ó�ô�ì�ö��àñ��®ëeò=îUï�ñ�õ%ò.ö��uò.ó�ôi3 µ ò.óª¼ak/+Wñ�ô�ï.ú,�)·Eë�ú¶ò.ó�ö®ìa+Wñ�ô�ï.úËö®ì+ò=î(c )�ER )�1e4�<V4ô�ò�§ó�f��´,+¢ øy©Ó�óÅq��´,+¢ +¤ øëUõ�ð ¦ � � ¦ i §¨RS©ºl_�\¿ ôY���Àú²ò=î9ò.ó�ö¤ìü�k�+Wñ�ô�ï.ú¯í;öÀò.ó )J �¡#V�

±Z�aÉ¥î�õ%ò.ö®õWñ�ô#í;ö®ò.ótò.ó�ôwì.ö���ñ��®ëeò.ö®î�õCøP%-ñ�ò[í;öÀò.ótò.ó�ôº'Mî ���®î�í;ö®õ�ü�÷nó�ëUõ�üUô�ìYíc�ëNe�î ¨ c )J eÃ+cñ�ô�ï�ú²ò=î9ö¤õ�ì=ò.ëUõ�÷oô!cU� T R�� T e¥í;ó�ô�ï.ô¨��´ ¢ µ �÷©¯ø�ëUõ�ðZÅd��´ ¢ µ ¤ µ �÷§ºí

X±ô�õ�ô�ï�ëeò=ôàë·ï�ëUõ�ð�î �u1 ¢�µ�¤Eµ F�� ! ø�ëUõ�ðÌì.ô�õ�ð R �¡%9� / 7 µ<8·µ �c@%�eͼ °*c R eÃ+Wñ�ô�ï.ú²ò=îÂc )�SR )�1e¥õ�îUò¸��ëeï.ò[î,'�ë��·ëeò.÷�ó�ö®õ�ü9÷oî�õP"Uô�ï�ì.ëeò.öÀî�õËí;öÀò.óÌëUõ¶ëU÷�÷oôY��ò.ë9%��Àôº�-ëeï.ò.õ�ô�ï�í

� ó�ô�ð�ö�þ²÷�ñ��Àò�ú¶ö®õ8ò.ó�ö®ì�÷�ëUì=ô·ö®ì+ò.ó�ëeò±ò.ó�ôgëUð*"Uô�ï�ì.ëeï�ú¹�·ë�úÎëUì=ù8ëUõ�í Á +Wñ�ô�ï.ú¶ò.ó�ëeò±ì�ó�î�ñ��®ðËü�öf"Uôó�ö�� ò.ó�ô¯÷oîUï.ï.ô�÷oò�ùUô�úUøæ%�ñ�òàíôtëeï.ô¯ñ�õ�ë9%��Àô9ò=î8ð�ô�ò=ô�ï4�·ö®õ�ô·í+ó�ö®÷�ó�î,' ò.ó�ô¯ëUð*"Uô�ï�ì.ëeï.ú®�¾ì�+cñ�ô�ï�öÀô�ìö¤ì�÷oîUï�ï.ô�÷oò�c�ì.ö®õ�÷oô�í�ô�ð�î�õB� ò+ùEõ�îOí ò.ó�ô�ð�ö®ì.÷oï.ô�ò=ôQ�ÀîUü¯î,' )J e4�«Å�ôgí;ö-���4ï.ô�ì.î �f"Uôàò.ó�ôd��ï.î,%��Àô��À%cúü�ñ�ô�ì.ì.ö®õ�ü9í;ó�ö®÷nó$+cñ�ô�ï.úÌö®ì;÷oîUï.ï�ô�÷oòYíWS{'v�{�ÙkEø�î�ñ�ï+ü�ñ�ô�ì.ì;ö¤ì ò.ó�ëeò�õ�î�õ�ô�î,'/ò.ó�ô�� ëeï.ôà÷oîUï�ï.ô�÷oòY�ÃSU'�M� ¨ ø-ò.ó�ô�õÌî�ñ�ï[ü�ñ�ô�ì.ì;ö®ì¥ò.ó�ëeò ò.ó�ôV3 ¾ ò.ó$+cñ�ô�ï.ú²ö®ì;÷oîUï.ï.ô�÷oòY�ê0ï.îE÷oô�ô�ð�ëUì�'^î ���ÀîOí;ìYíd·Eô�ò )R � R ��É�î�õ�ì�ö®ð�ô�ï�ë,���/ò.ó�ô�í Á +Wñ�ô�ï�öÀô�ì#î,'g'^îUïH� cQ§¨RS©�R )J R )R R$�"R ¦ � e4�S{'r�0� ¨ ëUõ�ð¹ò.ó�ô�ï.ô·ó�ë#"Uô!%\ô�ô�õJ3 ¾ îUï)�gîUï.ô·î,'¥ì.ñ�÷nó(+cñ�ô�ï�öÀô�ì�ø4ò.ó�ô�õ�ôoûZ�\î�ì=ô²ñ�ì.ö®õ�ü¯ò.ó�ô·ï�ô�ì.ñ��Àòî,'�ò.ó�ôi3 ¾ ò.óT+Wñ�ô�ï.ú,� © ò.ó�ô�ï.í;ö¤ì=ôUøCð�îÌëÂ2�>_098C>Ã2�A�2H2�DE6,BÚí;ö®ò.óÎò.ó�ôR:N09BPO�@ D@BPOªFH69B�BÊA�F�>±÷oî�õ�õ�ô�÷oò.öÀî�õëUì�ì.öÀü�õ��gô�õcòY�»+îUò=ôtò.ó�ëeò�íôtð�î�õB� ò�õ�ô�ô�ðbò=îÂ%)ôt÷oî�õ�÷oô�ï�õ�ô�ðbë9%\î�ñ�òàò.ó�ôÍ�)î�ì�ì.öf%�ö��¤öÀò§úÎî,';ëUõ¬ö®õ�öÀò.ö®ëeò=îUï)'^ëUö-�®ñ�ï.ôUøö�'+ëT%�ëUð´ôY"Uô�õ%ò9ö¤ì·ë9%\î�ñ�ògò=î¹îE÷�÷�ñ�ï¹c�ëUì!�·ô�õ%ò.öÀî�õ�ô�ð ëeò·ò.ó�ô$%\ô�ü�ö®õ�õ�ö®õ�üËî,'±ò.ó�ôR��ï.îcî,'�î,'�ò.ó�ö®ì÷Y�¤ëUö��/e4�pS�òuõ�îOíÚô�ëUì�ö��Àúa'Mî ���®î�í;ìCò.ó�ëeòuò.ó�ô0ë9%\ît"Uô0ï.ô�ì;�\î�õ�ì.ô¦ö®ì4ö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ô�'Mï�î �Fò.ó�ô¦îUïnöÀü�ö®õ�ë,�ì�ö��àñ��®ëeò=îUï�ø�öf'w�+ëUõ�ð?3 ¾ ëeï.ôwü�ñ�ô�ì.ì=ô�ð¶÷oîUï�ï.ô�÷oò��Àú,�

c�÷#e¿í Á cQ§¨RS©�R1#ÇR R R S R ¦ e4íS{' R �¡%x� / 7 µ 8�µ '^îUï;ì=î �gô!cU��TUR��ÄT e�ëUõ�ð

S �É�Ö�+# /x7 µ<8·µ 'oK ô µ « X � Z[� \�¬ �+� K ø ù ôÏ« X � Z[� \ä¬sô µ « X � Z�� \�¬ R K ôÏ« X � Z[� \ä¬ Rò.ó�ô�õ¶ì=ò=î,�Ëò.ó�ô�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ï¥ëUõ�ðÌü�ñ�ô�ì.ì£� � ï�ñ�ôwý �)���© ò.ó�ô�ï.í;ö®ì.ôUø)öf' )R ó�ëUìa%\ô�ô�õÏì=ô�ò�ø R � )R ø ¦ � ¦ � ø���� ¨ ø4ëUõ�ðÎò.ó�ö®ì±ö®ì;ò.ó�ô[3 ¾ ò.óª+cñ�ô�ï�ú¶î,'Õ'^îUïH�í Á cQ§¨RS©�R )J R )R R$�"R ¦ � enø4ò.ó�ô�õÏï.ô�ì;�\î�õ�ðÎí;öÀò.óÏò.ó�ô�ùUô�ú8î,' c )�IR )�Zedc�õ�îUò=ô·ò.ó�ëeò#ò.ó�ôgð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ï�ö®ì�]�®ë�úEö®õ�üÏò.ó�ôÌï�ö¤õ�üT�·ëUì=ò=ô�ï�ø¥ëUõ�ð´ì=î¹ó�ëUì·ëU÷�÷oô�ì.ì·ò=îÚë,���¥ò.ó�ôÌùUô�úEì4e4� © ò.ó�ô�ï�í;ö®ì=ôUø¦ï�ô�ò.ñ�ï�õ6a�F[G #k2R ¨ ¥ @ �»+îUò=ôgò.ó�ëeò±í�ô�ð�î�õB� ò#ó�ë�"Uôgò=î�%\ô�÷oî�õ�÷oô�ï�õ�ô�ðÏí;öÀò.óÎò.ó�ô��\î�ì.ì.öf%-ö��®öÀò�ú²î,'0ëUõ�ö¤õ�öÀò.ö®ëeò=îUïa'^ëUö-�®ñ�ï.ôUø\ëUìë9%\ît"Uô,� S�ò·ö®ì�ò.ó�ô�õ¬ô�ëUì=úbò=î�ì=ô�ôÌò.ó�ëeògò.ó�ôtï.ô�ì;�\î�õ�ì=ôÌö®ì�ö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ôd'^ï.î � ò.ó�ôÌîUïnöÀü�ö®õ�ë,�ì�ö��àñ��®ëeò=îUï�ø�ëUì^�Àî�õ�ü·ëUì0��ëUõ�ð?3 ¾ ó�ë�"Uô)%)ô�ô�õtü�ñ�ô�ì.ì=ô�ðË÷oîUï�ï.ô�÷oò��Àú,�

j*�^S{'�ò.ó�ôwì.ö���ñ��®ëeò.ö®î�õ²ô�õ�ð�ì[í;öÀò.ó�î�ñ�ò¥î�ñ�ò;��ñ�ò=ò.ö®õ�ü � � ï�ñ�ô�ýa�àø��·ò.ó�ô�õÌî�ñ�ò;��ñ�ò£�;¿+ëUõ�ð�î �R���»+îUò=ô#ò.ó�ëeò öf'Cò.ó�ô#ëUð*"Uô�ïnì.ëeï.ú²ð�îcô�ìÃ�·ëeùUô#ëd%�ëUð�+Wñ�ô�ï.úUø�í�ô±ó�ë�"Uô«��ï.î,%-ë9%�ö��®öÀò�úgëeò^�Àô�ëUì=ò ¨� ç î,'uü�ñ�ô�ì�ì.ö®õ�ü

ò.ó�ô[÷oîUï.ï.ô�÷oò/ö®õ�öÀò.ö®ëeò=îUï�ñ�ì=ô�ï/ö®õ�ì=ò.ëUõ�÷oôUø�ëUõ�ðd��ï.î,%�ë9%�ö-�®öÀò§ú#ëeòæ�Àô�ëUì=ò ¨� °äçØî,'-ëUõ�ì=í�ô�ï�ö®õ�ü�ò.ó�ôüa°�ëUõ�ð�í Á +cñ�ô�ï�öÀô�ìò=îtò.ó�ëeò#ñ�ì=ô�ï#ö®õ�ì.ò.ëUõ�÷oô�÷oîUï�ï.ô�÷oò��ÀúLc^ò.óWñ�ì#ë,���ÀîOí;ö®õ�ü²ò.ó�ô�ý�ý � ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ô�ï[ò=ît÷oî�õcò.ö®õWñ�ôgö®õ8ë²í¥ë�úÎò.ó�ëeò#ö®ìö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ôÃ'Mï.î � ò.ó�ô#ï.ô�ü�ñ��®ëeï+ì.ö���ñ��®ëeò=îUï�e4�

j k

Page 41: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

É[ñ�ï.ï.ô�õcò�ëeïH�®öÀô�ï OPA�>>�9AY84D �WAY8 í § í ¾1< í ¾1= í Á î ¨ î ¨ T ¼ °OZAY>q�9AC8�D �WAC8 �/û1���®ö®÷�ö®òí´§ �¦ûZ���¤ö®÷�öÀòí ¾1< � �í ¾1= Ég�®ëUö�� ¨ °í Á Ég�®ëUö�� ¨ °î ¨ Ég�®ëUö�� ¨ ° � �î ¨ T �¦ûZ�]�®ö®÷�öÀò � �¼ ° Ég�¤ëUö�� ¨ ° ÉÃ�®ëUö�� ¨ ° �

� ë9%��Àô«j*í0ê�î�ì.ì.ö�%��Àô�ì.ó�ëUð�î�í;ö®õ�ü�ì[ö®õtò.ó�ôwêʼa`±ÿ_Ò ì.ö���ñ��®ëeò=îUï�� � ó�ö®ì�ò.ë9%��Àôwö®ì¥ò=î!%)ô�ö¤õ%ò=ô�ï���ï.ô�ò=ô�ð¶ö®õtò.ó�ôàì.ë,�gôí¥ë�úÌëUì � ë9%��Àôº°$c�ì.ô�ô���ëeüUô)°9kNe4�

»+î�í�ø�ò.ó�ô���ï.î,%-ë9%�ö��®öÀò�ú·ò.ó�ëeò ò.ó�ô�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ïÂä ü�ñ�ô�ì.ì=ô�ì+÷oîUï.ï.ô�÷oò��ÀúÌö®ì[ëeò¸�®ô�ëUì=òê0ïtcQäBö®ì[÷oîUï.ï.ô�÷oòYe � ê¦ï#cQäBü�ñ�ô�ì�ì=ô�ì£�=ý � � ïnñ�ô��ED ý � ö¤õ�ì=ò.ëUõ�÷oôteWê0ïtc�ý � ö¤õ�ì=ò.ëUõ�÷oôte

�Ïê0ï#cQä ü�ñ�ô�ì.ì=ô�ì£�;¿+ëUõ�ð�î �£�FD ¿+ëUõ�ð�î � ö¤õ�ì=ò.ëUõ�÷oôteWê0ïtcE¿;ëUõ�ð�î � ö®õ�ì=ò.ëUõ�÷oôteD G �

°äç ¾ H I ¨° K � I ¨�è ç� KCI ¨° K R

í;ó�ô�ï�ô#ò.ó�ô#ò=ô�ïH�:ç �g÷oî �gô�ì^'^ï.î ��ò.ó�ô«��ï.î,%�ë9%�ö-�®öÀò§ú9î,'�ò.ó�ôàëUð*"Uô�ï�ì.ëeï.ú��Aü�ñ�ô�ì.ì�ö®õ�üÄ�·ë�ï�ëUõ�ð�î �Ã�?÷oîUï.ï.ô�÷oò��Àúî�õ¶ëgïnëUõ�ð�î ��îUï�ëU÷Y�®ô�+cñ�ô�ï�ú,� � óWñ�ì�ø�ò.ó�ô«��ï�î,%�ë9%�ö��®ö®ò§ú·ò.ó�ëeò�ä ü�ñ�ô�ì�ì=ô�ì;÷oîUï.ï�ô�÷oò��Àú¯ö¤ì ëeò¸�Àô�ëUì=ò µ¾ � N: B ø è B¾ ! øí;ó�ö¤÷�óÌö®ì õ�î�õEÿ§õ�ô�ü �®öÀü�ö�%��Àú��gîUï.ô#ò.ó�ëUõ µ¾ �

� ~[n7�Õ�������Ïæ �d»ª�Bô�n øÇò ù���� ø¬���^�����æ��p

�¹Ý�Þ ;ÍçÕá b�é½� äq-�ë]å,ì�â� ó�ô ��ï�îcî,'�î,'�ì�ö��àñ��®ëeò.ë9%�ö��®ö®ò§úgî,'�ê�¼a`±ÿ_Ò ö®ì[ì.ö-�·ö��®ëeï¥ö®õtì=ò=ï�ñ�÷oò.ñ�ï.ô#ò=î·ò.ó�ëeò[î,'�êʼ�`Q�*Å�ô�õ�ë,�gô#ò.ó�ô�ëU÷oò.ö®î�õ�ìî,'/ñ�ì=ô�ï ö®õ�ì=ò.ëUõ�÷oô�ì[î�õV:PAY@ D�,AC8�X!A�242C0�OZAàî,�\ô�ï�ëeò.öÀî�õ�ì ëUì^'Mî ���®î�í;ìYíÇÙé SAõ�öÀò.ö¤ëeò=îUïàö®õ�ì.ò.ëUõ�÷oô²ëU÷oò.öÀî�õbò=î�ì=ò.ëeï.ò�ò.ó�ô/��ï.îUò=îE÷oî � c�ö_� ô,�Àø¦ëUõL¼akÎëU÷oò.ö®î�õL'^îUï�ëUõbö¤õ�öÀò.ö®ëeò=îUï�ö®õ�ì=ò.ëUõ�÷oô¯ö®ì

üUô�õ�ô�ï�ëeò.ö®õ�ü9ëUõ�ð¶ì=ô�õ�ð�ö¤õ�ü J e4�êÙfο;ô�ì;�\î�õ�ð�ô�ï ö®õ�ì=ò.ëUõ�÷oô�ëU÷oò.öÀî�õÎñ*�\î�õtï.ô�÷oô�öf"Eö®õ�ü�ò.ó�ô«Ó�ïnì=òÃ�gô�ì.ì.ëeüUô�c�öG� ô,�Àø J e4�ÇÐy SAõ�öÀò.ö¤ëeò=îUï ö®õ�ì=ò.ëUõ�÷oô�ëU÷oò.ö®î�õËñ*�\î�õtï.ô�÷oô�öf"Eö®õ�ü�ò.ó�ô)�gô�ì.ì.ëeüUô�'^ï.î ��ò.ó�ô�ï.ô�ì;�\î�õ�ð�ô�ï�c�öG� ô,�Àø�c R R&�6Rba�e;e4�ê�®Ù¿;ô�ì;�\î�õ�ð�ô�ï ö®õ�ì=ò.ëUõ�÷oô�ëU÷oò.öÀî�õÎñ*�\î�õtï.ô�÷oô�öf"Eö®õ�ü�ò.ó�ôwì=ô�÷oî�õ�ð$�gô�ì.ì.ëeüUô)'Mï�î ��ò.ó�ô�ö®õ�ö®ò.ö®ëeò=îUïºc�öG� ô,�ÀøEavT-e4�� ó�ô«�\î�ì.ì�öf%��Àô±ì.ó�ëUð�îOí;ö®õ�ü�ì[ö¤õtò.ó�ôwêʼ�`#ÿ_ÒÑì�ö��àñ��®ëeò=îUï ëeï.ôwì.ó�î�í;õÌö®õ � ë9%��®ô«j*�

Å�ô[í;ö-��� �Àô�ò^cU�SR��Zenø�cU� T R�� T enøħàøÄ©¯ø�ëUõ�ð ¦ � ó�ë#"Uô[ò.ó�ô�ì�ë,�gôÃ�gô�ëUõ�ö®õ�ü±ëUì�ö®õàò.ó�ôg��ï.îWî,'�î,'-êʼ�` c�ì=ô�ô[ò.ó�ô\%\ôoÿü�ö®õ�õ�ö®õ�ü[î,'�¼����\ô�õ�ð�ö�û«¼º� ¨ e4� � ó�ô0õ�îUò.öÀî�õ�ì�î,'p0 F4F4AU.Ê>_0)�Y@�Aæ.1098C>EB�AC8�ëUõ�ð�X�0,>_FY?ND BZO)F469B �9AY8H2Y0,>EDG69B9í;ö-����ë,�®ì=î+ï.ôoÿò.ëUö®õgò.ó�ô�öÀï\�gô�ëUõ�ö®õ�ü*����îUï\%�ï.ôY"Wö®ò§úUø%í�ô í;ö-���Eí ï�öÀò=ôMí´§9c½ �§¨RS©�¥ÄR ¦ e/ò=îd�gô�ëUõ�í´§9cE�9ö®õ�cQ§[RS©�eIR��·ëiûpcQ§¨RS©�eIR ¦ e4�SAõgëUð�ð�öÀò.öÀî�õ4øií�ô[í;ö��-�%í ïnöÀò=ô¤ � ëUõ�ð´� � ò=î��gô�ëUõ�í�§,c½ �§[RS©�¥ÄR ¦ � e�ëUõ�ð­� £ m ø�ï.ô�ì��)ô�÷oò.ö�"Uô��Àú,�^cE»;îUò=ô ò.ó�ëeò/í;ó�ô�õ

j ¨

Page 42: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

¤ � ëUõ�ðÐ� � ë9���\ô�ëeï[ö®õ·ôoû1��ï.ô�ì�ì.öÀî�õ�ì\'MîUï[ö������®ö®÷�öÀò/îUïnëU÷Y�Àô#÷�ë,���®ì�øWò.ó�ô�öÀïW"ië,�¤ñ�ô�ì\�9öÀü�ó%ò¥õ�îUò�úUô�òÃ%\ô+ð�ô�ò=ô�ïH�9ö®õ�ô�ðCøöG� ô,�Àø�ò.ó�ô<í�§«+cñ�ô�ï�öÀô�ìÃ�·ë�útõ�îUò[úUô�ò+ó�ë#"Uôº%\ô�ô�õR�·ëUð�ô,�Äe

� ó�ô�ì�ö��àñ��®ëeò=îUï±í;ö�����'Mî �-�Àî�íÑò.ó�ô·ì.ë,�·ôgüUô�õ�ô�ï�ë,��ï�ñ��®ô�ì�ëUì#ð�ô�ì.÷oï�öf%\ô�ðÏö®õª¼¸���)ô�õ�ð�ö�û$¼º� ¨ �Q¿;ô�ì;�\î�õ�ì=ô�ì�ò=î:NA$@ÄDU�9AY8�X!A�2H2Y0�OPA�ëUõ�ðT8�0,B]: 69X 698;0 F$@�A�î,�\ô�ï�ëeò.öÀî�õ�ì[ò.ó�ëeò+ð�î·õ�îUò^'�ë,���Cñ�õ�ð�ô�ï[ò.ó�î�ì=ô�ï�ñ��®ô�ì�ø�ëUì í�ô����CëUì ò=î²ò.ó�ôõ�ô�í OZAY>q�9AC8�D �WAC8�î,�\ô�ï�ëeò.öÀî�õCø�ëeï.ôàð�î�õ�ô�ëUì^'^î ���ÀîOí;ìYí

¨ �{í´§9c½ �§¨RS©�¥ÄR ¦ eÅ�ôR��ï.ô�ì.ñ��gô²ò.ó�ëeòo§ ëUõ�ð�© ëeï.ô�"eë,�®ö®ðbñ�ì=ô�ïdS�ý±ì�øì.ë�úÚî,';ñ�ì=ô�ï�ì¨��ëUõ�ð~� T c^îUò.ó�ô�ï.í;ö®ì=ôUø/ò.ó�ö®ì�+cñ�ô�ï�úí�î�ñ��®ðV%\ô²ó�ëUõ�ð��Àô�ðT%Wú�î�õ�ô²î,'[ò.ó�ô²üUô�õ�ô�ïnë,�0ï�ñ��Àô�ì�ø�ëUì)�gô�õcò.öÀî�õ�ô�ðbö®õL¼¸���\ô�õ�ð�ö�ûª¼)� ¨ e4�Îê�ô�ï�'^îUïH� ë>�AC2�>�.103242457698;:¶î�õLcU�SR�� T e c^ò.ó�ö®ì[ö¤ìÃ�Àô�ü�ë,�qø�ì.ö®õ�÷oô±ëUõ(D X�._@�î,�\ô�ï�ëeò.öÀî�õtí;ö��-��%\ô��·ëUð�ô#õ�ôoûEò[ò=î·ï.ô�÷oîUïnðÌò.ó�ôï�ô�ì.ñ��Àò[î,'�ò.ó�ö®ì¥îUï�ëU÷Y�®ôº+cñ�ô�ï.ú*e4�\»;îOí?÷oî�õ�ì.ö¤ð�ô�ï[ò§í�î²÷�ëUì=ô�ì�íú ��è�âÍf¬»+î/OPA�>q�,AC8�D �WAY8àî,�\ô�ï�ëeò.ö®î�õ¶ó�ëUì[úUô�ò^%\ô�ô�õR�\ô�ï�'^îUïH�gô�ðtî�õLcU�SR�� T e4�

X±ô�õ�ô�ï�ëeò=ôàëUõ�ð¶ì=ò=îUï.ôx¤Êiª �§[RS©�¥ÄR ¦ l[FHG� #k2R ¨ ¥)¨ !�¨ ©�@*�\¿ ô�ì;�\î�õ�ðtí;ö®ò.óÙ¤�iª �§¨RS©�¥ÄR ¦ l_�� ó�ö®ì�ï.ô�ì;�\î�õ�ì.ô¶ö®ì·ö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ô�'Mï�î � ò.ó�ô¶ï.ô�ë,�+ì=úEì=ò=ô��Ìø¥ì.ö®õ�÷oô¶ò.ó�ô¶î�õ��Àú ��ï�öÀîUï·ö-�Q���®ö®÷�ö®ò+Wñ�ô�ï.ú²ò.ó�ëeò[÷oî�ñ��®ðtì.ó�ëUð�î�í�ò.ó�ö®ì�î�õ�ô#ö®ì¥ö®õROZAY>+�,AC8�D �WAY8wî�õ(cU�SR���T�e4�\�;îOíôY"Uô�ï�ø�ò.ó�ö®ì¥÷�ëUì=ô�ëUì.ì.ñ��gô�ìò.ó�ëeò;õ�î/OZAY>>�,AC8�D �gAC8�î,�)ô�ïnëeò.öÀî�õ¶ó�ëUì[úUô�ò�%\ô�ô�õ��)ô�ïH'MîUïH�·ô�ðtî�õVcU�SR�� T e4�

ú ��è�âÕy ¼ OPA�>>�9AY84D �WAY8àî,�\ô�ï�ëeò.öÀî�õËó�ëUìÃ%\ô�ô�õR�\ô�ï�'^îUïH�gô�ðtî�õVcU�SR���T e4�SAõbò.ó�ö®ì�÷�ëUì=ôUø0ò.ó�ôª>�AC2�>\.1092H24576,8�:´î,�)ô�ïnëeò.öÀî�õ¬ë9%)ît"Uô¶ó�ëUì�ï.ô�ò.ñ�ï�õ�ô�ð�í;ó�ô�ò.ó�ô�ï�îUï�õ�îUò ¦ � ¦ � �S{' ¦ O� ¦ � ø�ò.ó�ô�õ�ï�ô�ò.ñ�ï�õؤ-FHGi #k2R ¨ ¥)¨ !�¨ ©�@*�$S{' ¦ � ¦ � c�ö®õ�í;ó�ö®÷nó�÷�ëUì=ô¯ò.ó�ö®ì)+cñ�ô�ï.ú¹ö®ìwì�ó�ëUðEÿîOíô�ð�enø-ò.ó�ô�õËï.ô�ò.ñ�ï�õÙ¤Êiª �§[RS©�¥Yl^c^í;ó�ö®÷nó¶ó�ëUì¸%)ô�ô�õËì=ô�ò;í;ó�ö��Àô ��ï.îE÷oô�ì.ì.ö®õ�üQOZAY>d�9AY84D �WAC8�Î ì=ô�ôàò.ó�ôð�ô�ì.÷oï�öf��ò.ö®î�õtî,'�OZAY>d�9AC8�D �WAC8d%\ô��Àî�íae4�

°Z�{íZT§ cQ§¨RS©�R&��e¿;ô�ò.ñ�ï�õ5y"FHG  #k2R ¨ ¥ ¨ !ñ¨ ©�@ �

±Z�{í µ cQ§¨RS©�R2��eX±ô�õ�ô�ï�ëeò=ô�ëWi §¨RS©�R ¦ l�FHGI� ! ëUõ�ð·ì=ò=îUï�ô+öÀòY� � ó�ô�õ·üUô�õ�ô�ï�ëeò=ô�ì�FHG�� �� ëUõ�ð�íØFHGI� î ¾1ïñð ��ò øcëUõ�ðgï�ô�ò.ñ�ï�õcóì ! � ôÏ« X � Z�� \�¬ �gîEð��ÊeH�6ío�p�)»+îUò=ôgò.ó�ëeò#ò.ó�ö®ì�í;ö-���p%\ô�ö®õ�ð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%��Àô '^ï.î ��ë¯ï�ëUõ�ð�î �È%-öÀò�ì.ò=ï�ö®õ�üî,'��Àô�õ�üUò.ó4C)øEì�ö®õ�÷oô ìo!b��ôÏ« X � Z�� \�¬��gîEð��¶ö®ì�ëàïnëUõ�ð�î � ô��Àô��gô�õcòg'Mï.î �,� �� µ;µ ëUõ�ð ¾ ï�öª÷bø �¾1ï ö¤ìõ�ô�ü �¤öÀü�öf%��Àô,�

j*�{í ¾1< cQ§¨RS©�R J R R R&�_R S R^z2R2��e

ú ��è�âÍfÌ·Wî �gô&��ï�öÀîUï�î ¨ +Wñ�ô�ï.ú¬ó�ëUìgï.ô�÷oîUïnð�ô�ðØëÏò.ñ*�]�ÀôÌî,'±ò.ó�ôR'MîUï4� cU� T R�� T R J R R R Q ¢ µ ¤ µ R&� ¢ µ ¤ µ Rba ¢ µ ¤ µ enøí+öÀò.ó�§ �ÏÅd��´ ¢¶µ ¤Sµ ëUõ�ð�©ó�Ï��´ ¢�µ øZ'^îUï[ì=î �gôa"ië,�¤ñ�ô�ì0î,' Q ¢�µ ¤Sµ øÏ� ¢¶µ�¤Sµ øEëUõ�ðÐa ¢¶µ ¤Sµ � � ó�ö®ì0ö-�Q���®öÀô�ì¦ò.ó�ëeòëdî ¨ c J eW+cñ�ô�ï.úgí�ëUìg�·ëUð�ô+ò=îRcU� T R�� T eëUõ�ð²ï.ô�ò.ñ�ï�õ�ô�ðÂc R R � V µ  UYX � Z[� � 7 µ 8�µ ] Rba ¢¶µ ¤Eµ enøZ%�ñ�ò¥õ�î)¼ak�+cñ�ô�ï�úò=î¹ëUõ¬ëU÷�÷oôY��ò.ë9%]�ÀôR��ëeï.ò.õ�ô�ï�ï.ô�ò.ñ�ï�õ�ô�ð J Î ì=ô�ôtò.ó�ôRî ¨ +cñ�ô�ï�ú�ð�ô�ì.÷oï�ö���ò.öÀî�õL%)ô��®î�í�� c@SAõ¬îUò.ó�ô�ïí�îUï�ð�ì�ø�ò.ó�ö®ì{í ¾1< +Wñ�ô�ï.ú��·öÀü�ócò^%\ôwì.ó�ëUð�î�í�ô�ð&%Wútò.ó�ôwö������®ö®÷�öÀòOí ¾1< +Wñ�ô�ï.úÍ'Mï.î � ÷�ëUì=ôQ°�î,'/ò.ó�ôî ¨ ëU÷oò.ö®î�õ��ÄeÅ � î*�®���Àø�ò.ó�ô�ï.ô·í+ö�����%)ô·ëeò)�gî�ì=ò#î�õ�ô9ì�ñ�÷�ó�ò.ñ����ÀôUø4ì.ö®õ�÷oô R "ië,�®ñ�ô�ì�ì=ò=îUï.ô�ð¹ö¤õÏò.ó�ô�ì=ôgò.ñ*���®ô�ì�ëeï.ôïnëUõ�ð�î � ëUõ�ðËö®õ�ð�ôY�\ô�õ�ð�ô�õcòY�ÕÉ�î�õ�ì.ö®ð�ô�ï[ò§í�î9÷�ëUì=ô�ìYíú ��è�âÍf)�C{±ñ�ô�ï.ú�í µ cQ§¨RS©�R2��e)ó�ëUì�%\ô�ô�õ�ëUì=ùUô�ðCø*c TUWV ï UYX � Z[� �H]w] _ e * 7 µ 8�µ � S øOëUõ�ðmz��¿� V µ  UYX � Z[� � 7 µ 8�µ ] �

� ó�ô;ì.ö���ñ��®ëeò=îUï7��ï.îE÷oô�ô�ð�ì0ëUì\'Mî �-�Àî�í;ì�ípS{')ò.ó�ô�ï.ô+ó�ëUì7%\ô�ô�õ·ëwì.ñ�÷�÷oô�ì.ì;'�ñ���ü�ñ�ô�ì.ì ¦ � î�õ¼ �§¨RS©�¥ëUõ�ð"�É�Ö� V   U]| X � Z�}b� \ m ]=ø�ò.ó�ô�õ¶÷�ë,�-�Cò.ó�ö®ìOí ¾1< +cñ�ô�ï.ú¯ëR24=�FHF�A�2H2UË4=2@6í ¾1<Ùû =�AC8�K/69B(cU� T R�� T e4�

ïGï � }«|Gy�y¸�_�tu~|���o3}4�_yÃ�_�3qH��� � u~|gqas�q4o3vt}4ùÙy{�wy{ùÃy�oY�7�Äs_}�ù �_�3yÃ|G�tr3x4s_}4�3�Q}H��}4s�vtyUs u~o���m qHo9v�� ��� ��� ��� ��� u~|gqas�qHo9vt}4ùy��~y�ùÃy�oY��}H�1�_�3yæ|G�tr3x4s_}4�3��}4�*}Hs�vty{s��Wu~o�� m ójN°

Page 43: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

S{'Cò.ó�ô�ï.ô�ó�ëUì.õB� ò\%\ô�ô�õ9ë�ì.ñ�÷�÷oô�ì.ì;'�ñ���ü�ñ�ô�ì.ì0î�õÇ �§¨RS©�¥�øEò.ó�ô�õ¯÷�ó�ô�÷.ù²ë,�-��ò.ó�ô�í�§^+Wñ�ô�ï�öÀô�ì�øWëUõ�ð�®îcîUù)'MîUï ¦ ò.ó�ëeò/ï�ô�ì.ñ��Àò.ì�ö®õ��É�8� V   U]| X � Z�}b� \�] ��SU')ì.ñ�÷nógë ¦ ö¤ì�'Mî�ñ�õ�ð�c^ò.ó�ô�ï.ô ÷�ëUõQ%\ô�ëeò\�gî�ì=òî�õ�ôwì.ñ�÷nó ¦ ø�í�� î*�®���Àø�%cútò.ó�ô#ï�ëUõ�ð�î �·õ�ô�ì.ì î,'�í�§�enø�ëUõ�ðÌò.ó�ô�ï.ôwõ�ôY"Uô�ï;í¥ëUì;ëUõ¶ñ�õ�ì.ñ�÷�÷oô�ì.ì;'�ñ��ü�ñ�ô�ì.ì î�õ8 �§¨RS©�¥º'^îUï ¦ íc�ëNe�S{'àë >�AC2�>QD@B*2C>_09B]F4A�.103242457698;:?î,�\ô�ï�ëeò.öÀî�õ�ó�ëUìÌõ�îUòR��ï.ôY"Wö®î�ñ�ì��Àú½%\ô�ô�õ �\ô�ï�'^îUïH�gô�ð î�õ

cU��TUR��ÄT-enøN�\ô�ï�'^îUïH� ë�>�A�2C>�D B*2C>_09B]F�A7.103242457698;:²î,�)ô�ïnëeò.öÀî�õgí;öÀò.ó9ëeï.ü�ñ��gô�õcò.ì�cU�·TQR��ÄT�e/ëUõ�ð ¦ �S{'4ò.ó�ô±ò=ô�ì=ò ö¤ì�ì�ñ�÷�÷oô�ì.ì;'�ñ��qøWíô#ë,�®ì.î�÷�ë,�-�-ò.ó�ö®ì\+Wñ�ô�ï.ú²ëÍ24=�FHF�A�2H2UË4=2@Wí ¾1< û =�AC8�K�69BTcU�·TQR���T-e4�

c@%�eÍS{'¦ëª>�A�2C>gD B*2C>_09B]F�Aa.1092H24576,8�:¹î,�)ô�ïnëeò.öÀî�õÎó�ëUì���ï.ôY"Wö®î�ñ�ì��Àú�%\ô�ô�õ&�\ô�ï�'^îUïH�gô�ðËî�õ½cU�·TQR���T-enøò.ó�ô�õ¶ë9%\îUï.òY�æÅ�ôwí;ö-���\÷�ë,���\ò.ó�ö®ì[ôY"Uô�õcòd0,B¿í ¾1< ËY09DU@Ä=18�AC�

SAõbôoûZ�]�®ëUõ�ëeò.öÀî�õCøÕ�®ô�ò$�¾ìgõ�îUò=ôtò.ó�ëeò´��ö®ì�ö®õ�ð�ôY�)ô�õ�ð�ô�õ%òwî,'�� � ø¦ñ�õ��Àô�ì.ìàô�öÀò.ó�ô�ï�ò.ó�ôÌð�ö¤ì.÷oï.ô�ò=ô�®îUüÌî,' � ó�ëUì«%\ô�ô�õÏï.ô�ò.ñ�ï�õ�ô�ðª%Wú8ë���ïnöÀîUï<í § +cñ�ô�ï.úUø4îUï­� ó�ëUì %\ô�ô�õ�ï.ô�ò.ñ�ï�õ�ô�ðª%Wú8ë$OZAY>�,AC8�D �gAC8Q+cñ�ô�ï.ú(c�ö®õÌí;ó�ö¤÷�ó¶÷�ëUì=ô��f�¿� � e4� � ó�ô�'^î ���ÀîOí;ö®õ�ü·÷Y�®ëUö-� ì.ó�îOí;ì ò.ó�ëeò+ôY"Uô�õÎö¤õÌò.ó�ô�¤ëeò=ò=ô�ï�÷�ëUì=ôUøWò.ó�ö®ìqí ¾1< +Wñ�ô�ï.ú�÷�ëUõB� ò\%)ô��=÷oîUï.ï.ô�÷oòS��ñ�õ��Àô�ì.ì/ëº��ï�öÀîUï>í´§Ã+cñ�ô�ï�ú�ï�ô�ì.ñ��Àò=ô�ð·ö¤õgò.ó�ôð�ö®ì.÷oï.ô�ò=ô��ÀîUü9î,'ª�Ñc^îUï;ô��¤ì=ô#ò.ó�ô�ï.ô�ó�ëUì¸%\ô�ô�õÌë·ì.ñ�÷�÷oô�ì.ì�'^ñ��\ü�ñ�ô�ì.ì[î�õ� �§¨RS©�¥3e4íú ��_�U|e~BÍ9ÆpA�>Õc R R&�6Rba�e9�HAa8�AY>E=18�B�A�:´�YK�0xü?àNc J e û =�AC8�Kd>_6!cU�·TQR���T-e�k�ÆpAY>B§ �ÏÅd��´ ¢¶µ ¤Sµ 09B�:©ó�Ï��´ ¢¶µ kdÈ�=t. .1692YAàüUô�òW"Uô�ï�ö¶Ó�ô�ï«D 2æ.*AY8ËY698�X�AH:/6,B¼ �§[RS©�¥o��ACDE>@?1AC8x�HA ËC6,8;Aº698 0�Ë�>�AY8 >@?*Adü�à0NF�>EDG69B�!�²Ã09B]:/8�AY>E=184B�2�� � k�gp?1AYBâ²75�k@6�k®.�kl²WB]6 û =�AC8�K

í ¾1< cQ§[RS©�R J T R R T R&�6R.ý �Qc R T R J TcQí µ cQ§[RS©�R2� � e;e K eIR.ý ��c±�_R2� � eIR2� � eIR

ËY698)0,B�K J T 09B]: R T ²æ5æD@U@H�HAºX�0 :NA�²7=1B @fAC2H2��CK�>@?*Ad>ED X!A)6�Ë�>@?1A�í ¾1<Ùû =�AC8�K�>@?1AY8;Aº?Z092­�HAHAYBAYD@>@?*AC8R0¹24=�FHF�A�2H2UË4=2@�O,=�A�242/69B  �§¨RS©�¥�²º698�09Bcí�§,c½ �§¨RS©�¥ÄR ¦ e û =�AC8�KÔ²�ËY698!2C69X!A ¦ ² 5æDE>@?� � �8� V   U]| X � Z�}b� \�]bk� ó�ô«��ï.îWî,'�î,'�ò.ó�ôw÷Y�¤ëUö���ë9���\ô�ëeï�ì ö®õR¼����\ô�õ�ð�öÀû�Éa�w°Z�

ú ��è�âÍf)� © ò.ó�ô�ï.í;ö¤ì=ô,�ý�î9õ�îUò.ó�ö®õ�ü*�

��ö®õ�ë,���ÀúUø/öf'[ò.ó�ö®ìd+Wñ�ô�ï.ú¹ö®ì�ëÏì.ñ�÷�÷oô�ì.ì;'�ñ��Æí ¾1< +cñ�ô�ï.ú¹î�õ cU� T R�� T e�'MîUïgì=î �gôTcU� T R�� T enø/ò.ó�ô�õÚï�ô�ò.ñ�ï�õa ¢¶µ ¤Eµ � © ò.ó�ô�ï.í;ö®ì=ôUøEï.ô�ò.ñ�ï�õ�aÙFHG� #k2R ¨ ¥ @ �S{'/õ�î�í ¾1< '�ëUö��®ñ�ï.ô#îE÷�÷�ñ�ï�ì+ëUì;ë9ï.ô�ì.ñ��Àò;î,'�ò.ó�ö®ìMí ¾1< +cñ�ô�ï.úUø�ò.ó�ô�õËò.ó�ôwì.ö-�àñ��¤ëeò.öÀî�õÌí;ö��-�Ê%)ô�ö¤õ�ð�ö®ìAÿò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��Àô^'^ï.î � ò.ó�ô±ï.ô�ë,�)í�îUïH�®ðCøEëUìg'Mî �-�Àî�í;ì�í�SAõ¯ò.ó�ô±ï.ô�ë,�\í�îUïH�®ð²ò.ó�ôxa!"eë,�®ñ�ô±ì=ô�õcòÃ%cúÂcU�·TQR���T eö¤ì

í ¾1< cQ§[RS©�R J R R R � V µ  UWX � Z�� � 7 µ 8·µ ] R.ý ��c R R JcQí µ cQ§[RS©�R2� � e;e K eIR#c�� � e V

µ  UYX � Z[� � 7 µ 8�µ ] R2� � eI�� ó�ô�ï.ôY'^îUï.ôUø�ö�'�ò.ó�ö®ì¿í ¾1< +Wñ�ô�ï.ú ö®ìtì.ñ�÷�÷oô�ì.ì�'^ñ��«ø+öÀòtí;ö��-� ï.ô�ò.ñ�ïnõ�ëL"eë,�®ñ�ô�÷oî�õ�ì�ö®ì=ò=ô�õcòÌí;öÀò.ó ò.ó�ôëUð�"Uô�ï�ì.ëeï.ú®�¾ì "Wö®ô�í�� © õ8ò.ó�ô�îUò.ó�ô�ï#ó�ëUõ�ðCøCöf'0ò.ó�ö®ìa+cñ�ô�ï�úËö®ì±õ�îUò#ì.ñ�÷�÷oô�ì.ì�'^ñ��«ø-ò.ó�ô�õÏüUô�õ�ô�ï�ëeò.ö®õ�üÌëïnëUõ�ð�î ��ï.ô�ì��)î�õ�ì=ô#ö®ì ö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ôÃ'Mï.î � ò.ó�ô�ëUð*"Uô�ï�ì.ëeï�ú_�¾ì¸"WöÀô�íFö¤õÌò.ó�ô#ï.ô�ë,�Cí�îUïH�®ð��� ó�ô«'Mî �-�Àî�í;ö¤õ�üg÷Y�®ëUö���ì.ó�îOí;ì ò.ó�ëeò[í�� î*�®����ò.ó�ô�ï�ô�í;ö����]%\ô�õ�îQ'�ëUö��®ñ�ï.ô,íú ��_�U| f�éyÍ ��k 6)k .�k`²ÕB]6�í ¾1< ËY09DU@Ä=18�A)5æD@U@�6�F4FY=18�k� ó�ô«��ï.îWî,'�ë9���)ô�ëeïnì[ö®õR¼¸���)ô�õ�ð�ö�û�Éa�w°Z�¼�ì/÷�ëUõ�%\ô�ì.ô�ô�õCø%ëUõ�í ¾1< +Wñ�ô�ï.úàö¤ìuò.ó�ô¥î�õ��®ú����®ëU÷oô[ö®õàò.ó�ô[ì.ö���ñ��®ëeò.öÀî�õàò.ó�ëeò¦ë�>�A�2C>�D@B*2�>_09B�F4AÕ.1032424<576,8�:Â+Wñ�ô�ï.út÷�ëUõ&%\ôº�·ëUð�ô�î�õËëgï�ô�ì;�\î�õ�ð�ô�ï;ö®õ�ì=ò.ëUõ�÷oô,�WÅ�ôà÷�ëUõÎò.ó�ô�ï.ôY'^îUï.ôwì=ò.ëeò=ô�ò.ó�ô�'^î ���ÀîOí;ö®õ�ü÷Y�¤ëUö�� c�ì.ö��9ö��®ëeïH�Àúgò=î²ê�¼a` ëUõ�ðÌê0ê7`de4íú ��_�U| fåf6ͨ�Ë!0Ïò=ô�ì=òwö®õ�ì=ò.ëUõ�÷oôQ��ëUì.ì.íîUï�ð û =�AY84K$D 2QX�0 :NAR69B 0&8;AC2_.16,B]:NAC8ÍD@B*2�>_09B�F4A�cU� T R�� T eb²>@?*ACB(cU�·TQR���T e«?Z032�B]6 >7?10 :�0!X�0,>_FY?ND@BPO$FH6,B �9AY8H2Y0,>EDE6,B(5æD@>@?&09B(0 F4F4A{.�>_0)�Y@�A¸.10,8�>EB�AY8�k

jN±

Page 44: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

� ó�ôwï.ô�ëUì.î�õÎö®ì ò.ó�ëeò�ëUõ�í ¾1< +cñ�ô�ï.úÌ÷�ëUõËï.ô�ì�ñ��Àò;ö®õËë¹>�AC2�>WD B�2�>_09B]F�A�.1092H24576,8�:ª+Wñ�ô�ï.úÌî�õ cU� T R�� T eî�õ��ÀúÎöf'ëtò.ñ*���Àô$cU�·TQR���TQR J R R R Q ¢¶µ�¤Sµ R&� ¢¶µ�¤Sµ Rba ¢¶µ ¤Eµ e�ó�ëUì ��ï�ôY"WöÀî�ñ�ì��ÀúR%\ô�ô�õÏï.ô�÷oîUï�ð�ô�ð��)S�ò#í;ö�����%\ô�÷oî �gôë9����ëeï.ô�õcò)%\ô��ÀîOíÑc�ì=ô�ô¯ò.ó�ô�î ¨ +Wñ�ô�ï.ú¹ð�ô�ì.÷oïnöf��ò.öÀî�õ]e+ò.ó�ëeò�ø/í�� î*�®���Àø/ò.ó�ö®ìà÷oî�ñ��®ð�î�õ��Àú�ó�ë9���\ô�õ�ö�'cU��TUR��ÄT e�ó�ëUì õ�îUò+ó�ëUð¶ëQ�·ëeò.÷nó�ö®õ�ü9÷oî�õP"Uô�ï�ì.ëeò.ö®î�õ¶í;öÀò.óËëUõ¶ëU÷�÷oôY��ò.ë9%��Àôº��ëeï.ò.õ�ô�ï��

ú ��è�âÕy »+î9ò.ñ*���®ô�î,'�ò.ó�ôº'^îUïH�ÐcU� T R�� T R J R R R Q ¢ µ ¤ µ R&� ¢ µ ¤ µ Rba ¢ µ ¤ µ e ó�ëUì^%\ô�ô�õËï.ô�÷oîUï�ð�ô�ðËí;öÀò.óa§,�,Åq��´ ¢ µ ¤ µëUõ�ða©ó�Ï��´ ¢¶µ �¿;ô�ò.ñ�ï�õ�a4FHG  #k2R ¨ ¥�@�� � ó�ô±î�õ��Àú9í¥ë�ú¯ò.ó�ö®ì¥ï�ô�ì;�\î�õ�ì=ô±÷oî�ñ��®ð�%\ô�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ô^'Mï�î � ò.ó�ô±ï.ô�ë,�ì.úWì=ò=ô���ö¤ìöf'Cò.ó�ö®ì\+Wñ�ô�ï.ú9íî�ñ��¤ð�%\ô�ì�ó�ëUð�î�í�ô�ðÍ%cú²ëUõ¯ö-�Q���®ö®÷�ö®òqí ¾1< +cñ�ô�ï.ú�'^ï.î �Õ÷�ëUì.ô ¨ î,'�ì=î �gôî ¨ ëU÷oò.öÀî�õ4øEö_� ô,�Àø�öf' J ëUõ�ð R ëeï.ô '^ï.î � ë��·ëeò.÷�ó�ö¤õ�üg÷oî�õN"Uô�ï�ì�ëeò.öÀî�õÌî,'4ò�íîQ"eë,�®ö®ð¯ñ�ì=ô�ï[ö®õ�ì.ò.ëUõ�÷oô�ì�øëUõ�ð S � ý �dc R R TUWV ï UYX � Z[� ��]^] _ e4�æ�;îOíôY"Uô�ï�øP%Wúàò.ó�ôÃ'Mî ���®î�í;ö®õ�ü�÷Y�®ëUö-�ÌøUí�� î*�®���Uò.ó�ö¤ì�í;ö����Wõ�îUò/îE÷�÷�ñ�ï��ú ��_�U| fÞyBÍ�ÆpAY> J �4A!8;A�>E=Z8�B�AH:Ø�CKÂ0,BØh­Ý û =�AC8�K&>_6ªcU�SR��Ze/5æD@>@?a§Ó�Ó��´O¢)0,B]:�©Þ�ÓÅd��´M¢�¤Ô²0,B]: R �4A¸8;A�>E=Z8�B�AH:´�CK�0�2�=å��2YA û =�ACB]>�ü�à c J e û =�AC8�K)>_6�cU�·TQR��ÄT eÃ5æDE>@?[©É�i��´ ¢¶µ 09B]:�§Ï� Åd��´ ¢¶µ ¤Sµ kgp?*ACBâ²�5�k 6)k .�k`²Õ>@?1A >@?1AY8;A�5æDU@@]B�AY�,AC8��4A[�_BÊACDE>@?1AC8x�HA ËC698�A B�698 0�Ë�>�AY8�>@?1A?h�Ý�09B�:9ü�à û =�AC8�D_A�2�!)0,B6,8�0 F�@fA û =�AY84K >_6)AYD@>@?*AC8�í ¾1< ²6í ¾1= ²p698+í Á ²�>@?Z0,>�D@B]F$@ =�:NA�2ÃcQ§[RS©�R J R R R.ý ��c R R TUWV ï UYX � Z[� �H]w] _ eIR2�deb²ËY698)0,B�K��'k� ó�ö®ì¦÷Y�®ëUö-� ö®ì7��ï.î#"Uô�ð¯ö®õgò.ó�ô+ì.ë,�gô+í�ë�ú·ëUìgÉÃ�®ëUö�� ±/c^í;öÀò.ó·î,%Z"EöÀî�ñ�ì0÷nó�ëUõ�üUô�ì�ò=îàëU÷�÷oî �!�gîWð�ëeò=ôò.ó�ôwð�ö¶h\ô�ï.ô�õ�÷oô�ìÃ%\ô�ò�íô�ô�õÎê�¼a` ëUõ�ðËê�¼a`±ÿ_Ò�e4�

³Z�{í ¾1= cQ§¨RS©�R J R R R S R&�6Rba®R&�5R2�/e¿;ô�ò.ñ�ï�õ�avT�FHG� #k2R ¨ ¥ @ �� ó�ö®ì;ö¤ì;ö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ô¸'^ï.î � ò.ó�ôàï.ô�ë,��ì=úEì=ò=ô��À%cúÌò.ó�ôd'^î ���Àî�í+ö®õ�ü9ëeï.ü�ñ��gô�õ%òYí � ó�ôwî�õ��®útö-�Q���®ö®÷�ö®òí ¾1= +cñ�ô�ï�úàò.ó�ëeò÷oî�ñ��®ðgì.ó�ëUð�î�íØò.ó�ö®ì�î�õ�ô;ö®ì�ò.ó�ô¸+cñ�ô�ï.ú)'^ï.î � ÷�ëUì.ô ¨ î,'CëUõ�¼ °#ëU÷oò.öÀî�õ��Õ�+î�í�ôY"Uô�ï�øWò.ó�ëeòì�ó�ëUð�î�í+ö®õ�ügö®ì�øEí�� î*�®���Àø�ö-�Q�\î�ì.ì.öf%��®ô¸%Wú�Ég�®ëUö-� ¨ °Z� cE»;îUò=ôwò.ó�ëeò[ò.ó�ô<í ¾1= +Wñ�ô�ï�öÀô�ì[ö®õt÷�ëUì=ôd°�î,'uò.ó�ô�¼ °ëU÷oò.ö®î�õÌëeï.ô±ôoûZ���¤ö®÷�öÀò�øcö_� ô,�ÀøEë,�-��î,'4ò.ó�ô�öÀï[ëeï.ü�ñ��gô�õcò.ì¥ëeï.ô±ùWõ�îOí;õCøEëUõ�ðtì=î�ëd+Wñ�ô�ï.úcÿ«ï.ô�ì;�\î�õ�ì.ô¸��ëUöÀï�í�î�ñ��®ð%\ô�ì=ò=îUï�ô�ðR'MîUï+ò.ó�ô��R�Äe

´Z�{í Á cQ§¨RS©�R J R R R S R&�5R2��e¿;ô�ò.ñ�ï�õa¡ FHG� #k2R ¨ ¥ @ �¼�ì^'^îUï{í ¾1= +Wñ�ô�ï�öÀô�ì�ø�ö®õ�ð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ë9%�ö��ÀöÀò�úàô�ëUì�ö��Àú!'^î ���ÀîOí;ìÃ%WúRÉÃ�®ëUö�� ¨ °Z�

²P�¸¼ak�+Wñ�ô�ï.ú¯ò=î¹cU�SR��ZeX±ô�õ�ô�ï�ëeò=ô²ëUõ�ð�ì=ò=îUï.ô$#,F[GÖ� ! øuëUõ�ð¹ì.ô�õ�ð J �Û�&%7�/Ég�Àô�ëeï4�ÀúUø J ö®ì#ñ�õ�öf'MîUï4���Àú¶ð�ï�ë�í;õª'^ï.î � � ��� ! øß.ñ�ì=ò ëUì+ö®õtò.ó�ô#ï.ô�ë,�uì=úWì.ò=ô��R�

­Z�¸î ¨ c J e^+cñ�ô�ï�ú²ò=î¹cU� T R�� T eX±ô�õ�ô�ï�ëeò=ô Q ¢�µ ¤Sµ FHGØ� ! ø�� ¢¶µ�¤Sµ FHGc #k2R ¨ ¥ @ ø�a ¢¶µ�¤Sµ FHG~ #k2R ¨ ¥ @ �¸·Wô�õ�ð R ��� * 7 µ<8�µ øE����� V µ  UYX � Z[� � 7 µ 8�µ ] ø)ëUõ�ða���a ¢¶µ ¤Eµ �7»+î�í ÷oî�õ�ì.ö®ð�ô�ï[ò§í�î²÷�ëUì=ô�ìYíú ��è�âÍf � ó�ô«"eë,�®ñ�ô#î,' J ó�ëUì^%)ô�ô�õÌì.ô�õ%ò^%WúÌëUõ¶ëU÷�÷oôY��ò.ë9%��®ô���ëeï.ò.õ�ô�ï#�

� ó�ô�ì.ö���ñ��®ëeò.öÀî�õÌ÷oîUï�ï.ô�ì;�\î�õ�ð�ì¥ò=î·ò.ó�ô�ö��Q���®ö¤÷�öÀòîUïnëU÷Y�Àô�+cñ�ô�ï.úa ¢¶µ ¤Eµ ¢-� ¢¶µ�¤Sµ � í ¾1< cQ§¨RS©�R J R R R&�_R.ý �!c R R J

cQí µ cQ§¨RS©�R2� � e;e K eIR#c�� � e Vµ  UWX � Z[� � 7 µ<8·µ ] R2� � eI�

·�ö®õ�÷oô R ö®ì;ë�'^ï.ô�ì.ó��Àú¯÷�ó�î�ì.ô�õËï�ëUõ�ð�î � õWñ��º%\ô�ï�ø�ò.ó�ö®ì ö��Q�]�®ö®÷�öÀòg+cñ�ô�ï.úUø�í�� î*�®�p�Àø�í;ö����Cõ�îUò;ì.ó�ëUð�îOíëUõcú!��ï�öÀîUïÂí ¾1< +cñ�ô�ï�öÀô�ì«c^í;ó�ô�ò.ó�ô�ï¥ôoû1���®ö®÷�ö®ò0îUï ö��Q�]�®ö®÷�öÀò4e4�æÉ�î�õ�ì=ô�+Wñ�ô�õcò��ÀúUøoa ¢ µ ¤ µ í;ö�����%\ô�ö®õ�ð�ö®ì=ò.ö®õ�ÿü�ñ�ö®ì.ó�ë9%��®ôa'^ï.î ��ò.ó�ô«"ië,�®ñ�ô�ì=ô�õ%ò+ö®õtò.ó�ô�ï.ô�ë,�uì=úWì.ò=ô��R�

j,j

Page 45: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

ú ��è�âÕy � ó�ô«"eë,�®ñ�ô#î,' J ó�ëUì;õ�îUòÃ%\ô�ô�õ¶ì=ô�õcò^%cútëUõËëU÷�÷oôY��ò.ë9%��Àô���ëeï�ò.õ�ô�ï��SAõ ò.ó�ö¤ìg÷�ëUì=ôUø¥ï.ô�÷oîUï�ð ò.ó�ôÌò.ñ����Àô(cU�·TQR���TQR J R R R Q ¢ µ ¤ µ R&� ¢ µ ¤ µ Rba ¢ µ ¤ µ e4�½S�ò²ö®ìgö��Q�\îUï.ò.ëUõcò�ò=î�õ�îUò=ôLc@'^îUïÉÃ�®ëUö�� ¨,¨ enø�ò.ó�ëeò+öf'uò.ó�ö¤ì¥ò.ñ*���Àô#ö®ì¥ï.ô�÷oîUïnð�ô�ðCø�ò.ó�ô�õCø�í�� î*�®���ÀøpcU� T R�� T eí+ö����)õ�ôY"Uô�ï¸%\ô#÷oî�õ�ì.ö®ð�ô�ï.ô�ðtò=îó�ë�"Uôtë&�·ëeò.÷nó�ö®õ�ü8÷oî�õN"Uô�ï�ì�ëeò.öÀî�õbí;öÀò.ó�ëUõÚëU÷�÷oôY��ò.ë9%��ÀôÍ��ëeï.ò.õ�ô�ï�ø�ð�ñ�ô·ò=î8ò.ó�ô!'�ëU÷oòwò.ó�ëeòd"eë,�®ñ�ô�ìî,' J ëeï.ôÌüUô�õ�ô�ï�ëeò=ô�ð ïnëUõ�ð�î ���ÀúT%WúÚö¤õ�öÀò.ö®ëeò=îUï�ö®õ�ì=ò.ëUõ�÷oô�ìY�ÎcE¿ ô�÷�ë,�-�¥ò.ó�ëeò·ö®õbî�ñ�ïgð�ôCÓ-õ�ö®ò.öÀî�õ�î,'�;�9ëeò.÷�ó�ö®õ�ü9÷oî�õN"Uô�ïnì.ëeò.öÀî�õ �9íôwëeï�ôwõ�îUò ÷oî�õ�÷oô�ï�õ�ô�ð¶í;öÀò.ótò.ó�ô#ò.ö��·ö®õ�ü�î,'/ì=ô�õ�ð�ì[ëUõ�ðÌï.ô�÷oô�öf"Uô�ì��Äe¼�ì;ö¤õtò.ó�ô«��ï.ôY"EöÀî�ñ�ì[÷�ëUì=ôUø-íôàó�ë�"UôwëUõËö��Q���®ö¤÷�öÀòîUïnëU÷Y�Àôº+Wñ�ô�ï.ú

a ¢�µ�¤Eµ ¢Í� ¢�µ�¤Eµ �÷í ¾1< cQ§[RS©�R J R R R&�_R.ýa��c R R JcQí µ cQ§[RS©�R2� � e;e K eIR#c�� � e V

µ  UYX � Z[� � 7 µ 8�µ ] R2� � eIRí+ó�ö®÷�óÌö¤ì ö®õ�ð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%��Àô ëUì;ë9%)ît"Uôº%Wú²ò.ó�ô�ï�ëUõ�ð�î �9õ�ô�ì.ì¥î,' R "ië,�¤ñ�ô�ìY�

¯Z�¸¼ °*c R R&�_Rba�e^+Wñ�ô�ï.ú¯ò=î¹cU�SR��Ze

ú ��è�âÍf cU�SR��Ze ó�ëUì;ó�ëUð¶ëQ�·ëeò.÷nó�ö®õ�ü9÷oî�õP"Uô�ï�ì.ëeò.ö®î�õ¶í;öÀò.óÌëUõÎëU÷�÷oôY��ò.ë9%��Àôº��ëeï.ò.õ�ô�ï)cU� T R�� T e4�X±ô�õ�ô�ï�ëeò=ô4avT¢�¤ FHG¸ #k2R ¨ ¥ @ ø�ì.ô�õ�ð�avT>�:avT¢�¤ ø�ì=ô�òwì=ò.ëeò.ñ�ìwò=î¹¼�÷�÷oôY��ò�ø/ëUõ�ðT�\ô�ï�'^îUïH��ëª2C>_098�>�2�A�24<2�DE6,B î,�)ô�ïnëeò.öÀî�õ¹í;ö®ò.ó¹ò.ó�ô9÷oî�õ�õ�ô�÷oò.öÀî�õbëUì.ì.öÀü�õ��·ô�õ%ò/6�.*ACBaËY698�FH69B�BÊA�F�>EDG69B¼Ë�8�6,X cU� T R�� T e4� � ó�ö®ì÷oîUï�ï.ô�ì;�\î�õ�ð�ì¥ò=î·ò.ó�ô�'Mî �-�Àî�í;ö¤õ�ügö��Q���®ö¤÷�öÀò0îUï�ëU÷Y�®ôº+cñ�ô�ï�öÀô�ìYí

a T¢�¤ �÷í ¾1= cQ§¨RS©�R J R R R.ý ��c R R JcQí µ cQ§¨RS©�R2� � e;e K eIR&�_Rba ¢ µ ¤ µ R&� ¢ µ ¤ µ R2� � eIR

¡�¢�¤��÷í Á cQ§¨RS©�R J R R R.ý ��c R R JcQí µ cQ§¨RS©�R2� � e;e K eIR&� ¢¶µ ¤Eµ R2� � eIR

í+ó�ô�ï.ô�¡�¢�¤+ö¤ì0ò.ó�ô�ï�ëUõ�ð�î � ì=ô�ì.ì�öÀî�õ9ùUô�ú²ëUì.ì.öÀü�õ�ô�ð/%Wúgò.ó�ô+ïnö®õ�üº�·ëUì.ò=ô�ï¥ëeò�ò.ó�ô�ò.ö��gô+î,'4ò.ó�ô)2�>_098C>2�A�2424DG69BÏî,�)ô�ïnëeò.öÀî�õ��î�ú)Ég�¤ëUö�� ¨ °WøUò.ó�ô�ì=ô�ö��Q���¤ö®÷�öÀò�+cñ�ô�ï�öÀô�ìu÷oî�ñ��®ð�õB� òuì�ó�ëUð�î�íbëUõ%ú«�-ëUì=òuîUï�'^ñ�ò.ñ�ï.ô¦ôoû1���®ö®÷�ö®ò�+cñ�ô�ïnöÀô�ìY�pS�òö¤ì�ë,�¤ì=îàô�ëUì.ú²ò=îgì=ô�ô±ò.ó�ëeò¥ò.ó�ô�ì=ô#ö������®ö®÷�öÀò\+cñ�ô�ïnöÀô�ì0í+ö�����õ�îUò¥ì�ó�ëUð�î�í�ëUõcú9îUò.ó�ô�ï ö-�Q���®ö®÷�ö®ò7+cñ�ô�ï�öÀô�ì�øñ�õ��Àô�ì.ì�ò.ó�ô�ï.ô¶ö¤ì�ë�÷oî �-�®ö®ì.öÀî�õÚî,' J "eë,�®ñ�ô�ì�%\ô�ò§í�ô�ô�õ ò�íî�ö¤õ�öÀò.ö®ëeò=îUïgö®õ�ì.ò.ëUõ�÷oô�ì$c�ëUõ�ð¬ò.ó�ëeògî�õ��®úîE÷�÷�ñ�ï�ì í;öÀò.óÌõ�ô�ü �®ö®ü�öf%��Àôa��ï.î,%�ë9%-ö��®öÀò�ú*e4�� ó�ô¹64.*AYB´÷oî�õ�õ�ô�÷oò.öÀî�õÚëUì.ì.öÀü�õ��gô�õ%òwí;ö�����%\ô!�Àô�ü�ë,�qø�ì.ö®õ�÷oô9ò.ó�ô·î�õ��ÀúÂ���®ëU÷oô9ò.ó�ëeòwò.ó�ô²ì.ö���ñ��®ëeò=îUï÷oî�ñ��®ð½�\ô�ï�'^îUïH� ë >�A�2C>ºD@B*2C>_09B]F4A�.*032H2�57698�: î,�\ô�ï�ëeò.öÀî�õ´î�õ cU�SR��Ze�í�î�ñ��®ð½%\ô¶ö®õ ÷�ëUì=ôª°Ïî,'±ò.ó�ô¼ °ª+Wñ�ô�ï.úÎc�ì=ô�ôÌò.ó�ô�ï.ôte4� ¼a�®ì=î�ø0í�� î*�®���Àø0í�ôÌí;ö��-�0õ�ôY"Uô�ï·ó�ë#"Uô¶ò§í�î¹ö®õ�ö®ò.ö®ëeò=îUïgö®õ�ì=ò.ëUõ�÷oô�ìRcU� µ R�� µ eëUõ�ðVcU� ¾ R�� ¾ eò.ó�ëeò;ëeï.ô#î,�\ô�õ�'MîUï+÷oî�õ�õ�ô�÷oò.öÀî�õR'^ï.î � ò.ó�ôàì.ë,�gô#ï.ô�ì;�\î�õ�ð�ô�ï¥ö¤õ�ì=ò.ëUõ�÷oô!cU� T R�� T enø-ì.ö®õ�÷oôò.ó�ëeò+í�î�ñ��®ð¶ö-�Q���Àú¯ò.ó�ëeòQcU� µ R�� µ e ëUõ�ðLcU� ¾ R�� ¾ e¥üUô�õ�ô�ï�ëeò=ô�ð8ò.ó�ôàì.ë,�·ô J "eë,�®ñ�ôÍc^îUò.ó�ô�ï.í;ö®ì.ôUø-ò.ó�ô�ú÷oî�ñ��®ð�õB� òÃ%\îUò.óÌó�ë#"Uôàó�ëUð$�9ëeò.÷�ó�ö®õ�ü·÷oî�õN"Uô�ï�ì�ëeò.öÀî�õ�ì+í;öÀò.ó(cU� T R�� T e;e4�

ú ��è�âÕy cU�SR��Ze ó�ëUì;õ�îUò ó�ëUð¶ë��9ëeò.÷�ó�ö®õ�ü·÷oî�õN"Uô�ï�ì�ëeò.öÀî�õËí+öÀò.óÌëUõ¶ëU÷�÷oôY��ò.ë9%��®ôº��ëeï.ò.õ�ô�ï��VuîcîUù�'^îUï;ë�"eë,�®ñ�ô#î,'�� 'MîUï í+ó�ö®÷�óÌëUõÇíÇT§ cQ§[RS©�R&��eg+Wñ�ô�ï.útó�ëUìÃ%\ô�ô�õR�·ëUð�ôwëUõ�ðÐ���8� V µ  UWX � Z�� � ] �c@Å � î*�®���\ò.ó�ô�ï.ôàí;ö����Ê%\ô�ëeò��gî�ì=ò�î�õ�ô�ì.ñ�÷�ó¹"eë,�®ñ�ô�î,'��iø\ð�ñ�ôwò=î²ò.ó�ô�ï�ëUõ�ð�î �·õ�ô�ì.ì[î,'qí T§ �ÄeÍS{'/õ�îì�ñ�÷�ó��#ö¤ìÃ'Mî�ñ�õ�ðCøEò.ó�ô�õÌï.ô�ß=ô�÷oòY� � ó�ö®ì[ö®ì[ö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%]�ÀôÃ'Mï�î ��ò.ó�ô�ï.ô�ë,�uì=úWì.ò=ô��Ìø�ì.ö®õ�÷oô#í�� î*�®���ò.ó�ô?��ï.ô�÷oô�öf"Uô�ð²í�î�ñ��®ð9õ�îUò7��ëUì.ìò.ó�ô+ò=ô�ì=ò�£�8� V µ  UYX � Z[� � ] øWõ�î)�·ëeò=ò=ô�ï¥í;ó�ëeò� íî�ñ��¤ð9ó�ë#"Uô�%\ô�ô�õ÷oî ����ñ�ò=ô�ð¶ö®õ¶ò.ó�ô#ï.ô�ë,�4ì=úEì=ò=ô��R�© ò.ó�ô�ï.í;ö®ì.ôÍc�öf'0ì�ñ�÷�óÏëÙ�àö¤ì¸'^î�ñ�õ�ð]enø��ÀîWîUù$'^îUï#ë/"eë,�®ñ�ô�î,' � 'MîUï±í;ó�ö¤÷�ó8ëUõ�í µ cQ§[RS©�R2��e�+cñ�ô�ï�úó�ëUìÃ%\ô�ô�õ$�·ëUð�ôUø�ëUõ�ðÌëUõ�îUò.ó�ô�ï�+Wñ�ô�ï.ú

í ¾1< cQ§¨RS©�R J R R R&�6R R %('oK ôÏ« X � Z�� ��¬ R2� V µ  UYX � Z[� � ] R2�deó�ëUì�%)ô�ô�õ��·ëUð�ô¥ëUõ�ðàï�ô�ò.ñ�ï�õ�ô�ð�aH¢´�3�^c@Å � î*�®���Uò.ó�ô�ï.ô¥í;ö����N%)ô¥ëeòÕ�gî�ì=ò�î�õ�ô[ì.ñ�÷�ó�"eë,�®ñ�ô�î,'��·ø%ð�ñ�ôò=î9ò.ó�ô#ï�ëUõ�ð�î �9õ�ô�ì.ì¥î,'�í ¾1< �ÄedS{'�õ�î·ì.ñ�÷�ó�� ö®ìg'^î�ñ�õ�ð4øWò.ó�ô�õÌï.ô�ß=ô�÷oòY� � ó�ö®ì¥ö®ì[ö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��Àô

jN³

Page 46: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

'^ï.î �Bò.ó�ô�ï.ô�ë,��ì=úEì=ò=ô��ÌøCì.ö®õ�÷oô�í�� î*�®���)ò.ó�ô�aËï.ô�÷oô�öf"Uô�ð8íî�ñ��®ð&%\ô�ö®õ�÷oîUï.ï�ô�÷oò�ö®õÎò.ó�ô�ï.ô�ë,��ì=úEì=ò=ô��c�ö_� ô,�Àø%ò.ó�ô;÷oîUï�ï.ô�÷oòa£�¡�o¢¿í ¾1< cQ§[RS©�R J R R R&�_R.ý ��c R R TUWV ï UYX � Z[� � m ]^]`_ eIR#c�� � e V

µ  UYX � Z[� � ] R2� � e�í�î�ñ��®ð%\ô�ö®õ�ð�ôY�\ô�õ�ð�ô�õcòî,'�ò.ó�ô�ëUð*"Uô�ïnì.ëeï.ú®�¾ì^"EöÀô�íae4�·�ñ*���\î�ì=ô#ì.ñ�÷nó¶ë'� ö®ìÃ'^î�ñ�õ�ð��7É�î�õ�ì�ö®ð�ô�ï[ò§í�î9÷�ëUì=ô�ì�íú ��è�âÕyW� ¼ OPA�>>�,AC8�D �WAY8d+Wñ�ô�ï.útó�ëUìÃ%\ô�ô�õR�\ô�ï�'^îUïH�gô�ðtî�õLcU�SR�� T e�ëUõ�ðÌï�ô�ò.ñ�ï�õ�ô�ð�� � �

S{'�� O�¿� � ø�ò.ó�ô�õ¶ï.ô�ßAô�÷oòY� � ó�ö®ì[ö¤ì[÷Y�Àô�ëeïH�Àútö®õ�ð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%��ÀôÃ'^ï.î ��ò.ó�ô�ï.ô�ë,�4ì=úEì=ò=ô��Ìø-ì.ö®õ�÷oôò.ó�ô�÷oîUï�ï.ô�÷oòxaÎö¤ì+ö®õ�ð�ôY�\ô�õ�ð�ô�õcò î,'¦ò.ó�ôgëUð*"Uô�ï�ì�ëeï.ú_�¾ìa"EöÀô�íÏc�ëUì±ò.ó�ô���ëeï.ü�ñ��·ô�õ%ò�ò=î¼í ¾1< ö®ìö¤õ�÷oîUï.ï.ô�÷oò4e4�S{'��Ã�¿� � ø�ò.ó�ô�õ$��ï.îE÷oô�ô�ð¶ëUì^'^î ���ÀîOí;ìYíc�ëNe&·Eô�òda T � í ¾1= cQ§[RS©�R J R R R R %('oK ôÏ« X � Z[� �i¬UR&�_Rba®R&�5R2��e4�c@%�e$·Eô�õ�ð�a T �c�÷#eR¼�÷�÷oôY��òY�c�ð]e$·Eô�òM¡Ð� í Á cQ§[RS©�R J R R R R %('oK ôÏ« X � Z[� �i¬ R&�5R2�Qe4�c^ôte¼�¦ûZ�\î�ì=ô#ñ�ì�ö®õ�ü�ì=ô�ì.ì.öÀî�õtùUô�ú¿¡ c^ò.ó�ö®ì[ö®ì[ë,���®î�í�ô�ðCø�ì.ö®õ�÷oô�cU�SR��Ze¥ö®ì[ëg÷Y�®ö®ô�õ%ò[ö®õ�ì.ò.ëUõ�÷oôUø�ëUõ�ð

ë/OPAY>q�9AY84D �WAC8�+Wñ�ô�ï.útó�ëUìÃ%\ô�ô�õR�\ô�ï�'^îUïH�gô�ðtî�õVcU�SR���T�e;e4�»+îUò=ô�ò.ó�ëeò;ò.ó�ô)"ië,�¤ñ�ô�ì î,'�a T ëUõ�ðZ¡ ëeï.ôà÷oî ����ñ�ò=ô�ðÎò.ó�ï.î�ñ�ü�óËôoûZ���¤ö®÷�öÀò¥îUï�ëU÷Y�Àô�+cñ�ô�ï�öÀô�ìºc^í�ô÷�ëUõ¬ò.ó�ö®õ�ù�î,';ò.ó�ô�ì=ôÌëUì�ì�ñ*%�ï.î�ñ�ò.ö¤õ�ô²÷�ë,���¤ìwí;ö®ò.ó�ö®õ¹ò.ó�ôtì�ö��àñ��®ëeò=îUï�enø¦ëUõ�ðbò.ó�ô�+cñ�ô�ï�öÀô�ì�ëUõ�ðï�ô�ì;�\î�õ�ì=ô�ì�ëeï.ô±ï.ô�÷oîUï�ð�ô�ðCø�ëUì¥ñ�ì.ñ�ë,�G��S�ò[ö®ì�÷Y�Àô�ëeï¥ò.ó�ëeò¥ò.ó�ô�"eë,�®ñ�ô�ì�î,'HavT-ëUõ�ð¿¡ ��ï.îEð�ñ�÷oô�ð²ö®õò.ó�ö®ì ÷�ëUì=ôwëeï�ô�ò.ó�ô�ì.ë,�gôàëUì í�î�ñ��®ð�%\ô�÷oî �Q��ñ�ò=ô�ðËö®õtò.ó�ô#ï.ô�ë,�4ì.úWì=ò=ô��$�

ú ��è�âÕyW�b»;î/OZAY>d�9AY84D �WAC8�+Wñ�ô�ï.útó�ëUìÃ%\ô�ô�õ��\ô�ï�'MîUï4�gô�ðtî�õLcU�SR���T�e4�VuîcîUù!'MîUï[ë)"ië,�®ñ�ô+î,' ¦ ì.ñ�÷nó²ò.ó�ëeòÂí § c½ �§¨RS©�¥ÄR ¦ e�ó�ëUì\%)ô�ô�õ¯ëUì=ùUô�ðÌëUõ�ðÐ�É�Ö� V   U]| X � Z�}b� \�] �c@Å � î*�®����ò.ó�ô�ï�ô�í+ö�����%\ô#ëeòÃ�gî�ì=ò¥î�õ�ô#ì.ñ�÷nó�"ië,�¤ñ�ô+î,' ¦ ø�ð�ñ�ô�ò=îgò.ó�ô+ïnëUõ�ð�î �·õ�ô�ì�ìî,'�í�§3�Äe)SU'õ�îàì.ñ�÷nó ¦ ö®ìÕ'^î�ñ�õ�ð4ø%ò.ó�ô�õ9ï.ô�ßAô�÷oòY� � ó�ö®ì¦ö¤ì0ö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ô7'^ï.î � ò.ó�ô;ï.ô�ë,�-ì=úWì.ò=ô��Ìø�ì.ö®õ�÷oôíº� î*�®���\ò.ó�ô�a¶ï.ô�÷oô�ö�"Uô�ðÏíî�ñ��¤ð&%\ô�ö®õ�÷oîUï.ï.ô�÷oò±ö®õÎò.ó�ô�ï.ô�ë,��ì=úEì=ò=ô�� c�ëUì±ò.ó�ô´� ëeï.ü�ñ��gô�õcò±ò=îí ¾1< ö®ì[ö®õ�÷oîUï.ï.ô�÷oò í�� î*�®�p�Äe4�© ò.ó�ô�ï.í;ö®ì.ôRc�ö�'ì.ñ�÷nó¹ë ¦ ö®ì '^î�ñ�õ�ð]enøp�)ô�ïH'MîUïH� ë(>�AC2�>¸D B*2C>_09B]F�A�.1032H2�57698;:�î,�\ô�ï�ëeò.ö®î�õÏí;öÀò.óëeï�ü�ñ��gô�õcò.ì¹cU�SR��ZegëUõ�ð ¦ c�õ�îUò=ô¶ò.ó�ëeò·ò.ó�ö¤ìgö®ìgò.ó�ôÌî�õ��®úV���®ëU÷oôËí;ó�ô�ï.ôtí�ôË÷oî�ñ��®ðJ�\ô�ï�'^îUïH�ò.ó�ö®ì î,�\ô�ï�ëeò.öÀî�õ&'MîUï�ëUõÎö¤õ�öÀò.ö®ëeò=îUï;ö¤õ�ì=ò.ëUõ�÷oôUø�ëUõ�ðËõ�î¯ì=ô�ì.ì.öÀî�õËó�ëUì¸%\ô�ô�õÎì=ò.ëeï.ò=ô�ðÎúUô�ò�ø)ì=î²ò.ó�ôî,�\ô�ï�ëeò.ö®î�õ�ö¤ì��®ô�ü�ë,� e4��S{'�ò.ó�ô¥ü�ñ�ô�ì�ì�ö¤ì�õ�îUò/ì.ñ�÷�÷oô�ì.ì;'�ñ��qøeò.ó�ô�õ�ï.ô�ß=ô�÷oòÃc^ò.ó�ö®ì�ö®ì�ö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��Àô'^ï.î � ò.ó�ôÌï�ô�ë,� ì=úEì=ò=ô��Ìø7%WúÚëUõØëeï.ü�ñ��gô�õcò·ì.ö��·ö-�®ëeïàò=î�ò.ó�ôÌî�õ�ô¶ë9%\î#"Uôte4�½S{';ò.ó�ôÌü�ñ�ô�ì�ì·ö®ìì�ñ�÷�÷oô�ì.ì;'�ñ��qø�ò.ó�ô�õ�íc�ëNe&·Eô�òda T � í ¾1= cQ§[RS©�R J R R R R %('oK ôÏ« X � Z[� �i¬UR&�_Rba®R&�5R2��e4�c@%�e$·Eô�õ�ð�a T �c�÷#eR¼�÷�÷oôY��òY�c�ð]e$·Eô�òM¡Ð� í Á cQ§[RS©�R J R R R R %('oK ôÏ« X � Z[� �i¬ R&�5R2�Qe4�c^ôte¼�¦ûZ�\î�ì=ô�ñ�ì.ö¤õ�ü9ì=ô�ì.ì�öÀî�õ8ùUô�úZ¡ c^ò.ó�ö®ì+ö¤ì+ë,���®î�í�ô�ðCø4ì.ö®õ�÷oôàò.ó�ô�ï.ô�í¥ëUì�ëtì.ñ�÷�÷oô�ì.ì;'�ñ��uü�ñ�ô�ì.ì

î�õ¶ò.ó�ô���ëUì.ì.íîUï�ð�e4�� ó�ö®ì[ö®ì[÷oîUï.ï�ô�÷oò+ì.ö��9ö��®ëeïH�Àúgò=î²ë9%)ît"Uô,�

¨ k1�¸îñ*cóavT eg+Wñ�ô�ï.ú²ò=îÂcU�·TUR���T e

ú ��è�âÍf cU� T R�� T e�ó�ëUì ó�ëUð¶ë��9ëeò.÷�ó�ö®õ�ü·÷oî�õN"Uô�ï�ì�ëeò.öÀî�õËí+öÀò.óÌëUõ¶ëU÷�÷oôY��ò.ë9%��®ôº��ëeï.ò.õ�ô�ïºcU�SR��Pe4�·Eô�ò¶ì=ò.ëeò.ñ�ìtò=î ¼�÷�÷oôY��òËëUõ�ð �\ô�ï�'^îUïH�6ëÎ2�>_098C>Q2�A�2H2�DE6,B?î,�\ô�ï�ëeò.öÀî�õ í+öÀò.ó ë FH69B�BÊA�F�>!>_6¬cU�SR��Ze÷oî�õ�õ�ô�÷oò.öÀî�õËëUì�ì.öÀü�õ��gô�õcòY� � ó�ö¤ì[ö®ìÃ�Àô�ü�ë,��%\ô�÷�ëUñ�ì=ô

jN´

Page 47: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

c�ëNe¯íº� î*�®���Àø4ò.ó�ô·ö®õ�ì=ò.ëUõ�÷oô&cU�SR��Ze�í;ö�����ì=ò.ö��-��%\ô�î,�\ô�õª'MîUï�÷oî�õ�õ�ô�÷oò.öÀî�õT%WúËò.ó�ôgïnëUõ�ð�î �·õ�ô�ì�ì+î,' R"eë,�®ñ�ô�ì�ì=ô�õcò�%cúÚï.ô�ì;�\î�õ�ð�ô�ï�ö®õ�ì.ò.ëUõ�÷oô�ìRc�ì=îÏò.ó�ëeò�ø0í�� î*�®�p�ÀøÕ'MîUïgô�ëU÷nó´ö®õ�ö®ò.ö®ëeò=îUï�cU�ER��Penø�ò.ó�ô�ï.ôí+ö����*%\ô+ëeòÃ�gî�ì.òî�õ�ôQcU� T R�� T e¦í;öÀò.ó²í;ó�ö®÷nó9öÀò�ó�ëUì¥ó�ëUð¯ë)�·ëeò.÷nó�ö®õ�ü�÷oî�õP"Uô�ï�ì.ëeò.öÀî�õCø�ëUõ�ð¯ì=î�ëeò�·î�ì=ò î�õ�ôwö¤õ�ì=ò.ëUõ�÷oô#í;ö-����ò=ï�ú¯ò=î²÷oî�õ�õ�ô�÷oò ò=î¹cU�ER��Pe;enø\ëUõ�ð

c@%�e/%WúVÉg�®ëUö�� ¨,¨ ø�ò.ó�ô�ï.ô·÷oî�ñ��®ð¹õ�îUòwó�ë�"Uô�%\ô�ô�õ¹ë(>�AC2�>�D B�2�>_09B]F�A�.103242457698;:J+cñ�ô�ï.úÎî�õÎcU� T R�� T enøì�ö®õ�÷oô!cU�·TQR���T-e¥ó�ëUì ó�ëUð¶ë��9ëeò.÷�ó�ö®õ�ü·÷oî�õN"Uô�ï�ì�ëeò.öÀî�õËí+öÀò.óÌëUõ¶ëU÷�÷oôY��ò.ë9%��®ô���ëeï.ò.õ�ô�ï#�

ú ��è�âÕy � ó�ô�÷�ñ�ï.ï.ô�õcòW"ië,�®ñ�ô J ó�ëUì7%\ô�ô�õ¯ì=ô�õ%òW%Wú·ì=î �gô±ëU÷�÷oôY��ò.ë9%��Àô ��ëeï.ò.õ�ô�ï cU�SR��Zenø�ëUõ�ðªc R R&�6Rba ¢ µ ¤ µ eó�ë�"Uôd%)ô�ô�õËï.ô�÷oô�öf"Uô�ð¹%cúVcU�ER��PenøÊ%�ñ�ò ò.ó�ôº"eë,�®ñ�ô�î,'�avTCò.ó�ëeò+í�ëUì+ï.ô�÷oô�öf"Uô�ð8ó�ëUì�õ�îUò¸%\ô�ô�õÎì=ô�õ%ò�%cúcU�ER��Pe4�¿;ô�ßAô�÷oòY� � ó�ö®ì[ö¤ì[ö®õ�ð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ë9%��ÀôÃ'^ï.î ��ò.ó�ôwï.ô�ë,�4ì=úEì=ò=ô�� ì.ö¤õ�÷oô9avTCö®ì[ö®õP"ië,�®ö¤ð��

ú ��è�âI® � ó�ôà÷�ñ�ï.ï.ô�õcò^"eë,�®ñ�ô J ó�ëUì^%\ô�ô�õ¶ì=ô�õcò¸%WúÌì=î �gôwëU÷�÷oôY��ò.ë9%]�Àô)�-ëeï.ò.õ�ô�ï)cU�SR��ZenøÊ%�ñ�ò[ò.ó�ôàò=ï�öf���Àôï�ô�÷oô�öf"Uô�ð$%WúªcU�ER��Pe;ö®õR¼a°·ö®ì[õ�îUò ô�+Wñ�ë,�Cò=î¹c R R&�_Rba ¢¶µ�¤Sµ e¥ì=ô�õcò^%cúTcU�·TQR���T-e4�¿;ô�ßAô�÷oòY�«î�úÂÉg�¤ëUö�� ¨ °WøCí�� î*�®�p�Àø-ò.ó�ô�í ¾1= +cñ�ô�ï�úÌò.ó�ëeò±íî�ñ��¤ð$��ï.îEð�ñ�÷oôàò.ó�ô�÷oîUï.ï.ô�÷oòa"ië,�®ñ�ôàî,'a Tó�ëUì;õ�ôY"Uô�ï�%)ô�ô�õËëUì=ùUô�ð��g¼��®ì.î�ø�õ�î·ö��Q�]�®ö®÷�öÀòg+cñ�ô�ï.úÌ÷oî�ñ��®ðÌó�ë#"Uôº��ï.îEð�ñ�÷oô�ð¶ò.ó�ôw÷oîUï.ï.ô�÷oò�avTÕc�õ�îUò=ôò.ó�ëeò!cU�SR��Pe�ð�ö®ðÏõ�îUò#ó�ë�"Uô²ëR�·ëeò.÷�ó�ö¤õ�ü¶÷oî�õN"Uô�ïnì.ëeò.öÀî�õCø�ëUõ�ð8ò.ócñ�ìwð�ö®ð8õ�îUòa�;�·ëeùUô��ËëUõ�ö-�Q���®ö®÷�ö®òí ¾1= +Wñ�ô�ï.ú�Ô�ë,�®ì=î�ø�ëUõcú²îUò.ó�ô�ï;ö®õ�öÀò.ö¤ëeò=îUï¥ö¤õ�ì=ò.ëUõ�÷oô±í�î�ñ��®ðCøWí�� î*�®���Àø�ó�ë�"Uô�ëgð�ö¶h\ô�ï.ô�õcòg"ië,�®ñ�ô�î,' J e4�� ócñ�ì�ø�ò.ó�ôw÷oîUï.ï.ô�÷oò�"ië,�¤ñ�ô�î,'�a T ö®ì ö®õ�ð�ôY�)ô�õ�ð�ô�õ%ò¥î,'�ò.ó�ôwëUð�"Uô�ï�ì.ëeï.ú®�¾ì^"EöÀô�í�ø�ëUõ�ðÎì=î9öÀò ö¤ì ì.ë9'^ô�ò=îï�ô�ßAô�÷oòY�

ú ��è�â _ © ò.ó�ô�ï�í;ö®ì=ô,�ºcE»+îUò=ô�ò.ó�ëeò�ö¤õ¶ò.ó�ö®ì+÷�ëUì=ôUø\ò.ó�ô�÷�ñ�ï.ï.ô�õcò¸"eë,�®ñ�ôàî,' J ó�ëUì�õ�îUòa%)ô�ô�õÎì=ô�õcò�%Wú¶ëUõëU÷�÷oôY��ò.ë9%��Àô���ëeï�ò.õ�ô�ï�ø�ëUõ�ðtò.óWñ�ì[ë�ò.ñ*���Àô �àñ�ì=ò ó�ë�"Uô«%\ô�ô�õtï.ô�÷oîUïnð�ô�ð�%cúªcU� T R�� T eö®õt÷�ëUì=ô)°àî,'�ò.ó�ôî ¨ ëU÷oò.ö®î�õ��ÄeVuîcîUù¬'MîUïtëV"eë,�®ñ�ôÎî,'­� ì.ñ�÷�ó ò.ó�ëeò¯ëUõ¸í µ cQ§¨RS©�R2�Qe�+cñ�ô�ï.ú´ó�ëUìÍ%\ô�ô�õØëUì=ùUô�ð�ëUõ�ð ë +cñ�ô�ï�úí ¾1= cQ§¨RS©�R J R R R#c TUWV ï UWX � Z[� �H]w]w_ e * 7 µ<8·µ R&�_Rba ¢¶µ�¤Eµ R&� ¢�µ�¤Eµ R2�)eCó�ëUì�%\ô�ô�õ#ëUì=ùUô�ðwëUõ�ð#ï.ô�ò.ñ�ï�õ�ô�ðxavT@�gc@Å � î*�®�p�ò.ó�ô�ï.ô#í;ö�����%\ô#ëeò^�gî�ì=ò î�õ�ô�ì.ñ�÷�ó�"eë,�®ñ�ô#î,'��·ø�ð�ñ�ô±ò=î·ò.ó�ô#ï�ëUõ�ð�î �·õ�ô�ì.ì¥î,'�í ¾1= �ÄedS{'�õ�î·ì�ñ�÷�ó"�ö¤ì^'^î�ñ�õ�ðCø�ò.ó�ô�õËï.ô�ß=ô�÷oòY� � ó�ö®ì[ö®ì;ö®õ�ð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ë9%��Àô^'^ï.î � ò.ó�ôwï.ô�ë,��ì=úEì=ò=ô��Ìø-ì�ö®õ�÷oô#í�� î*�®���-ò.ó�ô­a Tï�ô�÷oô�öf"Uô�ðtíî�ñ��®ð!%\ô�ö®õ�÷oîUï.ï.ô�÷oò¥ö®õ²ò.ó�ô±ï.ô�ë,�\ì=úEì=ò=ô�� c�öG� ô,�ÀøEò.ó�ô#÷oîUï.ï.ô�÷oò avT�í�î�ñ��®ð/%\ô+ö®õ�ð�ôY�)ô�õ�ð�ô�õ%òî,'/ò.ó�ôàëUð*"Uô�ï�ì�ëeï.ú_�¾ì�"EöÀô�íae4��c � ó�ôàî�õ��Àútí�ë�ú�a T ÷oî�ñ��®ð&%)ôà÷oîUï.ï.ô�÷oò�ø\îUò.ó�ô�ï�ò.ó�ëUõ¶ò.ó�ï�î�ñ�ü�óËë9ï�ëUõEÿð�î � ü�ñ�ô�ì�ì�øCö®ì;öf'¦ö®ò+ö®ì;ò.ó�ôàï�ô�ì.ñ��Àò î,'ëUõ8ö-�Q���®ö®÷�ö®òÂí ¾1= +Wñ�ô�ï.ú¶ö®õÎ÷�ëUì=ô ¨ î,'7¼ °Z�a�+î�í�ôY"Uô�ï�ø4öÀò�ö®ìô�ëUì.ú¯ò=î²ì=ô�ô�ò.ó�ëeò;ö�'�ò.ó�ëeò;í�ëUì[ò.ó�ôw÷�ëUì=ôUø�í�ô�÷oî�ñ��®ð�õB� ò[üUô�ò;ò=î9÷�ëUì.ô)±�î,'�îg±Z�Äe© ò.ó�ô�ï.í;ö®ì.ôQc�ö�'�ì.ñ�÷�ó¶ë'� ö®ìÃ'^î�ñ�õ�ð�enøE÷oî�õ�ì.ö®ð�ô�ï ò�íî²÷�ëUì=ô�ìYíú ��è�â _6� � ó�ô�ï.ô�ó�ëUìÃ%\ô�ô�õ¶ë·ì�ñ�÷�÷oô�ì.ì;'�ñ��\ü�ñ�ô�ì.ì ¦ î�õ� �§¨RS©�¥ �

S{'��Ã��� V   U�| X � Z(}b� \ ] ø�ò.ó�ô�õ¶ôoû1�\î�ì=ô#í;öÀò.ótùUô�ú¡Ð� í Á cQ§[RS©�R J R R R#c J

cQí µ cQ§¨RS©�R2��e;e K e * 7 µ 8�µ R&� ¢¶µ ¤Eµ R2��eI�

� ó�ö®ì[ö®ì[÷Y�Àô�ëeï4�Àú¯ë,�-�Àî�í�ô�ð¶ëUõ�ð¶ö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��ÀôÃ'^ï.î ��ò.ó�ô#ï.ô�ë,�uì=úWì.ò=ô��R�© ò.ó�ô�ï.í;ö®ì.ôUø)ï�ô�ßAô�÷oòY� � ó�ö®ì�ö®ì±÷Y�Àô�ëeïH�®úÎö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%��®ô�'^ï.î � ò.ó�ô�ï.ô�ë,�/ì=úEì=ò=ô��Ìø4ì�ö®õ�÷oô�ò.ó�ô÷oîUï�ï.ô�÷oò�a T ö®ì¯ö®õ�ð�ôY�)ô�õ�ð�ô�õ%ò²î,'�ò.ó�ô�ëUð*"Uô�ï�ì�ëeï.ú_�¾ì�"EöÀô�í c�ëUìtò.ó�ôØ� ëeï.ü�ñ��gô�õ%òtò=î í ¾1= ö®ìö¤õ�÷oîUï.ï.ô�÷oò4e4�

ú ��è�â _6� � ó�ô�ï.ô�ó�ëUì;õ�îUò^%\ô�ô�õ¶ëgì.ñ�÷�÷oô�ì�ì;'^ñ��Cü�ñ�ô�ì.ì[î�õ� �§[RS©�¥ �SAõÌò.ó�ö¤ì[÷�ëUì=ôUø�ï.ô�ß=ô�÷oòY�Vuô�ò$�¾ì[ì.ó�îOí ò.ó�ëeòò.ó�ö¤ì7%\ô�ó�ë#"WöÀîUï¥ö®ì�ö®õ�ð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%��ÀôW'^ï.î � ò.ó�ô�ï�ô�ë,�-ì=úEì=ò=ô��R�\·�ñ*���\î�ì=ô í�ôí�ô�ï.ô·ö®õ�ì=ò=ô�ëUðÏì.ñ*���\î�ì=ô�ðÎò=î¶ëU÷�÷oôY��òY� � ó�ôd"ië,�®ñ�ô·� ¢¶µ�¤Sµ ö®ì±ö®õ�ð�ôY�)ô�õ�ð�ô�õ%ò+î,'0ò.ó�ô·ëUð�"Uô�ï�ì.ëeï.ú®�¾ì"EöÀô�í�ø�ñ�õ��Àô�ì.ì¥ò.ó�ô�ëUð�"Uô�ï�ì.ëeï.úÌó�ëUì^+Wñ�ô�ï�ö®ô�ð

í ¾1< cQ§[RS©�R J R R R&�_R.ý �!c R R JcQí µ cQ§[RS©�R2� � e;e K eIRSä�íJc±�_R2� � eIR2� � eI�

jP²

Page 48: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

·�ö®õ�÷oô¶ò.ó�ô¹"ië,�¤ñ�ô¶î,' � ¢ µ ¤ µ í¥ëUì!��ï.ô�ì=ô�õcò9ö®õ î�õ�ôÎî,'#ò.ó�ôÎëUð�"Uô�ï�ì.ëeï.ú®�¾ì�í ¾1= +cñ�ô�ï�öÀô�ì�ø¥öÀò�'^î ��ÿ�®î�í;ì+ò.ó�ëeò�ø\í�� î*�®���Àø)ò.ó�ô�ëUð*"Uô�ï�ì.ëeï.úÎó�ëUì+ö¤õ�ð�ô�ô�ð&�9ëUð�ôwò.ó�ô�ë9%\î#"Uô�í ¾1< +cñ�ô�ï.ú,��»+î�í�ø�'^ï.î �ÉÃ�®ëUö��˯9ëUõ�ð¶ò.ó�ô�ð�ö®ì.÷�ñ�ì.ì.öÀî�õ���ï�ô�÷oô�ð�ö®õ�ü·ò.ó�ëeò+÷Y�®ëUö��¶ø�öÀò^'^î ���ÀîOí;ì ò.ó�ëeò�ø)í�� î*�®���Àø-ò.ó�ôàëUð�"Uô�ï=ÿì�ëeï.úgó�ëUìÕ�·ëUð�ô ë���ï�öÀîUïÕ+Wñ�ô�ï.ú�í�§,c½ �§[RS©�¥ÄR ¦ enø1'^îUï0ì=î �gô ¦ øcì.ñ�÷�ó9ò.ó�ëeò � � �Ö� V   U]| X � Z�}b� \�] ��+î�í�ôY"Uô�ï�øCò.ó�ëeò�í�î�ñ��®ð8ö��Q���Àú¯ò.ó�ëeò�í § c½ �§[RS©�¥ÄR ¦ eM�¿¤ � �^S�ò±ö®ì;ô�ëUì=ú¶ò=îÌì=ô�ô�ò.ó�ëeò�ø-íº� î*�®���Àøí´§9c½ �§¨RS©�¥ÄR ¦ e�í�î�ñ��®ð¬î�õ��®ú¹ï.ô�ò.ñ�ï�õ-¤ � öf' ¦ � ¦ � ����ï.î � ò.ó�ôaí ¾1< ëU÷oò.öÀî�õ´ð�ô�ì.÷oïnöf��ò.öÀî�õë9%\ît"UôUø�öÀò[ö®ì¥ô�ëUì=ú¯ò=î·ì=ô�ô#ò.ó�ëeò[ò.ó�ö¤ì�ì�öÀò.ñ�ëeò.öÀî�õtí�î�ñ��®ðCøWí�� î*�®���Àø�ï�ô�ì.ñ��Àò[ö®õtëgì.ñ�÷�÷oô�ì�ì;'^ñ��-ü�ñ�ô�ì.ìî�õ  �§[RS©�¥ÍcE�9ëUð�ôwð�ñ�ïnö®õ�ü�ò.ó�ô<í ¾1< +Wñ�ô�ï.ú�e4� � óWñ�ì�øEò.ó�ô�ï�ôwó�ëUì ë,�Àï�ô�ëUð�ú/%\ô�ô�õÌë·ì�ñ�÷�÷oô�ì.ì;'�ñ��ü�ñ�ô�ì.ì î�õ8 �§¨RS©�¥�ø�í;ó�ö¤÷�ó¶÷oî�õcò=ï�ëUð�ö®÷oò.ì;î�ñ�ï[îUï�öÀü�ö¤õ�ë,�CëUì.ì.ñ�����ò.öÀî�õ��

¨,¨ ��OZAY>d�9AY84D �WAC8�î�õ¶ñ�ì.ô�ï^��ëUöÀïºcU�SR���T eVuô�ò�§ ëUõ�ðZ© %\ô�ò.ó�ô�SAý±ì;î,'¦ñ�ì.ô�ï�ìO�¥ëUõ�ða�·T�ø-ï.ô�ì;�\ô�÷oò.öf"Uô��Àú,�^·Wô�õ�ðÎë/OPA�>q�,AC8�D �gAC8Q+cñ�ô�ï.útî�õ cU�SR���T�e[ò=îò.ó�ôwï�ö®õ�ü��·ëUì=ò=ô�ïQc�öG� ô,�Àø-ö®õ¶ò.ó�ôwö®ð�ô�ë,�4íîUïH�¤ð]e4� � ó�ô�ï�ö®õ�ü��·ëUì=ò=ô�ï�í;ö����)ï.ô�ò.ñ�ïnõ¶í;ó�ô�ò.ó�ô�ï;ëUõ%úR��ï�öÀîUïº>�AC2�>.*032H2�57698�:¹+Wñ�ô�ï.ú·î�õ(cU�SR���T e¦í¥ëUì[ì.ñ�÷�÷oô�ì�ì;'^ñ��G��SU'�ò.ó�ô�ï.ô±í�ëUì[ë�ì.ñ�÷�÷oô�ì.ì;'�ñ��)ü�ñ�ô�ì.ì¥î�õZ �§[RS©�¥�'^îUï ì=î �gô ¦c^í+ó�ô�ò.ó�ô�ï ò.ó�ï�î�ñ�ü�ó(>�A�2C>7D@B*2C>_09B]F4A^.*032H2�57698�:8îUï)>�A�2�>�.103242457698;:�enøCò.ó�ô�õÌï�ô�ò.ñ�ï�õ4� V   U]| X � Z�}b� \�];�© ò.ó�ô�ï.í;ö®ì.ô½c�ö_� ô,�Àø±ö�'àõ�î +Wñ�ô�ï.ú í�ëUì¶ì�ñ�÷�÷oô�ì.ì;'�ñ�� enø�üUô�õ�ô�ï�ëeò=ôbëUõ�ð�ì=ò=îUï.ôؤÊiª �§[RS©�¥Yl�F[GÞ #k2R ¨ ¥)¨ !�¨ ©�@*�¿;ô�ò.ñ�ï�õÙ� £B« | X � Z(} ¬ � � ó�ö®ì¥÷oîUï.ï�ô�ì;�\î�õ�ð�ì¥ò=î·ò.ó�ôàö��Q���®ö¤÷�öÀò0îUï�ëU÷Y�®ôº+cñ�ô�ï.ú

¤�iª �§¨RS©�¥Yly�÷í�§,c½ �§¨RS©�¥ÄR ¦ � eI�ÉÃ�Àô�ëeïH�ÀúUøcò.ó�ö®ì0ö-�Q���®ö®÷�ö®ò�+Wñ�ô�ï.ú·÷�ëUõ�õ�îUòì.ó�ëUð�î�í ëUõ%ú!��ï�öÀîUï¦ôoû1���®ö¤÷�öÀòqí�§^+Wñ�ô�ï.úUøWîUï�ô��®ì=ô+ì.î �gô¸��ïnöÀîUï�>�AC2�>.*032H2�57698�:8í�î�ñ��®ðÌó�ë�"Uô�%\ô�ô�õ¶ì.ñ�÷�÷oô�ì.ì;'�ñ��G�

�¹Ý Ü %!âNì�ì.`�à&ìy`·��-�ë�é�� àÅg8;6�6�Ë�6�Ë'½�@f09D@X7Ä�k«·Eñ*���)î�ì.ô�ò.ó�ëeò¦í;öÀò.ógì=î �·ô;õ�î�õ�õ�ô�ü �¤öÀü�öf%��Àô\��ï.î,%�ë9%-ö��®öÀò�ú��¦ò.ó�ô�ï.ô[í;ö����Z%\ô ì=î �gô;ï.ô�ì;�\î�õ�ð�ô�ïö®õ�ì.ò.ëUõ�÷oô!c*)� T R.)� T e«c^í;ö®ò.ó¼©f�i��´l+¢¶µ ëUõ�ð¼§Ï�ÏÅq��´,+¢¶µ +¤Eµ e¥ì.ñ�÷nóÌò.ó�ëeò ò.ó�ô�'Mî �-�Àî�í;ö¤õ�ü���%�ëUðÌôY"Uô�õcòS�·îE÷�÷�ñ�ï�ìYí

¨ �¸+Wñ�ô�ï.ú�î ¨ c )J e¥ö®ìÃ�9ëUð�ô�ò=î¹c-)�·TQR.)�ÄT�e[ëUõ�ðtï.ô�ò.ñ�ï�õ�ìºc )R R )�6R )a]enø°Z��OZAY>��,AC8�D �WAY8#ö®ìÕ�\ô�ï�'^îUïH�gô�ð9î�õa �§¨RS©�¥±ëUõ�ð9ï.ô�ò.ñ�ï�õ�ì � � c^ô�öÀò.ó�ô�ïW%\ôY'MîUï.ô+îUï�ë9'^ò=ô�ï�ò.ó�ô�î ¨ ëU÷oò.öÀî�õ]enø�ëUõ�ð±Z�¸+Wñ�ô�ï.ú

í ¾1< cQ§[RS©�R J R R R )�ÀR.ý �Qc R R JcQí µ cQ§[RS©�R2� � e;e K eIR.ýa�Qc )�®R2� � eIR2� � e

c@'^îUï+ì.î �gô J ëUõ�ð R e¥ö¤ìÃ�·ëUð�ôUø�%\ôY'^îUï.ô#ò.ó�ô�ï.ô�ó�ëUì^%)ô�ô�õ¶ô�öÀò.ó�ô�ï;ë·ì�ñ�÷�÷oô�ì.ì;'�ñ��\ü�ñ�ô�ì.ì î�õ8 �§[RS©�¥�îUï;ëUõí´§9c½ �§¨RS©�¥ÄR ¦ e^+Wñ�ô�ï.úUø*'^îUï;ì=î �·ô ¦ ø�í;öÀò.ó�� � �8� V   U]| X � Z�}b� \�];�

Å�ô[í;ö-���Uò.ó�ô�õ�÷oî�õ�ì=ò=ïnñ�÷oò/ë�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ï.ä 'MîUï/ý±ý �º��V4ô�ò^c$#ZR&%qR2� e�%\ôò.ó�ô�÷nó�ë,���Àô�õ�üUô[ý±ý �Øö®õ�ì=ò.ëUõ�÷oô,�� ó�ô�ö¤ð�ô�ëgî,'�ò.ó�ôw÷oî�õ�ì.ò=ï�ñ�÷oò.öÀî�õ¶ö¤ì[ò=î~�=ö®õ�÷oîUï��\îUï�ëeò=ô���# ö®õ%ò=î9ò.ó�ô�ï.ô�ì.ñ��Àò[î,'�ò.ó�ô)OPA�>q�,AC8�D �gAC8Q+cñ�ô�ï.úUø�ëUõ�ð�%ö®õcò=îgò.ó�ô9�/"ië,�¤ñ�ô�ì ì=ô�õcò^%Wú�© ö®õ�ì.ò.ëUõ�÷oô�ìY�

� ó�ô�÷oî�õ�ì=ò=ï�ñ�÷oò.ö®î�õ¶ö®ì[ëUì^'^î ���ÀîOí;ìYí¨ ��X±ô�õ�ô�ï�ëeò=ôwïnëUõ�ð�î �43!%)ô�ò�íô�ô�õ ¨ ëUõ�ðÙç)�°Z�^Å�ô¯í;ö��-��%)ô9ï�ñ�õ�õ�ö¤õ�ütò.ó�ô9ì.ö���ñ��®ëeò=îUï�ö®õ�ò.ó�ô¯õ�îUïH�·ë,�7�·ëUõ�õ�ô�ï�ø�%�ñ�ò«�]�®ë�úEö®õ�ü¶ò.ó�ô9ï�ö®õ�ü$�·ëUì=ò=ô�ï�ë,�®ì=î*�

c � ó�ëeò·ö®ì�ø¦í�ô¶í;ö-���÷nó�îWî�ì=ôR��ëUì.ì=í�îUï�ð�ì�'^îUï·ñ�ì=ô�ïQ�-ëUöÀï�ì�ø0ëUõ�ð ëUõ�ì=í�ô�ï9ëUõ%úbò=ô�ì=òQ��ëUì�ì=íîUïnð½+cñ�ô�ïnöÀô�ìY�Äe¿+ñ�õbò.ó�ôtì.ö���ñ��®ëeò.öÀî�õbñ�õcò.ö��0ò.ó�ôk3%ò.óJ��ëUöÀï�î,'+ñ�ì=ô�ïnìÍcQ§¨RS©�e�ö®ì)�·ô�õ%ò.öÀî�õ�ô�ð��¬c � ó�ö®ìd�·ë�úV%\ô/'^ï.î � ëOZAY>d�9AY84D �WAC8�+Wñ�ô�ï.ú¯î�õËñ�ì=ô�ïnì¥í;öÀò.óRSAý±ìM§ÑëUõ�ða©¯ø�îUï¸'^ï.î � ëUõTD@B�DE>EDE0�@ÄDK¾#A)=Z2YAY8�D@B*2�>_09B�F4Ad+Wñ�ô�ï.ú¯í;öÀò.óñ�ì=ô�ï«S�ý § ëUõ�ð¹�-ëeï.ò.õ�ô�ï«SAý ©¯øCîUï«"Eö®÷oôoÿ_"Uô�ï�ì.ë1�Äe(SU'0íôgü�ñ�ô�ì�ì=ô�ðM3¶÷oîUï.ï.ô�÷oò��®úUø4ò.ó�ö®ìa��ëUöÀï±í;ö-����%\ô�ò.ó�ôö¤ð�ô�õ%ò.ö®ò.öÀô�ì¥î,'�ò.ó�ô�ñ�ì=ô�ï�ì;ö®õtò.ó�ôa��%�ëUðËôY"Uô�õ%òY���

jN­

Page 49: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

±Z� © õ�÷oô[§ ëUõ�ða© ëeï.ô�ì=ô�ò�ø)÷oî�õ%ò.ö®õWñ�ô�ëUì+ö®õtò.ó�ô#îUï�öÀü�ö¤õ�ë,�Cì.ö���ñ��®ëeò=îUï�ø�ôoû�÷oôY��òYíc�ëNeROZAY>d�9AY84D �WAC8�î�õ¶ñ�ì.ô�ï�ì[í;öÀò.ó�SAý±ìM§ÑëUõ�ð¼©Íí

¿;ô�ì;�\î�õ�ðtí;öÀò.óÙ#L�7»+îUò=ôwò.ó�ëeò ò.ó�ö®ì¥ï.ô�ì.ñ��®ò.ì ö®õ�� � �¡#V�S{'uò.ó�ôa��%�ëUðtôY"Uô�õ%òS�9ö®ì¥ë9%)î�ñ�ò[ò=îgîW÷�÷�ñ�ï�øWò.ó�ô�õtò.ó�ö®ì�ï.ô�ì;�\î�õ�ì=ô#ö®ì¥÷oîUï.ï�ô�÷oò�ø�ì.ö®õ�÷oô±ò.ó�ô�ï�ô±÷oî�ñ��®ðÌõ�îUòó�ë�"Uôº%\ô�ô�õ¶ëgì�ñ�÷�÷oô�ì.ì;'�ñ��\ü�ñ�ô�ì.ì;î�õ8 �§¨RS©�¥ �

c@%�eÍî ¨ c J e^+cñ�ô�ï�ú²ò=î9ö¤õ�ì=ò.ëUõ�÷oô!cU� T R�� T e¥í;öÀò.óÇ��´ ¢ µ �÷© ëUõ�ðZÅd��´ ¢ µ ¤ µ � §ºíX±ô�õ�ô�ï�ëeò=ô Q ¢ µ ¤ µ FHGØ� ! ø�1 ¢ µ ¤ µ FHGÕ� ! ø)ëUõ�ð"a ¢ µ ¤ µ FHG~ #k2R ¨ ¥�@���·Wô�õ�ð R �É� * 7 µ 8 µ øE���¿%9� / 7 µ 8 µ ø\ëUõ�ða���a ¢¶µ ¤Eµ �»+îUò=ôwò.ó�ëeò ò.ó�ö®ì[÷oîUï.ï�ô�ì;�\î�õ�ð�ì¥ò=î9ëUõÎö��Q���®ö¤÷�öÀò\+Wñ�ô�ï.ú

Q ��1 ¢¶µ�¤Sµ � í T§ I §¨RS©�Rba ¢¶µ ¤Eµ ¢�í ¾1< I §¨RS©�R J R R R&%x� /x7 µ<8�µ Rý �dc R R J

cQí µ cQ§[RS©�R1#ªe;e K eIR.ý �Qc±%�� / 7 µ<8·µ R1#TeIR1# K�K �Å � î*�®���Àø[ò.ó�ö¤ì9ö��Q�]�®ö®÷�öÀò�+cñ�ô�ï.úÚí+ö����[õ�îUò9ì�ó�ëUð�î�íBëUõ%ú½��ï�öÀîUï£íZT§ +Wñ�ô�ï.ú c^í;ó�ô�ò.ó�ô�ï²ö��Q�]�®ö®÷�öÀò�îUïôoû1���®ö¤÷�öÀò4enø*%cú¯ò.ó�ô#ï�ëUõ�ð�î �·õ�ô�ì.ì î,'�a ¢ µ ¤ µ �

c�÷#e¿í´§9c½ �§¨RS©�¥ÄR ¦ eÍ+cñ�ô�ï.ú]í~X±ô�õ�ô�ï�ëeò=ô�ëUõ�ð ì=ò=îUï.ôI¤�iª �§¨RS©�¥ÄR ¦ l4FHG  #k2R ¨ ¥ ¨ !�¨ ©�@ � ¿ ô�ì;�\î�õ�ðØí;öÀò.ó¤Êiª �§[RS©�¥ÄR ¦ l_�S{'\ò.ó�ô���%�ëUð9ôY"Uô�õ%òS��ö®ìë9%)î�ñ�ò¦ò=î�îE÷�÷�ñ�ïëUõ�ð;3àó�ëUìÕ%\ô�ô�õ·ü�ñ�ô�ì�ì=ô�ð9÷oîUï.ï�ô�÷oò��ÀúUøcò.ó�ô�õ·ò.ó�ö®ì¦ï.ô�ì;�\î�õ�ì=ôö¤ì#ë9����ï.î,��ïnö®ëeò=ôUøCëUì#ò.ó�ô ��%�ëUðÏôY"Uô�õcòS�¶ï�ñ��Àô�ì�î�ñ�ò�í�§�+cñ�ô�ïnöÀô�ì�ò.ó�ëeò#íî�ñ��®ð8ï.ô�ò.ñ�ï�õÏò.ó�ôgð�ö¤ì.÷oï.ô�ò=ô�®îUü·î,'ª� � �

c�ð]e�íZT§ cQ§¨RS©�R&��eÃ+Wñ�ô�ï.ú�íÕîô�ó�ë�"Uô�ëUì ö®õtò.ó�ô�îUïnöÀü�ö®õ�ë,�\ì.ö���ñ��®ëeò=îUï#�� ó�ô î�õ��Àú�í¥ë�úgò.ó�ö®ìÕ%)ô�ó�ë�"EöÀîUï÷oî�ñ��¤ðQ%\ô ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%]�Àô7'^ï.î � ò.ó�ô îUï�öÀü�ö®õ�ë,��ì.ö���ñ��®ëeò=îUï0ö¤ì¦öf')ò.ó�ö®ì+Wñ�ô�ï.úËí�ëUì#ì.ó�ëUð�î�í�ô�ðª%cúÎëUõ8ö-�Q���®ö®÷�ö®ò¸+cñ�ô�ï.ú$'^ï.î � ë/î ¨ ëU÷oò.öÀî�õ����+î�í�ôY"Uô�ï�ø�öÀò�ö¤ì;ô�ëUì=úÎò=îÌì=ô�ôò.ó�ëeò ò.ó�ö®ì[í+ö����)õ�îUò îE÷�÷�ñ�ï�ø�í�� î*�®���Àø-ñ�õ��Àô�ì.ì¥ò.ó�ô�ëUð*"Uô�ï�ì.ëeï.úÍÓ�ïnì=ò^�·ëeùUô�ì ò.ó�ôº+cñ�ô�ï.ú

í ¾1< cQ§¨RS©�R J R R R&%9� / 7 µ 8 µ R.ý �Qc R R JcQí µ cQ§[RS©�R1#Te;e K eIR.ýa�Qc±%9� / 7 µ 8 µ R1#TeIR1#ªeIR

c�ì�ö®õ�÷oô#í;öÀò.ó�î�ñ�ò�ì�ñ�÷�óÌëUõaí ¾1< +cñ�ô�ï.úUø�ò.ó�ô "ië,�¤ñ�ô#î,'H��ò.ó�ëeò[í�î�ñ��®ðÌ÷�ëUñ�ì.ô#ò.ó�ô�ì.ó�ëUð�îOí;ö®õ�ü�í�î�ñ��®ð%\ôgö®õ�ð�ôY�)ô�õ�ð�ô�õ%ò;î,'0ò.ó�ô·ëUð*"Uô�ïnì.ëeï.ú®�¾ì#ëUõ�ðÏì.ö���ñ��®ëeò=îUï��¾ìa"EöÀô�íae4�º�+î�í�ôY"Uô�ï�ø�ì.ñ�÷�óÏëUõ�í ¾1< +cñ�ô�ï�úí�î�ñ��®ð�ö��Q���ÀúÎò.ó�ëeòwò.ó�ô�%�ëUð¹ôY"Uô�õcò�ó�ëUìwë,�Àï�ô�ëUð�úÏîW÷�÷�ñ�ï�ï.ô�ðCø�ö¤õ�í;ó�ö®÷nó¹÷�ëUì=ô²íô¯ëeï.ô9õ�î&�®î�õ�üUô�ï÷oî�õ�÷oô�ï�õ�ô�ð¶í+öÀò.óÌö®õ�ð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ë9%�ö��Àö®ò§ú,�

c^ôte�¼ °*c R R&�_Rba�eg+cñ�ô�ï.ú·ò=îgö®õ�ì=ò.ëUõ�÷oô�cU�SR��Zeí;öÀò.ó¼��´{¢y� §FëUõ�ðaÅq��´M¢�¤��÷©¯øEõ�îUòg��ëeï.ò�î,'�ë��·ëeò.÷�ó�ö®õ�ü÷oî�õP"Uô�ï�ì.ëeò.ö®î�õ�íÃSU'/ò.ó�ôº"eë,�®ñ�ôwî,'��Ìö¤ì;õ�îUò+ô�+cñ�ë,��ò=îÙ%x� / 7 µ<8�µ '^îUï�ëUõcúVcU�·TQR���T-enø)ò.ó�ô�õ¹��ï.îE÷oô�ô�ðÎëUì�ö®õò.ó�ô�îUï�öÀü�ö®õ�ë,�)ì�ö��àñ��®ëeò=îUï�� © ò.ó�ô�ï�í;ö®ì=ôUøEï.ô�ß=ô�÷oòY�SAõ8ò.ó�ô)Ó�ï�ì=ò±÷�ëUì=ôUøCò.ó�ôd%\ô�ó�ë�"EöÀîUï#ö®ì�÷Y�Àô�ëeïH�Àú¶ö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%]�Àô,� © õËò.ó�ô�îUò.ó�ô�ï±ó�ëUõ�ðCø\ì.ñ*���\î�ì=ô�£�¡%9� / 7 µ<8·µ 'MîUï;ì.î �gô/cU�·TQR���T-e4� © ñ�ï[ï.ô�ì;�\î�õ�ì=ô�÷oî�ñ��®ð�%\ô�ö®õ�÷oîUï.ï.ô�÷oò ö�'�+Wñ�ô�ï.ú

í ¾1< cQ§¨RS©�R J R R R&%9� / 7 µ 8�µ R.ý �Qc R R JcQí µ cQ§[RS©�R1#Te;e K eIR.ýa�Qc±%�� / 7 µ<8·µ R1#ªeIR1#ªe

ó�ëUìg%)ô�ô�õ��·ëUð�ô,�7�;îOíôY"Uô�ï�ø�ò.ó�ëeò[í�î�ñ��®ðtö��Q���®úgò.ó�ëeò¥ò.ó�ô«%�ëUð¯ôY"Uô�õ%ò+ó�ëUì[ë,�Àï.ô�ëUð�ú9îW÷�÷�ñ�ï�ï.ô�ðCø�ö®õí+ó�ö®÷�óÌ÷�ëUì.ôwí�ôwëeï.ô�õ�î!�®î�õ�üUô�ï;÷oî�õ�÷oô�ï�õ�ô�ðÌí;öÀò.óÌö®õ�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ë9%-ö��®ö�ò§ú,�

jN¯

Page 50: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

c@'4e�îñ*cóa T ep+cñ�ô�ï.ú�ò=î±ï.ô�ì;�\î�õ�ð�ô�ï�ö®õ�ì=ò.ëUõ�÷oô cU� T R�� T enøUí+ó�ô�ï.ôMÅq��´ ¢ µ ¤ µ �¸§ØëUõ�ðo��´ ¢ µ �÷©Íí�S{'�ò.ó�ô�ï.ô¥ö®ì�õ�î�9ëeò.÷�ó�ö®õ�üw÷oî�õN"Uô�ïnì.ëeò.öÀî�õ²í;öÀò.ó·ëUõ²ëU÷�÷oôY��ò.ë9%��Àô���ëeï.ò.õ�ô�ï�ø%ò.ó�ô�õ·ï.ô�ì��)î�õ�ð�í;öÀò.ógï.ô�ß=ô�÷oòY� © ò.ó�ô�ï�í;ö®ì=ôUø%\ô�ó�ë#"UôwëUì;ö¤õtò.ó�ô�îUï�öÀü�ö¤õ�ë,�\ì.ö���ñ��®ëeò=îUï��S{'\ò.ó�ô���%�ëUð9ôY"Uô�õ%òS��ö®ìë9%)î�ñ�ò¦ò=î�îE÷�÷�ñ�ïëUõ�ð;3àó�ëUìÕ%\ô�ô�õ·ü�ñ�ô�ì�ì=ô�ð9÷oîUï.ï�ô�÷oò��ÀúUøcò.ó�ô�õ·ò.ó�ö®ì¦ï.ô�ì;�\î�õ�ì=ôö¤ì�ë9����ï.î,��ï�ö®ëeò=ô,í SU'�ò.ó�ô�ï.ôgí¥ëUìwõ�î$�·ëeò.÷�ó�ö¤õ�ü¶÷oî�õN"Uô�ïnì.ëeò.öÀî�õÚí;öÀò.ó�ëUõ¹ëU÷�÷oôY��ò.ë9%]�Àô���ëeï.ò.õ�ô�ïwëUõ�ðò.ó�ö®ì +cñ�ô�ï�úÌí�ëUì#ì.ñ����\î�ì=ô�ð¶ò=îtï.ô�ì.ñ��Àò�ö¤õÎëUõÏëU÷�÷oôY��ò�ø4ò.ó�ô�õÎò.ó�ô�ï.ôàí�î�ñ��®ð¹%\ô�ëtì.ñ�÷�÷oô�ì.ì;'�ñ��uü�ñ�ô�ì.ìî�õZ �§¨RS©�¥�ø�ëUõ�ð9ò.ó�ëeò�í�î�ñ��®ð²÷oî�õ%ò=ïnëUð�ö®÷oò¥ò.ó�ô±ð�ôCÓ-õ�öÀò.ö®î�õ·î,'4ò.ó�ô¿��%�ëUð²ôY"Uô�õ%òS�$c�ñ�õ��Àô�ì.ìò.ó�ô¿��%�ëUðôY"Uô�õcòS�8ó�ëUì�ë,�Àï.ô�ëUð�úËîE÷�÷�ñ�ï.ï.ô�ðCø�ö®õÏí;ó�ö¤÷�ó�÷�ëUì=ô·í�ô9ð�î�õy� ò�÷�ëeï.ô·í;ó�ô�ò.ó�ô�ï�îUïwõ�îUò#ò.ó�ô9ï.ô�ì;�\î�õ�ì=ôí¥ëUì;÷oîUï�ï.ô�÷oò4e4�

c^üPe¿í ¾1< cQ§¨RS©�R J R R R&�_R S R^z2R1#ªe7+Wñ�ô�ï.úwí+ó�ô�ï.ô�����%x�&/ 7 µ<8�µ 'MîUï¦ì.î �gôºcU� T R�� T e�ëUõ�ðiz��¿� # / 7 µ 8�µ íÕ·Wò=î,�ò.ó�ôwð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ô�ïëUõ�ðÌü�ñ�ô�ì.ì�� � ï�ñ�ô�ý �)���

j*�^S{'�ò.ó�ôwì.ö���ñ��®ëeò.ö®î�õ²ô�õ�ð�ì[í;öÀò.ó�î�ñ�ò¥î�ñ�ò;��ñ�ò=ò.ö®õ�ü � � ï�ñ�ô�ýa�àø��·ò.ó�ô�õÌî�ñ�ò;��ñ�ò£�;¿+ëUõ�ð�î �R���»+îUò=ô ò.ó�ëeò0ö�'�ò.ó�ô£��%�ëUð�ôY"Uô�õcòS�wð�îcô�ì/îE÷�÷�ñ�ï�ø%íô ó�ë#"Uô^��ï.î,%-ë9%�ö��®öÀò�ú�ëeò7�Àô�ëUì=ò ¨� ç î,'-ü�ñ�ô�ì.ì.ö®õ�ü±ò.ó�ô ÷oîUï�ï.ô�÷oò

��ëUöÀï[î,'/ñ�ì.ô�ï�ìY�Õ»+î�í�ø�ò.ó�ô«��ï.î,%�ë9%�ö-�®öÀò§ú9ò.ó�ëeò ò.ó�ôwð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ïÆä ü�ñ�ô�ì.ì=ô�ì ÷oîUï.ï�ô�÷oò��ÀúÌö®ì[ëeò��Àô�ëUì.òê0ïtcQäBö®ì[÷oîUï.ï.ô�÷oòYe � ê¦ï#cQäBü�ñ�ô�ì�ì=ô�ì£�=ý � � ïnñ�ô��ED ý � ö¤õ�ì=ò.ëUõ�÷oôteWê0ïtc�ý � ö¤õ�ì=ò.ëUõ�÷oôte

�Ïê0ï#cQä ü�ñ�ô�ì.ì=ô�ì£�;¿+ëUõ�ð�î �£�FD ¿+ëUõ�ð�î � ö¤õ�ì=ò.ëUõ�÷oôteWê0ïtcE¿;ëUõ�ð�î � ö®õ�ì=ò.ëUõ�÷oôteD G �ç H I ¨° K � I ¨�è ç

� KCI ¨° K R

í;ó�ô�ï�ô#ò.ó�ô#ò=ô�ïH�:ç �g÷oî �gô�ì^'^ï.î ��ò.ó�ô«��ï.î,%�ë9%�ö-�®öÀò§ú9î,'�ò.ó�ôàëUð*"Uô�ï�ì.ëeï.ú��Aü�ñ�ô�ì.ì�ö®õ�üÄ�·ë�ï�ëUõ�ð�î �Ã�?÷oîUï.ï.ô�÷oò��Àúî�õ8ë·ï�ëUõ�ð�î � îUï�ëU÷Y�®ô)+Wñ�ô�ï.ú,� � óWñ�ì�ø-ò.ó�ôº��ï.î,%�ë9%�ö��¤öÀò§ú¯ò.ó�ëeò�ä ü�ñ�ô�ì.ì=ô�ì±÷oîUï.ï.ô�÷oò��Àú¶ö¤ì;ëeò �Àô�ëUì=ò µ¾ � N¾ B è B¾ ! øí;ó�ö¤÷�óÌö®ì õ�î�õEÿ§õ�ô�ü �®öÀü�ö�%��Àú��gîUï.ô#ò.ó�ëUõ µ¾ �

Åg8;6�6�Ë�6�Ë'½�@f09D@X7à)Ý�kaÅ�ôwí;ö����\÷�ë,���4ëUõ¶îUï�ëU÷Y�Àôº+Wñ�ô�ï.ú¯î,'�'^îUïH� í ¾1< cQ§[RS©�R J R R R&�_R S R^z2R2��e���%�ëUð6�·öf'¨ �;ì.î �gôÏï.ô�ì;�\î�õ�ð�ô�ï¯ö®õ�ì=ò.ëUõ�÷oô½cU� T R�� T enø+í;öÀò.ó ��´ ¢ µ �Ý© ëUõ�ð÷Åd��´ ¢ µ ¤ µ �ݧàø+ó�ëUìtì=ô�õcò R c^í�� î*�®���Àø�%cúïnëUõ�ð�î �·õ�ô�ì�ì¥î,' R "eë,�®ñ�ô�ì�ø�ò.ó�ô�ï.ô�í;ö-����%\ô�ëeò¸�·î�ì=ò î�õ�ôwì�ñ�÷�ó¶ö¤õ�ì=ò.ëUõ�÷oôtenø

°Z� S � ý �dc R R TUlV ï UWX � Z�� ��]w] _ enø�ëUõ�ð±Z�,z�� ý �dc±�_R2��e4�·Eñ����\î�ì=ôwò.ó�ëeò±í;ö®ò.óÎì=î �·ô�õ�î�õ�õ�ô�ü �®öÀü�ö�%��Àô«��ï.î,%-ë9%�ö��®öÀò�ú��±ò.ó�ô�ï.ô�í;ö����p%\ô�ëUõ8í ¾1< '�ëUö��®ñ�ï�ô,� � ó�ö®ì+ö-�Q���®öÀô�ì

ò.ó�ëeò±ò.ó�ô�ï.ô�í;ö��-��%\ô�ì.î �gô�ï.ô�ì;�\î�õ�ð�ô�ï�ö®õ�ì=ò.ëUõ�÷oôRc )�·TQR )��T e)c^í;öÀò.ó�© �ó��´,+¢¶µ ëUõ�ðZ§ó�óÅd��´r+¢¶µ +¤Sµ e+ì.ñ�÷�ó8ò.ó�ëeò±ò.ó�ô'^î ���Àî�í+ö®õ�ü���%�ëUðÌôY"Uô�õcòS�·îE÷�÷�ñ�ï�ìYí

¨ �¸+Wñ�ô�ï.ú�î ¨ c )J e¥ö®ìÃ�9ëUð�ô�ò=î¹c-)�·TQR.)�ÄT�e[ëUõ�ðtï.ô�ò.ñ�ï�õ�ìºc )R R )�6R )a]enø�ëUõ�ð°Z�;ëeò �Àô�ëUì=ò+ò§í�îu��%-ëUð �!+Wñ�ô�ï�öÀô�ì;ëeï.ô)�·ëUð�ôwí;öÀò.óLcQ§[RS©�R )J R )R e ëUõ�ðËð�ö¤ì=ò.ö®õ�÷oòÃ"eë,�®ñ�ô�ì;î,'�gø]%)ôY'^îUï.ôàò.ó�ô�ï.ôö¤ì ëgì.ñ�÷�÷oô�ì.ì�'^ñ��4ü�ñ�ô�ì.ì[î�õ8 �§¨RS©�¥ �

cE»+îUò=ô#ò.ó�ëeò¥íô#ì;�\ô�ëeù·î,'�ð�ö®ì=ò.ö®õ�÷oò7"eë,�®ñ�ô�ì�î,'[�·øEì�ö®õ�÷oôUøEí�� î*�®���Àø�ð�ö®ì.ò.ö®õ�÷oò7"eë,�®ñ�ô�ì�î,' ¦ í;ö-����ï.ô�ì�ñ��Àòö¤õ¯ð�ö®ì=ò.ö®õ�÷oò"eë,�®ñ�ô�ì±î,' �Q�ÄeVÅ�ôgí;ö��-�uò.ó�ô�õ�ì.ó�î�í ó�î�í ò=î¶÷oî�õ�ì.ò=ï�ñ�÷oò�ëÌð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ô�ï�ä 'MîUï�ò.ó�ô�ý±ý �b��ï.î,%��®ô��Ìø\í;öÀò.óö®õ*�-ñ�ò c$#ZR&%qR2� e4�

� ó�ôËö®ð�ô�ë�î,'#ò.ó�ôÎ÷oî�õ�ì=ò=ïnñ�÷oò.öÀî�õØö¤ì·ì.ö��·ö-�®ëeïgò=îÚò.ó�ô¶î�õ�ôÎö¤õ ò.ó�ô&��ï.îcî,'±î,')Ég�¤ëUö�� ¨ � ¼;ü�ëUö¤õCø[íôÎí;ö�����=ö®õ�÷oîUïH�)îUïnëeò=ô���#2ö®õcò=îÎó�ë,��'�î,';ò.ó�ô�í µ ï.ô�ì;�\î�õ�ì=ô�ìÍc^ï�ëUõ�ð�î ���®ú*enø�ëUõ�ðÍ%�ö®õ%ò=îÂî ¨ ï.ô�ì��)î�õ�ì=ô�ì/c�öG� ô,�Àø/ò.ó�ô R"eë,�®ñ�ô�ì4e4� � ó�ô��·ëUö®õbð�ö¶h\ô�ï.ô�õ�÷oôtö®ì�ö®õÚò.ó�ôÌó�ëUõ�ð��®ö¤õ�üÌî,';ò.ó�ô�¼ °ÎëU÷oò.ö®î�õ�í!SAõ Ég�®ëUö�� ¨ ø¦ò.ó�ôÌð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ô�ï

³9k

Page 51: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

í�î�ñ��®ð9÷nó�ô�÷.ù²ò.ó�ô�í ¾1< +Wñ�ô�ï�ö®ô�ì0ò.ó�ëeò¥ñ�ì=ô�ð9ò.ó�ô±÷oîUï.ï.ô�÷oòW"ië,�®ñ�ô;î,' ¦ �æSAõ9ò.ó�ö¤ì0÷Y�®ëUö��¶ø%ò.ó�ô±ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ô�ï�õ�ô�ô�ð�ìò=î²÷nó�ô�÷.ùÌò.ó�ô¨í ¾1< +cñ�ô�ïnöÀô�ì[ò.ó�ëeò�ñ�ì=ô�ðÌò.ó�ôà÷oîUï.ï.ô�÷oò¸"eë,�®ñ�ôwî,'����g»;îUò=ô�ò.ó�ëeò ò.ó�ôà÷oîUï.ï.ô�÷oòa"ië,�®ñ�ô#î,'�� ö¤ì õ�îUòð�ô�ò=ô�ïH�9ö®õ�ô�ðÌñ�õcò.ö��\ô�öÀò.ó�ô�ï ë/OPAY>d�9AY84D �WAY8d+Wñ�ô�ï.útö®ìÃ�·ëUð�ôUø�îUï{í�§±ö®ì^+Wñ�ô�ï�öÀô�ðtí+öÀò.ótò.ó�ô�÷oîUï.ï.ô�÷oò�"ië,�¤ñ�ô#î,' ¦ �

© ñ�ï ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ïÂäÀ'MîUï;ö¤õ*��ñ�ò�c$#ÇR&%dR2� e�ï�ñ�õ�ì[ëUì^'^î ���Àî�í+ìYí¨ ��X±ô�õ�ô�ï�ëeò=ôwïnëUõ�ð�î �43!%)ô�ò�íô�ô�õ ¨ ëUõ�ðÙç)�°Z�^SAõ�öÀò.ö¤ë,�®ö"!�ô±ò§í�î!�®ö®ì.ò.ìÃîW¼�ý §#ëUõ�ð$îg¼�ý µ c�ö®õ�öÀò.ö®ë,�-�Àú·ô��Q��ò�ú*e4�±Z�^Å�ô¯í;ö��-��%)ô9ï�ñ�õ�õ�ö¤õ�ütò.ó�ô9ì.ö���ñ��®ëeò=îUï�ö®õ�ò.ó�ô¯õ�îUïH�·ë,�7�·ëUõ�õ�ô�ï�ø�%�ñ�ò«�]�®ë�úEö®õ�ü¶ò.ó�ô9ï�ö®õ�ü$�·ëUì=ò=ô�ï�ë,�®ì=î*�

c � ó�ëeò0ö®ì�øUí�ô í;ö-���c÷nó�îWî�ì=ô^��ëUì.ì.íîUï�ð�ì�'MîUï0ñ�ì=ô�ïÕ��ëUöÀïnì�ø�ëUõ�ðgëUõ�ì=í�ô�ï0ëUõcúàò=ô�ì.òÕ��ëUì.ì=í�îUï�ð�+Wñ�ô�ï�ö®ô�ìY�Äe�¿+ñ�õò.ó�ô�ì.ö-�àñ��¤ëeò.öÀî�õ¶ñ�õcò.ö��Cò.ó�ô�3�ò.ó¹��ëUöÀï+î,'0ñ�ì=ô�ï�ìdcQ§[RS©�e;ö®ì¸�·ô�õ%ò.öÀî�õ�ô�ð��ºc � ó�ö®ì��·ë�úR%\ô)'Mï.î � ëUõËîUïnëU÷Y�Àô+Wñ�ô�ï.ú�í µ cQ§[RS©�R$�Äenø�îUï«'Mï.î ��ëUõJD@B�DE>EDE0�@ÄDK¾#A!=Z2YAY8dD@B*2C>_09B]F4A/+Wñ�ô�ï.úÎí;öÀò.óÏñ�ì=ô�ï SAý §ÕëUõ�ðª��ëeï.ò.õ�ô�ï«S�ý©¯ø�îUï^"Eö®÷oôoÿ_"Uô�ï�ì�ë1�ÄedSU'�í�ô#ü�ñ�ô�ì.ì=ô�ð53²÷oîUï.ï.ô�÷oò��ÀúUø�ò.ó�ö®ìg��ëUöÀï¥í;ö��-��%\ô#ò.ó�ô#ö®ð�ô�õcò.öÀò.öÀô�ì¥î,'�ò.ó�ô#ñ�ì=ô�ïnì[ö®õtò.ó�ô��%-ëUðÌôY"Uô�õ%òY���Å�ôtí;ö-���¦ì.ë�ú�ò.ó�ëeò�� � D 2Í:NA�>�AC8�XdD@B�AH:bí;ó�ô�õÚô�öÀò.ó�ô�ï�ò.ó�ôÍ+Wñ�ô�ï.ú í § c½ �§¨RS©�¥ÄR ¦ � e�îUï�ò.ó�ôÍ+Wñ�ô�ï.úVOZAY>�,AC8�D �gAC8gî�õc �§[RS©�¥�ö¤ì¸�·ëUð�ô,��»;îUò=ô�ò.ó�ëeò�ø\ì.ö®õ�÷oô�ò.ó�ôàð�ö®ì.ò.ö®õ�ü�ñ�ö®ì�ó�ô�ï[öÀò.ì=ô��f'�üUô�õ�ô�ï�ëeò=ô�ì ¦ � ø-íôàí;ö�����%\ôë9%]�Àôwò=î¯ð�ô�ò=ô�÷oò+í+ó�ô�ò.ó�ô�ï�îUï�õ�îUò � � ó�ëUì¸%\ô�ô�õÎð�ô�ò=ô�ïH�·ö®õ�ô�ðCø�ëUõ�ðËíôàí;ö����4ë,�¤ì=î�%\ôàë9%��®ô�ò=î¯÷oî ����ñ�ò=ô� � ë9'^ò=ô�ï;ò.ó�ëeò^�\î�ö®õcòY�

j*� © õ�÷oô[§ ëUõ�ða© ëeï.ô�ì=ô�ò�ø)÷oî�õ%ò.ö®õWñ�ô�ëUì+ö®õtò.ó�ô#îUï�öÀü�ö¤õ�ë,�Cì.ö���ñ��®ëeò=îUï�ø�ôoû�÷oôY��òYíc�ëNe�î ¨ c J e\+Wñ�ô�ï.ú�ò=î�ö¤õ�ì=ò.ëUõ�÷oô�cU� T R�� T e�í;ö®ò.ó���´ ¢ µ �÷© ëUõ�ð¿Åq��´ ¢ µ ¤ µ �÷§)í�üUô�õ�ô�ï�ëeò=ôs1 ¢ µ ¤ µ F[G"� ! øEì=ô�òR ��%x� / 7 µ<8�µ ø�ëUõ�ðÌò.ó�ô�õR��ï.îE÷oô�ô�ð¶ëUì ö®õtò.ó�ô�îUï�öÀü�ö®õ�ë,�Cì.ö���ñ��®ëeò=îUï��c@%�e�í µ cQ§¨RS©�R2��e4í7S{'ª� � ó�ëUìÃ%\ô�ô�õ¶ð�ô�ò=ô�ïH�·ö®õ�ô�ðÌëUõ�ð��É�É� � ø�ò.ó�ô�õ¶ì=ô�ò6�3i ��lÀ���9i � � lÀ� k1�acE»+îUò=ô

ò.ó�ëeò�íº� î*�®���Oò.ó�ôW+Wñ�ô�ï.ú<í µ cQ§¨RS©�R2� � e4í;ö����cõ�îUò�%)ôW�·ëUð�ô�ñ�õ%ò.ö-�%ë9'^ò=ô�ï� � ó�ëUì�%)ô�ô�õ�ð�ô�ò=ô�ïH�9ö®õ�ô�ð��Äe© ò.ó�ô�ï.í;ö®ì.ôUøt�Àô�òw�3i �«l�FHG� #k2R ¨ ¥ �Õ¿ ô�ì;�\î�õ�ð�í;öÀò.ó!c$# = « ��¬��Wìo!2��ôÏ« X � Z[� ��¬��gîEð��Êeb�xíâ�uø3'^îUï�ì�FHG�� �� øëgi §¨RS©�R2�ºl�F[G�� � '�µ ø�ëUõ�ðÐí�F[G"��î ¾1ï�ð �+ò �

c�÷#e�¼ °*c R R&�_Rba�ea+cñ�ô�ï�úÌò=î¯ö®õ�öÀò.ö®ëeò=îUï+ö¤õ�ì=ò.ëUõ�÷oô�cU�SR��PenøCí;ó�ô�ï.ô���´M¢��ç ëUõ�ð�Åq��´M¢�¤[�,©Íígî�ô�ó�ë#"Uô·ëUìö¤õgò.ó�ô[îUï�öÀü�ö¤õ�ë,��ì.ö���ñ��®ëeò=îUï�ø%ôoûE÷oôY��òöf'-í�ô üUô�ò0ö¤õ%ò=îw÷�ëUì.ô�°Wøcò.ó�ô�õgî�õ��Àú�÷�ó�ô�÷�ùgîUï�ëU÷Y�Àô¸+Wñ�ô�ï�ö®ô�ì�í;öÀò.ó�É�É� � c�ëUõ�ð¶ö�'�� � ó�ëUì õ�îUò úUô�ò¸%)ô�ô�õËð�ô�ò=ô�ïH�·ö®õ�ô�ðCøEò.ó�ô�õ¶ì.ö������Àú·ï.ô�ß=ô�÷oò4e4�»+îUò=ôgò.ó�ëeò�cQí µ cQ§¨RS©�R2� � e;e K ��� Kñù ôÏ« X � Z[� � m ¬qøCì.ö®õ�÷oôi�9i � � l�� k1� � ócñ�ì�ø-ò.ó�ô�îUïnöÀü�ö®õ�ë,��ì.ö���ñ��®ëeò=îUïí+ö�����íîUï�ùÏ÷oîUï�ï.ô�÷oò��Àú�ö®õÏò.ó�ö®ì#÷�ëUì.ô,�!S�òwö®ì�ì.ë9'^ôgò=îÎö®ü�õ�îUï.ôgîUï�ëU÷Y�Àô/+cñ�ô�ïnöÀô�ì±í;öÀò.ó�� O� � � ø�ì.ö®õ�÷oôò.ó�î�ì=ô�í�î�ñ��®ð�õB� òÃ�Àô�ëUð¶ò=î9ëUõËëU÷�÷oôY��ò�c�ëUì ò.ó�ô�>�AC2�>\D B�2�>_09B]F�A^.103242457698;:ª+cñ�ô�ï.ú²í�î�ñ��®ð�'�ëUö�� e4�

c�ð]eÍîñ*cóavT ep+cñ�ô�ï.ú�ò=î±ï.ô�ì;�\î�õ�ð�ô�ï�ö®õ�ì=ò.ëUõ�÷oô cU�·TQR��ÄT�enøUí+ó�ô�ï.ôMÅq��´ ¢�µ ¤Sµ �¸§ØëUõ�ðo��´ ¢¶µ �÷©Íí�S{'�ò.ó�ô�ï.ô¥ö®ì�õ�î�9ëeò.÷�ó�ö®õ�üw÷oî�õN"Uô�ïnì.ëeò.öÀî�õ²í;öÀò.ó·ëUõ²ëU÷�÷oôY��ò.ë9%��Àô���ëeï.ò.õ�ô�ï�ø%ò.ó�ô�õ·ï.ô�ì��)î�õ�ð�í;öÀò.ógï.ô�ß=ô�÷oòY� © ò.ó�ô�ï�í;ö®ì=ôUø%\ô�ó�ë#"UôwëUì;ö¤õtò.ó�ô�îUï�öÀü�ö¤õ�ë,�\ì.ö���ñ��®ëeò=îUï��S{'\ò.ó�ô���%�ëUð9ôY"Uô�õ%òS��ö®ìë9%)î�ñ�ò¦ò=î�îE÷�÷�ñ�ïëUõ�ð;3àó�ëUìÕ%\ô�ô�õ·ü�ñ�ô�ì�ì=ô�ð9÷oîUï.ï�ô�÷oò��ÀúUøcò.ó�ô�õ·ò.ó�ö®ì¦ï.ô�ì;�\î�õ�ì=ôö¤ì²ë9����ï.î,��ï�ö®ëeò=ô,íªS{'�ò.ó�ö®ì/+cñ�ô�ï.ú í�ëUìÌì�ñ*���\î�ì=ô�ð ò=î¬ï.ô�ì.ñ��Àò9ö®õ ëUõ ëU÷�÷oôY��ò�ø+ò.ó�ô�õ ò.ó�ô�ï.ô8í�î�ñ��®ð%\ôgëÌì.ñ�÷�÷oô�ì�ì;'^ñ���ü�ñ�ô�ì.ì#î�õu �§¨RS©�¥/%)ôY'^îUï.ô�ò.ó�ô·ì=ô�÷oî�õ�ð ��%�ëUð �tîUï�ëU÷Y�Àô�+Wñ�ô�ï.úUø�ëUõ�ðÏò.ó�ëeò#í�î�ñ��®ð÷oî�õcò=ï�ëUð�ö¤÷oò ò.ó�ôwð�ôCÓ)õ�öÀò.öÀî�õ¯î,'�ò.ó�ôÇ��%�ëUðÌôY"Uô�õcòY��� © õtò.ó�ô�îUò.ó�ô�ï+ó�ëUõ�ðCø�öf'�ò.ó�ôÇ��%�ëUð¶ôY"Uô�õ%òS�²ó�ëUìë,�®ï.ô�ëUð�ú¯îW÷�÷�ñ�ï�ï.ô�ðCø�ò.ó�ô�õÌí�ôwð�î�õy� ò ÷�ëeï.ôwí;ó�ô�ò.ó�ô�ï[îUï+õ�îUò[ò.ó�ô�ï.ô�ì;�\î�õ�ì=ô±í¥ëUì;÷oîUï.ï�ô�÷oòY�

c^ôte¿í ¾1< cQ§¨RS©�R J R R R&�_R S R^z2R2��eW+Wñ�ô�ï.ú�íS{' í µ cQ§¨RS©�R2��eCí�ëUì�+Wñ�ô�ï�öÀô�ð�ëUõ�ð�ò.ó�ô�ï.ô¥ö®ì�ëUõàö®õ�ì=ò.ëUõ�÷oô�cU� T R�� T e\í;öÀò.ó¨©É�i��´ ¢¶µ ò.ó�ëeò�í�ëUì�+cñ�ô�ï�öÀô�ðí+öÀò.óRî ¨ c J e[ëUõ�ðtï.ô�ò.ñ�ï�õ�ô�ð R �¡%9� / 7 µ<8·µ ø�ò.ó�ô�õ¶ð�îgò.ó�ô«'^î ���ÀîOí;ö®õ�ü$c�ëUõ�ð¶îUò.ó�ô�ï.í;ö®ì.ôUø�ëUõ�ì=í�ô�ï ò.ó�ô+Wñ�ô�ï.útëUì;ö¤õtò.ó�ô#îUï�öÀü�ö®õ�ë,�Cì.ö���ñ��®ëeò=îUï�e4í

³ ¨

Page 52: jOK^fik - Cryptology ePrint Archive · !#"%$& ')( *+'-,. /0') !213 4 6587 )(9 * :; < ,=* : >?,A@B C"EDF = .GH *9I J KMLONQPER SPUT VWP X Y[Z\K^]MK^_`bacLedgfih\jOK^fik l-aWRnmcaWR

��öÀïnì=ò õ�îUò=ô�ò.ó�ëeò+öf'uò.ó�ö¤ì ö®ì[ëQ%�ëUð&+cñ�ô�ï�úUø�ò.ó�ô�õ

S �÷ä�í c R R JcQí µ cQ§[RS©�R2��e;e K eq�÷ä�íJc±%9� / 7 µ 8�µ R J

# = « ��¬ K � Kñù ôÏ« X � Z[� ��¬ eI�»+î�í ÷oî �Q��ñ�ò=ô

= � S J ' / 7 µ 8�µ # = « �i¬ K / 7 µ 8�µ � = « ��¬ K % K ôÏ« X � Z[� ��¬ � Kñù ôÏ« X � Z�� ��¬ / 7 µ 8�µ �êñ�ò = î�õÌò.ó�ôº�®ö¤ì=òÃîW¼�ý = « ��¬ � � ó�ô�õtï.ô�ì;�\î�õ�ðtí;öÀò.óÌë�ïnëUõ�ð�î �.a��S{'uò.ó�ô«%�ëUðtôY"Uô�õ%ò+ö®ì[ë9%\î�ñ�ò[ò=îgîW÷�÷�ñ�ï�ø�ò.ó�ô�õtò.ó�ö®ì¥ï�ô�ì;�\î�õ�ì=ô�í;ö����]%\ô±ö¤õ�ð�ö®ì=ò.ö¤õ�ü�ñ�ö®ì.ó�ë9%��ÀôÃ'^ï.î � ò.ó�ôîUïnöÀü�ö®õ�ë,�Cì.ö-�àñ��¤ëeò=îUï�ø�ì.ö®õ�÷oô�õ�î·ì�ñ�÷�÷oô�ì.ì;'�ñ��\ü�ñ�ô�ì.ì;î�õ8 �§¨RS©�¥�÷�ëUõ¶îE÷�÷�ñ�ï^%\ôY'MîUï�ô#ò.ó�ô�%�ëUðÌôY"Uô�õcòY�

¼¥ò�ò.ó�ô9ô�õ�ð�î,'[ò.ó�ô²ì�ö��àñ��®ëeò.öÀî�õCø�÷�ó�ô�÷�ù�í;ó�ô�ò.ó�ô�ïwò.ó�ôÍ�®ö®ì=ò.ì�îg¼�ý §9ëUõ�ðLîg¼+ý µ ö¤õ%ò=ô�ï�ì.ô�÷oò�c�õ�îUò=ô¯ò.ó�ëeòàò.ó�ö®ì÷�ó�ô�÷.ù¬÷�ëUõJ%)ôtð�î�õ�ôtö®õÚò.ö��gô?>�c^ç¹�®îUü�ç enøÕ%Wú�ì=îUï�ò.ö®õ�ü8ò.ó�ôR�®ö®ì=ò.ìàò=îUüUô�ò.ó�ô�ï�e4�(S{' úUô�ì�øò.ó�ô�õbî�ñ�ò;��ñ�ò8� � ï�ñ�ôý �wø��9îUò.ó�ô�ï.í;ö¤ì=ô±î�ñ�ò;��ñ�ò£�;¿+ëUõ�ð�î �R���

»+îUò=ôÌò.ó�ëeò�ò.ó�ô/"eë,�®ñ�ô�ì�ì=ò=îUï�ô�ðbö¤õLîg¼�ý § ëUõ�ðJîg¼+ý µ ëeï.ôtì.ö��Q���®ú8ü�ñ�ô�ì.ì=ô�ì�î,'�ä�í c J R&%Qenø¦ëUì.ì.ñ��·ö®õ�ü�÷�÷ä�í c$#ZR&%Qe4�æS{'��Fö®ì¥ï�ëUõ�ð�î �Ìøcò.ó�ô�õtò.ó�ô ��ï.î,%�ë9%�ö-�®öÀò§úgî,'�ëUõÌö®õcò=ô�ï�ì=ô�÷oò.öÀî�õ�%\ô�ò§í�ô�ô�õÌò.ó�ô«�®ö¤ì=ò.ì�íî�ñ��¤ð/%\ôëeò^�gî�ì=òµça¾ �d%Wú9ò.ó�ô#ñ�õ�öÀî�õÍ%)î�ñ�õ�ðCøEì.ö®õ�÷oôx�dK;í�î�ñ��®ðÍ%\ô±ë�ïnëUõ�ð�î � ô��Àô��gô�õcò[î,'�� � � ! c�õ�îUò=ô�ò.ó�ëeò �àëUõ�ð4�ëeï.ô�ï�ô��®ëeò.öf"Uô��Àú/��ï�ö��gôUø�ëUõ�ð J O� k��gîEð��&%\ô�÷�ëUñ�ì=ô#î,'�ò.ó�ô#ò=ô�ì.ò^%cú¼©�e4�

© õ¬ò.ó�ôÌîUò.ó�ô�ï9ó�ëUõ�ð4øì.ñ*���)î�ì.ôÐ�Ð� ý �Qc$#ÇR&%�e4�½S{';ò.ó�ô¶ëUð�"Uô�ï�ì.ëeï.úJ�·ëeùUô�ì·ò�íî,��%�ëUð �T+Wñ�ô�ï�öÀô�ì�'^îUïò.ó�ôQ��ëUö®ï#î,'�ñ�ì.ô�ï�ì!cQ§¨RS©Qenø�'MîUïº"ië,�®ñ�ô�ì9� µ R2� ¾ í;öÀò.óM�9i � µ l O���9i � ¾ l«ø�ò.ó�ô�õÏò.ó�ô9ð�ö¤ì=ò.ö®õ�ü�ñ�ö¤ì.ó�ô�ï;í+ö�����÷oîUï.ï.ô�÷oò��ÀúëUõ�ì=í�ô�ï¼� � ïnñ�ô�ý ���Tc�ì.ö®õ�÷oô�ô�ëU÷�ó ��%�ëUð6�Í+Wñ�ô�ï.úÌí+ö����4ï�ô�ì.ñ��Àò�ö®õ = � ý ��c J R&%Qe;e4� � ó�ôd��ï.î,%-ë9%�ö��®öÀò�ú²î,'ò.ó�ô��%�ëUðËôY"Uô�õ%òS�¯ö®ì?��� � ó�ô���ï.î,%-ë9%�ö��®öÀò�ú9î,'�ü�ñ�ô�ì.ì�ö®õ�ü�3¯÷oîUï.ï.ô�÷oò��Àú¶ö¤ì µB � � ó�ô«��ï�î,%�ë9%�ö��®ö®ò§ú9î,':�9i � µ l O�C�3i � ¾ lp'^îUï� µ O�É� ¾ ö®ì µ¾ �7¼��-�\î,'�ò.ó�ô�ì.ô�ôY"Uô�õ%ò.ì�ëeï.ôwö¤õ�ð�ôY�\ô�õ�ð�ô�õcòY�»+î�í�ø�ò.ó�ô���ï.î,%-ë9%�ö��®öÀò�ú·ò.ó�ëeò ò.ó�ô�ð�ö®ì=ò.ö®õ�ü�ñ�ö®ì.ó�ô�ïÂä ü�ñ�ô�ì.ì=ô�ì+÷oîUï.ï.ô�÷oò��ÀúÌö®ì[ëeò¸�®ô�ëUì=ò

ê0ïtcQäBö®ì[÷oîUï.ï.ô�÷oòYe � ê¦ï#cQäBü�ñ�ô�ì�ì=ô�ì£�=ý � � ïnñ�ô��ED ý � ö¤õ�ì=ò.ëUõ�÷oôteWê0ïtc�ý � ö¤õ�ì=ò.ëUõ�÷oôte�Ïê0ï#cQä ü�ñ�ô�ì.ì=ô�ì£�;¿+ëUõ�ð�î �£�FD ¿+ëUõ�ð�î � ö¤õ�ì=ò.ëUõ�÷oôteWê0ïtcE¿;ëUõ�ð�î � ö®õ�ì=ò.ëUõ�÷oôte

D G �°äç;HJI ¨°LK � I ¨ è ç�¾

�MKCI ¨°LK �

� óWñ�ì ò.ó�ô)��ï�î,%�ë9%�ö��®ö®ò§ú¯ò.ó�ëeò�ä�ö®ì;÷oîUï.ï�ô�÷oò±ö¤ì+ëeò �Àô�ëUì=ò µ¾ � N: B è B ø¾ ! ø-í+ó�ö®÷�óÎö®ì�õ�î�õEÿ§õ�ô�ü �®ö®ü�öf%��ÀúÍ�gîUï.ô�ò.ó�ëUõµ¾ �

³,°