Key Exchange (KE) is, undoubtedly, one of the most used cryptographic primitives in practice. Its authenticated version, Authenticated Key Exchange (AKE), avoids man-in-the-middle-based attacks by providing authentication for both parties involved. It is widely used on the Internet, in protocols such as TLS or SSH. In this work, we provide new constructions for KE and AKE based on ideal lattices in the Random Oracle Model (ROM). The contributions of this work can be summarized as follows: 1) It is well-known that RLWE-based KE protocols are not robust for key reuses since the signal function leaks information about the secret key. We modify the design of previous RLWE-based KE schemes to allow key reuse in the ROM. Our construction makes use of a new technique called pasteurization which enforces a supposedly RLWE sample sent by the other party to be indeed indistinguishable from a uniform sample and, therefore, ensures no information leakage in the whole KE process. 2) We build a new AKE scheme based on the construction above. The scheme provides implicit authentication (that is, it does not require the use of any other authentication mechanism, like a signature scheme) and it is proven secure in the Bellare-Rogaway model with weak Perfect Forward Secrecy in the ROM. It improves previous designs for AKE schemes based on lattices in several aspects. Our construction just requires sampling from only one discrete Gaussian distribution and avoids rejection sampling and noise flooding techniques, unlike previous proposals (Zhang et al., EUROCRYPT 2015). Thus, the scheme is much more efficient than previous constructions in terms of computational and communication complexity. Since our constructions are provably secure assuming the hardness of the RLWE problem, they are considered to be robust against quantum adversaries and, thus, suitable for post-quantum applications.

An explicit Fredholm determinant formula is derived for the multipoint distribution of the height function of the totally asymmetric simple exclusion process (TASEP) with arbitrary right-finite initial condition. The method is by solving the biorthogonal ensemble/non-intersecting path representation found by [54], [10]. The resulting kernel involves transition probabilities of a random walk forced to hit a curve defined by the initial data. In the KPZ 1:2:3 scaling limit the formula leads in a transparent way to a Fredholm determinant formula, in terms of analogous kernels based on Brownian motion, for the transition probabilities of the scaling invariant Markov process at the centre of the KPZ universality class. The formula readily reproduces known special self-similar solutions such as the Airy1 and Airy2 processes. The process takes values in real valued functions which look locally like Brownian motion, and is Hölder 1/3−in time. Both the KPZ fixed point and TASEP are shown to be stochastic integrable systems in the sense that the time evolution of their transition probabilities can be linearized through a new Brownian scattering transform and its discrete analogue.

We construct two non-semisimple braided ribbon tensor categories of modules for each singlet vertex operator algebra M(p), p≥2. The first category consists of all finite-length M(p)-modules with atypical composition factors, while the second is the subcategory of modules that induce to local modules for the triplet vertex operator algebra W(p). We show that every irreducible module has a projective cover in the second of these categories, although not in the first, and we compute all fusion products involving atypical irreducible modules and their projective covers.

No abstract uploaded!

No abstract uploaded!