Key Exchange (KE) is, undoubtedly, one of the most used cryptographic primitives in practice. Its authenticated version, Authenticated Key Exchange (AKE), avoids man-in-the-middle-based attacks by providing authentication for both parties involved. It is widely used on the Internet, in protocols such as TLS or SSH. In this work, we provide new constructions for KE and AKE based on ideal lattices in the Random Oracle Model (ROM). The contributions of this work can be summarized as follows: 1) It is well-known that RLWE-based KE protocols are not robust for key reuses since the signal function leaks information about the secret key. We modify the design of previous RLWE-based KE schemes to allow key reuse in the ROM. Our construction makes use of a new technique called pasteurization which enforces a supposedly RLWE sample sent by the other party to be indeed indistinguishable from a uniform sample and, therefore, ensures no information leakage in the whole KE process. 2) We build a new AKE scheme based on the construction above. The scheme provides implicit authentication (that is, it does not require the use of any other authentication mechanism, like a signature scheme) and it is proven secure in the Bellare-Rogaway model with weak Perfect Forward Secrecy in the ROM. It improves previous designs for AKE schemes based on lattices in several aspects. Our construction just requires sampling from only one discrete Gaussian distribution and avoids rejection sampling and noise flooding techniques, unlike previous proposals (Zhang et al., EUROCRYPT 2015). Thus, the scheme is much more efficient than previous constructions in terms of computational and communication complexity. Since our constructions are provably secure assuming the hardness of the RLWE problem, they are considered to be robust against quantum adversaries and, thus, suitable for post-quantum applications.

Almost toric manifolds form a class of singular Lagrangian fibered symplectic manifolds that include both toric manifolds and the K3 surface. We classify closed almost toric four-manifolds up to diffeomorphism and indicate precisely the structure of all almost toric fibrations of closed symplectic four-manifolds. A key step in the proof is a geometric classification of the singular integral affine structures that can occur on the base of an almost toric fibration of a closed four-manifold. As a byproduct we provide a geometric explanation for why a generic Lagrangian fibration over the two-sphere must have 24 singular fibers.

Let O_c be the category of finite-length central-charge-c modules for the Virasoro Lie algebra whose composition factors are irreducible quotients of reducible Verma modules. Recently, it has been shown that O_c admits vertex algebraic tensor category structure for any c∈C. Here, we determine the structure of this tensor category when c=13−6p−6/p for an integer p>1. For such c, we prove that O_c is rigid, and we construct projective covers of irreducible modules in a natural tensor subcategory O_c^0. We then compute all tensor products involving irreducible modules and their projective covers. Using these tensor product formulas, we show that O_c has a semisimplification which, as an abelian category, is the Deligne product of two tensor subcategories that are tensor equivalent to the Kazhdan-Lusztig categories for affine sl_2 at levels −2+p^±1. Next, as a straightforward consequence of the braided tensor category structure on O_c together with the theory of vertex operator algebra extensions, we rederive known results for triplet vertex operator algebras W(p), including rigidity, fusion rules, and construction of projective covers. Finally, we prove a recent conjecture of Negron that O_c^0 is braided tensor equivalent to the PSL(2,C)-equivariantization of the category of W(p)-modules.

No abstract uploaded!

No abstract uploaded!