Elisabeth Oswald Marc Fischlin (Eds.) 6 5 0 Advances in Cryptology – 9 S C EUROCRYPT 2015 N L 34th Annual International Conference on the Theory and Applications of Cryptographic Techniques Sofia, Bulgaria, April 26–30, 2015, Proceedings, Part I 123 Lecture Notes in Computer Science 9056 CommencedPublicationin1973 FoundingandFormerSeriesEditors: GerhardGoos,JurisHartmanis,andJanvanLeeuwen EditorialBoard DavidHutchison LancasterUniversity,Lancaster,UK TakeoKanade CarnegieMellonUniversity,Pittsburgh,PA,USA JosefKittler UniversityofSurrey,Guildford,UK JonM.Kleinberg CornellUniversity,Ithaca,NY,USA FriedemannMattern ETHZürich,Zürich,Switzerland JohnC.Mitchell StanfordUniversity,Stanford,CA,USA MoniNaor WeizmannInstituteofScience,Rehovot,Israel C.PanduRangan IndianInstituteofTechnology,Madras,India BernhardSteffen TUDortmundUniversity,Dortmund,Germany DemetriTerzopoulos UniversityofCalifornia,LosAngeles,CA,USA DougTygar UniversityofCalifornia,Berkeley,CA,USA GerhardWeikum MaxPlanckInstituteforInformatics,Saarbrücken,Germany Moreinformationaboutthisseriesathttp://www.springer.com/series/7410 · Elisabeth Oswald Marc Fischlin (Eds.) Advances in Cryptology – EUROCRYPT 2015 34th Annual International Conference on the Theory and Applications of Cryptographic Techniques Sofia, Bulgaria, April 26–30, 2015 Proceedings, Part I ABC Editors ElisabethOswald MarcFischlin UniversityofBristol TechnischeUniversitätDarmstadt Bristol Darmstadt UK Germany ISSN0302-9743 ISSN1611-3349 (electronic) LectureNotesinComputerScience ISBN978-3-662-46799-2 ISBN978-3-662-46800-5 (eBook) DOI10.1007/978-3-662-46800-5 LibraryofCongressControlNumber:2015935614 LNCSSublibrary:SL4–SecurityandCryptology SpringerHeidelbergNewYorkDordrechtLondon (cid:2)c InternationalAssociationforCryptologicResearch2015 Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe materialisconcerned,specificallytherightsoftranslation,reprinting,reuseofillustrations,recitation,broad- casting,reproduction onmicrofilmsorinanyotherphysicalway,andtransmissionorinformationstorage andretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynowknown orhereafterdeveloped. Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant protectivelawsandregulationsandthereforefreeforgeneraluse. Thepublisher, theauthorsandtheeditorsaresafetoassumethattheadviceandinformationinthisbook arebelievedtobetrueandaccurateatthedateofpublication. Neitherthepublishernortheauthorsorthe editorsgiveawarranty,expressorimplied,withrespecttothematerialcontainedhereinorforanyerrorsor omissionsthatmayhavebeenmade. Printedonacid-freepaper Springer-VerlagGmbHBerlinHeidelbergispartofSpringerScience+BusinessMedia (www.springer.com) Preface Eurocrypt2015,the34thannualInternationalConferenceontheTheoryandApplica- tionsofCryptographicTechniques,washeldduringApril26–30,2015,inSofia,Bul- garia,andsponsoredbytheInternationalAssociationforCryptologicResearch(IACR). ResponsibleforthelocalorganizationwereSvetlaNikova,fromKatholiekeUniversiteit Leuven,andDimitarJetchev,fromEPFL.TheyweresupportedbyaLocalOrganizing Committee consisting of Tsonka Baicheva (Institute of Mathematicsand Informatics, BAS),VioletaDucheva(SANS),andGeorgiSharkov(ESICenterEasternEurope).We areindebtedtothemfortheirsupport. To accommodatethe requestby IACR to showcase as manyhigh-qualitysubmis- sionsaspossible,theprogramwasorganizedintwotracks.Thesetracksraninparallel with the exceptionof invited talks, the single best paper, and two paperswith honor- ablemention.Followingapopularconventionincontemporarycryptography,onetrack was labeled R and featuredresults moreclosely relatedto ‘real’world cryptography, whereasthesecondtrackwaslabeledIandfeaturedresultsinamoreabstractor‘ideal’ world. Atotalof194submissionswereconsideredduringthereviewprocess,manywere of high quality. As usual, all reviews were conducted double-blind and we excluded ProgramCommitteemembersfromdiscussingsubmissionsforwhichtheyhadapos- sibleconflictofinterest.Toaccountforadesire(byauthorsandthewidercommunity alike)tomaintainthehighstandardofpublications,weallowedforlongersubmissions such thatessential elementsof proofsor other formof evidence couldbe includedin the body of the submissions(appendiceswere not scrutinizedby reviewers).Further- more, a more focused review process was used that consisted of two rounds. In the first round of reviews we solicited three independentreviews per submission. After a short discussion phase among the 38 Program Committee members, just over half of the submissionswere retainedfor the second round.Authorsof these retained papers weregiventheopportunitytocommentonthereviewssofar.Afterextensivedelibera- tionsinasecondround,weaccepted57papers.Therevisedversionsofthesepapersare includedin these two volumeproceedings,organizedtopicallywithin theirrespective track. ThereviewprocesswouldhavebeenimpossiblewithoutthehardworkofthePro- gramCommitteemembersandover210externalreviewers,whoseeffortwewouldlike tocommendhere.Ithasbeenanhonortoworkwitheveryone.Theprocesswasenabled bytheWebSubmissionandReviewSoftwarewrittenbyShaiHaleviandtheserverwas hosted byIACR. We wouldlike to thankShai forsetting upthe serviceon the server andforhelpinguswheneverneeded. The Program Committee decided to honor one submission with the Best Paper Award thisyear.Thissubmissionwas“CryptanalysisoftheMultilinearMapoverthe Integers”authoredbyJungheeCheo,KyoohyungHan,ChangminLee,HansolRyu,and VI Preface Damien Stehlé. The two runners-upto the award,“Robust Authenticated-Encryption: AEZ and the Problem that it Solves” (by Viet Tung Hoang, Ted Krovetz, and Phillip Rogaway)and“OnthebehaviorsofaffineequivalentSboxesregardingdifferentialand linearattacks”(byAnneCanteautandJoëlleRoué)receivedHonorableMentionsand hencealsoinvitationsfortheJournalofCryptology. In additionto the contributedtalks, we had three invitedspeakers:Kristin Lauter, Tal Rabin, and Vincent Rijmen. We would like to thank them for accepting our invi- tation and thank everyone(speakers, session chairs, and rumpsession chair) for their contributiontotheprogramofEurocrypt2015. April2015 ElisabethOswald MarcFischlin EUROCRYPT 2015 The 34th Annual International Conference on the Theory and R Applications of Cryptographic Techniques, Track Sofia, Bulgaria, April 26–30, 2015 General Chairs SvetlaNikova KatholiekeUniversiteitLeuven,Belgium DimitarJetchev ÉcolePolytechniqueFédéraledeLausanne, Switzerland Program Co-chairs ElisabethOswald UniversityofBristol,UK MarcFischlin TechnischeUniversitätDarmstadt,Germany Program Commitee MasayukiAbe NTT,Japan GillesBarthe IMDEA,Spain LejlaBatina RadboudUniversityNijmegen,TheNetherlands AlexBiryukov UniversityofLuxembourg,Luxembourg AlexandraBoldyreva GeorgiaInstituteofTechnology,USA JanCamenisch IBMResearch–Zurich,Switzerland AnneCanteaut Inria,France LiqunChen HPLaboratories,UK Chen-MouCheng NationalTaiwanUniversity,Taiwan MartenvanDijk UniversityofConnecticut,USA JensGroth UniversityCollegeLondon,UK TetsuIwata NagoyaUniversity,Japan MarcJoye Technicolor,USA CharanjitJutla IBMResearch,USA EikeKiltz Ruhr-UniversitätBochum,Germany MarkulfKohlweiss MicrosoftResearch,UK GregorLeander Ruhr-UniversitätBochum,Germany BenoîtLibert ENSLyon,France YehudaLindell Bar-IlanUniversity,Israel StefanMangard GrazUniversityofTechnology,Austria SteveMyers IndianaUniversity,USA GregoryNeven IBMResearch–Zurich,Switzerland VIII EUROCRYPT2015 KaisaNyberg AaltoUniversity,Finland KennethG.Paterson RoyalHolloway,UniversityofLondon,UK DavidPointcheval ÉcoleNormaleSupérieureParis,France ManojPrabhakaran UniversityofIllinoisatUrbana–Champaign,USA EmmanuelProuff ANSSI,France ChristianRechberger TechnicalUniversityofDenmark,Denmark PankajRohatgi CryptographyResearchInc.,USA AlonRosen HerzliyaInterdisciplinaryCenter,Herzliya,Israel AlessandraScafuro UniversityofCalifornia,LosAngeles,USA ChristianSchaffner UniversityofAmsterdam,TheNetherlands DominiqueSchröder SaarlandUniversity,Germany MartijnStam UniversityofBristol,UK François-XavierStandaert UniversitécatholiquedeLouvain,Belgium DouglasStebila QueenslandUniversityofTechnology,Australia FrederikVercauteren KatholiekeUniversiteitLeuven,Belgium BogdanWarinschi UniversityofBristol,UK External Reviewers DiveshAggarwal LuísT.A.N.Brandão MarkusDürmuth ShwetaAgrawal BillyBobBrumley RobertEnderlein MartinAlbrecht ChristinaBrzuska Chun-IFan HiroakiAnada ClaudeCarlet EdvardFargerholm PrabhanjanAnanth AngeloDeCaro PooyaFarshim ElenaAndreeva IgnacioCascudo Feng-HaoLiu BennyApplebaum DavidCash MatthieuFiniasz SrinivasanArunachalam AndreaCerulli DarioFiore GiladAsharov PyrrosChaidos RobFitzpatrick NuttapongAttrapadung Yun-AnChang RobertFitzpatrick SaikrishnaBadrinarayanan JieChen NilsFleischhacker RachidElBansarkhani BaudoinCollard Jean-PierreFlori ManuelBarbosa GeoffroyCouteau Pierre-AlainFouque LynnBatten EdouardCuvelier ThomasFuhr AmosBeimel JoanDaemen EiichiroFujisaki SoniaBelaid VizárDamian BenjaminFuller JoshBenaloh Jean-PaulDegabriele TommasoGagliardoni FlorianBergsma PatrickDerbez StevenGalbraith SanjayBhattacherjee DavidDerler NicolasGama NirBitansky ChristophDobraunig PraveenGauravaram CèlineBlondeau NicoDöttling RanGelles AndrejBogdanov ManuDrijvers RosarioGennaro NiekBouman MariaDubovitskaya HenriGilbert ColinBoyd OrrDunkelman SergeyGorbunov EletteBoyle FrancoisDupressoir MatthewGreen ZvikaBrakerski StefanDziembowski VincentGrosso EUROCRYPT2015 IX JohannGroszschädl DanMartin VincentRijmen SylvainGuilley ChristianMatt BenRiva ShaiHalevi UeliMaurer MatthieuRivain MichaelHamburg IngovonMaurich ThomasRoche MikeHamburg MatthewMcKague MikeRosulek FabriceBenHamouda MarcelMedwed RonRothblum ChristianHanser FlorianMendel YannisRouselakis RyanHenry BartMennink ArnabRoy JensHermans ArnoMittelbach AtriRudra JavierHerranz PaymanMohassel KaiSamelin RyoHiromasa MridulNandi PalashSarkar ShoichiHirose MaríaNaya-Plasencia BenediktSchmidt YanHuang PhongNguyen PeterScholl YuvalIshai RyoNishimaki PeterSchwabe CessJansen KobbiNissim GilSegev ThomasJohansson AdamO’Neill NicolasSendrier AnthonyJournault WakahaOgata YannickSeurin AntoineJoux MiyakoOhkubo AbhiShelat AliElKaafarani OlyaOhrimenko AdamShull SaqibKakvi TatsuakiOkamoto JamieSikora AkshayKamath JiaxinPan MarkSimkin BhavanaKanukurthi OmkantPandey DanielSlamanig CarmenKempka OmerPaneth HadiSoleimany DmitryKhovratovich SaurabhPanjwani JuarjSomorovsky DakshitaKhurana LouizaPapachristodolou FlorianSpeelman SusumuKiyoshima AnatPaskin-Cherniavsky DamienStehlé StefanKoelbl RafaelPass JohnSteinberger FrançoisKoeune ChrisPeikert Noah VladKolesnikov LudovicPerret Stephens-Davidowitz AnnaKrasnova LéoPerrin MarcStevens StephanKrenn ThomasPeters Pierre-YvesStrub Po-ChunKuo ChristophePetit StefanoTessaro FabienLaguillaumie DuongHieuPhan SusanThomson AdelineLanglois KrzysztofPietrzak MehdiTibouchi MartinM.Laurisden BennyPinkas TygeTiessen JooyoungLee JérômePlût Pei-YihTing AnjaLehmann ChristopherPortmann ElmarTischhauser TancrèdeLepoint RomainPoussier MikeTunstall ReynaldLercier IgnacioCascudoPueyo DominiqueUnruh GaëtanLeurent IvanPustogarov VinodVaikuntanathan AnthonyLeverrier BertramPöttering KeremVarici HuijiaLin MaxRabkin VesselinVelichkov SteveLu CarlaRafols Muthuramakrishnan AtulLuykx SominduRamanna Venkitasubramaniam GiulioMalavolta JothiRangasamy DanieleVenturi MarkMarson AlfredoRial NicolasVeyrat-Charvillon