Abstract. We give the first proof of security for the full Unix password .... weak
assumptions of security for DES, and as a result, our results will still be relevant ...
!#"$%&&'()*$% + , $.-+,//0 1 2436587:9@?BA+C DE3F?GIH@JK9BLMANCO> P?B7K5FANCRQO7TSEUFHFCR7_SO¼B¿[ SR¼BA4À+HFCRA H VMSO¼BAP?B7_¾/½o3FQRQOÃ
[email protected]Á]SO¼oA+?wSO7:À+3 SO7KHF?¯½BCOHFSOH]ÀH@J©ÄTÅNÆ ÇÈ6ÉJTSR¼BHFÁo>F¼¯SO¼BA·3FJ_>@HFCR7TSR¼B¿Ê¼o3FQLlA+AN? ÀH@?hËEANÀSOÁBCRAN9@CR3F½B¼B7:À+3FJ_JKUQOANÀ+ÁBCOA@[@3 VÌSOA+CfSEÃYH/9]ANÀN3F9]AbQf3F?o99]AN½BJKHhUw¿®AN?@SY7_?FC3 ½B¼B7:À 3FQRQOÁB¿®½]SO7KHF?oQÑXVZHFCSR¼BA.P?B7_¾Í3FJ_>@HFCR7TSR¼B¿È »¼BA.¼M3FQO¼B7_?o>3 JK>FHFCR7_SO¼B¿ 7KQI3¯VÒ3 7KCOJKUQz7K¿®½BJ_A3 ½B½BJK7:À+3hSR7_H@? H V2IÓfÔ[l½MANCO¼M3 ½oQSR¼BA/LlANQzSzÕ ^8?BHh÷?LBJKH]À^À7K½B¼BANC365h3F7_J:3 LBJKASRH/SR¼BA¤½BÁBLBJK7:À ÈBÔ87K?oÀA%2IÓfÔ¼M3FQQzANA+?¡¿®3F?8U¯¿Â3F?]ÕsU@AN3FCRQXH V 3 ?M3 JKU8QO7:Q+[w7_?Í3 ?¡7K9]Ab3 JÃYHFCRJK9ÂÃYAI¿¯7K>F¼wS¼BHF½lAIVZHFC3/½oCOH8H VYÏZ587K3¯QOHF¿®ACRAN9]ÁMÀ0SO7KHF?lÑSR¼o3hSSO¼oA P?o7T¾Â½o3@QOQOÃfH@CR9¼o3@Qz¼Â7:QXQOANÀ+ÁBCOA·7_VÖ2IÓfÔ®7:Q+Èw×HhÃYA+5@A+Cb[ QzH%VÒ3FCX?BHQzÁoÀ¼Â½oCOH8H V¼o3@QX3 ½o½MAb3 CRAN9 7K?¡SR¼BA%JK7TSRA+C3hSOÁoCOA@È D?®AN3FCOJK7_ANCÃfH@CO^[ ØÖÁBL8U3 ?M9¯Ù3FÀ^FHFÚ½BCRANQOA+?wSOAb9¯QzSOCRHF?o>4SR¼BA+H@COA+SO7:À+3FJBA+587:9]A+?oÀ+ASO¼o3 SSO¼oA Lo3@Qz7:À¡3F½B½BCRH@3@À¼=VZHFÁB?o9¬7K?ÛSO¼oAP?B7_¾Ð3 JK>FHFCR7_SO¼B¿ 7:Q®J_7K^FANJ_UÜSOHÜLlAQOHFÁo?o9©[L8UݽBCOAbQzAN?wSO7K?B> ½BCRH8H VÒQHFVXQzAbÀÁBCR7_SEUFHFCR7_SO¼B¿ãÏZSO¼BANU¯3F?o3 JKU8â+AfSO¼BA·5h3 CR7:3 ?wSäÂåæ ç4è]ÏÒéwÑ CR3 SO¼BANC SO¼M3 ?SR¼BA4VZÁBJ_J©7_SOANCR3 SOAb9ÀH@?oQESRCOÁMÀ0SO7KHF?Íä®åæêç.èëOì ÏÒéwÑzÑ0í8SR¼BA+7KCY½BCOH8HFVÒQXHFV&QzAbÀÁBCR7_SEU®3FCOAI3FQOU8¿¯½BÕ SOHFSO7:À [©3 ?M9ÞQOH¡9]HÍ?BH S%9]7KCOAbÀ0SRJ_U 3 ½o½BJ_USRH¡CRAN3FJfÏÒ?BANÀ+ANQRQO3FCO7KJ_UÍÎo?o7TSRAbÑ47_?MQES3 ?wSO7:3hSR7_H@?oQHFVSO¼oA ÀH@?oQzSOCRÁoÀ0SR7_H@?ªío3 ?M94SR¼BA·9]ANQO7K>F? H VSR¼BA®P?B7_¾¥½o3FQRQOÃfH@CR9ͼo3@Qz¼¥L8UCRA+¿®Hh587_?B>SO¼BAÎoCQES4SEÃfH¡J_7K¿®7TS3hSO7KHF?MQ¿®A+?wSR7_H@?BAN9¥3FLMHh5@A ÏZÃYA3 J:QOH ¿®3F^FAÂQOHF¿®A½BCRHF>FCRANQRQ4SOHhÃ3 C9BQ¤CRA+¿®Hh587_?B>¡SO¼oAÂÎo?o3FJXJK7_¿®7_SR3hSR7_H@?=7_?=SR¼BAw3 ½ÜLMA+SEÃfANA+?Ü÷¼o3hS%¼o3@QILMANA+?Ý3 ?o3FJ_U8âNAN9 3 ?M9Ý÷¼o3hS®7:QÀ+ÁBCOCRA+?wSRJ_U=7K?ÐÁoQOAFÈ D?нo3FCzSR7KÀ+ÁBJ:3 Cb[ÖÃYA¡A+¾wSRA+?o9ÐتÁBL8UÛ3 ?M9ÛÙ3FÀ^@H Ú·ô Q/½BCRH8H V SOAbÀ¼B?B7:ïwÁBANQfSOH®¼o3F?o9]JKAISO¼BA¤7_SOA+C3hSRAN9¡ÀHF?MQESRCOÁoÀSO7KHF?ä®åæõÏÒçèöfçèfö÷+÷N÷+öçè@ÑÏøé@ÑXVZHFÁB?M9@HFCR7TSR¼B¿Èª;ùAF¼wSzVZH@COÃ3 C9/SOANÀ¼o?B7KÀN3 JMA¾]A+CÀ7:QzAúûLoÁ]SSO¼BAIÀH@?oÀCRASRALMH@ÁB?o9BQf3 CRA 7K¿¯½lHFCOSR3F?wSX7TVªÃYA43FCOASRH3@QOQOANQRQSO¼oA½BC3FÀSO7:À+3 JlQzAbÀÁBCR7_SEU/H V©SR¼BA4P?B7_¾®¼M3FQO¼ÀHF?MQESRCOÁoÀSO7KHF?Â7K? CRAN3 J©JK7_VZAFÈ
D?ݽBC3FÀSO7:ÀAÂSR¼BAF?BAb9©[wLBÁ]SSO¼BAN7_C·QO¼BHFCOSf^@A+UÂQO7_âNAJK7_¿®7_SRQYSO¼oA 3hSOSR3F7_?o3FLBJKA¯QOANÀ+ÁBCO7_SEUJ_AN5FANJøÈH@?BASR¼BA+JKANQRQN[©ÃfA®Qz¼oHhÃʼBA+CRA/SR¼o3hS¤SR¼BAÂÀHF?MQESRCOÁoÀSO7KHF?¥ÁMQzAb9Þ7K? SO¼oAÍP?B7T¾Û½M3FQRQzÃYHFC9=¼o3FQO¼Ð7:Q¯ÀCRUw½BSOHF>@CR3F½B¼B7:À+3FJ_JKUùQOHFÁB?M9Ð3 ?M9Ð9]H8ANQ¯3¥5@A+CRU=>FH8H]9ËEHFL¬H V A¾8SRCR3@À0SO7K?B>¥3FJ_¿®H@QzS/3 JKJHFVYSR¼BA SR¼ÜVZCOH@¿ SR¼BAÁB?o9BA+CRJ_U87K?B>¥ÀCRU8½]SOH@>FC3 ½B¼B7:À ½BCR7_¿®7_SO7K5FA@È ;ÜAY3FJKQOHIQO¼BHhÃÐ34CRANQOÁBJTS SO¼M3hS¿Â36U%LMAYH Vl7_?o9BA+½lA+?o9]AN?wS7K?wSOANCOAbQESbáhA+5FANCOU¤½oQOA+ÁM9]H ÕCR3F?o9]H@¿ >FAN?BA+C3hSRHFC¤VZH@CO¿ÂQ.3H@?BAÕÃY36U¥VZÁB?oÀ0SR7_H@?ª[3 ?o9ùSO¼o7KQ¯ÀH@?oQESRCOÁMÀ0SO7KHF?=7:Q.QO7_¿ÁBJTS3 ?BANHFÁoQOJKUÞ5FANCOU A À+7_AN?@S3F?o9ÐQzSOCRHF?B>@J_UÝQOANÀ+ÁBCO7_SEUwÕs½oCOAbQzANCO587K?B>oÈÔ8A+A »¼BANHFCRA+¿ ÅÍVZHFCÂ3ùQOÁBCR½BCR7KQO7_?o>FJKUùSR7_>@¼wS CRAN9]ÁoÀSO7KHF? ÏÒHFÁBC®ÀH@?oÀCRASRAFA+?oA+C3 Js[@SR¼BA%QzAbÀÁBCR7_SEUÂ7KQRQzÁoANQ·3FQRQOH8À+7K3 SOAb9÷7_SO¼Í?BHF?]ÕÁB?B7_VZHFCR¿®J_U¡9]7KQzSOCR7KLBÁ]SOAb9 ¿Â3hSRA+CR7K3FJl3F½B½MAb3 CfSOH¯LMAIÁB?o9BA+COÕsCRA+½BCRANQOA+?wSRAN9®7K?SO¼oA4JK7TSRA+C3hSRÁBCOA@ÈwÉ QOANÀ+HF?o9À+HF?wSOCR7KLBÁ]SO7KHF?@COAbQOQÖHF?%SR¼B7:Q&½oCOH@LBJ_AN¿[b½oCOAbQzAN?@SR7_?o>3VZH@CO¿Â3FJ ¿®H]9]A+J&SO¼o3 S4ÃYA.¼BH@½MA¿®36UQOA+CR5FA.3FQ43ÂVZH@ÁB?o9B3 SO7KHF?VZHFCVZÁ]SOÁoCOAA¾]½BJKHFC3hSO7KHF? 7K? SR¼B7KQI3 CRAN3oÈ PQO7K?B>/SR¼B7:Qf¿®H]9]ANJø[]ÃYAI3FCOAI3 LBJKA4SOH®Qz¼BHhà CRA+J:3hSR7_5@A+JKU®>FH8H]9JKHhÃfANCXLlHFÁB?o9oQfH@?SR¼BA%QzAbÀÁBCR7TSEU H V&SO¼BA%P?B7T¾3 JK>FH@CO7_SO¼B¿ ÷¼BAN?ÁoQzAb9÷7_SO¼?BH@?]ÕsÁo?B7TVZH@CO¿®JKU9]7:QESRCO7KLBÁ]SRAN9ͽo3FQRQOÃfH@CR9BQNÈ@»¼oANQOA SOAbÀ¼B?B7:ïwÁBANQ%½oCOHh587:9]A®½BCR3@À0SR7KÀN3 JKJ_U ÁoQOAVZÁoJXCRANQOÁBJTSQIVZHFC%SR¼BAQO½MAbÀ7:3 JXÀN3FQOA¯HFVfSR¼BAP?o7T¾Ü¼o3FQO¼ VZÁB?oÀSO7KHF?ª[]LoÁ]S·7_?¡>FA+?oA+C3 JMSO¼BA¤CRANQOÁBJTSQSR¼o3hSÀN3 ?
