Skip to content

Back to the catalog

Leakage-Resilient Incompressible Cryptography: Constructions and Barriers
eprint.iacr.orgpaper

Leakage-Resilient Incompressible Cryptography: Constructions and Barriers

Introduces leakage-resilient incompressible cryptography, a security model combining leakage resilience (partial key leakage plus full ciphertext) with incompressibility (full key but only part of the ciphertext or signature). It gives a transformation from incompressible symmetric-key encryption (SKE) to leakage-resilient incompressible SKE, a leakage-resilient incompressible PKE built from a new leakage-resilient non-committing KEM, and an incompressible SKE with ciphertext and compression rate 1/2 using invertible extractors. It also gives a leakage-resilient incompressible signature scheme in the random oracle model under DCR or LWE plus Decisional Linear. Black-box impossibility results show barriers to improving these parameters.

TL;DR Theory paper defining a security model that covers both key-leakage and ciphertext-compression attacks, with encryption and signature constructions and black-box impossibility results.
Document

What it is

A theory paper (ePrint 2026/2461, a minor revision of the ASIACRYPT 2024 paper) defining a security model that combines two side-channel models. In leakage resilience, the adversary sees part of the key plus the whole ciphertext or signature. In incompressibility, it sees the whole key but only part of the ciphertext or signature. The abstract says a scheme secure in one model can fail in the other. No implementation or benchmarks are given.

Parameters the summary omits

  • Incompressible SKE (information-theoretic): ciphertext-rate 1/2 and compression-rate 1/2. The abstract presents this as an improvement over Dziembowski (CRYPTO 2006), the existing information-theoretic baseline, and says it improves the final parameters of the SKE-to-leakage-resilient transformation and the PKE construction.
  • Signature (classical random oracle model, assuming DCR or LWE, plus Decisional Linear): signature-rate and compression-rate 1-o(1), and leakage-rate 1.
  • PKE: built from an incompressible SKE plus a new leakage-resilient non-committing KEM (LR-NC-KEM). The abstract gives no PKE rates.

Preconditions / Caveats

  • The signature scheme depends on the random oracle heuristic.
  • The impossibility results rule out basing improved schemes on black-box reductions. They do not rule out non-black-box constructions.
  • The abstract names LR-NC-KEM and invertible extractors as possibly reusable tools, but states no applications.

What to do

Nothing to deploy. If you are evaluating leakage-resilient or incompressible designs, use the rates above as the current reference points, and read the full paper for the concrete constructions.

Organisations named here

  • ASIACRYPT 2024
  • DCR
  • Decisional Linear assumption
  • Dziembowski
  • LWE
  • random oracle model

Technologies named here

  • Leakage-resilient non-committing key encapsulation mechanism
  • Invertible extractors
  • Information-theoretic incompressible SKE

Techniques named here

  • Impossibility results