Data assimilation: Difference between revisions

From formulasearchengine
Jump to navigation Jump to search
en>Runningonbrains
Add a rough, one-sentence definition
 
en>Inferior Olive
m "Mars is the first...so far" doesn't make sense. I interpreted it as and changed it to "only"(WG)
Line 1: Line 1:
Greetings! I am Myrtle Shroyer. Puerto Rico is where he's usually been residing but she requirements to transfer simply because of her family. Body developing is 1 of the things I love most. I utilized to be unemployed but now I am a librarian and the salary has been truly fulfilling.<br><br>Also visit my website - [http://www.webmdbook.com/index.php?do=/profile-11685/info/ www.webmdbook.com]
The '''Goldwasser–Micali (GM) cryptosystem ''' is an [[asymmetric key encryption algorithm]] developed by [[Shafi Goldwasser]] and [[Silvio Micali]] in 1982.  GM has the distinction of being the first [[probabilistic encryption|probabilistic]] public-key encryption scheme which is [[provably secure]] under standard cryptographic assumptions. However, it is not an efficient cryptosystem, as ciphertexts may be several hundred times larger than the initial plaintext.  To prove the security properties of the cryptosystem, Goldwasser and Micali proposed the widely used definition of [[semantic security]].
 
==Basis==
The GM cryptosystem is [[semantic security|semantically secure]] based on the assumed intractability of the [[quadratic residuosity problem]] modulo a composite ''N'' = ''pq'' where ''p, q'' are large [[prime number|primes]].  This assumption states that given (''x'', ''N'') it is difficult to determine whether ''x'' is a quadratic residue modulo ''N'' (i.e., ''x'' = ''y''<sup>2</sup> mod ''N'' for some ''y''), when the [[Jacobi symbol]] for ''x'' is&nbsp;+1.  The quadratic residue problem is easily solved given the factorization of ''N'', while new quadratic residues may be generated by any party, even without knowledge of this factorization. The GM cryptosystem leverages this asymmetry by encrypting individual plaintext bits as either random quadratic residues or non-residues modulo ''N'', all with quadratic residue symbol&nbsp;+1.  Recipients use the factorization of ''N'' as a [[secret key]], and decrypt the message by testing the quadratic residuosity of the received ciphertext values.
 
Because Goldwasser–Micali  produces a value of size approximately |''N''| to encrypt every single bit of a plaintext, GM encryption results in substantial [[ciphertext expansion]].  To prevent [[factorization]] attacks, it is recommended that |''N''| be several hundred bits or more.  Thus, the scheme serves mainly as a proof of concept, and more efficient provably-secure schemes such as [[ElGamal encryption|Elgamal]] have been developed since.
 
Because encryption is performed using a probabilistic algorithm, a given plaintext may produce very different ciphertexts each time it is encrypted.  This has significant advantages, as it prevents an adversary from recognizing intercepted messages by comparing them to a dictionary of known ciphertexts.
 
==Scheme definition==
 
Goldwasser–Micali consists of three algorithms: a probabilistic key generation algorithm which produces a public and a private key, a probabilistic encryption algorithm, and a deterministic decryption algorithm.
 
The scheme relies on deciding whether a given value ''x'' is a square mod ''N'', given the factorization (''p'', ''q'') of ''N''.  This can be accomplished using the following procedure:
 
#Compute ''x<sub>p</sub>'' = ''x'' mod ''p'', ''x<sub>q</sub>'' = ''x'' mod ''q''.
#If <math>x_p^{(p-1)/2} \equiv 1\pmod{p}</math> and <math>x_q^{(q-1)/2} \equiv 1\pmod{q}</math>, then ''x'' is a quadratic residue mod&nbsp;''N''.
 
===Key generation===
 
The modulus used in GM encryption is generated in the same manner as in the [[RSA (algorithm)|RSA]] cryptosystem.  (See [[RSA (algorithm)|RSA]], key generation for details.)
 
#Alice generates two distinct large [[prime number]]s ''p'' and ''q'', randomly and independently of each other.
#Alice computes ''N'' = ''p q''.
#She then finds some non-residue ''x'' such that the [[Legendre symbol]]s satisfy <math>\left(\frac{x}{p}\right)=\left(\frac{x}{q}\right)=-1</math> and hence the [[Jacobi symbol]] <math>\left(\frac{x}{N}\right)</math> is&nbsp;+1. The value ''x'' can for example be found by selecting random values and testing the two Legendre symbols.  If ''p'', ''q'' = 3 mod 4 (i.e., ''N'' is a [[Blum integer]]), then the value ''N''&nbsp;&minus;&nbsp;1 is guaranteed to have the required property.
 
The ''public key'' consists of (''x'',&nbsp;''N'').  The secret key is the factorization&nbsp;(''p'',&nbsp;''q'').
 
=== Message encryption ===
 
Suppose Bob wishes to send a message ''m'' to Alice:
 
#Bob first encodes ''m'' as a string of bits (''m''<sub>1</sub>, ..., ''m<sub>n</sub>'').
#For every bit ''<math>m_i</math>'', Bob generates a random value ''<math>y_i</math>'' from the group of units modulo&nbsp;''N'', or ''<math>\gcd(y_i,N) = 1</math>''.  He outputs the value <math>c_i = y_i^2 x^{m_i}\pmod{N}</math>.
 
Bob sends the ciphertext (''c''<sub>1</sub>, ..., ''c''<sub>''n''</sub>).
 
=== Message decryption ===
 
Alice receives (''c''<sub>1</sub>, ..., ''c''<sub>''n''</sub>). She can recover ''m'' using the following procedure:
 
#For each ''i'', using the prime factorization (''p'', ''q''), Alice determines whether the value ''c''<sub>''i''</sub> is a quadratic residue; if so, ''m''<sub>''i''</sub> = 0, otherwise ''m''<sub>''i''</sub> = 1.
 
Alice outputs the message ''m'' = (''m''<sub>1</sub>, ..., ''m''<sub>''n''</sub>).
 
=== Security properties ===
 
There is a simple [[reduction (complexity)|reduction]] from breaking this cryptosystem to the problem of determining whether a random value modulo ''N'' with Jacobi symbol ''+1'' is a quadratic residue.  If an algorithm ''A'' breaks the cryptosystem,
then to determine if a given value ''x'' is a quadratic residue modulo ''N'', we test ''A'' to see if it can break the cryptosystem using (''x'',''N'') as a public key.  If ''x'' is a non-residue, then ''A'' should work properly.  However, if ''x'' is a residue, then every "ciphertext" will simply be a random quadratic residue, so
''A'' cannot be correct more than half of the time.  Furthermore, this problem is [[Random self-reducibility|random self-reducible]], which ensures that for a given ''N'', every public key is just as secure as every other public key. 
 
The GM cryptosystem has [[homomorphic encryption|homomorphic properties]], in the sense that if ''c''<sub>0</sub>, ''c''<sub>1</sub> are the encryptions of bits ''m''<sub>0</sub>, ''m''<sub>1</sub>, then ''c''<sub>0</sub>''c''<sub>1</sub> mod&nbsp;''N'' will be an encryption of <math>m_0 \oplus m_1</math>.  For this reason, the GM cryptosystem is sometimes used in more complex cryptographic primitives.
 
==References==
 
* {{cite journal |author=S. Goldwasser, S. Micali |title=Probabilistic encryption and how to play mental poker keeping secret all partial information |journal=Proc. 14th Symposium on Theory of Computing |year=1982 |pages=365–377 |doi=10.1145/800070.802212}}
* {{cite journal |author=S. Goldwasser, S. Micali |title=Probabilistic encryption |journal=Journal of Computer and System Sciences |volume=28 |issue=2 |year=1984 |pages=270–299 |doi=10.1016/0022-0000(84)90070-9}}
 
==See also==
*[[Blum–Goldwasser cryptosystem]]
 
{{Cryptography navbox | public-key}}
 
{{DEFAULTSORT:Goldwasser-Micali cryptosystem}}
[[Category:Public-key encryption schemes]]

Revision as of 00:58, 12 December 2013

The Goldwasser–Micali (GM) cryptosystem is an asymmetric key encryption algorithm developed by Shafi Goldwasser and Silvio Micali in 1982. GM has the distinction of being the first probabilistic public-key encryption scheme which is provably secure under standard cryptographic assumptions. However, it is not an efficient cryptosystem, as ciphertexts may be several hundred times larger than the initial plaintext. To prove the security properties of the cryptosystem, Goldwasser and Micali proposed the widely used definition of semantic security.

Basis

The GM cryptosystem is semantically secure based on the assumed intractability of the quadratic residuosity problem modulo a composite N = pq where p, q are large primes. This assumption states that given (x, N) it is difficult to determine whether x is a quadratic residue modulo N (i.e., x = y2 mod N for some y), when the Jacobi symbol for x is +1. The quadratic residue problem is easily solved given the factorization of N, while new quadratic residues may be generated by any party, even without knowledge of this factorization. The GM cryptosystem leverages this asymmetry by encrypting individual plaintext bits as either random quadratic residues or non-residues modulo N, all with quadratic residue symbol +1. Recipients use the factorization of N as a secret key, and decrypt the message by testing the quadratic residuosity of the received ciphertext values.

Because Goldwasser–Micali produces a value of size approximately |N| to encrypt every single bit of a plaintext, GM encryption results in substantial ciphertext expansion. To prevent factorization attacks, it is recommended that |N| be several hundred bits or more. Thus, the scheme serves mainly as a proof of concept, and more efficient provably-secure schemes such as Elgamal have been developed since.

Because encryption is performed using a probabilistic algorithm, a given plaintext may produce very different ciphertexts each time it is encrypted. This has significant advantages, as it prevents an adversary from recognizing intercepted messages by comparing them to a dictionary of known ciphertexts.

Scheme definition

Goldwasser–Micali consists of three algorithms: a probabilistic key generation algorithm which produces a public and a private key, a probabilistic encryption algorithm, and a deterministic decryption algorithm.

The scheme relies on deciding whether a given value x is a square mod N, given the factorization (p, q) of N. This can be accomplished using the following procedure:

  1. Compute xp = x mod p, xq = x mod q.
  2. If and , then x is a quadratic residue mod N.

Key generation

The modulus used in GM encryption is generated in the same manner as in the RSA cryptosystem. (See RSA, key generation for details.)

  1. Alice generates two distinct large prime numbers p and q, randomly and independently of each other.
  2. Alice computes N = p q.
  3. She then finds some non-residue x such that the Legendre symbols satisfy and hence the Jacobi symbol is +1. The value x can for example be found by selecting random values and testing the two Legendre symbols. If p, q = 3 mod 4 (i.e., N is a Blum integer), then the value N − 1 is guaranteed to have the required property.

The public key consists of (xN). The secret key is the factorization (pq).

Message encryption

Suppose Bob wishes to send a message m to Alice:

  1. Bob first encodes m as a string of bits (m1, ..., mn).
  2. For every bit , Bob generates a random value from the group of units modulo N, or . He outputs the value .

Bob sends the ciphertext (c1, ..., cn).

Message decryption

Alice receives (c1, ..., cn). She can recover m using the following procedure:

  1. For each i, using the prime factorization (p, q), Alice determines whether the value ci is a quadratic residue; if so, mi = 0, otherwise mi = 1.

Alice outputs the message m = (m1, ..., mn).

Security properties

There is a simple reduction from breaking this cryptosystem to the problem of determining whether a random value modulo N with Jacobi symbol +1 is a quadratic residue. If an algorithm A breaks the cryptosystem, then to determine if a given value x is a quadratic residue modulo N, we test A to see if it can break the cryptosystem using (x,N) as a public key. If x is a non-residue, then A should work properly. However, if x is a residue, then every "ciphertext" will simply be a random quadratic residue, so A cannot be correct more than half of the time. Furthermore, this problem is random self-reducible, which ensures that for a given N, every public key is just as secure as every other public key.

The GM cryptosystem has homomorphic properties, in the sense that if c0, c1 are the encryptions of bits m0, m1, then c0c1 mod N will be an encryption of . For this reason, the GM cryptosystem is sometimes used in more complex cryptographic primitives.

References

  • One of the biggest reasons investing in a Singapore new launch is an effective things is as a result of it is doable to be lent massive quantities of money at very low interest rates that you should utilize to purchase it. Then, if property values continue to go up, then you'll get a really high return on funding (ROI). Simply make sure you purchase one of the higher properties, reminiscent of the ones at Fernvale the Riverbank or any Singapore landed property Get Earnings by means of Renting

    In its statement, the singapore property listing - website link, government claimed that the majority citizens buying their first residence won't be hurt by the new measures. Some concessions can even be prolonged to chose teams of consumers, similar to married couples with a minimum of one Singaporean partner who are purchasing their second property so long as they intend to promote their first residential property. Lower the LTV limit on housing loans granted by monetary establishments regulated by MAS from 70% to 60% for property purchasers who are individuals with a number of outstanding housing loans on the time of the brand new housing purchase. Singapore Property Measures - 30 August 2010 The most popular seek for the number of bedrooms in Singapore is 4, followed by 2 and three. Lush Acres EC @ Sengkang

    Discover out more about real estate funding in the area, together with info on international funding incentives and property possession. Many Singaporeans have been investing in property across the causeway in recent years, attracted by comparatively low prices. However, those who need to exit their investments quickly are likely to face significant challenges when trying to sell their property – and could finally be stuck with a property they can't sell. Career improvement programmes, in-house valuation, auctions and administrative help, venture advertising and marketing, skilled talks and traisning are continuously planned for the sales associates to help them obtain better outcomes for his or her shoppers while at Knight Frank Singapore. No change Present Rules

    Extending the tax exemption would help. The exemption, which may be as a lot as $2 million per family, covers individuals who negotiate a principal reduction on their existing mortgage, sell their house short (i.e., for lower than the excellent loans), or take part in a foreclosure course of. An extension of theexemption would seem like a common-sense means to assist stabilize the housing market, but the political turmoil around the fiscal-cliff negotiations means widespread sense could not win out. Home Minority Chief Nancy Pelosi (D-Calif.) believes that the mortgage relief provision will be on the table during the grand-cut price talks, in response to communications director Nadeam Elshami. Buying or promoting of blue mild bulbs is unlawful.

    A vendor's stamp duty has been launched on industrial property for the primary time, at rates ranging from 5 per cent to 15 per cent. The Authorities might be trying to reassure the market that they aren't in opposition to foreigners and PRs investing in Singapore's property market. They imposed these measures because of extenuating components available in the market." The sale of new dual-key EC models will even be restricted to multi-generational households only. The models have two separate entrances, permitting grandparents, for example, to dwell separately. The vendor's stamp obligation takes effect right this moment and applies to industrial property and plots which might be offered inside three years of the date of buy. JLL named Best Performing Property Brand for second year running

    The data offered is for normal info purposes only and isn't supposed to be personalised investment or monetary advice. Motley Fool Singapore contributor Stanley Lim would not personal shares in any corporations talked about. Singapore private home costs increased by 1.eight% within the fourth quarter of 2012, up from 0.6% within the earlier quarter. Resale prices of government-built HDB residences which are usually bought by Singaporeans, elevated by 2.5%, quarter on quarter, the quickest acquire in five quarters. And industrial property, prices are actually double the levels of three years ago. No withholding tax in the event you sell your property. All your local information regarding vital HDB policies, condominium launches, land growth, commercial property and more

    There are various methods to go about discovering the precise property. Some local newspapers (together with the Straits Instances ) have categorised property sections and many local property brokers have websites. Now there are some specifics to consider when buying a 'new launch' rental. Intended use of the unit Every sale begins with 10 p.c low cost for finish of season sale; changes to 20 % discount storewide; follows by additional reduction of fiftyand ends with last discount of 70 % or extra. Typically there is even a warehouse sale or transferring out sale with huge mark-down of costs for stock clearance. Deborah Regulation from Expat Realtor shares her property market update, plus prime rental residences and houses at the moment available to lease Esparina EC @ Sengkang
  • One of the biggest reasons investing in a Singapore new launch is an effective things is as a result of it is doable to be lent massive quantities of money at very low interest rates that you should utilize to purchase it. Then, if property values continue to go up, then you'll get a really high return on funding (ROI). Simply make sure you purchase one of the higher properties, reminiscent of the ones at Fernvale the Riverbank or any Singapore landed property Get Earnings by means of Renting

    In its statement, the singapore property listing - website link, government claimed that the majority citizens buying their first residence won't be hurt by the new measures. Some concessions can even be prolonged to chose teams of consumers, similar to married couples with a minimum of one Singaporean partner who are purchasing their second property so long as they intend to promote their first residential property. Lower the LTV limit on housing loans granted by monetary establishments regulated by MAS from 70% to 60% for property purchasers who are individuals with a number of outstanding housing loans on the time of the brand new housing purchase. Singapore Property Measures - 30 August 2010 The most popular seek for the number of bedrooms in Singapore is 4, followed by 2 and three. Lush Acres EC @ Sengkang

    Discover out more about real estate funding in the area, together with info on international funding incentives and property possession. Many Singaporeans have been investing in property across the causeway in recent years, attracted by comparatively low prices. However, those who need to exit their investments quickly are likely to face significant challenges when trying to sell their property – and could finally be stuck with a property they can't sell. Career improvement programmes, in-house valuation, auctions and administrative help, venture advertising and marketing, skilled talks and traisning are continuously planned for the sales associates to help them obtain better outcomes for his or her shoppers while at Knight Frank Singapore. No change Present Rules

    Extending the tax exemption would help. The exemption, which may be as a lot as $2 million per family, covers individuals who negotiate a principal reduction on their existing mortgage, sell their house short (i.e., for lower than the excellent loans), or take part in a foreclosure course of. An extension of theexemption would seem like a common-sense means to assist stabilize the housing market, but the political turmoil around the fiscal-cliff negotiations means widespread sense could not win out. Home Minority Chief Nancy Pelosi (D-Calif.) believes that the mortgage relief provision will be on the table during the grand-cut price talks, in response to communications director Nadeam Elshami. Buying or promoting of blue mild bulbs is unlawful.

    A vendor's stamp duty has been launched on industrial property for the primary time, at rates ranging from 5 per cent to 15 per cent. The Authorities might be trying to reassure the market that they aren't in opposition to foreigners and PRs investing in Singapore's property market. They imposed these measures because of extenuating components available in the market." The sale of new dual-key EC models will even be restricted to multi-generational households only. The models have two separate entrances, permitting grandparents, for example, to dwell separately. The vendor's stamp obligation takes effect right this moment and applies to industrial property and plots which might be offered inside three years of the date of buy. JLL named Best Performing Property Brand for second year running

    The data offered is for normal info purposes only and isn't supposed to be personalised investment or monetary advice. Motley Fool Singapore contributor Stanley Lim would not personal shares in any corporations talked about. Singapore private home costs increased by 1.eight% within the fourth quarter of 2012, up from 0.6% within the earlier quarter. Resale prices of government-built HDB residences which are usually bought by Singaporeans, elevated by 2.5%, quarter on quarter, the quickest acquire in five quarters. And industrial property, prices are actually double the levels of three years ago. No withholding tax in the event you sell your property. All your local information regarding vital HDB policies, condominium launches, land growth, commercial property and more

    There are various methods to go about discovering the precise property. Some local newspapers (together with the Straits Instances ) have categorised property sections and many local property brokers have websites. Now there are some specifics to consider when buying a 'new launch' rental. Intended use of the unit Every sale begins with 10 p.c low cost for finish of season sale; changes to 20 % discount storewide; follows by additional reduction of fiftyand ends with last discount of 70 % or extra. Typically there is even a warehouse sale or transferring out sale with huge mark-down of costs for stock clearance. Deborah Regulation from Expat Realtor shares her property market update, plus prime rental residences and houses at the moment available to lease Esparina EC @ Sengkang

See also

Template:Cryptography navbox