Open AccessSecurity and efficiency analysis of the Hamming distance computation protocol based on oblivious transfer
Author(s) -
Kiraz Mehmet Sabir,
Genc Ziya Alper,
Kardas Suleyman
Publication year - 2015
Publication title -
security and communication networks
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.446
H-Index - 43
eISSN - 1939-0122
pISSN - 1939-0114
DOI - 10.1002/sec.1329
Subject(s) - computer science , oblivious transfer , soundness , computer security , authentication protocol , protocol (science) , verifiable secret sharing , hamming distance , authentication (law) , security analysis , cryptography , cryptographic protocol , adversary , theoretical computer science , computer network , algorithm , medicine , alternative medicine , pathology , set (abstract data type) , programming language
Bringer et al . proposed two cryptographic protocols for the computation of Hamming distance. Their first scheme uses oblivious transfer and provides security in the semi‐honest model. The other scheme uses committed oblivious transfer and is claimed to provide full security in the malicious case. The proposed protocols have direct implications to biometric authentication schemes between a prover and a verifier where the verifier has biometric data of the users in plain form. In this paper, we show that their protocol is not actually fully secure against malicious adversaries. More precisely, our attack breaks the soundness property of their protocol where a malicious user can compute a Hamming distance, which is different from the actual value. For biometric authentication systems, this attack allows a malicious adversary to pass the authentication without knowledge of the honest user's input with at most O ( n ) complexity instead of O (2 n ), where n is the input length. We propose an enhanced version of their protocol where this attack is eliminated. The security of our modified protocol is proven using the simulation‐based paradigm. Furthermore, as for efficiency concerns, the modified protocol utilizes verifiable oblivious transfer, which does not require the commitments to outputs, which improves its efficiency significantly. Copyright © 2015 John Wiley & Sons, Ltd.