Entropy measures and unconditional security in cryptography

One of the most important properties of a cryptographic system is a proof of its security. In the present work, information-theoretic meth¬ ods are used for proving the security of unconditionally secure cryptosystems. The security of such systems does not depend on unproven intractability assumptions. A survey of entropy measures and their applications in cryptography is presented. A new information measure, smooth entropy, is intro¬ duced to quantify the number of almost uniform random bits that can be extracted from a source by probabilistic algorithms. Smooth entropy unifies previous work on privacy amplification in cryptography and on entropy smoothing in theoretical computer science. It enables a system¬ atic investigation of the spoiling knowledge proof technique to obtain lower bounds on smooth entropy. The Renyi entropy of order at least 2 of a random variable is a lower bound for its smooth entropy, whereas an assumption about Renyi entropy of order 1, which is equivalent to the Shannon entropy, is too weak to guarantee any non-trivial amount of smooth entropy. The gap between Renyi entropy of order 1 and 2 is closed by proving that Renyi entropy of order a between 1 and 2 is a lower bound for smooth entropy, up to a small parameter depending on a, the alphabet size, and the failure probability. The operation of many unconditionally secure cryptosystems can be divided into the three phases advantage distillation, information recon¬ ciliation, and privacy amplification. The relation between privacy am¬ plification and information reconciliation is investigated, in particular, the effect of side information, obtained by an adversary through an ini¬ tial reconciliation step, on the size of the secret key that can be distilled safely by subsequent privacy amplification. It is shown that each bit of side information reduces the size of the key that can be generated by at