Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:0906.2582 · IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences

Strongly Secure Privacy Amplification Cannot Be Obtained by Encoder of Slepian-Wolf Code

Shun Watanabe, Ryutaroh Matsumoto, Tomohiko Uyematsu

Published Jan 1, 2010• 21 citations
arXivHTMLPDF

Abstract

Privacy amplification is a technique to distill a secret key from a random variable by a function so that the distilled key and eavesdropper's random variable are statistically independent. There are three kinds of security criteria for the key distilled by privacy amplification: the normalized divergence criterion, which is also known as the weak security criterion, the variational distance criterion, and the divergence criterion, which is also known as the strong security criterion. As a technique to distill a secret key, it is known that the encoder of a Slepian-Wolf (the source coding with full side-information at the decoder) code can be used as a function for privacy amplification if we employ the weak security criterion. In this paper, we show that the encoder of a Slepian-Wolf code cannot be used as a function for privacy amplification if we employ the criteria other than the weak one.

DOI
10.1587/transfun.e93.a.1650

Related papers

Strongly secure privacy amplification cannot be obtained by encoder of Slepian-Wolf code

Shun Watanabe, Tsuki Saitou, Ryutaroh Matsumoto +1 more

The privacy amplification is a technique to distill a secret key from a random variable by a hash function so that the distilled key and an eavesdropper's random variable is statistically independent. There are two kinds of security criteria for the key distilled by the privacy amplification: the weak security criterion and the strong security criterion. As a technique to distill a secret key, it is known that the encoder of a Slepian-Wolf (the source coding with full side-information at the decoder) code can be used as a hash function for the privacy amplification if we employ the weak security criterion. In this paper, we show that the encoder of a Slepian-Wolf code cannot be used as a hash function for the privacy amplification if we employ the strong security criterion.

IEEE International Symposium on Information Theory (ISIT)•Jun 1, 2009•4 citations

Strongly Secure Privacy Amplification Cannot Be Obtained by Encoder of Slepian-Wolf Code

峻 渡辺, Shun Watanabe, 隆太郎 松本 +5 more

•Jul 1, 2009•0 citations

Generalized privacy amplification

C. H. Bennett, Gilles Brassard A, Claude Crépeau +1 more

This paper, provides a general treatment of privacy amplification by public discussion, a concept introduced by Bennett, Brassard, and Robert for a special scenario. Privacy amplification is a process that allows two parties to distil a secret key from a common random variable about which an eavesdropper has partial information. The two parties generally know nothing about the eavesdropper's information except that it satisfies a certain constraint. The results have applications to unconditionally secure secret-key agreement protocols and quantum cryptography, and they yield results on wiretap and broadcast channels for a considerably strengthened definition of secrecy capacity.

IEEE Transactions on Information Theory•Jan 1, 1995•1,427 citations

Comparison of Short Blocklength Slepian-Wolf Coding for Key Reconciliation

Mahdi Shakiba-Herfeh, Arsenia Chorti

In this work, we focus on Slepian-Wolf (SW) coding in the short blocklength for reconciliation in secret key generation and physical unclonable functions (PUF). In the problem formulation, two legitimate parties wish to generate a common secret key from a noisy observation of a common random source in the presence of a passive eavesdropper. We consider three different families of codes for key reconciliation. All the selected codes show promising performances in information transmission in the short blocklength regime. We implement and compare the performance of the codes for SW reconciliation in the terms of reliability and decoding complexity for different blocklengths.

arXiv:2103.11423•IEEE Statistical Signal Processing Workshop (SSP)•Jul 11, 2021•14 citations

Privacy Amplification for Quantum Key Distribution

Yongmin Li

Privacy amplification is an essential part of distilling highly secret shared information in quantum key distribution.Two accelerating algorithms used for privacy amplification are introduced in this paper.The combination of the two accelerating algorithms not only has the merits of high security,but also effectively reduces the computation time.By using the combined algorithm,we have achieved secret-key distillation for continuous variable quantum key distribution.

Acta Sinica Quantum Optica•Jan 1, 2013•0 citations

A Strong Privacy Amplification Protocol by Unconditionally Secure Authentication

Liu Sheng

Communications over the public channel should be authenticated to make privacy amplification against active adversaries possible. A new method of constructing authentication codes from error correcting codes is proposed and analyzed, and an arbitrary q ary code( q is a prime power) can be transformed into an authentication code according to the method. When the two communicants share n bit partially secret string S , an authentication scheme can be constructed from a ( 2 m,k,2 m-k+1 ) extended Reed Solomon code, where m=[XXZS-ZSX*3Y0]n/k[XXYS-YSX*3Y0] and 2 mk . As long as the two parties share an authentication key of at least 3 m bit, there exists a strong protocol for privacy amplification which ensures that the probability that the adversary successfully implements active attacks is at most k/2 m , and a highly secret string can be distilled of length about the Renyi entropy of S when given Eve's complete knowledge U=u about S . As n is large enough, more than 3 m bits secret string can always be distilled, thus the protocol is practical.

Chinese Journal of Computers•Jan 1, 2000•0 citations
Privacy amplification is a technique to distill a secret key from a random variable by a function so that the distilled key and eavesdropper's random variable are statistically independent. There are three kinds of security criteria for the key distilled by privacy amplification: the normalized divergence criterion, which is also known as the weak security criterion, the variational distance criterion, and the divergence criterion, which is also known as the strong security criterion. As a technique to distill a secret key, it is known that the encoder of a Slepian-Wolf (the source coding with full side-information at the decoder) code can be used as a function for privacy amplification if we employ the weak security criterion. In this paper, we show that the encoder of a Slepian-Wolf code cannot be used as a function for privacy amplification if we employ the criteria other than the weak one.
The privacy amplification is a technique to distill a secret key from a random variable by a hash function so that the distilled key and an eavesdropper's random variable is statistically independent. There are two kinds of security criteria for the key distilled by the privacy amplification: the weak security criterion and the strong security criterion. As a technique to distill a secret key, it is known that the encoder of a Slepian-Wolf (the source coding with full side-information at the decoder) code can be used as a hash function for the privacy amplification if we employ the weak security criterion. In this paper, we show that the encoder of a Slepian-Wolf code cannot be used as a hash function for the privacy amplification if we employ the strong security criterion.
This paper, provides a general treatment of privacy amplification by public discussion, a concept introduced by Bennett, Brassard, and Robert for a special scenario. Privacy amplification is a process that allows two parties to distil a secret key from a common random variable about which an eavesdropper has partial information. The two parties generally know nothing about the eavesdropper's information except that it satisfies a certain constraint. The results have applications to unconditionally secure secret-key agreement protocols and quantum cryptography, and they yield results on wiretap and broadcast channels for a considerably strengthened definition of secrecy capacity.
In this work, we focus on Slepian-Wolf (SW) coding in the short blocklength for reconciliation in secret key generation and physical unclonable functions (PUF). In the problem formulation, two legitimate parties wish to generate a common secret key from a noisy observation of a common random source in the presence of a passive eavesdropper. We consider three different families of codes for key reconciliation. All the selected codes show promising performances in information transmission in the short blocklength regime. We implement and compare the performance of the codes for SW reconciliation in the terms of reliability and decoding complexity for different blocklengths.
Communications over the public channel should be authenticated to make privacy amplification against active adversaries possible. A new method of constructing authentication codes from error correcting codes is proposed and analyzed, and an arbitrary q ary code( q is a prime power) can be transformed into an authentication code according to the method. When the two communicants share n bit partially secret string S , an authentication scheme can be constructed from a ( 2 m,k,2 m-k+1 ) extended Reed Solomon code, where m=[XXZS-ZSX*3Y0]n/k[XXYS-YSX*3Y0] and 2 mk . As long as the two parties share an authentication key of at least 3 m bit, there exists a strong protocol for privacy amplification which ensures that the probability that the adversary successfully implements active attacks is at most k/2 m , and a highly secret string can be distilled of length about the Renyi entropy of S when given Eve's complete knowledge U=u about S . As n is large enough, more than 3 m bits secret string can always be distilled, thus the protocol is practical.