al[libeccio.di.unisa.it/crypto07/papers/nr.pdf · 2011. 3. 29. · gf } w? pv ±v1g© gl g` ¢ z k...

33

Upload: others

Post on 30-Oct-2020

3 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

����������� ����������������� ��������������� ��!�"$#��%� � & �'����&(�)��#*����� ���,+- ��.0/1!2"3# ��4 ��56"7�98 �����:���,�

;=<?>A@*B�CD<FE�G H IKJLENMOJL@P>�Q?<FRTS�U

VXWZY\[^]`_�aL[

bdc�eFf�gLh�iKj glknmloLp$qsr?t\u*vxw�oLy�z^iKg|{%z\}�w�o�i'~Tol� k�olh�vx}��nc�k�}x��h���g|��vxz\c�i?ol�T��gLh�i?oD{���z\�n{�c�}�gL}x��olhK~T��ol{g'��vxz\c�i?ol�T��g�h�i?ol{�~Tc�h�k�}x��olh�����w�zX{%z\}�w�o�iK�Pv�e�gDvxz^i=olh�k�ol{%��oFv���h��K~Tolc��|��ol��}�w���z\z�~Tol��y�z^g�mlz\h�z^i�vxz\�k�c��x��}xf��1vxo�k\g�����z^i=��z��Pvx}�z�� ��z\��{�c�}�gL}x��olh�v\�9z^glknw�oL~ y w?�Pk�w=��z^�Dc?����z^v)}�w�z%z\��g���c�g�}x��olh�o�~�g���vxz\c�i?ol�T��g�h�i?ol{~Tc�h�k�}x��olh��,��z �nz^i?c�k�zNvxoD{%z\y w�gL},}�w�z0k�ol{%�?��z� F��}xf%oL~�}�w�z0k�olh�vx}���c�k�}:��oDh¡gLh�i%v���{%�?�¢�¢~Tf%��}�v£����oFo�~do�~9v:z^k�c��x��}¤fe?f¥vxw�oLy���h���}�w�gL}�}xy�o%��z��Pvx}�z�����z\��{�c�}�gL}x��olh�v�gL�nz vxc?¦¥kn��z\hF}�}�ol�lz\}�w�z\��y���}�w|��h?��}x�Pg`�*gLh�i�§�h�g`����g`�����Ty��PvxzO��h��i?z\��z\h�i?z\h?} ��z\��{�c�}�gL}x��olh�v\�,��w�z0��z\�D�Pvxz^i¡k�oDh�vx}���c�k�}x��olhXgLh�i����noFoL~�����oL�D�Pi?zNgN~¨��g�{%z\y�ol��m1��hXy w?�Pknw¥v¤��{©���PgL�k�olh�vx}n��c�k�}x��olh�v�{¡g`f%e�z e���oDc��lwF}�c��KgLh�i|}�w�z����Nv:z^k�c��x��}¤fXk\gLhXe�z z^glv��¢��fX����oL�lz^i��Z��z i?z\{%oDh�vx}���gL}nz1}�w?�Pv�eFf����z^vxz\h?}x��h��Xvxol{%z gli�iD��}x��olh�g��ªgli`«xc�vx}�{%z\h?}�v�oL~,}�w�z k�olh�v:}���c�k�}x��olhX}�w�g�}¬glknw?��z\�Dz }�w�z0~ToL�¢��o�y­��h���®

¯ j�z^i?c�k�z }�w�z�vxc�k\k�z^v�v����nole�gLe?�¢�¢��}xf'oL~ª}nw�z gli?�lz\��v�g���fl�

¯�° ��oL�D�±i?z|g�k�olh�vx}n��c�k�}x��olh�oL~ ��vxz\c�i?oD�T��gLh�i?ol{²��z\��{�c�}�gL}:��oDh�v1y���}�w´³¢µl¶T·l¸0��h���c�}%v���¹\z¡c�v¤��h��K��vxz\c�i?oD���gLh�i?ol{º~Tc�h�k�}x��olh�v y­��}nw�»\¼�µD³P³D��h���c�}Nv¤��¹\zl�

½�¾P¿`À¤Á`Â*ÃLÄx¿\ŬÆnÇ,ÅTÈ^Ä É0Æ�ÊTÊÌËsͬÎ�¿`Ï¥ÐdÆ�ÍTÄ ÑZÆnÒsÏ^ În¿�Ó�ÎnÊTÄxÄ¤Ê Ô9ÄxÕ�Ä�ÒsÆ�Ö^Â�Äx¿\Å Ó�È�Î:ËsÊx×�Ô�ÄxÖ`ÅxØ�Æ�Ç*ÙZÖ^ÖÚÒÛËsÄxÏ�É1Î�ÅTÈ`Ĥ ÎnÅÌËsÀxÍNÎn¿^ÏÓ�Æ�Â�Ö^Á^ÅTÄxÊ,Ü\À�ËsÄx¿^ÀxÄ�×�Ý Ä�ËsÞx­În¿^¿�¾Ì¿^ÍTÅÌËsÅTÁ`ÅTÄ�ÆnÇdÜÚÀ�ËsĤ¿`ÀxÄ�×�Ð�ÄxÈ^Æ�Õ�Æ�Å*ß�àÚá:â�âÚ×F¾ÌÍTÊ�Î�Ä�Ò�Ø*Ð�ÄxÍTÄ�Î�ÊTÀ�È ÍTÁ^Ö`ÖLÆ�ÊTÅTÄxÏ Ã\ã1ä�Ê�În¿\Å�¿`Æ^Ø*å�æ�à�ç�ènéÇ�ÊTÆ�Â=ÅTÈ^ÄZ¾ÌÍTÊ�Î�Ä�Ò2ÜÚÀ�ËsÄx¿`À¤Ä�ê`Æ�Á`¿^Ï�ÎnÅÌËsÆ�¿ Î�Ï`Â*Ës¿ÚËsÍTÅTÄxÊTĤÏ)Ã\ã�ÅTÈ^Ä,¾ÌÍTÊ�Î�Ä�ÒÛËFÙZÀ�Î�Ï`ĤÂëã ÆnÇìÜÚÀ�ËsÄx¿`À¤ÄxÍ,Î�¿`Ï Ã\ã¬í�Ü^ê©ä�Ê�În¿\Å�¿^Æ`ØAè�énî¨â�â�â�å�ï\Øð îÌ­Î:ËÛÒ�ñ�¿�ÎnÆ�Ê�òZó�ËsÍTÏ`Æ�Â0Ø óAÄ�ËsÞx Î�¿`¿lØÛÎ�À�Ø ËÛÒÌØô Ô�ÄxÖ^ÅxØ�Æ�Ç�ÙZÖ^ÖÚÒÛËsÄxÏ�É1Î�ÅTÈ`Ĥ ÎnÅÌËsÀxͬÎ�¿`Ï¥ÓdÆ�Â�Ö^Á`ÅTÄxÊ­ÜÚÀ�ËsĤ¿`ÀxÄ�×�Ý Ä�ËsÞx Î�¿`¿X¾P¿`ÍTÅÌËsÅTÁ^ÅTÄ1ÆnǪÜ\À�ËsÄx¿^ÀxÄ�×�Ð�ÄxÈ^ÆnÕ�Æ�Å ß�àÚá:â�âÚ×A¾ÌÍTÊ�Î�Ä�Ò�Øõ ÎnÊTÅ�Æ�Ç�ÅTÈÚËsÍ�ÊTÄxÍTÄ�ÎnÊTÀ�È0ódÎnÍ�ÍTÁ`Ö^ÖLÆ�ÊTÅTÄxÏ)Ã\ã¬Î�Ó�ÒsÆ�ÊTÄ*ÜÚÀ�È`Æ�Ò�ÎnÊTÍ*Îxó�Î�ÊTÏDØ ð îÌ­Î:ËÛÒ�ñ�ÊTÄ�Ës¿`ä�ÆnÒsÏ�òZódËsÍTÏ�Æ�Â0Ø ó�Ä�ËsÞx­În¿L¿lØÛÎ�À�Ø ËÛÒÌØ

Page 2: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

� ������������ ��������

° v:z\c�i?ol�T��gLh�i?ol{��z\��{�c�}�gL}:��oDh�v\�?y w?�Pk�wXy�z\��z0��h?}���o�i?c�k�z^i|eFfXb�c�e?f¥gLh�iXj�glk�mDoLp�qsr?t\u��D~Tol��{¡g`�¢��¹\z1}�w�z1y�z��¢�z^vx}�g�e?���Pvxw�z^i|k���f?��}�ol�l��gL��w?�Pk*h�oD}x��olh�oL~�e?��o2knm%kn����w�z\��v\���£��o2knm�kn����w�z\��v�gL��zë���x����gL}nz\�Tmlz\f�z\h�k���fF��}:��oDh¡v�knw�z\{%z^vvxc�knw�}�w�gL})}�w�z%z\h�k���f?��}x��olh=oL~ z\�lz\��fK�?�Pg`��hF}nz� 2}��Te?��o�k�m �±v�g'v���h��L��z¥kn����w�z\��}�z� �}��Te?��o�k�m��������F¸|»\µl¼�¸X³¢¸��?· ���F���w�z\��z�~Tol��z0y�zNk\g�hX}�w?��h�m¡oL~Z}�w�z1���x����gL}nz1mlz\f¡glv�i?z\}�z\��{©��h?��h��Xg)��z\��{�c�}�gL}:��oDh¡olh�v:}��x��h��FvëoL~�}�w�z���z\h��l}�wXoL~}�w�z)e?��o�knmA�"!�w?���Dw?��f���h$#�c�z\hF}x�Pg`�*z� �gL{%�?��z�oL~�g�e?��o�k�mKkn����w�z\�0�±v0}nw�z�%1gL}�g'&£h�k���fF��}:��oDh)(l}�gLh�i�gL��i �*%+&,(��q.- -`u���­w�z¥gli?�LgLh?}�gL�lz%o�~¬e?��o2knm kn����w�z\��v¥�¤k�ol{%��gL�nz^i�}�o'c�v���h�����vxz\c�i?ol�T��gLh�i?ol{²~¨c�h�k�}:��oDh�v)~¨oD� ���x����g�}�z\�Tmlz\f

z\h�k���f?��}x��olh��%�Pv'}�w�gL}X}nw�z��?�Pg`��hF}�z� �}�g�h�i$kn����w�z\��}�z� �} g���zKoL~�}�w�z=v�gL{%zK��z\h��l}nw�� ��w?�PvX���nol��z\��}xf$v�g`�lz^volh�{%z\{�ol��f�gLh�i�����z\�Dz\hF}�v©y­gDvx}x��h���k�ol{%{�c�h?�Pk\gL}x��olh e�gLh�i?y��Pi?}�w��$�ìc���}�w�z\��{%oD��zl�,��}|z\h�gLe?��z^v|}�w�zXz^glvxf��h�k�ol����ol��gL}x��olh'oL~,}�w�z1z\h�k���f?��}x��olh�v�knw�z\{%zO��h?}�o%z� ?�Pvx}x��h��|����ol}�o�k�oL�Pv�ol� w�g���i?y gL��z1k�ol{%��oDh�z\hF}�vÚ�

bdc�eFf gLh�i)j glknmloLp%i?z�§�h�z^i }nw�z�vxz^k�c��x��}xf1oL~���vxz\c�i?ol�T��g�h�i?ol{ ��z\��{�c�}�gL}x��olh�vA��h%gLh�g���oD�lf¬}no }�w�z�iD�¢p�z\��z\h?}gL}�}�glk�m�v�k�olh�v��Pi?z\��z^i¥��h'}�w�z�k�oDhF}�z� �}�oL~,e?��o�knm�kn����w�z\��v\®

¯�° vxz\c�i?ol�T��gLh�i?ol{(��z\��{�c�}�gL}:��oDh�v¬k\gLh'e�zO��h?}�z\�����nz\}�z^iKglv�e?��o2knm�kn����w�z\��v0}nw�gL}¬gL��z�vxz^k�c���z�gL�Fg`��h�vx}1gLhgli�gL��}x���lz0/1�2�L»\¸��4365A³¢µ 7��8�T¸19:�0µ �;�Tµ /=<L�?>�h?~Tol��{|g`�¢��fl�£}�w?�Pv {�z^gLh�v1}�w�g�}�gLh���z�¦¥kn��z\hF}\�1gli?�lz\��vngL��fl�Zy���}�wglk\k�z^v�v�}�o%}�w�z�z\h�k���f?��}x��olh�v�oL~*{%z^v�v�g��lz^v o�~���}�v1knw�oL�Pk�zl��k\gLh�h�ol} }nz�����g���gL��} }�w�o?vxz z\h�k���f?��}x��olh�v�~T��ol{}�w�z1��g`��c�z^v�oL~*g�}���c?��f|��gLh�i?ol{ ��z\��{�c�}�gL}x��olh��

¯ (l}���olh�����vxz\c�i?oD�T��gLh�i?ol{ ��z\�n{�c�}�gL}x��olh�v�k\g�h$e�z ��hF}�z\�n����z\}�z^i glvXe?��o�k�m kn����w�z\��v'}�w�g�}�gL��z�vxz^k�c��nzgL�Fg`��h�vx}�gLh$gli�g���}x���lz@/=�2�L»\¸��A5A³¢µ 7B�C�T¸=9D�%µ �8EF/�7G58�F¸`¶��T¸19:�%µ �;�TµH/=<��JI�z\��zl�0}�w�z�gli?�lz\��v�gL��f w�glv|}�w�zgli�iD��}x��olh�g`����o�y�z\� }no¡glvxm�~Tol� }nw�z i?z^k���fF��}:��oDh�oL~*kn����w�z\��}�z� �}�v o�~���}�v knw�oL�Pk�zl�

° vxz\c�i?ol�T��g�h�i?ol{ ��z\��{�c�}�gL}x��olh�v0gL��z�kn��oFvxz���f���z��PgL}nz^i���e�ol}�w���h i?z�§�h?��}x��olh=gLh�i|��hK}�w�z���� k�olh�vx}��nc�k�}x��olh��}�o)}�w�z z^gL�x�¢��z\� k�olh�k�z\��}�oL~���vxz\c�i?ol�T��g�h�i?ol{�~Tc�h�k�}x��olh�vëy w?�Pk�wXy glv,i?z�§�h�z^i|e?fLK¬oL�Pi?��z��Pknw��CK¬oL�Pi?y glv�vxz\��gLh�iM��Pk\g`�¢�OqONLt\u����­w�z^vxz¥g���z%z�¦¥kn��z\h?}x��f v�g�{%�?�PgLe?��z�gLh�i�k�oD{%��c�}�gLe?��z|~Tc�h�k�}x��olh�v�}�w�gL}�gL��z���h�iD�Pvx}x��h��lc?�Pvxw�g�e?�Pz~T��ol{���gLh�i?oD{ ~¨c�h�k�}x��olh�vëc�h�i?z\��g`�¢����z�¦¥kn��z\h?}\��e?�Pglknm?�Te�o` ¡gL}�}�glknm�vë�¤vxz\z+(lz^k�}x��olh|r0~Tol�*g�~¨oD��{¡g`�Ai?z�§�h?��}x��olh����° v:z\c�i?ol�T��gLh�i?ol{º~Tc�h�k�}x��olh�v��?�Pg`f¥g){¡g�«¤oD�,��oL��z0��hX���x����gL}�z\�TmDz\f¥k���f?��}�ol�D��gL��w?f©g�h�i|w�g^�Dz¬{¡g�hFf¡gDi�iD��}:��oDh�g`�gL���?�¢�Pk\gL}x��olh�v)�T~Tol� vxol{�z1oL~ª}nw�z^vxz gL���?�¢�Pk\gL}x��olh�v\��vxz\z%qON NL��N�P?��r QLu ���bdc�eFf�gLh�i=j glknmloLp$qsr?t\u*���no��D�Pi?z^i�g'k�olh�vx}��nc�k�}x��olh�o�~�v:}���olh��X��vxz\c�i?oD�T��gLh�i?ol{���z\�n{�c�}�gL}x��olh�v\�£�*R�SUT

VWYXdYÚ[^] Z�aL[�[OW�XZ��y�w?�±knwKy glv {�ol}x����gL}nz^iXe?fX}�w�z�vx}n��c�k�}�c���z)oL~\%+&](��A�­w�z e�glv��Pk)e�c?�¢�PiD��h��Ke?��o�k�m��±v�}�w�z�vxok\g`�¢��z^iX��z��Pvx}�z�����z\��{�c�}�g�}x��olh8^�e�glvxz^i©olh¡g1��v:z\c�i?ol�T��gLh�i?ol{º~Tc�h�k�}x��olhXi?z�§�h�z^i%e?f�}�w�z¬mDz\fl�ª�­w�z���� k�olh�v:}���c�k��}x��olh�k�olh�v¤�±v:}�v o�~�~¨oDc�� ��olc�h�i�v�oL~ª�ìz��±v:}�z�����z\�n{�c�}�gL}x��olh�vO��ol��}�w���z\z1��oDc�h�i�v\�?~Tol� ��vxz\c�i?ol�T��gLh�i?ol{ ��z\��{�c�}�gL�}x��olh�v���z^gDk�w���olc�h�iO��h?�loL���lz^v*g�h©g����?���Pk\gL}:��oDh%oL~dg)�xiD��p�z\��z\h?}\����vxz\c�i?ol�T��g�h�i?ol{ ~¨c�h�k�}:��oDhX�¤vxz\z �9���lc���zND�sg�~Tol�gLh|�¢�¢��c�vx}���gL}:��oDh������­w�z�b�j���_ëolh�vx}���c�k�}:��oDh�`sv�{¡g`��hKvxolc���k�z1oL~*gL}�}n��glk�}x��olh��Pv\��{�oFvx}�����ole�gLe?��fl�ì��}�v�z���z\�FgLh�k�zl�

K0oL�Pi?��z��Pk�w���K¬oL�Pi?y glv�vxz\� gLh�i?M��Pk\g`�¢��q6N�t uZvxw�oLy�z^i|g%k�olh�v:}���c�k�}x��olhXoL~Z��vxz\c�i?ol�T��gLh�i?oD{ ~¨c�h�k�}:��oDh�v�~T��ol{��vxz\c�i?ol�T��gLh�i?ol{ �Dz\h�z\��gL}�ol��v*q6NbaF� c4N�u��ª�­wFc�v\�L}nw�z­k�oDh�vx}���c�k�}x��olh�oL~���vxz\c�i?ol�T��g�h�i?ol{ ��z\��{�c�}�gL}x��olh�vZ��z^i?c�k�z^v}�o=}�w�z�k�oDh�vx}���c�k�}x��olh oL~ ��vxz\c�i?ol�T��gLh�i?ol{ �lz\h�z\��g�}�ol��v\�$j­z^k�z\hF}x��f´g�iD�¢p�z\��z\h?}�k�olh�vx}���c�k�}:��oDh�oL~ ��vxz\c�i?oD���gLh�i?oD{ ~Tc�h�k�}x��olh�v0y glvë��h?}���o�i?c�k�z^i�e?fed0gLol�0gLh�i�j�z���h��lo��±i q.-lr`ugf�}�w?�Pv��±v1g©��gL��g`�¢��z���k�olh�vx}��nc�k�}x��olhKe�glvxz^iolh�g�h�z\y3���x��{���}x���lz%k\g`�¢��z^iKg���v:z\c�i?ol�T��gLh�i?ol{ »ihD�8���?¸\»=76j\¸^¶,}nw�gL}ë��h'��gL��}x�Pk�c?�PgL�1k\gLh�e�z k�olh�vx}��nc�k�}�z^i|~T��ol{gLh?fK}���gL��i?oFol�1��z\��{�c�}�gL}x��olh��|��w?�Pv0��{%�?�¢��z^v%gX��g���g`�¢��z��­k�olh�vx}n��c�k�}x��olh=oL~���vxz\c�i?oD�T��gLh�i?ol{²��z\��{�c�}�gL}:��oDh�v\�d�z\�lz\��}�w�z���z^v�v\�ëg`�¢�­m?h�oLy h�k�olh�vx}���c�k�}:��oDh�v o�~¬��vxz\c�i?ol�T��g�h�i?ol{²~¨c�h�k�}x��olh�v���h?�loL���lz|h�olh��T}��:���D�Pg`� ��}nw�olc��lw�oL~k�olc���v:zX��oL��f?h�ol{��Pg`�¬}x��{%zL� k�ol{���c�}�gL}x��olh���vxo'��}%{¡gLmlz^v�vxz\h�v:zX}�o�gL}�}�z\{%��})}�oK{���h?��{���¹\z�}nw�z¡h?c�{�e�z\�%oL~��hF�Do2k\gL}:��oDh�v oL~Z��vxz\c�i?ol�T��gLh�i?oD{ ~Tc�h�k�}x��olh�v\�

k Ù�ê`Ä�ËsÍTÅTÄ�Ò�ÖLÄxÊTÂ*Á`Å�Î�ÅÌËsÆ�¿)Ç�Æ�Ê�ÎëÇ�Á`¿^ÀxÅÌËsÆ�¿ml)ñ n�â1o¤áqpsr�tuvn:â1oxá�psr0ËsÍ,Î�ÖLÄxÊTÂ*Á^Å�ÎnÅÌËsÆ�¿�Æ�¿'n�â=o�áqp�wgr0Ï^Äyx�¿`ĤÏ)Ã\ãz,{=|B}�o�~������O��|B~\o�}'��l$|B~��;��×�ó�È`ÄxÊTÄ�� }�� � � ~�� ��� Ø ð Î�À�È%ÆnÇ�ÅTÈ^Ä1á�à1ÊTÆ�Á^¿`Ï^Í�ÆnÇ£Ô ð ÜOËs¿\Õ�Æ�ÒsÕ�ÄxÍNÎ1ê`Ä�ËsÍTÅTÄ�Ò�ÖLĤÊTÂëÁ^Å�ÎnÅÌËsÆ�¿|ÆnǪÎ�Ç�Á^¿^ÀxÅÌËsÆ�¿Ï^ÄxÅTÄxÊTÂëËs¿^ÄxÏ Ã\ã�ÅTÈ^Ä*æ�à���Äxã¬ÃÚËsÅTÍxØ

N

Page 3: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

!���olh��Fv��Pi?z¡k��nfF��}�oD�l��gL��w?�Pk)��vxz\c�i?ol�T��g�h�i?ol{%h�z^v�vO}�w�z)�±gDvx}1}xy�oXi?z^k\gli?z^v1v�g`y }�w�z¡i?z\�lz���ol��{�z\hF}1oL~�}�w�zh�ol}x��olh'oL~Z����{���}�z^i���h�i?z\��z\h�i?z\h�k�z%��h'��gL�x��olc�v1v:z\}�}x��h��¡gLh�i¥~¨ol�n{�c?�PgL}:��oDh�v q.-?������N�-?��N�����r c��C- NL� c a`u�����oD�¬g~�gL{��¢��f�o�~*~Tc�h�k�}x��olh�v�� }�oXw�g`�lz%vxoD{%z%vxol��}1oL~0�T�¢��{���}�z^i�� ��h�i?z\��z\h�i?z\h�kÚzX{%z^gLh�vO}�w�gL}���~ y�z%k�olh�v��Pi?z\��}�w�z��g���c�zXo�~Ng�~¨c�h�k�}x��olh��Z�*knw�oFvxz\h�c�h?�¢~Tol��{���f�gL} ��gLh�i?ol{²~¨�nol{����,gL} z^glknw=��oL��h?}¡glv�g'��gLh�i?ol{���g��x�PgLe?��z�T��hX}�w�z1����oDe�gLe?�¢����}xf�vx��glk�z i?z�§�h�z^i�eFfXknw�oFoFv¤��h������,}�w�z\hX}nw�z^vxz1��gLh�i?ol{��gL�x�PgLe?��z^v���oFvnvxz^v�v�}�w�z0����ol{©�±v:z^i��h�i?z\��z\h�i?z\h�k�z'����ol��z\�n}¤fl�)��wFc�vÚ��g�~ gL{©����fKoL~���z\��{�c�}�gL}:��oDh�v0olh:a���N� ��%�Pv0��g`�����Ty­�±v:z���h�i?z\��z\h�i?z\h?}��¢~�~Tol�g`�¢�������� }�w�z���g`��c�z^vOoL~��9�����¬gLh�i��9� � �¬g���z c�h?�¢~Tol��{���f�iD�Pvx}��x��e�c�}�z^iKoL�lz\�1vx}��:��h��?v)�������`����:a���N� ! � vxc�knw}�w�gL}��"�� �L�0��c�h�k�}x��olh�v0oL~,�¢��{���}�z^i'��h�i?z\��z\h�i?z\h�k\zXgL��z }xf?�?�Pk\g`�¢��fK{�c�knw�v���{%�?��z\� }no¥k�olh�v:}���c�k�}1gLh�i'z^glv���z\�}�o¡k�oD{%��c�}�z1}�w�gLhK�xk���fF��}nol�l��gL��w?�Pk`�*��v:z\c�i?ol�T��gLh�i?ol{ ~¨c�h�k�}x��olh�vÚ�

#%$&# '(�)+*"(�,!-/.102,436587:9<;2=%365/>@?�3�02>@A%5��w�z1�lo?g`�AoL~�}�w?�Pv���g���z\���Pv�}�o)����oL�l�Pi?z g)e�z\}n}�z\��c�h�i?z\��vx}�gLh�iD��h��|oL~�}�w�z1b�j���_ëolh�vx}���c�k�}:��oDh�gLh�iXglv�g)��z^vxc?��}��{%����oL�lz)}�w�z k�olh�vx}��nc�k�}x��olhX��h�vxz\�lz\��g�����z^vx��z^k�}�v\�CB c��1{¡g`��h�ole�v:z\����gL}:��oDhX�Pv }nw�gL} }�w�z�iD��p�z\��z\h?}0��olc�h�i�v�oL~}�w�z b�j­��_*olh�vx}��nc�k�}x��olh�vxz\�n�lz v����lh?�¢§Ak\gLh?}x��f�iD�¢p�z\��z\hF}���oL��z^v\�,��z v:w�o�y´}�w�g�} }�w�z0§���vx} gLh�i¥�Pglvx} ��oDc�h�i�v k\gLhe�z)��z\�?�Pglk�z^iXe?f|��g`�����Ty��Pvxz)��h�i?z\��z\h�i?z\h?}1��z\��{�c�}�gL}:��oDh�v gLh�iXc�v:z1}�w?�Pv���h�oD��i?z\� }�o�®

ND�,!Nknw?��z\�lz�gLh ��{�����oL�lz\{%z\h?}1��h�}�w�zXk�ol{%��c�}�gL}:��oDh�g`�­k�ol{��?��z� ?��}xf�oL~0}�w�z¡��v:z\c�i?ol�T��gLh�i?ol{���z\��{�c�}�gL�}x��olh�vED }xy�o1gL���?�¢�Pk\gL}x��olh�vëoL~�g0��vxz\c�i?ol�T��gLh�i?oD{ ~¨c�h�k�}x��olh|olhGF�e?��}�v*vxc?¦¥k�z­~¨ol�,k�ol{%��c�}:��h��)}�w�z �Lg`��c�zoL~¬g���v:z\c�i?ol�T��gLh�i?ol{���z\��{�c�}�gL}x��olh=olh�r2F�e?��}�v�gL}%gX�����Dz\h���oL��h?}¡���2v\��~Tolc��%gL���?�¢�±k\g�}x��olh�v)��h�}�w�zol�x���L��h�g`�ªb�j­��_*olh�vx}��nc�k�}x��olh����

rì� (L��{��?���¢~Tf�}�w�z|����oFo�~¬oL~Nvxz^k�c��:��}xf�o�~¬}�w�zXk�olh�vx}���c�k�}:��oDh���z^v:��z^kn�Pg`�¢��f���h�}�w�zXk\glvxz|oL~Nvx}��nolh�����vxz\c�i?oD���gLh�i?ol{ ��z\�n{�c�}�gL}x��olh�v���g�h�i|����oL�l�Pi?z g)~T��gL{%z\y�ol�nm ~Tol� ���no��D��h��%}�w�z vxz^k�c��:��}xf|oL~*v���{��¢�±g��Nk�olh�v:}���c�k��}x��olh�v\�

-ì� %0z\�x���lz �lz\h�z\��g`�¢��¹^g�}x��olh�v0oL~,}�w�z�k�olh�v:}���c�k�}x��olh'}�w�gL}¬gL�nz oL~,����glk�}x�Pk\g`�*gLh�i�}�w�z\ol��z\}x�Pk\g`�9��h?}�z\��z^v:}^� ��w�z����oFo�~­o�~�v:z^k�c��x��}¤f ~Tol� z^glknw=olh�z¡o�~­}nw�z¥k�olh�v:}���c�k�}x��olh�vO�Pv)����glk�}x�Pk\g`�¢��fIH�~¨��z\z|oL~¬knw�gL���lz�J'�L���lz\h=}�w�z����oFo�~�oL~*vxz^k�c��x��}xfXoL~ª}nw�z1{¡g`��h�k�olh�vx}��nc�k�}x��olh��

!1v iD�Pv�k�c�v�v:z^i|��h (lz^k�}x��olh c��sr��D}�w�z1h�z\y�k�olh�vx}���c�k�}:��oDh|�±v���h�~ gDk�}­g©�lz\h�z\��g`�¢��¹^gL}x��olh'oL~ª}nw�z1ol�x���L��h�g`�ªb�j­�_*olh�v:}���c�k�}x��olh�� ��w?c�v\��}�w�z ���noFoL~*o�~�vxz^k�c��x��}xfK�¤��w�z\ol��z\{ -��sr2��g`�PvxoXgL���?�¢��z^v0}no¡}�w�z)ol�x���L��h�g`�*k�olh�vx}��nc�k�}x��olh����w�z0~ToL�¢��o�y­��h����Pv¬g©e��x��z�~�gLh�i���h?~¨ol�n{¡g`�ªi?z^v�k��:����}:��oDh�o�~�}�w�z ��g���z\��`sv­{¡g`��h���z^v:c?��}�v gLh�i|ol���?gLh?��¹^gL}x��olh�®K6L2aL[�[OW�XNM j�z\�D��z\y¬v)}�w�z%h�ol}�gL}x��olh�v g�h�i�i?z�§�h?��}x��olh�v���z\�Fg���iD��h�����vxz\c�i?ol�T��gLh�i?ol{%h�z^v�v�gLh�iO?�Ty��Pvxz���h�i?z\�

��z\h�i?z\h�k�zl�K6L2aL[�[OW�XQP ° ��z^vxz\h?}�v�}�w�z�{¡g`��h�k�olh�vx}n��c�k�}x��olh�g�h�i����no��Dz^vë��}�v1vxz^k�c��x��}xfA®���g����n�Ty��Pvxz���h�i?z\��z\h�i?z\h?} ��z\��{�c��

}�gL}x��olh�v�k\gLhX��z\�?�Pglk�z1}nw�z0§���vx} gLh�i�~Tolc���}�w|��olc�h�i�v�o�~�}�w�z b�j���_ëolh�vx}���c�k�}:��oDhK�¤vxz\z �9���lc���zmNl� e%~Tol� gLh���¢��c�vx}���gL}x��olh����

K6L2aL[�[OW�XSR I­���lw?�¢���DwF}�v�}�w�z1w?���lw��Ì��z\�lz��*vx}���c�k�}nc���z¬o�~ª}�w�z1���noFoL~ZoL~£v:z^k�c��x��}¤f|y w?�Pknw�����oL�D�±i?z^v�g1~T��gL{�z\y�oD��m}�w�gL}�z\h�gLe?��z^v c�v�}�o���z��Pg` �gLh�i|�Dz\h�z\��g`�¢��¹\z�}nw�z1{¡g`��h�k�olh�v:}���c�k�}x��olh��

K6L2aL[�[OW�XNT (lw�oLy¬vëw�oLy$}�w�z1{¡g���hKk�olh�vx}��nc�k�}x��olh�k\gLhXe�z ��z��Pg` �z^iXe?f�®TVU1W�X0v���h��¥g�v���h��L��z ��vxz\c�i?ol�T��gLh�i?ol{~¨c�h�k�}x��olh �T��h�vx}�z^gli|o�~ª}xy�o��*gLh�iTVUYMZX0v���h���y�z^gLmlz\�XgLh�i {%ol��z'z�¦¥kn��z\hF}X��z\��{�c�}�gL}x��olh�v���ol��~¨c�h�k�}:��oDh�v�����h�vx}�z^gli oL~ }�w�zK��g`�����Ty­�±v:z

��h�i?z\��z\h�i?z\hF}1��z\��{�c�}�gL}x��olh�v�

r

Page 4: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

K6L2aL[�[OW�X�� ° ��oL�l�Pi?z^v�g�v���{%�?��z'�lz\h�z\��g`�¢��¹^gL}x��olh�oL~0}�w�z¡{|g`��h k�olh�v:}���c�k�}x��olh�®�c�v���h����1��olc�h�i�v)oL~ ���lz\h�z\���g`�¢��¹\z^i�����z��Pvx}�z�� ��z\�n{�c�}�gL}x��olh�v��T��h�vx}�z^gli oL~¬}xy�o�� }�w�zXvxc�k\k�z^v�v©����ole�gLe?�¢�¢��}¤f=oL~ }�w�zXiD�Pvx}x��h��lc?�Pvxw�z\���±v��z^i?c�k�z^i�~¨�nol{ gL������o` F��{¡g�}�z���f�� w ��� w }�o%gL������o` F��{¡g�}�z���f� � � w �� k�� k ������� �?y w�z\��z1}�w�z1��z\��{�c�}�gL}x��olh|�Pv�olh��e?��}�v gLh�iX}nw�z iD�±v:}x��h��lc?�Pvxw�z\�1{¡gLmlz^v�gL}�{%oFvx}�� �Dc�z\�x��z^vO�¤vxz\z �9���lc���z'-1~Tol�¬g�h|���¢��c�vx}���gL}x��olh����

K6L2aL[�[OW�X�� ° ��oL�l�Pi?z^v0g%vxz^k�olh�i'�lz\h�z\��g�����¹^gL}:��oDh�o�~*}�w�z {¡g���hKk�olh�vx}��nc�k�}x��olh�� >�h�vx}�z^gli�oL~£g����?��fD��h����ìz��±v:}�z����z\��{�c�}�gL}:��oDh�v olh'}�w�z z\h?}x����z�olc�}���c�}�v oL~,}�w�zO§���vx}1gLh�iKvxz^k�olh�iX�nolc�h�i�v\����z��Pvx}�z��*��z\��{�c�}�gL}x��olh�v0k\gLhe�z�v:z\��gL��gL}�z���f�gL���?�¢��z^i´olh�z^glknw�olh�zXo�~N}�w�z����Xvxc�e��Te?��o2knm�v\�$��w?�Pv��Pv|g�k�olh�vx}n��c�k�}x��olh�o�~Og�v:}���olh����vxz\c�i?ol�T��gLh�i?oD{ ��z\��{�c�}�gL}x��olh'olh�³¢µl¶T·l¸0e?��o�k�m�v0c�v���h��¡��v:z\c�i?ol�T��gLh�i?ol{(~Tc�h�k�}x��olh�v0olh » ¼�µl³Ì³?e?��o2knm2v�¤vxz\z �9���lc���z���~Tol�¬g�h|���¢��c�vx}���gL}x��olh����

K6L2aL[�[OW�X�� !0h�g`��fF¹\z^v£}�w�z iD�¢pdz\�nz\hF}*k�olh�v:}���c�k�}x��olh�vZoL~�}�w�z���gL��z\�*gDv,k�olh�vx}���c�k�}:��oDh�vZoL~ O?�Ty��Pvxz��`��i?z\��z\h�i?z\h?}��z\��{�c�}�gL}:��oDh�v\�

K6L2aL[�[OW�X�� (lc��l�Dz^vx}�v�iD����z^k�}x��olh�v�~Tol�ë~¨c���}nw�z\� ��z^vxz^gL��k�w��

#%$! *"(�.&3�0�(�7�" A%;$#��w�zKb�j���_*olh�v:}���c�k�}x��olh ��h�v:�?���nz^i7g k�olh�v��Pi?z\��gLe?��z�gL{%olc�h?}%oL~0��z^vxz^gL��knw�����z'}���f=}�oK��z�~Tz\�%}�o�}�w�zX{�ol��z��z���z\��g�hF})��}�o�}�w?�Pv���gL��z\�\��gL��} oL~Z}�w�z^vxz�iD����z^k�}:��oDh�v\�

(lz\�Dz\��g`�*g`��}�z\��h�gL}x���lz�����oFo�~ v0oL~*}nw�z¡b�j���_*oDh�vx}���c�k�}x��olh y�z\�nz����nz^vxz\hF}nz^iKoL�lz\�¬}nw�z�fDz^gL��v\�'MKgLc���z\��qsr&%`u�L���lz^v�g'����o?oL~¬oL~ }�w�z|}�w���z\z\�T��oDc�h�i�k�olh�vx}���c�k�}:��oDh�� I��Pv)����o?oL~Nk�olh�k�z\h?}���gL}nz^v oDh�}�w�z|h�olh���gli�g���}x���lz¥k\gDvxzl����Ûzl���ëy w�z\h�}�w�z�iD�Pvx}x��h��lc?�Pvxw�z\�Xw�gDv�}�o�vx��z^kn�¢~Tf�g`�¢� ��}�v%�Dc�z\�x��z^v���h´gli?��gLh�k�zl� !(��oL��h?}¡y�ol�n}�w�h�oD}x�Pkn��h�� �±v}�w�gL}Z��h�iD�Pvx}x��h��lc?�Pvxw�g�e?������}xfXc�h�i?z\��h�oDh���gli�gL��}x���lz¬g�}�}�glknm2v,i?o?z^vëh�ol}*h�z^k�z^vnv�gL�x�¢��f���{%�?��f%��h�iD�Pvx}x��h��lc?�Pvxw�g�e?���±�P}xfc�h�i?z\� gli�gL��}x���lz0gL}�}�glknm�v\���ìol�*z� �gL{%�?��zl��g0��gLh�i?ol{ ��hF�lo���c�}:��oDhK�¤gLh)��hF�lo���c�}:��oDh|�±vëg1��z\��{�c�}�gL}x��olh%y�w?�±knw��±v}�w�z)��hF�Dz\��vxz�oL~,��}�vxz��¢~^�¬gLh�i'g|��gLh�i?ol{(��z\�n{�c�}�gL}x��olh�g���z)��h�iD�Pvx}:��h��Dc?�±v:w�gLe?��zXc�h�i?z\�1h�olh���gli�gL��}x���lz%gL}n}�glknm2vgLh�i�k\g�h�e�zXiD�Pvx}x��h��lc?�Pvxw�z^i=c�v���h���g|�lz\��f�v���{%�?��zXgli�gL��}x���lz¡g�}�}�glknmA� ! iD�¢pdz\�nz\hF}�gL������oFglknw�}�oLy gL��i�}�w�z����o?oL~1y­gDv%i?z^v�k��x��e�z^i eFf ° gL}�gL�:��h$q - c`u ��}nw?�±v��±v�}�w�z'olh?��f���c�e?���Pvxw�z^i ����oFo�~:��y�z�gL��z�g`y gL��zXo�~:�£~¨oD�%}�w�zb�j���_ëolh�vx}���c�k�}:��oDh�oL~�»i�T¶�� �?·0��vxz\c�i?ol�T��g�h�i?ol{ ��z\��{�c�}�gL}x��olh�v1f�gLh�ol}�w�z\������o?oL~,y glv��L���lz\hXe?f('0oD��z\h�qsrH-^u ���

B }nw�z\�,��gL��z\��vëk�olh�v��Pi?z\�*}nw�z­v:z^k�c��x��}¤f�oL~���oFvnv���e?��z0��g��x�PgLhF}�vZoL~A}�w�z k�olh�v:}���c�k�}x��olh���!7v¤���Dh?��§Ak\g�hF}���oD��}x��olhoL~¬}nw?�±v©��z^vxz^gL��knw�i?z^g`�Pv�y���}�w=}�w�z�k�olh�vx}��nc�k�}x��olh�o�~¬��vxz\c�i?ol�T��g�h�i?ol{ ��z\�n{�c�}�gL}x��olh�v�gLh�i�vx}��nolh�����vxz\c�i?oD���gLh�i?oD{ ��z\��{�c�}�g�}x��olh�v�~T��ol{�g=»i7��F·D³¢¸���vxz\c�i?ol�T��gLh�i?oD{ ~Tc�h�k�}x��olh��$��w?�Pv©����h�z�o�~Ny�ol��m �±vXi?z^vnk��x��e�z^i ��h(lz^k�}x��olh c��6Nl�bdc�k�m�v�qsr PLu�v:w�o�y0v�}�w�g�}*g0w�glvxw�~Tc�h�k�}x��olh¡k\gLh���z\�?�Pglk�z }�w�z ��v:z\c�i?ol�T��gLh�i?ol{ ~¨c�h�k�}:��oDh���h%}�w�z�§���v:},��olc�h�i

oL~,}�w�z1}�w���z\z\�T�nolc�h�iXb�j���_*oDh�vx}���c�k�}x��olh��,I­�±v�����o?oL~��Pv�e�glvxz^i|olh�qsr$%^uZgLh�i��Pv {%oD}x����gL}�z^i|e?f|w?�±v0vxc��l�Dz^vx}x��olh}�o%c�v:z }�w�z b�j­��_*olh�vx}��nc�k�}x��olhKy w�z\h�}�w�z0��h���c�}0�Pv0iD���D�Pi?z^i���h?}�o|}xy�o*)$��¸,+-)?µl³?��gL��}�vÚ�*b�c�knm2v­��z�~¨}0ol��z\h'}�w�z�Dc�z^vx}x��olh�o�~ª}�w�z k�oDh�vx}���c�k�}x��olhXo�~£vx}n��olh�����vxz\c�i?ol�T��g�h�i?ol{ ��z\��{�c�}�gL}x��olh�vÚ�

(loD{%z\y w�gL}�iD��p�z\��z\h?}¡�Dc�z^vx}x��olh�v�y�z\��zXk�olh�v��Pi?z\��z^i=e?f)&£�lz\h�gLh�i M�g�h�vxolc��Xq6N�c`u gLh�i eFf.'��¢�¢�PgLh$gLh�ij�ol�?g^y g`f�qsrlr`u���b�o?oFvxz���f�vx��z^g�ml��h����Z}�w�z)~Tol��{%z\� k�olh�v:}���c�k�} vxz\�lz\��g`�*��vxz\c�i?ol�T��g�h�i?ol{ ��z\��{�c�}�g�}x��olh�v0~T��ol{g%v���h��L��z%oDh�zl��y w?�¢��z%}�w�z0�PgL}�}�z\�1vxw�oLy$w�oLy$}�o|{¡gLmDz1z� 2w�gLc�v:}x���lz mlz\f?��vxz^gL��k�wKgL}�}�glknm�v*{�ol��z�iD�¢¦¥k�c?��}^�0��w�zk�olh�vx}n��c�k�}x��olh���}�vxz��¢~ªg�{%olc�h?}�v\�`��h¡e�ol}�w¡k\gDvxz^v\�L}�o0/�B¬jë��h���}�w�z���h���c�}*oL~�}�w�z���vxz\c�i?ol�T��gLh�i?oD{ ��z\�n{�c�}�gL}x��olhy���}�wKg ��gLh�i?ol{ mlz\fXgLh�i1/�B¬jë��h��¡}nw�z1olc�}���c�} oL~,}�w�z1��z\��{�c�}�gL}x��olh'y���}�w�g%vxz^k�olh�i���gLh�i?ol{mlz\fl��­w�z e�glknmF�D��olc�h�i�g�h�iX��z��PgL}�z^i�y�ol��mXk�olh�k�z\��h?��h���ol}nw�z\� ��z���z\��gLh?}0�Pv�vxc�z^v1gL�nz�iD�Pv�k�c�v�vxz^i���hK}�w�z�g�������ol�

���x�PgL}�zXvxz^k�}x��olh�vÚ®m%0z�§�h?��}:��oDh�v%gLh�i=k�olh�vx}���c�k�}:��oDh�v o�~­z�¦Xkn��z\h?}�w�glvxw ~¨c�h�k�}:��oDh�v1��h�(lz^k�}x��olh�cì�sr����nz^i?c�kn��h��}�w�zXiD�Pvx}x��h��lc?�Pvxw?��h������nole�gLe?�¢�¢��}xf ��h�(lz^k�}x��olh�Q'gLh�i }�w�z¥k�oDh�vx}���c�k�}x��olh=oL~ ��vxz\c�i?ol�T��gLh�i?ol{���z\��{�c�}�g�}x��olh�v��ol�O~¨c�h�k�}:��oDh�v��1y���}�w��PgL�n�lz%��h���c�}¡v¤��¹\z�~T��ol{���v:z\c�i?ol�T��gLh�i?ol{���z\��{�c�}�gL}x��olh�v���ol�O~¨c�h�k�}:��oDh�v��1y���}�w v:{¡g`�¢���h���c�}Nv¤��¹\zO��h (lz^k�}x��olh tF�

w Ù�¿)ĤÕ�Äx¿�Â�Æ�ÊTÄ�ÍTÅTÊÌË.��Ës¿^ä)Ä32^ÎnÂ�Ö\ÒsÄ�ËsÍëÆ�Ã`Å�ÎxËs¿`ÄxÏ%Ã\ã1ÀxÆ�Â�Ö�ÎnÊÌËs¿^ä�Î Ê�În¿^Ï`Æ�Â3Ö�ÄxÊTÂëÁ^Å�ÎnÅÌËsÆ�¿54 ÅTÈ�ÎnÅ*Í�ÎnÅÌËsÍ�x�ÄxÍ64�|74�|Pâ��;� � âó�ËsÅTÈ1ÎëÅTÊTÁ\Òsã0Ê�Î�¿`Ï^Æ�Â�ÖLÄxÊTÂ*Á^Å�ÎnÅÌËsÆ�¿lØ

-

Page 5: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

� �������=��� �q�� ������

>�h´}�w?�Pv|vxz^k�}x��olh���}�w�z�k�olh�k�z\��}�v%oL~ ��v:z\c�i?ol�T��gLh�i?ol{ ~Tc�h�k�}x��olh�vXgLh�i���v:z\c�i?ol�T��gLh�i?ol{���z\�n{�c�}�gL}x��olh�v|gL��ze��x��zq#�f=��z\�l��z\y�z^i�� ! {%ol��z|}�w�ol�nolc��lw�gLh�i ~Tol��{¡g`�*}n��z^gL}�{%z\h?}�k\g�h�e�z|~¨olc�h�i ��h7qON�Q���rHQ^u��0>�h gli�iD��}x��olh��vxol{�z1e�glv��Pk1h�ol}�gL}x��olh�v gLh�iXi?z�§�h?��}x��olh�v1g���z0��hF}��no2i?c�k�z^i��

$&# 'A6023�0�>&A%58,

¯� � i?z\h�ol}�z^v�}�w�z vxz\} o�~£g`�¢� F��Te?��}1vx}��x��h��Fv\� :a���N� ��F�¯�� � i?z\h�ol}nz^v }�w�z�vxz\}0oL~�g`�¢� ���� � ~¨c�h�k�}x��olh�v1g�h�i�� � i?z\h�ol}�z^v0}�w�z�vxz\}¬o�~�g`�¢�£vxc�knwK��z\��{�c�}�g�}x��olh�v��� ��� � � ���¯ b�z\}��%g�h�i � e�z }xy�o1e?��}�vx}��:��h��?v,oL~�z^�lc�g`����z\h��l}�w��l}nw�z\h ��� � i?z\h�oD}�z^v,}�w�z����ëe?��}n�TeFf?�Te?��}�z� �kn��c�v����lz\�Tol�^�¯ ��ol� gLh?f �����4� � � i?z\h�ol}nz1eFf4�����¥}nw�z����0k�ol{%��o?v���}x��olh=�T���Ûzl���������A� ��� � �9���A� ���������¯ ��ol� ��� � ��i?z\h�oD}�z1eFf4��� |}nw�z1§���vx}0�T��z�~T}\��FKe?��}�v­oL~ �'gLh�iXe?f4��� !'}�w�z0�Pglvx}1���x���lwF}Ú��F'e?��}�v oL~8���

"�L$# X�[�[�[OW�XNMVU1W&%'EL [ÌY\[ L)(+* L�]$, ZA[\_�[�[OW�X�Y.-&/��l¶0µ �8h]� )$�8/b�;7B� ���"� � �10 ³¢¸��32�4 �5� �76 ¸���F¸"5�¸^¶�¼ )$�TµD3�;7�� � El¸�8,��¸qE 6 h92:4D��; �=<)�?>�@BA� ��< �;C���9��<)��� 0�D �F¸^¶x¸:EF;GE � EF<:E � F�HJI

d�ol}x�Pk�z|}�w�gL}%��z��Pvx}nz��­��z\��{�c�}�gL}x��olh�v�gL��zXglv)z^glvxf�}�o'��h?�lz\��}%glv)}�w�z\f�gL�nz¡}�o�k�ol{���c�}�z��xv���h�k�z�}�w�z���h���lz\��v:z���z\��{�c�}�g�}x��olh vngL}x�Pv�§�z^v&2LK ^4 ��;C�<)� � ��<M���9��;�� �=;���f)}�w�gL}��Pv\�N2OK ^4 ��; �=<)�&PRQ&�92:4��9Q�~Tol�Q���; �=<)�S>�@BA� ��< �=;��������­w�z\��z�~¨oD��zl�*}nw�z�b�j���_*olh�v:}���c�k�}x��olh3�¤gLh�i ��}�v%iD�¢p�z\��z\h?}%��gL�:�±g�hF}�v©y w?�Pk�w´gL��z|��hF}n��ol�i?c�k�z^i|��h (lz^k�}x��olh�v�Q�T tl�*gL��z1z^gDvxf¡}no���hF�lz\�n}^�

$! UG, (�-878AWV *"36587/A�X 58(�, ,° v:z\c�i?ol�T��gLh�i?ol{�h�z^v�vZ�Pv£~¨c�h�i�g�{%z\hF}�g`�A}�o k��nfF��}�oD�l��gL��w?f�gLh�i��D��h�i?z\z^i���z^v�v:z\hF}x�Pg`����h|ol��i?z\�ë}�o ��z\�x~¨oD��{ vxc�knw}�glv:m2v gDv�z\h�k���f?��}x��olh��Ag�c�}�w�z\hF}:�±k\g�}x��olh�gLh�i|�Pi?z\h?}x�¢§Ak\gL}x��olh��¬bdoFoFv:z���f�v:��z^gLmD��h�������v:z\c�i?ol�T��gLh�i?ol{ iD�Pvx}��x��e�c��}x��olh�v�k\gLh�h�ol}�e�z¬z�¦¥kn��z\h?}x��f¥iD�Pvx}:��h��Dc?�±v:w�z^iX~T��ol{º}�w�z0}���c?��f%��gLh�i?oD{ iD�Pvx}n�x��e�c�}x��olh�v0��c�vxc�g�����fl����gLh�i?ol{ w�z\��z{%z^gLh�v�c�h?�¢~¨oD��{X��� I oLy�z\�lz\�^�ë}�w�z���v:z\c�i?ol�T��gLh�i?ol{ iD�Pvx}��x��e�c�}x��olh�v�w�g`�lz�vxc�e�v:}�gLh?}x�Pg`�¢��f´vx{¡g`�¢��z\�Xz\h?}���ol�?f}�w�gLhX}nw�z1}���c?��fX��gLh�i?ol{(iD�±v:}��x��e�c�}x��olh�v0gLh�i�gL�nz1z�¦¥kn��z\hF}x��f�v�g�{%�?�PgLe?��zl�

MVUYM6U1W Y9ZVL�][Z�[ L]\ W1^_*)Y LCZW`YW8TsS�_�XW`YW�,a*)]:[B,A[±[�[bZVL�Y>�h�}nw�z¥k\glv:z¡oL~_cZY LCZW`YW8T�]`_�X�`�Wd, %�W�[�[.-5e�L8X6L�]^_�[=W�]LYl�,y w?�Pknw�y�z\��z���hF}n��o2i?c�k�z^i=e?f)�£��c�{ gLh�i@M��Pk\g`�¢�gLh�i�f*gLoXq6N�a?� c N�u��?}�w�z0��vxz\c�i?ol�T��gLh�i?oD{ iD�Pvx}n�x��e�c�}x��olhX�PvëoL~�e?��}���vxz^�Dc�z\h�k�z^v\����w�z1iD�±v:}��x��e�c�}x��olhX�Pv�z�¦Xkn��z\h?}x��fv�gL{��?��z^i)c�v���h���g��L��z��PgL}x���lz���f�v:{¡g`�¢���l}���c?��f)��gLh�i?ol{ e?��}���vxz^�Dc�z\h�k�z ��}nw�z�vxz\z^i�����I0glvx}�gDi���>�{%��gL�L�¢�PgL¹\¹\o���b�z\�D��hgLh�i�b�c�e?f$qsr N�u vxw�oLy�z^i=w�oLy }no�k�olh�vx}��nc�k�}©g ��vxz\c�i?ol�T��gLh�i?oD{ �lz\h�z\��gL}nol�)~¨��oD{ g�hFf=olh�z\�Ty g`fK~¨c�h�k�}:��oDh�T��h?~Tol��{¡g`�¢��fl��g)~¨c�h�k�}:��oDhX�Pv�olh�z\�Ty g`f%�¢~,��}��Pv�z^glvxf|}�o%k�ol{%��c�}�zO��}�v���g`��c�z)e�c�}¬w�gL��i|}�o���hF�Dz\��}���}\���

*)Y LCZW`YW8T�]`_�X�`�Wd,g^ Z�X�aL[�[OW�X LCX�Y Lh,�W3( L2YO%*N'�ij-^�9y w?�Pk�w=y�z\��z���hF}n��o2i?c�k�z^i e?f)K0oL�Pi?��z��Pk�w��]K¬oL�Pi?�y glv�vxz\�,gLh�i'M��Pk\g`�¢��q6NLt\u��LgL��z iD�Pvx}��x��e�c�}x��olh�v£oL~�~¨c�h�k�}:��oDh�v\�*��w�z^vxz iD�Pvx}��:��e�c�}:��oDh�v*gL��z£��h�iD�±v:}x��h��lc?�Pvxw�gLe?�Pz0~T��ol{}�w�z0c�h?�¢~¨ol�n{ iD�Pvx}n�x��e�c�}x��olhXc�h�i?z\� g`�¢�ª����oL��f?h�ol{��Pg`�¢��fF�Te�olc�h�i?z^i���e?�Pglknm?�Te�o` �g�}�}�glknm2vë� � � zl�l}�w�z1iD�Pvx}x��h��lc?�Pvxw�z\�k\gLh=olh?��f�glk\k�z^v�vO}�w�z�~¨c�h�k�}x��olh=e?f v:��z^kn�¢~¨fD��h�����h���c�}�v�gLh�i �lz\}�}:��h��'}�w�z|��g`��c�z|oL~ }�w�z%~Tc�h�k�}x��olh=olh=}�w�z^vxz��h���c�}�v����"K¬o��±i?�nz��±knw��YK¬oL�Pi?y glv�vxz\�0gLh�i?M��±k\g����,����oL�D�±i?z^i'g%k�olh�vx}n��c�k�}x��olh�o�~£vxc�knwX~Tc�h�k�}x��olh�v�e�glvxz^i�olhX}�w�zz� ?�±v:}�z\h�k�z oL~,��vxz\c�i?ol�T��gLh�i?ol{(�lz\h�z\��gL}�oD��v\�k z�ÍTÅ�În¿^Ï^Í9Ç�Æ�Ê�Ô ð Ü î�ÒÛË.��Ä�×�Î�¿`Æ�ÅTÈ`ĤÊZÀxÆ�Â�Â�Æ�¿¬ÅTÄxÊTÂ=Ç�Æ�Ê9ÅTÈ^ÄxÍTÄ,ÖLĤÊTÂëÁ^Å�ÎnÅÌËsÆ�¿`ÍxØ

Page 6: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

bdc�eFf�gLh�i�j�glk�mDoLp q r?t\u�i?z�§�h�zLc�Y�L8Z�`�WCT�]^_�X�`YW�, c L�] ,@Z�[\_�[�[OW�X�LCXdY�L1,�W ( L2YO%*N* ij- }noXe�zXiD�±v:�}��x��e�c�}x��olh�v0o�~*��z\��{�c�}�gL}:��oDh�v }�w�g�}¬gL��zO��h�iD�Pvx}:��h��Dc?�±v:w�gLe?�Pz�~¨��oD{ }�w�z c�h?�¢~Tol��{�iD�Pvx}��:��e�c�}:��oDh�}�o¡gLh'z�¦¥kn��z\hF}ole�vxz\�n�lz\� ��}�w�gL}^��gL�Fg���h���w�glv0glk\k�z^v�v�}�o%}�w�z)��g`��c�z%o�~ª}�w�z)��z\��{�c�}�g�}x��olh�gL}0��o���h?}�v�oL~Z��}�v1k�w�oL�Pk�zL���,>�h�gli�iD���}x��olh���}�w�z\fKk�olh�v��Pi?z\��gXv:}���olh��lz\�0h�ol}x��olhKoL~���vxz\c�i?ol�T��g�h�i?ol{%h�z^v�v0y w?�Pknw�}�w�z\fKk\g`�¢� » )152¸`¶ 5�» ¸ )2E � 3¤¶xµ �8EH�l¼52¸`¶�¼ )$�Tµ �;7�� ��·l¸b��¸^¶xµ �;�D¶�»\�I�z\��z%}�w�z%iD�Pvx}x��h��lc?�Pvxw�z\�¡k\g�h g��±v:o�glk\k�z^v�v1}nw�z ��h?�lz\��vxz���z\��{�c�}�gL}:��oDh g�}1��oL��h?}�voL~Z��}�v¬knw�oL�Pk�zl����oL�¢��oLy���h���q6NbQ^u9y�z1c�v:z }�w�z)}�z\��{ YÚ[^]�WYX?e�c�Y�L8Z�`�WCT�]^_�X�`YW�,ac L2]$,@Z�[\_�[�[6WYX L8X�Y Lh,�W ( L�Y% K�*N*Ni - ��h�vx}nz^gli��bdc�eFfXgLh�i�j�glk�mDoLp�����oL�D�Pi?z^i�g%v���{%�?��z%k�olh�vx}n��c�k�}x��olh�o�~ °ë° &�g�h�i�( °*° & ����� 3���� ��»=�T¶,)2/b�;7B� ��¬y w?�Pknw

�Pv�}�w�z�~¨o�k�c�vëoL~�}�w?�Pvëy�ol��m��,��w�z����­k�oDh�vx}���c�k�}x��olh|�Pvëe�glvxz^i|oDh¥gOe�glv��Pk1k�ol{%��olc�h�i|oL~�}�w�z1vx}��nc�k�}�c���z oL~�%+&,(q.- -`u���h�gL{%z���fl�9}�w�z�k�ol{���oFv���}x��olh�vOoL~�vxz\�lz\��g`�ª��z��Pvx}nz����T��z\��{�c�}�gL}x��olh�vÚ����w�z���� i?z�§�h?��}x��olh�o�~�}�w�z °*° & ����z^vx���( °*° &��9�±v�2:4 k ��2:4 w ��2:4 k ����z^vx����2:4� ��2:4 k �W2�4 w ��2:4 k �Zy w�z\��z1g`�¢� � �¨vëgL��z���h�i?z\��z\h�i?z\hF}0��vxz\c�i?ol�T��g�h�i?ol{~Tc�h�k�}x��olh�v¬g�h�iL2:4��,glvë��he%0z�§�h?��}x��olh�r��6N)�¤v:z\z �9���Dc���zmNl�sg)~Tol� gLh|�¢�¢��c�vx}���gL}:��oDh����

MVUYM6UYM "�L$# X�[�[�[OW�X�Y! � )$�8/b�;7B� � ¸��ì» ¸`¼ 6 ³¢¸)�±v�g�vxz^�Dc�z\h�k�z�� � �� � ����� vxc�knw�}�w�gL}�� � �±v�g�iD�Pvx}��x��e�c�}x��olh´oL�lz\� � � ��� �±v}�w�z )2�C7 �=�l¶�¼ � )$�8/b�;7B� �K¸b��»\¸^¼ 6 ³¢¸��¢~�� � �Pv0c�h?�¢~Tol��{���f�iD�Pvx}n�x��e�c�}�z^i'o��Dz\� � � � ! 5�¸^¶�¼ )2�Tµ �;7�� �=¸��ì» ¸`¼ 6 ³¢¸ë�±vg�v:z^�lc�z\h�k�z�� � �� � ����� v:c�k�w�}nw�gL}�� � �Pv g�iD�Pvx}n�x��e�c�}x��olh�oL�lz\�N� � ��� �Pv)}�w�z�)$�87 �i�l¶�¼ 5�¸^¶�¼ )2�Tµ �;7�� �¸��ì» ¸`¼ 6 ³¢¸ë�¢~�� � �Pv c�h?�¢~Tol��{���f�iD�Pvx}��:��e�c�}nz^iXoL�lz\�_� � �!º~Tc�h�k�}x��olh=z\h�vxz\{�e?��zK��ol� gX��z\��{�c�}�gL}x��olh�z\h�v:z\{�e?��zL����� � �� � ����� �9�Pv|¸� �/b7P¸b�8�T³ h?/��D¼ 5 )2�Tµ 6 ³¢¸1�¢~}�w�z�iD�Pvx}��:��e�c�}:��oDh!� � k\g�h�e�z�v�gL{��?��z^i=z�¦Xkn��z\h?}x��f´�T���Ûzl���£}�w�z\��zXz� ?�±v:}�v%g'����ole�gLe?�¢�¢�Pvx}x�Pk'��oL��f?h�ol{��Pg`���T}x��{%z�9c��x��h��l�T{¡glknw?��h�zl� �,gLh�i=g'{¡gL���?��h��K~T��ol{ vx}��x��h��Fv)}�o�~¨c�h�k�}:��oDh�v\��"Z�*v:c�k�w=}�w�gL}�"9� ��N � ���Ng�h�i#� � gL��z�Pi?z\hF}:�±k\g�����f´iD�±v:}��x��e�c�}�z^i��%gLh�i�}nw�z|~¨c�h�k�}x��olh�v���h$� � k\gLh=e�z�k�oD{%��c�}�z^i z�¦¥kn��z\hF}x��f´�T���Ûzl�±�,}�w�z\��zXz� ?�Pvx}�v�g����ole�g�e?���¢�Pvx}x�Pk)��o���f?h�ol{��Pg`���T}x��{%z|��c��x��h��l�T{|glk�w?��h�zl�&%|��vxc�knwX}�w�gL}'%©�)( ����� � �)"9�)(x�n�������n���� z�y�olc?�Pi �¢��mlz�}no�k�olh�v��Pi?z\��z�¦¥kn��z\h?}x��f k�ol{%��c�}�gLe?��zK~¨c�h�k�}:��oDh���ol�X��z\��{�c�}�gL}x��olh��%z\h�vxz\{�e?��z^v'}�w�gL}

k\gLh�h�ol}0e�z�z�¦¥kn��z\h?}x��f�iD�Pvx}x��h��lc?�Pvxw�z^i ~T��ol{ }�w�z�c�h?�¢~Tol��{(z\h�vxz\{�e?��zl� >�h�oDc��Nvxz\}n}x��h�����}nw�z�iD�Pvx}x��h��lc?�Pvxw�z\�O�±vgLh%oD��glkn��z {¡glknw?��h�z¬}nw�gL}*k\gLh|{¡gLmlz �Dc�z\�x��z^v*}no g0��z\h��l}�w|����z^vxz\���D��h��)~¨c�h�k�}x��olh���ol�,~Tc�h�k�}x��olh�v��,gLh�i�olc�}n��c�}�vgKv���h��L��zKe?��}`��� z�glv�vxc�{%z|}�w�gL}�olh���h���c�} N � }�w�zXoD��glkn��zX{¡glknw?��h�z�{¡gLmDz^v oDh?��f�F��Te?��}%��olh����Dc�z\�x��z^v\� Fg`�Pvxo�v:z\���lz^v�glv)}�w�z�vxz^k�c��x��}xf=��gL��gL{%z\}nz\�^� !¬h�oD��glkn��zX{¡glknw?��h�z�w�glv�gLh=��h?}�z\������z\}�g�}x��olh�e�ol}nw�c�h�i?z\�%}�w�zc�h?�¢~¨oD��{ k�ol{%�?��z� F��}xf={%o2i?z��¬gLh�i c�h�i?z\�%}�w�z|h�olh��Tc�h?�¢~Tol��{�{%o�i?z�� � >�h�}�w�z�~¨ol�n{%z\�1��})�Pv)��hF}�z\�n����z\}�z^i=glvg%�9c��x��h��l�T{¡glknw?��h�z%y���}�wKg%vx��z^kn�Pg`�,ol��gDkn��z\�T}�gL��z��T��h�}nw?�±v0k\glvxz1z�¦Xkn��z\h?}1{%z^gLh�v­����ole�gLe?�¢�¢�Pvx}x�Pk���o���f?h�ol{��Pg`���}x��{%zL� gLh�i ��h�}�w�z|�PgL}�}nz\�©gDv�gKkn����k�c?��}��Ì~�gL{��¢��f�y���}�w�v:��z^kn�Pg`�¬ol��glkn��z\�T�FgL}�z^v��T��h�}�w?�Pv%k\glv:zXz�¦¥kn��z\hF}%{�z^gLh�v��o���f?h�ol{��Pg`����v���¹\zL��� �­w�z�iD�Pv�k�c�v�v���olhKoL~Z}�w?�Pv ��gL��z\� �Pvë��h�i?z\��z\h�i?z\hF})oL~ª}nw�z k�w�oFv:z\h|��h?}�z\�����nz\}�gL}x��olh��bdz\}'* e�z�gLhXol��glkn��z){¡glknw?��h�zl�ì��z\} � e�z�g�~¨c�h�k�}x��olh���h � � gLh�i�� � g%iD�Pvx}��x��e�c�}x��olhKoL�lz\� � � ��%0z\h�ol}�ze?f$* 4 �qN � ��}�w�z�iD�±v:}��x��e�c�}x��olh$oL~�* `sv�olc�}���c�}Xy w�z\h ��}�v|�lc�z\�:��z^v'gL��zKgLh�vxy�z\��z^i�e?fZ� gLh�i i?z\h�ol}�zKeFf

*,+ r �qN ����}�w�z�iD�Pvx}��:��e�c�}:��oDh-* 4 ��N�������y w�z\�nz ���±v0iD�Pvx}��x��e�c�}�z^iKglk\k�oD��iD��h��X}�o.� � ��� z y�olc?�PiKg`�Pvxo%�¢��mlz�}�ok�olh�v��Pi?z\�)ol��glkn��z%{¡gDk�w?��h�z^v1y­��}nw gDk\k�z^v�v0e�ol}nw�}�oXg|��z\��{�c�}�gL}:��oDh�gLh�i'}�o���}�v0��hF�Dz\��vxzl��b�z\}�* e�z¡vxc�knw�g{¡glknw?��h�zl����z\} �Ke�z%g%��z\��{�c�}�gL}x��olh���h � � gLh�i/� � g|iD�Pvx}��x��e�c�}x��olh�oL�lz\�G� � � %0z\h�ol}�z)eFf/*

410 4 � k ��N ����}�w�ziD�Pvx}��x��e�c�}x��olh|oL~2* `sv9olc�}���c�}ëy w�z\h)��}�v*�Dc�z\�x��z^v*gL�nz­g�h�vxy�z\��z^i)eFf �¡gLh�i � K ^ gLh�i%i?z\h�oD}�z�eFf3*4+ r 0 + � kr ��N����}�w�z iD�Pvx}��:��e�c�}:��oDh-* 450 4 � k ��N��F����y w�z\��z �'�Pv iD�Pvx}n�x��e�c�}�z^iKglk\k�ol��iD��h��|}�o�� � �"�L$# X�[�[�[OW�XNMVUYM %�_1`dZ�_�X�[\_)e�Lh- � ¸��6* 6 ¸�µ � �l¶xµ /`³¢¸�¼�µH/=�27���¸�µ �CE$³¢¸��3� � �� � ����� µ �8E87� � 7� � �����76 ¸'� D � � )$�8/b�;7B�H� � �l¶,5�¸^¶�¼ )$�Tµ �;7�� ���¡¸b��»\¸^¼ 6 ³¢¸Ú» H39X¸U/�µl³Ì³����F¸,� )2�C/��;7�� �

EF�;:�<!�Lq=* + r ��N � � � N\u?> �;:�< �Lq@*BA+ r �qN � � � N\u�E���F¸ gDi?��gLh?}�gL�lz6* µ /=�$7P¸ C^¸\»+7��eEH7�»=�;7B�?·&)$7�»q�27��F· 6 ¸b� D ¸�¸b�.� µ �CE 7��H

c

Page 7: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

� ¸b��* 6 ¸'µ ���l¶xµ /^³¢¸K¼�µ /=�27���¸'µ �8E=³¢¸�� � � �� � ����� µ �8E 7� � 7� � ����� 6 ¸ � D �?5�¸^¶�¼ )2�Tµ �;7�� �¸��ì» ¸`¼ 6 ³¢¸\» H39X¸m/�µl³Ì³ ���?¸,� )$�8/b�;7B�H�

EF�;:�< �Lq@* + r 0 + � kr ��N � � � N\u?> �;:�< �Lq@*BA+ r 0 A+ � kr ��N � � � N\u�E���F¸ gDi?��gLh?}�gL�lz6* µ /=�$7P¸ C^¸\»+7��eEH7�»=�;7B�?·&)$7�»q�27��F· 6 ¸b� D ¸�¸b� � ��� � K ^�� µ �CE � 7� � 7� K ^�� H9X¸O» µHh����?µ ��* E 7±»i�;7��F·$)27±»��?¸\» 6 ¸�� D ¸�¸�����µ �CE 7� � ¶x¸\»y5WH � �<��� K ^ � µ �8E � 7� � 7� K ^ � � D 7����Xµ E�C^µH�8�Tµ^·D¸� � � ��F9��7 � �=�l¶m7���8,�87��T¸^³ h%¼�µ �Ch F�� »m���F¸|µ E�C`µ �8�Tµ`·l¸�* µ /=�$7P¸ C^¸\»m7��)EH7�»=�;7B�?·&)$7�»q�27��F· 6 ¸�� D ¸�¸�� � µ �CE 7�� ¶¤¸Ú»g5�H � ��� � K ^�� µ �8E � 7� � 7� K ^�� ��7±» µ ��³¢¸�µ�»i� � � F���H"�L$# X�[�[�[OW�XNMVU P�%=X6L]e (B[be [ÌW ( L�^sZ�Xda�[�[6WYXdY - � )2�C/��;7�� ���=®� �� 7�»0h�z\�L�¢������e?��z 7 ���i�l¶�¸ C^¸^¶qh?/q� ��»=�Tµ �8���� a'µ �8EXµl³Ì³�» ) �/b7P¸b�8�T³ h�³¢µl¶T·l¸�F�� »

�d��F9��� NF��

"�L$# X�[�[�[OW�XNMVU R�%* '+ij- � ¸���� � �� � ����� 6 ¸�µ ��¸� �/b7P¸b�8�T³ hm/q�l¼"5 )$�Tµ 6 ³¢¸O~¨c�h�k�}x��olh ¸���»\¸^¼ 6 ³�¸�µ �CEX³¢¸��< � < � ����� 6 ¸ ���F¸ )2�C7 �=�l¶�¼ � )$�8/b�;7B� �3¸���»\¸^¼ 6 ³�¸.H4� 7�»�µ ��vxz\c�i?ol�T��g�h�i?ol{�~¨c�h�k�}:��oDh$z\h�vxz\{�e?��z�7 ��=�l¶�¸ C^¸`¶�h|¸� �/b7P¸b�8�,�l¶xµ /`³�¸13¤¼�µ /1�27B��¸6* 0 ���F¸|µ E�C`µ �8�Tµ^·D¸�* �FµL»'7B� EH7�»=�;7B�?·&)$7�»q�27��F· 6 ¸�� D ¸�¸���� µH�8E:< 7�»��¸x·l³ 7¢· 7 6 ³¢¸ H"�L$# X�[�[�[OW�XNMVUYT %* *Ni - � ¸��&� � �� � ������6 ¸)µ ��¸ �/�7̸��C�T³ h /��D¼ 5 )2�Tµ 6 ³¢¸¬��z\��{�c�}�gL}x��olh�¸b��»\¸^¼ 6 ³¢¸1µ �CE³¢¸�� < � .< � ����� 6 ¸L���F¸*)$�87 �i�D¶�¼v52¸^¶�¼ )2�TµH�;7B� � ¸��ì» ¸`¼ 6 ³¢¸ H�� 7±»¡µ|��vxz\c�i?ol�T��gLh�i?ol{���z\��{�c�}�gL}x��olh z\h��vxz\{�e?��z07 ���=�l¶ ¸ C^¸^¶qh|¸� �/�7̸��C���l¶xµ /`³¢¸=3¤¼�µ /1�27���¸6* 0 ���F¸%µ E�C`µ �8�Tµ`·l¸6* �FµL»�7�� E 7±»=�;7B�?·&)$7�»q�27��F· 6 ¸b� D ¸�¸b���µ �CE< 7�»��¸¤·D³ 7¢· 7 6 ³¢¸.H"�L$# X�[�[�[OW�XNMVU ��% K�*N* ij- � ¸�� � � �� � ����� 6 ¸ µ �|¸� �/�7̸��C�T³ h /��D¼ 5 )2�Tµ 6 ³¢¸�5�¸^¶�¼ )$�Tµ �;7�� �|¸���»\¸^¼ 6 ³�¸�µ �CE³¢¸�� < � < � �����56 ¸+���F¸0)2�C7 �=�l¶�¼ 52¸^¶�¼ )2�TµH�;7B� �K¸b��»\¸^¼ 6 ³¢¸ H�� 7±»¬µ vx}��nolh�� ��vxz\c�i?oD�T��gLh�i?ol{ ��z\�n{�c�}�gL}x��olhz\h�vxz\{�e?��ze7 �,�i�D¶�¸ C^¸`¶�hX¸ �/�7̸��8�"�l¶xµ /^³¢¸=3x¼�µ /=�27���¸3* 0 ���?¸¡µ E�C^µ �C�Tµ^·l¸�* �FµL»m7�� E 7±»i�;7��F·$)27±»q�27B�?· 6 ¸�� D ¸�¸��� ��� � K ^�� µ �8E � < �=< K ^�� 7±»��¸x·l³ 7¢· 7 6 ³¢¸ HS L1,=_�]�� MVU1W 9X¸ )D» ¸ ���F¸U58�F¶xµL»\¸�� � 7±»¥µ 5�»\¸-)$E �D3x¶¤µH�8E �l¼ � )2�C/��;7�� ���'µL»�µ �´µ 6[6 ¶x¸ Cb7Pµ �;7�� � �i�l¶�� � 7�»E 7±»i�T¶q7 6 )$�T¸�E�µ /q/q�l¶�E 7B�?· �;��µ�5�»\¸-)$E �D3x¶xµ �8E �D¼ � )$�8/b�;7B� �´¸b��»\¸^¼ 6 ³¢¸��'µ �CE�»=7P¼'7̳¢µl¶�³ h'�=�l¶�� � 7±»�µ�5�»\¸-)$E �D3¶xµ �8EH�l¼ 5�¸^¶�¼ )2�Tµ �;7�� ����µ �8E�� � 7�» µ|»=�T¶�� �F· 5�» ¸ )2EH�D3¤¶xµ �CE �l¼ 52¸^¶�¼ )2�TµH�;7B� ��� $�� # V,"+>@, ( � 587/("! (�5878(�5%0�# -/5�$ 02>@AE58,<365/7 U (�;$X�- 023�02>@A%5/,��w�z)h�ol}x��olh�v�oL~*mF�Ty­�±v:z ��h�i?z\��z\h�i?z\hF}O~¨c�h�k�}x��olh�v1g�h�iXm?�Ty��Pvxz<H\g`��{%oFvx}�J)��h�i?z\��z\h�i?z\h?}1~Tc�h�k�}x��olh�v�q.-?������N�-?�N ����r c��8- ND� c a`uë��c�h�i?z\� vxz\�lz\��g`�ªiD�¢p�z\��z\hF}�~Tol��{�c?�PgL}x��olh�v����?�Pg^f�g�{¡g�«¤ol����oL��z)��h�k�olh?}�z\{%��ol��gL�nf¥k�ol{���c�}�z\�v�kn��z\h�k�zl�*��w�z^v:z­g���z iD�±v:}��x��e�c�}x��olh�v,o�~�~Tc�h�k�}x��olh�v,vxc�knw�}nw�gL}�}nw�z����ë��g`��c�z oDh�gLh?f �L���lz\hGOO��h���c�}�vZ�PvZc�h?�¢~Tol��{���fol� H\g���{�oFvx} J�c�h?�¢~¨ol�n{���f�iD�Pvx}��x��e�c�}�z^i�� (lz\�lz\��g`��k�olh�v:}���c�k�}x��olh�vOoL~­vxc�knwK~Tc�h�k�}x��olh�v g�h�i�g��PgL���lz%�LgL�x��z\}xf�oL~gL���?�¢�Pk\gL}x��olh�v0y�z\��z vxc��D�lz^vx}�z^i|oL�lz\��}�w�z1flz^g���v\�� z1e��x��zq#�f���z\�D��z\y }�w�z�i?z�§�h?��}x��olh�v1oL~8O?�Ty��PvxzO��h�i?z\��z\h�i?z\h�k\z'�¤gLh�i4O?�Ty��Pvxz �`��i?z\��z\h�i?z\h�k�zL���¬��w�z�i?z�§��

h?��}x��olh�v�oL~ª��g����n�Ty��Pvxz1��h�i?z\��z\h�i?z\h�kÚzX�¤gLh�i|��g����n�Ty��Pvxz �`��i?z\��z\h�i?z\h�k�zL�1k\gLhXe�z�i?z\�x���lz^iXe?f|}�gLmD��h���O � r��

"�L$# X�[�[�[OW�XNMVU � � ¸b�?2 ^ µ �8EN2 6 ¸ � D �mE 7±»i�T¶q7 6 )2�;7�� �ì» El¸B8 ��¸�Em��C^¸^¶&% 0 ���F¸ C^µl¶q7̵ �;7B�H�eEH7�»=�Tµ �8/�¸ 6 ¸�� D ¸�¸��2 ^ µ �8E92 7±»' 2 ^ > 2 ' � N

r�()?�+*EF2 ^ �-, �2> 2 �-, ��E

Q

Page 8: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

"�L$# X�[�[�[OW�XNMVU � � ¸b����µ �CE�� 6 ¸ � D � » ¸b�Ì» 0 a�� ��� N 0 O�µ � 7B�C�T¸¤·D¸^¶ � r���O��aE��E ��µ �8E � µE 7±»i�T¶q7 6 )$�;7B� � ���� �� � � )2�C/��;7�� ��» H

� ¸b�%� ^ � � ��������� 6 ¸ O E 7 �¬¸^¶x¸��C�*¼�¸^¼ 6 ¸^¶n»����� 0 /�� �ì»i7�El¸`¶+���F¸��i�l³Ì³ � D 7��F·L� D �?E 7±»i�T¶q7 6 )2�;7�� �ì»��� H � �9��� ^ � � �9��� � ���� � �9��� � � D �F¸`¶x¸ � 7�»E 7±»=�T¶�7 6 )$�T¸�EXµH/�/q�l¶�E 7��F·m�;� � H� H����F¸ )2�C7 �=�l¶�¼JE 7±»i�T¶q7 6 )$�;7B� � ��C^¸`¶�� H� 7�» OC3 D 7�»\¸m7��8El¸ 52¸b�8El¸b�8��7 ���i�l¶)µl³Ì³�� ^ ��� ���� � � ���F¸U� D �?E 7�»=�T¶q7 6 )2�;7�� ��» µD¶¤¸'7�El¸��C�;7B/�µl³ H � 7±» OC3 D 7±»\¸

�H3*El¸ 52¸b�8El¸b�8��7 ���=�l¶ µl³Ì³�� ^ ��� ���� � � ���F¸'� D �?E 7�»=�T¶q7 6 )2�;7�� ��» µD¶¤¸'���3C^µl¶q7̵ �;7B�H�eEH7�»=�Tµ �8/�¸�µ �*¼'�L»=� �)H�­w�z^vxz i?z�§�h?��}x��olh�v1gL��z1h�gL}nc���g`�¢��fXz� 2}�z\h�i?z^i�}�o%��z\��{�c�}�gL}x��olh�v\®

"�L$# X�[�[�[OW�XNMVU � � ¸b��� 6 ¸|µK»\¸�� 0 a�� ���JN 0 O�µ �F7B�C�T¸¤·D¸^¶ � r�� O�� E��9E ��µ �8E � µeEH7�»=�T¶�7 6 )$�;7�� �����52¸`¶�¼ )$�Tµ �;7�� ��»'��C^¸`¶��H

� ¸b�%� ^ � � ��������� 6 ¸ O E 7 �¬¸^¶x¸��C�*¼�¸^¼ 6 ¸^¶n»����� 0 /�� �ì»i7�El¸`¶+���F¸��i�l³Ì³ � D 7��F·L� D �?E 7±»i�T¶q7 6 )2�;7�� �ì»��� H � �9��� ^ � � �9��� � ���� � �9��� � � D �F¸`¶x¸ � 7�»E 7±»=�T¶�7 6 )$�T¸�EXµH/�/q�l¶�E 7��F·m�;� � H� H����F¸ )2�C7 �=�l¶�¼JE 7±»i�T¶q7 6 )$�;7B� � ��C^¸`¶0» ¸,+-)?¸��C/�¸Ú»���� O'iD�¢pdz\�nz\hF}%¸`³�¸`¼�¸��8�Ì»+�����9H� 7�» OC3 D 7�»\¸m7��8El¸ 52¸b�8El¸b�8��7 ���i�l¶)µl³Ì³�� ^ ��� ���� � � ���F¸U� D �?E 7�»=�T¶q7 6 )2�;7�� ��» µD¶¤¸'7�El¸��C�;7B/�µl³ H � 7±» OC3 D 7±»\¸

�H3*El¸ 52¸b�8El¸b�8��7 ���=�l¶ µl³Ì³�� ^ ��� ���� � � ���F¸'� D �?E 7�»=�T¶q7 6 )2�;7�� ��» µD¶¤¸'���3C^µl¶q7̵ �;7B�H�eEH7�»=�Tµ �8/�¸�µ �*¼'�L»=� �)H�­w�z�k�olh�h�z^k�}x��olh�oL~�}�w?�PvZ��gL��z\��}�o�O?�Ty��Pvxz£��h�i?z\��z\h�i?z\h�k\z��Pv�e?�PiD����z^k�}x��olh�g`��glv�i?z^v�k��:��e�z^i)��h�}�w�z,~ToL�¢��o�y­��h��

}xy�o���g���gL�l��g���w�v\�!1v%vxw�oLy h ��h (lz^k�}x��olh�-��,��g`�����Ty­�±v:zX��h�i?z\��z\h�i?z\h?}���z\��{�c�}�gL}x��olh�v%k\g�h���z\�?�Pglk�z�}�w�z|§���vx}%gLh�i ~¨oDc���}�w

��olc�h�i�v0o�~�}�w�z%b�j���_ëolh�vx}���c�k�}:��oDh��%b�z\}�� e�z¡g�§�h?��}�z�§�z��PiK}nw�z\h�}�w�z���z\��{�c�}�g�}x��olh ��� 0 � ������>�@�A� �������L�

y w�z\��z"���� a����"� � g���z�c�h?�¢~Tol��{���f�iD�Pvx}��x��e�c�}�z^i����Pv���g`�����Ty��Pvxz'��h�i?z\��z\h�i?z\h?}^����wFc�vÚ�*}�w�z\�nz�gL��zX��g����n�y��Pvxz���h�i?z\��z\h�i?z\hF}%��z\��{�c�}�gL}x��olh�vOoL�lz\� � ��}nw�z���z\��{�c�}�gL}x��olh�v � � 0 �0y���}�w ol��z\��g�}x��olh�v1oL�lz\�! � �¤r � �����>�h(lz^k�}x��olh�c��sr��Z��}��Pv¡vxw�oLy h�}nw�gL}�y�z�k\g�h�c�vxz�z\�lz\h {%ol��z|z�¦¥kn��z\h?}%~Tc�h�k�}x��olh�v|gLh�i���z\��{�c�}�gL}x��olh�v)��h olc��k�olh�vx}n��c�k�}x��olh���>�h���gL��}:�±k�c?�PgL�`��y�z k�olh�v��Pi?z\�1}�w�z k�olh�k�z\��} o�~ � �;! /�X ~¨c�h�k�}x��olh�vÚ�>�h%k�olhF}n��glvx}�y­��}nw�}nw�z�k\glvxz�oL~���g����n�Ty��Pvxzë��h�i?z\��z\h�i?z\hF}���z\��{�c�}�gL}x��olh�v\�Ly�z�gL��z*h�oD}ªg`y gL��z,oL~Ag�hFf4H��lo?o2i�Jk�olh�vx}n��c�k�}x��olh�vëoL~ O?�Ty��Pvxz �^��i?z\��z\h�i?z\hF}���z\��{�c�}�gL}:��oDh�vZ~Tol�*�lz\h�z\��g`� O%g�h�i5�?�,��w�z1iD��p�z\��z\h?}���gL�:�±g�hF}�v£oL~�}�w�zb�j���_ëolh�vx}���c�k�}:��oDh�o�pdz\� g���gL��}x�Pg`�,vxoL��c�}x��olh�}no%}�w?�Pv ���nole?��z\{�� H���gL��}:�±g�� J©e�z^k\gLc�vxz�oL~,}�w�z)e�olc�h�i?z^i'��g���c�z^voL~ ��}nw�gL}¬k\gLh'e�z%glknw?��z\�Dz^i����¬�ìol�¬z� �gL{%�?��zl��c�v���h��<O?�Ty��Pvxz ��"���i?z\��z\h�i?z\hF}O~¨c�h�k�}:��oDh�v0olh FKe?��}�v���h�vx}nz^gliXoL~��vxz\c�i?ol�T��gLh�i?ol{º~¨c�h�k�}:��oDh�v,��hX}�w�z�ol�x���L��h�g`��b�j���_*oDh�vx}���c�k�}x��olh|fD��z��Pi�v g O?�Ty��Pvxz �`��i?z\��z\h�i?z\h?} ��z\�n{�c�}�gL}x��olholh¡r FXe?��}�v�� ~¨ol�6� �$# ��O �% r����*� " ������>�h0(lz^k�}:��oDh�POy�z0gLh�g`��fF¹\z0}�w�z1iD�¢pdz\�nz\hF}�k�olh�vx}���c�k�}:��oDh�v*o�~d}nw?�±v£��gL��z\�glv k�oDh�vx}���c�k�}x��olh�v­oL~ O?�Ty­�±v:z �`��i?z\��z\h�i?z\h?}1��z\��{�c�}�g�}x��olh�v\�

& ' ����C������ �������� �)(�� �$* � �' + � �$*

� $&# � 5%02-8> 02>@A%5!1v�{%z\h?}x��olh�z^iO��h�}�w�z,��h?}���o�i?c�k�}x��olh��Fg����:��h�kn���?��z0ole�vxz\���LgL}x��olh�oL~�}�w?�PvZ��gL��z\�Z�Pv9}�w�gL}Z}�w�z�iD�¢p�z\��z\h?}���oDc�h�i�v�oL~}�w�z¬b9j���_*olh�vx}n��c�k�}x��olhXvxz\���lz¬v¤���Dh?��§Ak\g�hF}x��f¡iD�¢p�z\��z\h?}*��o���z^vÚ�*��o0�¢�¢��c�vx}���g�}�z¬}nw?�±vë��oL��hF}^�?k�olh�v��Pi?z\��}xy�o1�nolc�h�i�voL~1}�w�z�k�olh�vx}n��c�k�}x��olh���d¬gL{�z���fl��, � 2:4 w �N2:4 k �ëy w�z\��z<� ^ � � � � � gL�nzX}¤y�o'��h�i?z\��z\h�i?z\h?}x��f knw�oFvxz\h��vxz\c�i?ol�T��gLh�i?ol{º~¨c�h�k�}:��oDh�v\��>�}ë�Pvëh�ol}*w�g���i�}�o)�lz\�x�¢~¨f�}�w�gL}-,3�Pv�k�ol{%��c�}�gL}x��olh�g`�¢��f���h�iD�Pvx}x��h��lc?�Pvxw�gLe?�Pz)~T��ol{g|��gLh�i?oD{ ��z\��{�c�}�gL}:��oDh�}�o�gLh?f�z�¦¥kn��z\h?}%g`���lol�x��}�w�{ }�w�g�}1w�glv glk\k�z^vnv0}�oX��g`����v � �?� �.,���� �P� � ��0/ ^ �9y w�z\��z}�w�z%vxz^�Dc�z\h�k�z4!� �@ ��1/ ^ �Pv1c�h?�¢~¨oD��{���f�iD�±v:}��x��e�c�}�z^i��%��w�z)��hF}nc?��}:��oDh��Pv1glv�~ToL�¢��o�y0v\®1�9����vx}¬y�z%vxw�olc?�PiKh�oD}x�Pk�z

t

Page 9: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

f3

1f

f2

h1

1f

(a) (b)

f2

h2

-1f4

L R

L RL R

L R L R

L R

0L 0R

0L 0R1 1

Input

2 2 1 1

3 3 2 2

4 4 Output

�9���lc���z'Nl®�_*olh�vx}n��c�k�}x��olh�v�oL~�( °ë° & ®��¤g2�ª��w�z1ol�:������h�g��9b9j���_*olh�vx}n��c�k�}x��olhK��e��*��w�z0��z\�D�±v:z^i�_*olh�vx}��nc�k�}x��olh��>�h �¤g?�¬gLh�i=��e���®�� (�� Nl��; � � < � K ^ gLh�i < � � ;�� K ^ ��� �x��< � K ^ ���'>�h ��e���® � ;��!�=<�� � � � ^ � F�� �n�¬gLh�i# ��� � � � K ^ � � ; �< � ���

P

Page 10: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

}�w�gL}ë��}��Pv�z\h�olc��DwX}�o�����oL�lz¬}nw�z1��vxz\c�i?ol�T��gLh�i?oD{%h�z^v�v�oL~ ,�y�w�z\h<� ^ g�h�i4� gL��zm�T¶,)?³ h�¶¤µH�8E �l¼ � )$�8/b�;7B� �ì»�T��h�vx}�z^gDi|oL~���vxz\c�i?ol�T��gLh�i?oD{X���*b�z\}0��; �� �< �� � � �?�ZgLh�i'��;8 � �<� � � � ,���� �T���?eFf�}�w�zNi?z�§�h?��}x��olh'oL~ , y�z0�lz\}}�w�gL}+; � � ; �� � � ^ ��<

�� �*gLh�i�< � � < �� � � ��; � ����(L��h�k�z }�w�z1vxz^�Dc�z\h�k�zG!� � ��1/ ^ �±v­c�h?��~Tol��{©��fXiD�Pvx}��x��e�c�}�z^i��y�z¬w�g`�lz0}�w�gL}�y���}�wX�DoFo�i%���nole�gLe?�¢�¢��}xfK��e�z\}�}�z\��}�w�gLh'��N�> � w r�� k ��� <�� �� < �� ~¨ol� g`�¢��( ���� ��_*olh�iD��}x��olh�z^i�olh}�w?�Pv�z\�lz\hF}`��}�w�z�vxz^�Dc�z\h�k�z .; � ��1/ ^ �Pv c�h?�¢~Tol��{���f�iD�Pvx}n�x��e�c�}�z^i �¤v���h�k�zG� ^ �Pv ��g�h�i?ol{X���ë��z h�oLy$w�g`�lz)}�w�gL}y���}�w��DoFo�i'����ole�gLe?�¢�¢��}¤f�; � �� ; � ~Tol� g`�¢��( ���� �m_ëolh�iD��}x��olh�z^i�oDh�}nw?�±vOz\�lz\h?}^��}�w�z%vxz^�Dc�z\h�k�z< < � ��1/ ^ �±vc�h?�¢~¨oD��{���f�iD�Pvx}��:��e�c�}nz^i=�¤gLh�i¥��h�i?z\��z\h�i?z\hF}�oL~*}nw�z�vxz^�Dc�z\h�k�z4 ; � ��1/ ^ ��� d ol}:�±k�z�}�w�g�} }�w?�Pv1gL���lc�{�z\hF}1vx}x�¢�¢�y�ol��m�v£��~*}nw�z vxz^�lc�z\h�k�z�!� �1 ��1/ ^ �Pv olh?��fX��g`�����Ty­�±v:z1��h�i?z\��z\h�i?z\h?}^�d�z\�lz\��}nw�z���z^vnv\�Fglv,bdc�eFf%gLh�i�j glknmloLp�vxw�oLy�z^i�� ,$k\gLh%e�z z^glv��¢��f%iD�Pvx}x��h��lc?�Pvxw�z^i�~T��ol{ g0��gLh�i?oD{ ��z\��{�c��

}�gL}:��oDh%eFf|gLh¥g����Dol�x��}�w�{ }�w�gL}ë�lz\}�v,}no©v:z\z¬}�w�z0��g���c�z1o�~ , oD�-, K ^ olh©��h���c�}�v�oL~���}�v�knw�oL�Pk�zl�*��w�z0��z^glvxolh©�±v}�w�gL}d~¨ol�,gLh?f1��g`��c�z^v�; ^ �3; gLh�iN< vxc�knw�}nw�gL} ; ^ �� ; y�z,w�g`�lzë}�w�gL} ,���; ^ �=<)� � � ,���; �=<)� � � ; ^ � ; �>�hXk�olh?}���glv:}^�`~¨oD�*g1}���c?��f���gLh�i?oD{ ��z\�n{�c�}�gL}x��olh��l}nw�z¬����oDe�gLe?�¢����}xf%oL~�}�w?�Pv£z\�lz\hF}£�Pv�r K � �,��w?�PvZ�Pvë}�w�z ��z^gDvxolh}�w�gL}�}�w�z�b�j���_*oDh�vx}���c�k�}x��olh���h�kn��c�i?z^v0}nw���z\z ol�ë~Tolc�� ��oDc�h�i�v\�� z%}�w?��h�mKoL~ }�w�z¡vxz^k�olh�i=gLh�iK}nw?����iK��olc�h�i�vOoL~ }�w�z¡b�j���_ëolh�vx}���c�k�}:��oDh glvO}�w�z%}xy�ol�T��olc�h�iKk�olh�v:}���c�k��

}x��olh ,|�ªi?z^vnk��x��e�z^i�g�e�oL�lzXgLh�i�v:w�o�yº}�w�gL})}�w�zX��oL��z|oL~ }�w�z|§���vx}�gLh�iK~Tolc���}nw���oDc�h�i�v1�Pv�}no�����z\�lz\h?}�}�w�ziD�Pvx}x��h��lc?�Pvxw�z\�)~T��ol{ iD���nz^k�}x��f knw�o?oFv���h��X}�w�z)��h���c�}�v0oL~-, gLh�i , K ^ ��!Nv�y�z©v:w�g`�¢��vxz\zl��}�w?�Pv0�loFg`�,k\gLh�g`�Pvxoe�z�glknw?��z\�Dz^i|y���}�w H\k�oD{�e?��h�gL}nol�x�Pg`� J%k�olh�vx}n��c�k�}x��olh�v0��zl� �����l��g����n�Ty��Pvxz1��h�i?z\��z\h�i?z\h?}1��z\�n{�c�}�gL}x��olh�v����ì��gL}�w�z\�}�w�gLh H\k���f?��}�ol�D��gL��w?�Pk J��T���Ûzl���?��vxz\c�i?ol�T��g�h�i?ol{ ~Tc�h�k�}x��olh�v�����>�hX��gL��}x�Pk�c?�PgL�^�ì}�w�zNb9j���_*olh�vx}n��c�k�}x��olh��nz\{¡g`��h�vvxz^k�c���z1y�w�z\h¡}�w�z�§���vx} gLh�i©~Tolc���}�w%�nolc�h�i�v�gL��z0��z\�?�Pglk�z^i|y���}�wX��g`�����Ty��Pvxz0��h�i?z\��z\h�i?z\hF}0��z\��{�c�}�g�}x��olh�v��¤vxz\z�9���lc���zmN0~Tol�¬g�h|���¢��c�vx}���gL}x��olh����

� $! � A%5/, 0�; -�$ 02>@A%5 36587�� 36>&5�* (�, -8.10"�L$# X�[�[�[OW�XQP%U1W /��D¶¬µ �Ch � ^ ��� � � � µ �8E � ^ ��� �5� �)0 ED¸�8 ��¸

� � ^ � � ^ ��� ��>�@BA� 2 4 w � 2 4 k � � ^µ �CE

� � ^ ��� ^ � � � � � >�@�A� � K ^ � 2�4 w � 2:4 k � � ^� � L$WA] L1, P%U1W � ¸b� � ^ � � � � � 6 ¸ 52µ 7̶ 3 D 7±» ¸?7��8El¸ 52¸b�8El¸b�8�\52¸^¶�¼ )2�TµH�;7B� �ì» � »i7̼'7P³¢µl¶�³ h0�;� � ¸^¼�µl¶ < � H ����27±» 7�» µ �|µ 6 6 ¶x¸ C�7̵ �;7�� �,�=�l¶��;EH7�»=�T¶�7 6 )$�T¸qE µ /q/��D¶*EH7B�?·�;�)µ,52µH7P¶ 3 D 7±» ¸+7��8ED¸�52¸b�8El¸b�8�H52¸`¶�¼ )$�Tµ �;7�� �¡¸b��»\¸^¼ 6 ³¢¸����µ �CE%³¢¸��%� ^ ��� � � � 6 ¸�5�» ¸ )2E � 3¤¶xµ �8EH�l¼�� )2�C/��;7�� ��»�� � ^ 0 � 0 � ^ µ �CE � µl¶x¸7��8El¸ 52¸b�8El¸b�8�T³ h+/=�2��» ¸b�?H ���F¸�� 0 � � � ^ ��� ^ ��� ��7±»%µU5�» ¸ )2EH�D3¤¶xµ �CE �l¼ 5�¸^¶�¼ )2�Tµ �;7�� � µ �8E � � � ^ � � ^ � � � � �'7�»%µX»=�T¶�� �F· 5�»\¸-)$E �D3¶xµ �8EH�l¼ 5�¸^¶�¼ )2�Tµ �;7�� � � µ �CE µL»7����1¸�8,�87��;7B� ���]H � �]H

/ )?¶����?¸^¶�¼��D¶¤¸ 0 µL»�» )?¼�¸����?µ ���C��¸ �/�7̸��8�"�l¶xµ /^³¢¸=3x¼�µ /=�27���¸L���Fµ �0¼�µD<�¸Ú»%µ �¬¼'�L»=� � � �'� F�� +-)?¸^¶q7P¸Ú» 0E 7±»i�;7��F·$)27±»q�F¸\» 6 ¸�� D ¸�¸������F¸ 5�»\¸-)$E �D3x¶¤µH�8E �l¼ � )$�8/��;7�� �ì» µ �8E|¶xµ �8E �D¼ � )2�C/��;7�� ��» D 7�����µ E�C`µ �8�Tµ`·l¸ � � � ��F9�� » ¸�¸��1¸�8,�87��;7B� � � H � �]H ���?¸�� 0 �8�X¸ �/�7̸��C���l¶xµ /`³�¸13¤¼�µ /1�27B��¸'���Fµ ��¼�µD<�¸Ú»�µ ��¼'�L»=� � +-)?¸^¶q7P¸Ú»�;�� � ¶x¸\»y5WH µ �8E K ^ ��E 7±»=�;7B�?·&)$7�»q�F¸\»� � ¶¤¸Ú»g5�H � � ¶��l¼ µX¶xµ �CE �l¼ 5�¸^¶�¼ )2�Tµ �;7�� � D 7�����µ E�C`µ �8�Tµ`·l¸1r � � � w r � � w wgrS L1,=_�]�� P%U1W ���?¸�/q� �8EH7B�;7�� ��»'��� ���F¸q�l¶x¸^¼��]H � µD¶¤¸|¼�¸�µH�8�,�;�'»i7̼"5A³ 7 �=h����?¸¡¸19s5 ��»i7��;7B�H�)���m���F¸L���F¸q�l¶x¸^¼µ �CE?���m7B�Ì»"5A¶������ H �Y�F¸\»\¸'/�� �CE 7��;7B� �ì»�/�µ � 6 ¸%¶x¸^³¢µD9L¸�E 0 µL»�EH7�»=/-)D»�»\¸qE?7B����¸�/b�;7B�H���$H ���?¸%¼�µ 7B��5 � 7��8�Ì»�µl¶x¸���F¸,�=�l³Ì³ � D 7B�?· �� H�º»i7��F·D³�¸�5�» ¸ )2E � 3¤¶xµ �8EH�l¼ � )$�8/b�;7B�H� � /�µ �K¶x¸�5�³�µH/�¸ 6 � ��� � ^ µ �8E � � H�� ^ µ �CE � ¼�µHh � 6 ¸�h D ¸�µD<�¸`¶¡¶x¸,+-)$7P¶x¸`¼�¸b�8�Ì»?���Fµ � 52µ 7̶s3 D 7�»\¸ 7B�CEl¸�5�¸��CEl¸��C/�¸.H�/��l¶|¸=9�µD¼ 5�³�¸ 0 7��+7�»¸��8�$)�· �����FµH�8�=�l¶)¸ C^¸`¶�h �"��Z� �

�;:�< �Lq � ^ �����=� ! � � ^ � � �� !�u ��r K � � F��5�;:�< �Lq � ���d�� � � � � �� Du ��r K �

%

Page 11: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

� $�� UG; A A�� A���� ("$�-/;2>10����z�h�oLy����no��Dz*}�w�z�vxz^k�c��x��}xf oL~�}�w�z ( °ë° &,��k�oDh�vx}���c�k�}x��olh�fD}�w�z�����o?oL~�oL~Avxz^k�c��x��}xf1~Tol�Z}�w�z °*° &,��k�olh�vx}n��c�k�}x��olh�Pv0�lz\��fKv���{��¢�±g����¤gLh�i�����h'~ glk�}`�Ag|e?��} v���{%�?��z\�\����!Nv0y���}�wK}�w�z�ol�:������h�g��£b�j­��_*olh�vx}��nc�k�}x��olh���}�w�z�{¡g���hK}�gDvxm�Pv�}�o�����oL�lz0}�w�gL}�}�w�z0��z\��{�c�}�g�}x��olh�v gL��z0��vxz\c�i?ol�T��gLh�i?ol{ y w�z\h<� ^ gLh�i4� g���z1}���c?��f%��g�h�i?ol{ �T��h�vx}�z^gDi%oL~��vxz\c�i?ol�T��gLh�i?ol{X���

� � L$WA] L1, P%UYM � ¸b� � ^ ��� � � � 6 ¸ 52µH7P¶ 3 D 7±» ¸ 7��8El¸ 52¸��CEl¸��C�"52¸^¶�¼ )2�TµH�;7B� �ì»�µ �8E´³¢¸���� ^ � � � � � 6 ¸¶xµ �8EH�l¼�� )2�C/��;7�� ��» H �N¸B8 ��¸ � � � ^ � � ^ � � � � � � µL» 7�� �N¸B8 �C7B�;7�� � � H � �¡µH�8EX³¢¸�� < �C� � 6 ¸ µX¶xµ �CE �l¼52¸`¶�¼ )$�Tµ �;7�� �?H��Y�F¸�� 0 �i�l¶|µ �Ch �l¶xµ /^³¢¸'¼�µH/=�27���¸ * � �C� ����¸�/�¸\»�»\µl¶�7̳ h�µ � ¸� �/b7P¸b�8�+� ��¸��e���FµH� ¼�µD<�¸Ú»�µ �¼'�L»=� � +-)?¸^¶q7P¸Ú»��

EF�;:�< �Lq@*�� 0 � � k ��N � � � N\u?>��;:�< �Lq@*� 0 � � k �qN � � � NÚu�E � � r � �

� r �

�­w�z\ol��z\{ -��6N0~ToL�¢��o�y0v0z^glv��¢��f�~T��ol{(��w�z\ol��z\{ -�� r|�¤vxz\z%g�����oFo�~¨��vxmDz\}�k�w���h�}nw�z©v:c�e�vxz^�lc�z\h?}\��� >�h�oD��i?z\�}�o%���no��DzN��w�z\oD��z\{ -��srì�Fy�z0��h?}���o�i?c�k�z�vxol{�z gli�iD��}x��olh�g`�,h�ol}�gL}x��olh�vÚ�bdz\} !ºi?z\h�ol}�z1}�w�z0��z\�n{�c�}�gL}x��olhX}�w�gL}ë�Pv glk\k�z^vnv���e?��z�}�o�}�w�z1{|glk�w?��h�z6* � !3�Pv�z���}�w�z\� ol�G<)���,��w�z\��z

gL��z�}xy�o%}xfF��z^v0oL~­�Dc�z\�x��z^v6* k\gLhK{¡gLmlzl®�z���}�w�z\��� � � �d��y�w?�±knw�i?z\h�ol}nz^v0}�w�z%�lc�z\��f�H�y w�gL}��Pv !©������ J ol�� >�� � �*y�w?�±knw�i?z\h�oD}�z^v }nw�z��Dc�z\��f H�y w�gL}­�±v)! K ^ � � �� J����ìol� }�w�z3(T}�w��Dc�z\��f/* {¡g�mlz^v\��i?z�§�h�z�}�w�z��lc�z\��f?�gLh�vxy�z\�%��g���� � � �@� � � � � � � � ��y w�z\��z�z���}�w�z\��* `sv%�Dc�z\��f�y glv¥� � � � �T��gLh�i }�w�z�gLh�v:y�z\�©��}��lol}%y glv� ��ol��* `sv1�Dc�z\��f�y glv)� >�� � � �NgLh�iK}nw�z¡gLh�vxy�z\�1��})�lol}1y glv � �¤����z¡glvnvxc�{%z%}�w�g�}6* {|gLmlz^v1z� �glk�}x��f���Dc�z\�x��z^v¬gLh�i|�nz�~¨z\� }no�}nw�z vxz^�lc�z\h�k�z � � ^ � � ^ � ��11 � � � � � � � � 1oL~£g����Z}�w�z^vxz1��g`����v gDv�}�w�zm�T¶xµ ��»=/^¶q7G5 ����oL~ * `svk�ol{%��c�}�gL}x��olh����

d�ol}x�Pk�z)}�w�gL}�h�o%�¢��{���}�gL}:��oDh�v0y�z\�nz0��{���oFvxz^i�olh�}nw�z�k�ol{%��c�}�gL}x��olh�g`����oLy�z\� oL~ *º����w�z\�nz�~¨ol�nzl� * k\gLhe�z gDv�vxc�{%z^i|}�o�e�z�i?z\}�z\��{©��h?�Pvx}:�±k©��y�zNk\g�h�g`��y­g`f�v£§� ¥}�w�z1��gLh�i?ol{ }�gL��z1}�w�gL}�{¡g` ?��{���¹\z^v }�w�z gDi?��gLh?}�gL�lz* glknw?��z\�lz^v�������w?�PvXglv�v:c�{%��}x��olh���{%�?�¢��z^v'}�w�gL}�~Tol�|z\�lz\��f N�� ( � � }�w�z (T}�w´�lc�z\��f oL~6* �Pv�~¨c?�¢��fi?z\}�z\��{©��h�z^i e?f�}nw�z|§���vx}.(�> N'�lc�z\��f?��gLh�vxy�z\�%��g�����v\����w?c�v\�£~¨ol��z\�lz\��f#(���}Xk\gLh�e�z�i?z\}�z\��{©��h�z^i ~T��ol{}�w�z'}���gLh�v�k��:����}�y w�z\}�w�z\�|}�w�z�( }�w��lc�z\�nf�y­gDv|� � � � �T� ol��� >�� � ������� z�g`�Pvxo��Dz\}¡}�w�g�} * `sv�olc�}���c�}��Pv|g�¤i?z\}�z\�n{���h?�±v:}x�Pk`�,~¨c�h�k�}:��oDhXoL~���}�v*}n��gLh�v�k��x����}^��%0z\h�ol}nz¬e?f�����q � � ^ � � ^ � �� 1 � � �?� K ^ � � � K ^ � ^u�}�w�z ( }�w¡�Dc�z\��f%oL~* glv¬g�~¨c�h�k�}x��olh'oL~,}�w�z ����z\�D��olc�v0�lc�z\��f?��gLh�vxy�z\� ��g�����v¬gLh�i'i?z\h�ol}�z1e?f����Kq � � ^ � � ^ � ��1 � � � � � � � � `u�}�w�zolc�}���c�}�oL~�* glv g�~¨c�h�k�}x��olh'oL~���}�v�}���gLh�vnk��x����}^�

"�L$# X�[�[�[OW�XQP%UYM � ¸b��� 6 ¸�µ » ¸,+-)?¸��C/�¸� � � ^ � � ^ � ��11 � � � � � � � � 0D �?¸^¶x¸ �i�l¶?N�� (�� � D ¸ �Fµ�C^¸ ���FµH�� � � � � � � � � � � H ���F¸b� 0 ��7±» µ���o?v�v���e?��z *3�T}���g�h�v�k��x����}�7 ���=�l¶ ¸ C^¸^¶qhmN�$( ���

���Kq � � ^ � � ^ � ��11 � � �?� K ^ � � � K ^ � ^u%� l� � � � �T� �Ú� >�� � �T� bdz\}�c�v�k�olh�v¤�±i?z\��flz\} gLh�ol}�w�z\� iD�Pvx}��x��e�c�}x��olh'olh|}�w�zNg�h�vxy�z\��v,}�o�* `sv��lc�z\�:��z^vN��y w?�Pk�w��D��hX}�c���h��D��h�i?c�k�z^v

gLh�ol}nw�z\�­iD�Pvx}n�x��e�c�}x��olhKolh¡}nw�z1��oFv�v¤��e?��z�*3�T}���gLh�v�k��:����}�v�����_*olh�v��Pi?z\�1g)��gLh�i?ol{ ����o�k�z^v�v 7< }�w�g�}�oDhX}�w�z ( }�w�Dc�z\��f¡o�~�* gLh�vxy�z\��v gDvë~¨o�����oLy¬v\®

ND�,>T~ * `sv1�Dc�z\��f'�Pv)� � � �d�­gLh�i�~¨ol� v:ol{%z?N�� � � (­}�w�z � }nw �Dc�z\��f?��gLh�vxy�z\�1��g`���0�Pv � �E� � � ��}�w�z\h 7< `svgLh�vxy�z\�ë�±v � �T~¨oD�­g�h�gL��e?��}���gL�nf¥vxc�knw��Dc�z\��f?��gLh�vxy�z\� ��g`���^� � �%� � � ���

rì�,>T~ * `sv1�Dc�z\��f'�Pv�� >�� � � gLh�i�~¨oD� vxol{%z?N � � � (�}�w�z � }�w��Dc�z\��fF��g�h�vxy�z\�1��g`���1�Pv � �E� � � �9}�w�z\h 7< `svgLh�vxy�z\�ë�±v �K� ~¨ol� gLh�g���e?��}���gL��fXvxc�knw��Dc�z\��f?��gLh�vxy�z\� ��g`���^� � �%� � � ���

-ì�,>T~,h�z���}nw�z\��N1h�oD�¬r�w�oL�Pi�v\��}�w�z\h 7<'`sv g�h�vxy�z\�*�Pv0g�c�h?�¢~¨oD��{���f�k�w�o?vxz\h�r2F��Te?��}Nvx}n�x��h����

N�a

Page 12: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

>�}£�Pv*��oFv�v���e?��z1}�w�gL} 7< ����oL�l�Pi?z^v�gLh�vxy�z\��vZ}�w�g�}�gL��z�h�ol}*k�olh�v��Pvx}�z\h?}�y���}�w�µ �Ch���z\��{�c�}�g�}x��olh�f?}�w�gL}Z�Pv\�?y�z¬k\gLhw�g`�lz�}xy�o��Dc�z\��f?��gLh�vxy�z\� ��g�����v1oL~�}�w�z�~Tol��{ � � ^ � � � gLh�i � � � � � ~¨oD� � ^ �� � ol� � �%� � ^ � gLh�i � �%� � � ~Tol�� ^ ��Z� ��>�h'}�w?�Pv¬k\glv:z k\g`�¢��}�w�z }n��gLh�v�k��x����}7��8/q� �ì»i7±»i�T¸b�8�T�Lol}nw�z\��y��Pvxzl��}�w�z)}���gLh�vnk��x����}��Pv k\g`�¢��z^i)/q� �ì»i7±»i�T¸b�8�T�� z §���v:}¬vxw�oLy �T��h ° ��ol��oFv���}x��olh0-�� -?�,}�w�gL}�}�w�z gli?�LgLhF}�gL�lz;* {����lw?}�w�g`�lz0��h�iD�±v:}x��h��lc?�Pvxw?��h���e�z\}xy�z\z\h

}�w�z�����o�k�z^v�v47< gLh�i }�w�z���gLh�i?ol{ ��z\��{�c�}�gL}x��olh < �Pv v:{¡g`�¢���%��w�z%��z^glv:olh'�±vO}�w�gL} glv���olh���gDv 7< gLh�vxy�z\��vk�olh�v��Pvx}nz\hF}x��fX��y w?�Pk�w|w�gL����z\h�vëy���}�w|�lo?o2i©����ole�gLe?�¢�¢��}¤f��Z��} H�e�z\w�g^�Dz^v J1z� �glk�}x��f¡glvëg0��gLh�i?ol{º��z\��{�c�}�g�}x��olh��>�hKol��i?z\�¬}�o©~¨ol�n{¡g`�¢��¹\z�}nw?�±vÚ��y�z k�oDh�v��Pi?z\� }�w�z�iD��p�z\��z\h?}1iD�±v:}��x��e�c�}x��olh�v1oDh�}�w�z)}���gLh�v�k��:����}0oL~�* �T��h�i?c�k�z^ie?f¡}�w�z iD�¢p�z\��z\h?}NiD�Pvx}n�x��e�c�}x��olh�v0olhX}�w�z gLh�v:y�z\��vë��} �lz\}�v����"�L$# X�[�[�[OW�XQP%U P � ¸b��� � 0 � � µ �8E�� A� 6 ¸L���F¸X¶xµ �8EH�l¼ C`µl¶�7̵ 6 ³�¸Ú»�» )$/=� ���Fµ ��� � 7±»m���F¸?�T¶xµ ��»=/^¶q7G5 � ����*D �F¸b�e7��Ì» +-)?¸^¶q7̸\» µl¶x¸%µ �ì» D ¸`¶x¸�E 6 h 0 � � 7±»���F¸m�T¶xµ �ì»i/`¶�7G5 ��� �'* D �F¸b�e7��Ì» +-)?¸^¶q7̸\» µl¶x¸�µ ��» D ¸^¶x¸qE 6 hN<µ �CE�� A� 7±»���F¸'�T¶¤µH��»=/^¶q7 5 ����� * D �?¸�� 7B�Ì» + )F¸`¶�7̸\» µD¶¤¸�µ �ì» D ¸`¶x¸�E 6 h 7<:H�+� �;7�/�¸ ���Fµ � 6 h ���F¸\»\¸ El¸�8,�87��;7B� �ì» � µ �CE 6 h�&)?¶ µL»�» )?¼"5 �;7�� ��»��'* � 0 � � k �qN� � � � � ����� � � � µl¶x¸ ���F¸0»\µl¼�¸¶xµ �8EH�l¼ C`µl¶q7Pµ 6 ³¢¸\»��©µ �CE�* �

0 � � k ��N �?� � � � ��� � � H* ]bW c�WAY�[±[�[OW�XZPEU P

EJ�;:�< � A� q ������� A� � � N\u > �;:�< � � q ���X��� � � � N\u�E � � r �� ^�¶��b�����ë��oD�­g�hFf|��oFvnv���e?��z%gLh�i'k�olh�v��Pvx}�z\h?}'*3�T}���gLh�vnk��x����} �Ky�z1w�g`�lz1}�w�gL}

�;:�< � � q�� � � ��u � r � ��¤r � >��'� � � �;:�< � A� q�� A� � � E�� A� (�� � < F�� (�� ��� F ��u

��w�z\��z�~Tol��zl��}�w�z�iD�±v:}��x��e�c�}x��olhKoL~�� A� /q� �CE 7B�;7�� ��¸�E1oDh�� A� e�z���h���k�olh�v��Pvx}nz\hF}��Pv z� �glk�}x��f�}nw�z�iD�Pvx}��x��e�c�}x��olhKoL~� � �X��c���}nw�z\��{%ol��zl�9}�w�z%����oDe�gLe?�¢����}xf�}�w�g�}�� A� �PvO��h�k�olh�v��Pvx}�z\h?})�±v�vx{|g`�¢� ®�� A� �PvO��h�k�olh�v��Pvx}�z\h?})��~�~¨ol� v:ol{%zN � � � ()����}nw�z¡k�ol����z^v:��olh�iD��h����Dc�z\��f?��gLh�vxy�z\� ��g�����v1v�gL}x�Pv�~Tf � � � � � gLh�i � � �� � � oD� � � � � � gLh�i�?� �� � � �*�ìol� g��L���lz\h�(ëgLh�i � }�w?�Pv�z\�lz\h?} w�gL����z\h�v y���}�w'����ole�gLe?�¢�¢��}xf�gL} {%oFv:}­r K � ��I�z\h�k�zl�

�;:�<!� A� q�� A� (�� (@F � < F�� (�� ����F ��u � � �r�� �

r K � � �4 r �� ^

�­w�z1����ol��o?v���}x��olhX~ToL�¢��o�y0v\®�� �;:�<!� A� q ������� A� � � NÚu >��;:�<!� � q ���'��� � � � N\u ��� �� �;:�<!� A� q � � ��� A� � � N�E�� A� (�� � <!F�� (�� ����F ��u&> �;:�< � � q � � ��� � � � N\u �� � �;:�<!� A� q�� A� (�� � < F�� (�� ��� F ��u� �� �;:�<!� A� q ������� A� � � N�E�� A� (�� (@F � < F�� (�� ����F ��u >��;:�< � � q ���X��� � � � N\u �� � �;:�< � A� q�� A� (��3(&F � < F�� (�� ����F ��u� �;:�< � A� q�� A� (��6(&F � <!F�� (�� ����F ��u� �

r ��� ^�>�}1��z\{¡g`��h�v0}�o|e�oDc�h�iK}�w�z¡gli?�LgLh?}�gL�lz3* {����lw?}1w�g`�lz)��h=iD�±v:}x��h��lc?�Pvxw?��h���e�z\}xy�z\z\h�� A� g�h�i�� � ����w�z��hF}nc?��}:��oDh=�±v)}�w�g�}1~Tol� z\�lz\�nf���oFvnv���e?��z�g�h�i�k�olh�v¤�±v:}�z\hF}�*3�T}���gLh�vnk��x����} � c�h?��z^v�v%vxol{�z H�e�gli�J'gLh�iZH ��gL��z�J

z\�lz\h?}�olh¡}nw�z k�w�oL�Pk�z1oL~ � ^ gLh�i � �¤glvª��hX}nw�z i?z�§�h?��}:��oDh�oL~ ��w�gL����z\h�v\��}�w�z1���nole�gLe?�¢�¢��}xf|}�w�gL} � � � �¥�±vz� �glk�}x��f�}�w�z¬v�gL{�z­gDvZ}�w�z ����ole�g�e?���¢��}xf%}�w�gL}�� A� � �,��� z h�oLy=~¨ol�n{¡g`�¢��f©i?z�§�h�z�}�w?�Pv,z\�lz\h?} �*%0z�§�h?��}x��olhL-�� ���gLh�i|e�olc�h�i���}�v�����ole�gLe?�¢�¢��}xfK� ° ��oD��oFv���}x��olh -�� ������ìol� gLh?f%��oFvnv���e?��z3*$�T}n��gLh�v�k��x����} � � � � ^ � � ^ � �� 1 � � � � � � � � Ny�z k\gLh�gDv�vxc�{%z0}�w�gL}ë�¢~ ���±v�k�olh�v��Pvx}�z\h?}}�w�z\hK~Tol�3( �� � e�ol}�w�� � �� � � g�h�i � � �� � � ��}�w?�Pv1{�z^gLh�v1}�w�g�}6* h�z\�Dz\��glvxm�v gX�Dc�z\��f'�¢~ ��}�v g�h�vxy�z\�0�±v

i?z\}�z\��{©��h�z^i'e?f¥g©����z\�l��olc�v��lc�z\��f?��gLh�vxy�z\� ��g����Ú���

N N

Page 13: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

"�L$# X�[�[�[OW�XQP%U RM/��D¶�¸ C^¸`¶�h�»g5�¸�/b7 8,/m/=�2�H7B/�¸?���+5�µ 7P¶ 3 D 7±»\¸?7B�CEl¸�5�¸��8ED¸��8� 52¸^¶�¼ )2�TµH�;7B� �ì» � ^ ��� � � � � 7�����F¸LEl¸�8,�87��;7B�H� ��� ��El¸B8 ��¸�� �0� � ^ ��� ��;� 6 ¸m���F¸|»\¸��,���|µl³P³45 ��»�»=7 6 ³¢¸%µ �8E�/��H��»=7�»=�T¸��C��* 3*�T¶xµ ��»=/^¶q7G5 �Ì» 0� � � � ^ � � ^ � ���� � � � � � � � � 0 » µ �;7±»��ihD7��F· �

� N � ( � � ��� � � � � ���$� � ^ ��� ��� � ! � � ^ ��� � � � ! <�: � � � ��� � � � � � � � � * ]bW c�WAY�[±[�[OW�XZPEU R � ¸��"� ^ � � �L� �56 ¸\52µ 7̶ 3 D 7±» ¸+7��8El¸ 52¸b�8El¸b�8�H52¸`¶�¼ )$�Tµ �;7B�H��»����F¸b� �=�l¶ µH�8h,5 �L»�»i7 6 ³¢¸ µ �CE/q� ��»=7�»=�T¸��C� * 3*�T¶xµ �ì»i/`¶�7G5 � � � � � ^ � � ^ � ��11 � � � � � � � � D ¸ �Fµ�C^¸'���FµH� �

�;:�< ��� k 0 � w q �"���� �¬� � ^ � � ��u ��4 r ��¶��b�����'�ëf�i?z�§�h?��}x��olh�� �Q����!+%)� � ^ ��� ���¢~¬}�w�z\��z%z� ?�Pvx}?N � ( � � � � vxc�knw�}nw�gL}1z���}�w�z\� � ^ ��� �T� � ! �� ^ � � � �� ! ol��� � � ���� � � � � � �=� � ��ol�XgLh?f��L���lz\h4(�gLh�i � e�ol}�w �;:�< ��� k q � ^ ��� �T�� ! � � ^ � � � �� ! u gLh�i�;:�< ��� w q � � � ��� � � � � � � � � u1gL��zKvx{¡g`�¢��z\��}�w�g�h7r K �$�xv���h�k�z� ^ gLh�i � g���z���g`�����Ty­�±v:zK��h�i?z\��z\h�i?z\h?}\�����w�z\��z�~Tol��zl�

�;:�< ��� k 0 � w q �"�0��!+%)� � ^ ��� ��u �� �r�� � r � r K � � �4

r ���­w�z1mlz\f%��z\{%{|g�~Tol������oL�l��h��¡�­w�z\ol��z\{ -�� r)�Pv\®

R Lh, ,�_4P%UYT � ¸�� � � � � ^ � � ^ � ��11 � � � � � � � � 6 ¸�µH�8h 5 �L»�»=7 6 ³¢¸ µ �CE�/q� �ì»i7±»i�T¸b�8�2* 3*�T¶xµ �ì»i/`¶�7G5 � 0 ���F¸b��;:�< � � q�� � � � E ����� �0� � ^ ��� ��u � �;:�< � A� q�� A� � �du�¶��b�����](L��h�k�z��X�Pv0g���o?v�v���e?��z *3�T}���g�h�v�k��x����} y�z1w�g`�lz1}�w�gL}ë~Tol�¬g`�¢� N�$( ���K����Kq � � ^ � � ^ � ��11 � � �?� K ^ � � � K ^ � ^u%� l� � � � �T� �Ú� >�� � �T�

��w�z\��z�~Tol��zl��� A� � � �¢p ~Tol��g`�¢� N � (�� �K�%}�w�z (T}�w gLh�vxy�z\� 7< �����Dz^vK�Pv � � ��h }nw�z7k\glvxz }�w�gL}���Kq � � ^ � � ^ � ��11 � � �?� K ^ � � � K ^ � `u � � � � �?� �Og�h�i=ol}�w�z\��y��Pvxz���}�v�( }�w g�h�vxy�z\� �PvG� �¤� �ëf=olc��%glv�vxc�{���}x��olh�vgLh�i|}�w�z1i?z�§�h?��}x��olhKoL~ 7<��?�L���lz\hX}�w�g�} 7<�g�h�vxy�z\��z^i HÚk�ol����z^k�}x��f�J)olhXz^glknw¡olh�z1o�~�}�w�z0§���vx}�(&> N1�lc�z\�x��z^v­��}�v(T}nw�gLh�vxy�z\�ë�±v0gLh|��h�i?z\��z\h�i?z\h?}�g�h�i|c�h?��~Tol��{ r2F��Te?��}Nv:}��x��h����,��w�z\��z�~Tol��zl�

�;:�< � A� q�� A� � �du � r K � �(L��h�k�z � �Pv%gK��o?v�v���e?��z-*3�T}���g�h�v�k��x����}%y�zXw�g`�lz¡}nw�gL} � � � � �¢p´~Tol�¡g`�¢��N�� (�� �K� � � � ���?�����

_*olh�v¤�±i?z\�1gLh?f�vx��z^kn�¢§Ak%knw�oL�Pk�z�oL~,��z\��{�c�}�gL}:��oDh�v � ^ gLh�i � � ~¨ol��y w?�Pk�w � � � ^ � � ^ � � ��� ����vxc�knwK}�w�gL}���0��!+%)� � ^ ��� ���,b�z\}0��; �� �< �� � � � ^ � �?���£g�h�iX��; � �=< � � � � � � �������*f�}�w�zNi?z�§�h?��}x��olhXo�~ �Dy�z0�lz\}ë}�w�gL}^®

� � � � �?�T��� � ^ ��<�� � � ; �� � ; � � F���� ��; � � � <

�� � < ���oD�1z\�lz\��f@N � ( � � ����e�oD}�w < �� �� < �� gLh�i ;8 � �� ;8 � ��oD}�w�z\��y��Pvxz �Q�F��!+%)� � ^ � � �����%�­w�z\��z�~¨oD��zl�v���h�k�z � ^ gLh�i4� gL��z0��gLh�i?ol{'�Fy�z1w�g`�lz0}�w�gL}ë~Tol��z\�lz\��fXk�w�oL�Pk�z1oL~ � ^ gLh�i � vxc�knwX}�w�gL} ����0��! %)� � ^ ��� �}�w�z1����oDe�gLe?�¢����}xf�}nw�gL} � � � �'�Pv�z� �glk�}x��f�r K � � �,��z k\gLhKk�olh�kn��c�i?zl®

�;:�< � � q�� � � � E ����?��!+%)� � ^ � � ��u � r K � �y w?�Pknw�k�ol{%�?��z\}�z)}�w�z1����o?oL~,oL~ª}nw�z0��z\{�{¡g�� �

N^r

Page 14: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

�¶��b����� %sW1^ � � L$WA] Lh, PEUYM1-�bdz\}��Xe�z¬}nw�z¬vxz\}*o�~9g�������oFvnv���e?��z1gLh�i%k�oDh�v��Pvx}�z\h?} *3�T}���g�h�v�k��x����}�v �Xv:c�k�w|}�w�gL}* � �Z� � Nl�

�� �;:�< � � q � �X��� � � � N\u > �;:�< � A� q ���X��� A� � � N\u ��� ��� (

��������;:�< � � q�� � � ��u?> �;:�< � A� q�� A� � ��uT� ��� � �;:�< � A� q�� A� (��6(&F � < F�� (�� ����F ��u

� (�����

�� �;:�< � � q�� � � � E ���0��!+%)� � ^ � � ��u?> �;:�<!� A� q�� A� � ��u �� � �;:�< ��� k 0 � w q � ��0��! %)� � ^ � � ��u ��NL�

� ��� (��������;:�< � � q�� � � � E �"�?��!+%)� � ^ ��� ��u > �;:�< � A� q�� A� � �duT� � �;:�<!��� k 0 � w q �"����!+%)� � ^ ��� ��u ��� �¤r?�

� �;:�< � A� q�� A� (��6(&F � < F�� (�� ����F ��u �*-?�

��z�g`����z^gli?f�vxw�oLy�z^i|��hK}�w�z ���noFoL~,oL~ ° ��ol��o?v���}x��olhe-�� -�}�w�gL})�*-?� � �;:�< � A� q�� A� (�� (@F � < F�� (�� ��� F ��u � � w wgr�� k �e?f bdz\{%{¡g?-��.c|y�z��lz\}1}�w�g�}���NL� � aì�%��w�z\��z�~Tol��zl����})��z\{¡g`��h�v1}noXe�olc�h�i=�xr?��® !Nvnvxc�{%z%y���}�w�oDc�}1��oFv�v0oL~�lz\h�z\��g�����}xfX}�w�gL}

(�����

�;:�<!� � q�� � � � E �"�0��! %)� � ^ � � ��u � �;:�< ��� k 0 � w q �"�0��! %)� � ^ � � ��u� (

������;:�<!� A� q�� A� � ��u � �;:�< ��� k 0 � w q �"�0��!+%)� � ^ � � ��u

}�w�z\h'c�v���h�� ° ��oD��oFv���}x��olh -�� ��y�z1�lz\} }�w�g�}����(��������;:�< � � q�� � � � E � ����!+%)� � ^ ��� ��u > �;:�< � A� q�� A� � ��uT� � �;:�<!��� k 0 � w q �"����!+%)� � ^ � � ��u ���

� (�����

�;:�< � A� q�� A� � ��u � �;:�< ��� k 0 � w q �"�0��! %)� � ^ � � ��u� {¡g` 

������;:�<!� � k 0 � w q �"�?��!+%)� � ^ ��� ��u

� �4 r �

��w?c�v\��y�z k\gLh�k�olh�kn��c�i?z�}�w�gL}`®

EF�;:�< � � q ���X��� � � � NÚu > �;:�<!� A� q ������� A� � � NÚu�E+� �4 r � �

�4 r ��� ^

X0v���h�� ° ��ol��o?v���}x��olh0-��.-�y�z k�ol{��?��z\}nz }�w�z1����o?oL~�®��� �;:�< � � q@* � 0 � � k ��N � � � N\u > �;:�< � � q=* �0 � � k ��N � � � N\u ���

� E �;:�<!� � q ���X��� � � � N\u > �;:�< � � q � �X��� � � � N\u�E� �� �;:�< � � q � �X��� � � � N\u > �;:�< � A� q ���'��� A� � � N\u �� � �� �;:�< � A� q ������� A� � � N\u > �;:�< � � q ���X��� � � � N\u ��� �

r � �� r ��

K����lz\h¡��w�z\ol�nz\{ -��srì�L}�w�z¬���noFoL~�oL~���w�z\ol��z\{ -��6N­�±v£z^v�vxz\h?}x�Pg`�¢��f¡}�w�z0v�gL{%z¬gDv,}�w�z¬k�oD����z^vx��olh�iD��h������noFoL~oL~�}�w�z%ol�x���L��h�g`� b�j���_*oDh�vx}���c�k�}x��olh ��}�w�z%����o?oL~�oL~­��w�z\oD��z\{ N%oL~1qsr?t\u��9�L���lz\h�}�w�z���� {|g`��h�b�z\{%{¡g2���%��w�z����o?oL~T�Ì�±i?z^g©�Pv�}�w�zO~¨oL�¢��oLy���h���®�%0z�§�h�z)}�w���z\z iD�Pvx}��x��e�c�}x��olh�vÚ®

N�-

Page 15: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

¯ ^ � � � ^ ��� ^ ��� ��� ����y w�z\��z � ^ ��� � � � gL��z'��g`�����Ty��Pvxz'��h�i?z\��z\h�i?z\h?} g�h�i�� ^ � � � � � gL��z��vxz\c�i?ol�T��gLh�i?oD{ ~¨c�h�k�}:��oDh�v\�

¯ � � � ^ � � ^ ��� � � ���^y w�z\�nz � ^ ��� �5� � gL��z*��g����n�Ty��Pvxzë��h�i?z\��z\h�i?z\hF}`� � � � � g���vxz\c�i?ol�T��g�h�i?ol{~¨c�h�k�}x��olhKgLh�i�� ^ � � � g���g�h�i?ol{ ~Tc�h�k�}x��olh��¯ I � � � ^ ��� ^ � � � � ����y w�z\��z � ^ ��� � � � gL��z'��g`�����Ty��Pvxz'��h�i?z\��z\h�i?z\h?} g�h�i�� ^ ��� � � � gL��z��gLh�i?ol{º~Tc�h�k�}x��olh�v\�

>�}­�±v�z\h�olc��lw'}�o%vxw�oLy$}�w�gL}ë~Tol� z\�lz\�nf¡ol��glkn��z1{¡glknw?��h�zl�ì~Tol� g`�¢�ªe�c�}�§�h?��}�z)hFc�{�e�z\�¬oL~ F�` v\®ND�NEF�;:�<!�Lq=* � k 0 � � kk ��N � � � N\u?> �;:�< �Lq@* � w 0 � � kw ��N F�� � N\u�E � � � F��rì�NEF�;:�<!�Lq=* � w 0 � � kw ��N � � � N\u?> �;:�< �Lq@* � k 0 � � kk ��N � � � N\u�E � � ��F9�

>T~���NL�Zol�0�¤r?�,i?o�h�oD}�w�o��±i��ì}�w�z\hXy�zNk\gLhXk�olh�vx}n��c�k�} gLhXz�¦¥kn��z\hF}�ol��glkn��z\�T{¡glknw?��h�z6* " }�w�gL} iD�Pvx}x��h��lc?�Pvxw�z^v0g��vxz\c�i?ol�T��gLh�i?ol{º~¨c�h�k�}:��oDh|~¨��oD{ g)��g�h�i?ol{ olh�z0y���}�w�gli?�LgLh?}�gL�lz �D��z^gL}�z\��}�w�gLh � �D��h�k�olh?}���gliD�Pk�}x��olh|}�o�}�w�zglv�v:c�{%��}x��olh���!1v�vxc�{%zO~¨oD��z� �gL{%�?��z)}�w�gL}�~Tol�ë��h?§�h?��}nz���fK{¡g�hFf4F�`sv\®

EF�;:�< �Lq@* � k 0 � � kk �qN � � � NÚu >��;:�<!�Lq=* � w 0 � � kw ��N � � � N\u�E � � ��F9���w�z�ol��gDkn��z\�T{|glk�w?��h�z.* " olh'��h���c�}�N���gLh�iXy���}�w=glk\k�z^v�v�}�o¥g�~Tc�h�k�}x��olh # � � � §���vx} v�gL{%�?��z^v0��g`�����Ty­�±v:z��h�i?z\��z\h�i?z\h?} ��z\��{�c�}�gL}x��olh�v\� � ^ � � �5� � ��gLh�i�g©��vxz\c�i?ol�T��gLh�i?oD{ ~Tc�h�k�}x��olh � � � � � * " }�w�z\h���hF�loDmlz^v* y­��}nw���h���c�}LN � gLh�iKgLh�vxy�z\��v­��}�v1�lc�z\�x��z^vOy���}�wK}�w�z���g`��c�z^v1o�~ g�h�i K ^ ��~¨ol� � � � ^ � # � � � � ����´w�z\h * w�g`��}�v�vxo�i?o?z^v6* " gLh�i'��}�olc�}���c�}�v0y w�g�}�z\�lz\� y glv0}nw�z%olc�}���c�})oL~ *º�?d ol}:�±k�z�}�w�gL}0�¢~ # �±v)g��vxz\c�i?ol�T��gLh�i?ol{(~Tc�h�k�}x��olh�}�w�z\hK}�w�z%iD�Pvx}��x��e�c�}x��olh=oL~ �Pv ^ y w�z\��z^glv��¢~ # �Pv g�}���c?��fK��gLh�i?ol{~¨c�h�k�}:��oDh}�w�z\h%}nw�z¬iD�Pvx}��x��e�c�}x��olhXoL~ �Pv �,��w?�PvZ�Pvë}�w�z ��z^glv:olh�}�w�gL} * " iD�±v:}x��h��lc?�Pvxw�z^v g1��v:z\c�i?ol�T��gLh�i?ol{ ~¨c�h�k�}:��oDh~T��ol{ g���gLh�i?ol{²olh�z|y���}�w gDi?��gLh?}�gL�lz��l��z^gL}�z\�)}�w�gLh � � (L��{��¢�PgL�%w?fFe��:�±i?��g����lc�{%z\h?}�v�gL���?��f�}no�g`�¢��oD}�w�z\�k�olh�vx}n��c�k�}x��olh�v�oL~,}�w?�Pv���gL��z\�^�

� ���9�����d�G� ��� ����

!1v y�z¡v:w�g`�¢��v:z\z���h�(lz^k�}x��olh�v'c D�tF�9}�w�z¥k�oDh�vx}���c�k�}x��olh=oL~+(lz^k�}x��olh@-Kk\gLh�e�zX�nz��±g� 2z^i=gLh�i �lz\h�z\��g`�¢��¹\z^i ��hvxz\�lz\��g`��y g`f2vÚ�¡��w�zXiD�¢pdz\�nz\hF})��vxz\c�i?ol�T��gLh�i?oD{ ��z\��{�c�}�gL}x��olh�v)ole�}�g`��h�z^i�vxw�g���z¡g�v¤��{©���PgL�|vx}���c�k�}�c��nz¡gLh�ig`��{%oFv:} �Pi?z\h?}x�Pk\g`�*����o?oL~*oL~�vxz^k�c��x��}xfl� >�hK}�w?�Pv1vxz^k�}x��olhKy�z z� �gL{���h�z�}�w�z ����o?oL~*oL~��­w�z\ol��z\{ -��sr)��h�g%{�ol��zgLe�vx}n��glk�}0{¡gLh�h�z\�^� B c��1�loFg`�Z�Pv1}�o|z^vx}�g�e?���Pvxw=g�~¨��g�{%z\y�ol��m|~Tol�¬���no��D��h����¤g���{�oFvx}\� g`�¢�*}�w�z%k�olh�vx}��nc�k�}x��olh�voL~,}�w?�Pv���gL��z\�NgLh�i|}no¡vxc��l�lz^v:}¬g)y­g`f�~¨oD�­i?z^v¤���Dh?��h���g�h�i|����oL�l��h��Xgli�iD��}x��olh�g`�ªk�olh�v:}���c�k�}x��olh�v\�

B c���~T��gL{%z\y�ol��m|i?z^g`�Pv y���}�wKk�olh�vx}��nc�k�}x��olh�v o�~£g���v:z\c�i?ol�T��gLh�i?ol{(��z\�n{�c�}�gL}x��olh olh� e?��}�v�y w?�Pk�w��±v}�w�z¡k�oD{%��oFv¤��}:��oDh�oL~ }�w���z\z%��z\��{�c�}�gL}x��olh�v\® P � K ^ ��, � � ^ �'�¤vxz\zX�9���Dc���z¡r�~¨oD� gLh��¢�¢��c�vx}���g�}x��olh����?>�h�lz\h�z\��g�� � � ^ gLh�i � K ^ gL��z Hn�¢���lw?}xy�z����lw?} J|gLh�i , �±v0y�w�z\��z {%o?vx} oL~*}�w�z�y�ol��m��Pv¬i?oDh�zl� , �Pv1k�olh�vx}n��c�k�}�z^i~T��ol{ ��vxz\c�i?oD�T��gLh�i?ol{ ~Tc�h�k�}x��olh�v0gLh�i|~Tol��}�w�z)��c�����oFv:z oL~,}�w�z gLh�g`��f�v��Pv y�z glvnvxc�{%z��¤glv���hK��w�z\ol��z\{ -��sr?�}�w�gL}�}�w�z^vxz1~Tc�h�k�}x��olh�v0gL��z1}��nc?��fX��gLh�i?ol{���>�h (lz^k�}x��olh -��?~Tol� z� �gL{%�?��zl�� � r2FZ�"� ^ gLh�i�� gL��z knw�oFvxz\hKglv��g`�����Ty��PvxzO��h�i?z\��z\h�i?z\h?} ��z\�n{�c�}�gL}x��olh�v gLh�i , P 2:4 w � 2:4 k ~¨ol����gLh�i?ol{ � ^ ��� � � � ��­w�z ~T��gL{%z\y�ol�nm�vx}�g���}�v,y­��}nw , y w?�PknwX{¡g`f�e�z1z^glv��¢��fXiD�±v:}x��h��lc?�Pvxw�z^i|~T��ol{ g1}n��c?��f¡��g�h�i?ol{ ��z\��{�c�}�gL�}x��olh�gLh�i'}���g�h�v�~¨oD��{¡vë��}1�D�±g � ^ gLh�i � ��h?}�oXg|��vxz\c�i?ol�T��gLh�i?oD{ ��z\��{�c�}�gL}:��oDh��N�­w�z����nol��z\��}xf , v:w�olc?�Piw�g`�lz��Pvë}�w�gL}£~¨ol��g`��{%oFvx}ëz\�lz\��f¡v:z^�lc�z\h�k�zl�6 � � ^ � � ^ � ���� � � � � � � � � F�D}�w�z0����ole�gLe?�¢�¢��}¤f|}�w�gL}�� ( � � � � ,���� �T��Pv�HÚkn��o?vxz�J }no�y�w�gL}�y�z,w�g`�lzZ~¨oD��g�}���c?��f1��g�h�i?ol{$��z\�n{�c�}�gL}x��olh�®�_�g`�¢�2g vxz^�Dc�z\h�k�zl� � � ^ � � ^ � ���� � � � � � � � � F�,)��K¬o?o2i¥�¢~ �;:�< �� �q � ( � � � � ,����?� ��u � r K���� � �0��z�glv�vxc�{%z�}�w�g�}¬gL��gL��}�~T��ol{ vxol{%z4H���gL��z�J�vxz^�lc�z\h�k�z^v)g`�¢�ol}�w�z\��v gL��z ,)��K¬o?o�i���b�o?oFvxz���f�vx��z^gLmD��h�����}�w�z)��oL��z o�~ � ^ gLh�i�� �Pv }no%z\h�vxc���z)}�w�gL} c�h�i?z\�1gLh?f��¤gDi�gL��}x���lz

N �

Page 16: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

h1

h2

-1

Output

Input

E

�9���Dc���z r�®*��w�z1w?���lw��Ì��z\�lz���v:}���c�k�}�c���z1o�~ª}�w�z iD�¢p�z\��z\h?}¬k�olh�vx}n��c�k�}x��olh�v�oL~�( °*° & �

knw�oFvxz\h��?�Pg`��hF}�z� �}�g�h�i�kn����w�z\��}nz� 2}\��g�}�}�glknm1olh }�w�zë��h���c�}�v*gLh�i)olc�}���c�}�vZoL~ , ~Tol��{�gLh�,)��K¬o?o2i)vxz^�Dc�z\h�k�zy���}�wKg �Dz\��f¡w?���lw'����ole�gLe?�¢�¢��}xfl��ìol� }�w�z�z� �glk�}0����ol��z\�n}x��z^v0h�z\z^i?z^i'~¨�nol{ }nw�z�iD�Pvx}��x��e�c�}x��olh�vOolh � ^ ��� gLh�i ,|��y�z%vxw�g`�¢�ª}n��fX}�o�~¨oL�¢��oLy}�w�z¡v:}�gL}�z\{%z\h?}1gLh�iK����o?oL~�o�~��­w�z\ol��z\{ -��srì����w�z��loFg`�,�Pv1}no�vxw�oLy�}�w�gL} �Pv0��h�iD�Pvx}x��h��lc?�Pvxw�g�e?�Pz|~¨�nol{�g

}���c?��f���gLh�i?ol{���z\��{�c�}�gL}x��olh�< olh %e?��}�v\� (l��z^kn�¢§Ak\g`�¢��f?�*}nw�gL}1~Tol� vxol{�z¡vx{¡g`�¢� � ��y w�oFvxz¡knw�oL�Pk�z|y��¢��� e�zz� ��?�±g���h�z^i w�z\��z^g�~¨}�z\�Ú���Z~Tol�%gLhFf ol��glkn��zX{¡glknw?��h�z/* ��h�ol}�h�z^k�z^v�v�gL�x�¢��f�gLh�z�¦¥kn��z\h?}%olh�zL� }nw�gL}�{¡gLmlz^v�gL}{%oFv:} � �Dc�z\�x��z^v\®

EF�;:�< �Lq@* � 0 � � k ��N � � � N\u?> �;:�< �Lq@* � 0 � � k ��N � � � N\u�E � � � � r � b�z\}1}�w�z)h�ol}x��olh�v0oL~��Dc�z\��f?��gLh�vxy�z\�1��g`���^��g�}���gLh�vnk��x����}^��}nw�z ~Tc�h�k�}x��olh � � ��g%��oFv�v���e?��z.*3�T}���gLh�vnk��x����}^��}�w�z��gLh�i?oD{�����o�k�z^v�v47<��Zg�k�olh�v¤�±v:}�z\hF}�}���gLh�v�k��x����}�g�h�iK}�w�z¡iD�¢p�z\��z\h?} ��gLh�i?oD{���g��x�PgLe?��z^v � � � � � gLh�i�� A� e�zglv���h=}�w�z�����oFo�~�oL~¬��w�z\ol�nz\{ -��sr�� ° ��oD��oFv���}x��olh -��.-'�¤v�g`fD��h��X}�w�gL}1}�w�z%iD�Pvx}�gLh�k�z|e�z\}xy�z\z\h � � g�h�i�� A� �±ve�oDc�h�i?z^iKeFf'}�w�z�����ole�gLe?�¢�¢��}xf�}nw�gL} � A� �±v���h�k�olh�v¤�±v:}�z\hF}�gLh�i'}�w�gL}0}�w?�Pv1����oDe�gLe?�¢����}xf'�Pv0e�olc�h�i?z^iKe?f � w �� � k �vx}x�¢�¢��w�oL�Pi�v\�ë��w�z¬w�z^g���}�oL~ªgL���?��fD��h��|}�w�z�~¨��gL{%z\y�ol��m)�Pv£��h�v:��z^kn�¢~¨fD��h��X}�w�zGH�e�gli�J3*$�T}n��gLh�v�k��x����}�v£~Tol�*�����Dz\h� ^ gLh�i � �X��w?�Pv�v:z\}���! % �� � ^ � � �0��z\�?�Pglk�z^v'��! %)� � ^ ��� ����h@%0z�§�h?��}x��olh@-�� ��g�h�i'��h�}�w�z%��z^vx})oL~ }�w�z����o?oL~��?>�}%k�olh?}�g`��h�v1��oFv�v���e?��z�g�h�i�k�olh�v¤�±v:}�z\hF}�*3�T}���gLh�vnk��x����}�v gLh�i=vxw�olc?�Pi=w�g`�lz%}nw�z¡����oD��z\��}xfK}�w�gL}�gLhFf � � ^ � � ^ � ���� � � � � � � � � ��8�H��7B�m��!+% �� � ^ � � �*v�gL}:�±v¤§�z^v�}�w�gL} � � ^ � � ^ � ��� � � ^ � � ���� � � � ^ ��� � � ��� � � � � � �Pv , ��K0oFo�i���d�ol}�z�}�w�gL}%0z�§�h?��}x��olh@-�� �X�PvN��h�i?z\z^i�g'vx��z^kn�Pg`�¬k\glv:z%oL~ }�w�z¡gLe�oL�lz¡gLh�i�g��±v:o�}nw�gL}^��e?f�}�w?�Pv����ol��z\��}xfl�

�;:�< � � q�� � � � E ���0��! % �� � ^ ��� ��u � r K � � ���w?�Pv­��{��?����z^v0}�w�g�}¬b�z\{%{¡gU-��.c)y w�z\��z��!+%)� � ^ ��� �,�Pv ��z\�?�Pglk�z^i�y���}�we��!+% *� � ^ � � �£�±v�}���c�zl®R Lh, ,�_�R U1W � ¸�� � � � � ^ � � ^ � ��11 � � � � � � � � 6 ¸�µH�8h 5 �L»�»=7 6 ³¢¸ µ �CE�/q� �ì»i7±»i�T¸b�8�2* 3*�T¶xµ �ì»i/`¶�7G5 � 0 ���F¸b�

�;:�< � � q�� � � � E ������ � �� � ^ ��� ��u � �;:�< � A� q�� A� � ��u N�c

Page 17: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

�ìol� ��! % �� � ^ � � �,}�o%e�z c�vxz�~Tc?��y�z1{�c�vx} w�g`�lz1}�w�g�}�;:�< ��� k 0 � w q �"�0��!+% �� � ^ � � ��u � � ��NL�

gLh�i�}�w?�Pv*vxc�e�v:}x��}�c�}�z^v ° ��oD��oFv���}x��olh?-�� ������w?�Pv£�Pv*}nw�z¬olh?��f%�?�Pglk�z���hX}�w�z ����o?oL~�y w�z\��z0y�z c�vxz0}�w�z¬i?z�§�h?��}x��olhoL~ � gLh�i)}�w�z�i?z�§�h?��}x��olh�oL~2}nw�z­iD�Pvx}n�x��e�c�}x��olh�vZoL~ � ^ gLh�i � ��!NvZi?z\{%olh�vx}n��gL}�z^iN��hL(lz^k�}x��olh�v�cì�sr+T´t?�6Nl�`}�w�z\��z�Pv glk�}nc�g`�¢��fKg|}���gli?z\o�p�e�z\}xy�z\z\h���z^i?c�kn��h���}nw�z��nz^�lc?����z\{%z\h?}�vN~¨��oD{ � ^ g�h�i � gLh�iKw�g`�l��h���gXvxoD{%z\y w�gL}�PgL���lz\����g`��c�z o�~ � ��!0���?��fD��h����qNL��gLh�iXb�z\{�{¡g ���6N)glv£��h'}�w�z ���noFoL~,oL~ª�­w�z\ol��z\{ -�� r�y�zNk�olh�kn��c�i?zl®� � L$WA] L1, R UYM � ¸b��� ^ ��� �., 6 ¸?E 7±»=�T¶�7 6 )$�T¸�E ��C`¸^¶"52¸`¶�¼ )$�Tµ �;7�� ��»�7�� � � 0 ³¢¸�� P � K ^ ��, � � ^ µ �8E'³¢¸��< �5�

� 6 ¸1µ�¶xµ �CE �l¼ 52¸^¶�¼ )2�TµH�;7B� � H � )15 5 ��» ¸+���FµH� �� � �� � ^ � � �,7�»¬µ�»¬µ 6 ��C^¸0µ �8E � »\µ �;7±» 8�¸\» � � �]H ���F¸�� 0�=�l¶ µ �Chm�l¶xµ /`³�¸�¼�µ /1�27B��¸;* � �C� ����¸�/�¸\»�» µD¶�7̳ h µ �K¸� �/b7P¸b�8��� ��¸ � ���FµH��¼�µD<L¸\» µ ��¼'�L»=� � +-)?¸^¶q7P¸Ú»��

EF�;:�<!�Lq=* � 0 � � k ��N � � � N\u > �;:�< �Lq@* � 0 � � k ��N � � � N\u�E � � � � r ��9o�v:c�{%{¡gL�x��¹\zl�D}�w�z¬{|gL«xol�,��oL��h?},��hX����oL�D��h��)}�w�z¬vxz^k�c��:��}xf%o�~d}nw�z¬iD�¢pdz\�nz\hF} k�olh�vx}n��c�k�}x��olh�vZ�Pvë}�o�i?z�§�h�z

}�w�z vxz\} ��!+% �� � ^ ��� �£v:c�k�wX}�w�g�}*~Tol� gLh?f¡��oFv�v���e?��z�g�h�iXk�olh�v��Pvx}�z\h?}'*3�T}���gLh�v�k��:����}`� �£�Fe�ol}�w5�;:�< � � q�� � �� E ������!+% ë� � ^ ��� ��u � r K � � � gLh�i:�;:�< ��� k 0 � w q �"�0��!+% �� � ^ � � ��u � � �T~Tol�,}�w�z¬v:��z^kn�¢§Ak � ��h%}�w�z0kn�±g���{y�z�gL�nz ����oL�D��h��ì���¬��w?�Pv1vxc��D�lz^vx}�v�}�w�gL}0}�w�z�k��:��}:�±k\g���vx}�z\�'~¨oD�¬i?z^v����lh?��h���g|��vxz\c�i?oD�T��gLh�i?ol{(��z\��{�c�}�g�}x��olh��c�v���h��X}�w�z)~T��gL{%z\y�ol��mXi?z^v�k��x��e�z^i'��h�}nw?�±v1v:z^k�}x��olh����Pv0}�o¥k�oD{%z c��Ky���}�w�g���z\��{�c�}�gL}:��oDh , vxc�knwK}�w�gL}0}�w�zvxz\}�oL~ ,)��K0oFo�i%vxz^�Dc�z\h�k�z^v��Pv�Hn�PgL���Dz¬z\h�olc��Dw�J%gLh�i"H�h?�Pk�z1z\h�olc��lw�J���d�ol}�z0}�w�gL}ë}�o�{%z\z\}�}�w?�Pv�z\h�i�olh�z k\gLhc�vxzXiD�¢pdz\�nz\hF})ol� {%oD��z%�lz\h�z\��g���i?z�§�h?��}:��oDh�v�oL~¬gLh ,)��K¬o?o�i�vxz^�Dc�z\h�k�z¡y���}�w=olh?��f�{���h�ol��k�w�g�h��lz^v1}�o'}�w�z����o?oL~��¤glv£�Pv }�w�z k\gDvxz1~Tol��}�w�z1��z\�n{�c�}�gL}x��olh�� ��h (lz^k�}x��olh�tl���

� � ������m�=��� � �� ' �+��C������ \�����+�

� $&# U:U 36587 ��U:U� )<> 0 ��3 � >&58=%.&( UG, (�-/78A V *"365878AdX # -85 $ 02>@A%5(L��h�k�zNbdc�eFf%gLh�i%j�glk�mDoLp%��hF}n��o2i?c�k�z^i�}�w�z�����k�oDh�vx}���c�k�}x��olh%g1k�olh�v¤�±i?z\��gLe?��z gL{%olc�h?}�o�~A��z^vxz^g���k�wXq.-��2� -Hc�� - Q?�-?tl�D-&%?� �2-�� � �2� �2c?� ��t?��clr`uly glv�~To2k�c�v:z^i1olh)}�w�z,~ToL�¢��o�y­��h��1�Dc�z^vx}x��olh�®�_�gLh y�z,ole�}�g���h�g v���{��¢�PgL�*k�olh�vx}n��c�k�}x��olhoL~ °*° & ol�m( °ë° &�vxc�knw�}�w�gL})z\�lz\��f���z\��{�c�}�gL}x��olh y��¢���0e�z�k�olh�vx}n��c�k�}�z^i ~¨��oD{ gK»=7��F·l³¢¸)��vxz\c�i?ol�T��g�h�i?ol{~Tc�h�k�}x��olh�

!0����gL��z\h?}x��fl��}�w?�Pvë�¢��h�z�oL~���z^v:z^gL��knwXol�x���L��h�gL}�z^i���h�}nw�z¬y�ol��m�oL~ (Fknw�h�ol���1q �ìt^u���(Fk�w�h�oD���¬k�olh�v��Pi?z\��z^i�}�w�zb�j���_ëolh�vx}���c�k�}:��oDh��Fy�w�z\��z�}�w�z�~Tc�h�k�}x��olh�v,c�vxz^i�gL��z }��nc?��f)��gLh�i?ol{'�Fglv,g0��vxz\c�i?oD�T��gLh�i?ol{º�lz\h�z\��gL}�oD�,}�w�gL}9�±vvxz^k�c���z0�¢~*h�ol}�}�o?o%{¡g�hFf%e?��}�v�gL��z glk\k�z^v�v¤��e?��zl� ��w�z v:z^k�c��x��}¤f|oL~�(Fknw�h�ol���b`sv��lz\h�z\��g�}�ol� i?oFz^v­h�ol} i?z\��z\h�i'olhgLh?f%c�h�����oL�lz\hXglv�vxc�{���}x��olh��*��w?�Pv�h�ol}:��oDh¡oL~9��o�k\g`���T��gLh�i?oD{%h�z^v�v­�±v�~¨c���}nw�z\��}n��z^gL}�z^i)��h=qsr&%?� - a`u���(L��h�k�z)}�w�zmlz\f|oL~*g ��gLh�i?ol{ ~Tc�h�k�}x��olhX�Pv�w?c��lzO��}�{¡gLmlz^v�vxz\h�vxz)}�o�{���h?��{���¹\z%}�w�z1h?c�{�e�z\� oL~Z~¨c�h�k�}:��oDh�v¬gLh�i��2��h�i?z\z^i��(Fknw�h�ol���¬vxc��D�lz^vx}�z^i�2:4���2:4�� 2:4�glvë��vxz\c�i?oD�T��gLh�i?ol{ ��}�w�zNv:c��l�lz^vx}�z^i|��z\��{�c�}�gL}x��olh|y glv£�PgL}�z\� vxw�oLy hX}�oe�z�iD�Pvx}x��h��lc?�Pvxw�gLe?��z�~T��ol{ ��gLh�i?oD{�q �2-`uT���

�ìoL�¢��o�y­��h��)�Pv gLh���h?~¨oD��{¡g`��i?z^v�k��x����}x��olh�o�~9v:ol{%z0oL~�}�w�z^vxz0��z^vxc?��}�vÚ�*b�z\} �"� � � e�z g)��gLh�i?ol{ ~¨c�h�k�}x��olh��}�w�z\h�®¯ ��ol� g`�¢� ( � � � O � N1}�w�z1��z\�n{�c�}�gL}x��olh52 4 � � 2 4�� � 2 4�� �Pv�h�oD} ��vxz\c�i?ol�T��g�h�i?ol{ q clr`u��¯ ��ol��g`�¢� ( � � � O6�,�� N�}�w�z0��z\��{�c�}�gL}:��oDh 2 4 � �32 4�� �32 4 � �32 4 � �Pv�h�oD}�vx}��nolh��L��f���vxz\c�i?ol�T��gLh�i?oD{�q �2�Lu��¯ 2 4 w ��2:4G� 2:4G� 2�41�Pv���vxz\c�i?ol�T��g�h�i?ol{�q.-&%`u��¯ 2 4 �?2��h�?2 4 w � 2 4 �?2��h�?2 4 w �Pv*v:}���olh��L��f���vxz\c�i?ol�T��gLh�i?ol{��Dy w�z\��z � � � �Pv,}nw�z��Pi?z\hF}x��}xf)~¨c�h�k�}:��oDhq �2c`u��

N�Q

Page 18: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

¯ 2:4������ 4��_2:4 �+2:4��Pv1��vxz\c�i?ol�T��gLh�i?ol{ g�h�i 2:4������ 4G�_2:4 � 2:4 �_2:4©�Pv�v:}���olh��L��f'��vxz\c�i?ol�T��gLh�i?oD{��y w�z\��z��)�Pv\��~Tol��z� �gL{%�?��zl�Ag©��ol}�gL}:��oDh¡oL~,olh�z1e?��}�q.-?t\u��

! k��x��}x�P�lc�z1y w?�PknwXw�glvëe�z\z\hX�lo��±k�z^i�oL~T}�z\h��±vë}�w�g�}�c�v¤��h���olh?��f|olh�z0��vxz\c�i?ol�T��gLh�i?oD{ ~Tc�h�k�}x��olh�i?o?z^vëh�ol}vxz\z\{ }�o?oNv����lh?�¢§Ak\gLh?}^®Y!���vxz\c�i?ol�T��gLh�i?ol{3~¨c�h�k�}x��olh�olh F � r�e?��}�v,k\gLh �nz\�?�±gDk�z��0��vxz\c�i?ol�T��gLh�i?ol{3~¨c�h�k�}x��olh�volh F e?��}�v1ol�^��g���}nz\��h�gL}x���lz���fl��gXv:{¡g`�¢�ªmDz\f�k\gLh�e�z�c�vxz^iK}�oX��vxz\c�i?oD�T��gLh�i?ol{���fK�lz\h�z\��g�}�z%g��PgL���Dz\�1mlz\fl�>�}vxw�olc?�Pi g`�PvxoKe�z�h�oD}x�Pk�z^i=}�w�gL}�}�w�zXh�z\y k�olh�v:}���c�k�}x��olh�v��nz^�lc?����z�gli�iD��}x��olh�g�� ��hF�lo�k\gL}x��olh�v©oL~¬}�w�zX��vxz\c�i?oD���gLh�i?oD{�~Tc�h�k�}x��olh�v)y w?�Pknw=��{��?��f�g�h���h�k���z^glv:z|��h=}�w�z�k�ol{���c�}�gL}x��olh=}x��{%zl�K��c���}�w�z\�n{%ol��zl�Z}�w�z^vxzX�nz^vxc?��}�v��hF�DoL���lz i?z\}�g`�¢��z^iXgLh�i|h�olh��T}��:���D�Pg`������o?oL~ v���}no�g)��oL��h?}^��y w�z\�nzNvxoD{%z¬��g���z\��v kn�Pg`��{ }no1§�h�i���h�glk\k�c���glkn��z^v­��hol}�w�z\��v�����­w�z¡gli`«xc�vx}�{%z\h?}1oL~ }�w�z¡b�j­��_*olh�vx}��nc�k�}x��olh�y�z¡vxc��l�Dz^vx}0��h�(lz^k�}x��olh@-�k\g�h�z^glv��¢��f�e�z|k�olhF�Dz\��}�z^i'��h?}�o

g=k�olh�vx}���c�k�}:��oDh�oL~ °*° & g�h�i�( °*° & ~¨��oD{ g�v���h��L��z���vxz\c�i?oD�T��gLh�i?ol{ ~¨c�h�k�}:��oDh�� (L��{%�?��f���z\�?�Pglk�zKe�ol}�w����vxz\c�i?oD�T��gLh�i?ol{X��~¨c�h�k�}:��oDh�v\��� ^ g�h�i � �Zy���}�w�g�v¤��h�����zK����vxz\c�i?ol�T��gLh�i?oD{X�0~¨c�h�k�}x��olh��Z���­w?�±v�vxo���c�}:��oDhi?o?z^v*h�oD}�vxc?p�z\�,~T��ol{º}�w�z1i?��g`y e�glknm2v£oL~�}�w�z ����z\�D��olc�v�olh�z^v\�,��w�z1k�olh�vx}n��c�k�}x��olhXgLh�i�}�w�z0����o?oL~���z\{¡g`��hXglvv���{%�?��z�gDv*e�z�~¨oD��zNg�h�i|}�w�z¬��v:z\c�i?ol�T��gLh�i?ol{ ~¨c�h�k�}x��olh|�Pv�oDh?��f���hF�Dolmlz^i�}¤y­�±k�z g�}*z^glknw�k�ol{%��c�}�g�}x��olh¡o�~�}�w�z��z\�n{�c�}�gL}x��olh��X��w�z¡gli�iD��}x��olh�g��­mDz\fF��v���¹\z�~¨oD� }�w�z%��g����n�Ty��Pvxz%��h�i?z\��z\h�i?z\hF}�~¨c�h�k�}:��oDh�v%� � ^ gLh�i � � �PvOh�ol}vxc�e�vx}�gLhF}:�±g�� ��z^vx��z^kn�Pg`�¢��f�k�ol{%��gL��z^i }�oX}�w�z¡v���¹\z|oL~­g|}n��c?��f���gLh�i?ol{ ~Tc�h�k�}x��olh���� _*olh�v��Pi?z\�^�d~¨oD�1z� ìgL{��?��zl�}�w�z k�olh�v:}���c�k�}x��olh'oL~ �j�,�y w�z\h'y�z1c�vxz g�}���c?��fX��g�h�i?ol{ ~Tc�h�k�}x��olh �Z®� � L$WA] L1, TVU1W � ¸b� � ^ � � �5� ��6 ¸�52µH7P¶ 3 D 7±» ¸ 7B�CEl¸�5�¸��CEl¸��C�$52¸`¶�¼ )$�Tµ �;7B�H��»1µ �8E%³¢¸b�%�<� � � 6 ¸1µ%¶xµ �CE �l¼� )2�C/��;7�� �?H �1¸�8,��¸ � � � ^ ����������� � � µL»,7B� �1¸�8,�87��;7B�H� � H � �1µ �8E1³¢¸b� < �5� � 6 ¸ µ1¶xµ �CE �l¼ 52¸`¶�¼ )$�Tµ �;7B�H�?H���F¸b� 0 �i�D¶ µ �Chm�l¶xµ /^³¢¸�¼�µ /=�$7B��¸ * � �C� ����¸q/�¸\»�» µl¶q7̳ h�µ �K¸ �/�7̸��8���H��¸������?µ ��¼�µ <�¸\» µH�*¼'�L»=� � +-)?¸^¶q7P¸Ú»��

EJ�;:�< �Lq@* � 0 � � k �qN � � � NÚu > �;:�<!�Lq=* � 0 � � k ��N � � � N\u�E � r&� r � �� r �

�­w�z ����o?oL~,~ToL�¢��oLy¬v�}�w�zO~¨��g�{%z\y�ol��mXi?z^v�k��x��e�z^i'��h (lz^k�}x��olh"��� ��w�z%vxz\}+��! %)� � ^ � � �0�*%0z�§�h?��}x��olh -�� ����Pv �nz\�?�±gDk�z^iXy���}�w'}�w�z vxz\}���!+% ^ � � ^ � � ��i?z�§�h�z^i'}�o�e�zl®

���F¸�»\¸��,���%µl³Ì³ 5 �L»�»i7 6 ³¢¸%µ �CE0/q� ��»=7±»i�T¸b�8�2* 3*�T¶xµ ��»=/^¶q7G5 �Ì» 0 � � � � ^ � � ^ � ���� � � � � � � � � 0 »\µ ��37�»��ihD7��F·F���Fµ �����F¸^¶x¸�¸19:7±»i�LN � ( � � � � » )2/1� ���Fµ �X¸b7B���F¸`¶ � ^ ���?���� ! � � ^ ��� � �� ! �l¶� � � ��� � � � � � � � � � µ�» 6 ¸;�=�l¶x¸�� 0 ol� ���F¸^¶x¸1¸19:7±»i��N� ( � � ��� » )$/=�����?µ � � ^ ��� �T� � ! � � � � � � � H

>�h�oD��i?z\��}�o�gL���?��f���w�z\ol��z\{ ���sr��d��}©�±v©z\h�olc��lw=}�oKh�ol}�z|}�w�gL} e?f=}�w?�Pv�i?z�§�h?��}x��olh y�z¡�lz\}�}�w�g�} ~Tol��gLhFf��o?v�v���e?��z�gLh�i|k�olh�v��Pvx}�z\h?}�*$�T}n��gLh�v�k��x����}�vÚ� �,�?e�oD}�w �;:�< � � q�� � � � E ���0��!+% ^ � � ^ � � ��u � r K � � ��w�z\h�k�zl���}��Pv¬g©����ol��z\�0i?z�§�h?��}:��oDh�glk\k�ol��iD��h��%}no%}�w�z0~T��gL{%z\y�ol��m��ªg�h�i5�;:�< � � k 0 � w q �"�0��! % ^ � � ^ ��� ��u � � w r �� $! *"(�.&3�8>@58=0 �/( U 3V>&;.V,"+>@, ( �!587/("! (�587/(�5�$�( * ( -8>&;2(1X (�5E0B h�z0{����lwF}£��hF}�z\�n����z\}*}�w�z1k�olh�vx}n��c�k�}x��olh%oL~�(lz^k�}x��olh?-0��h|}�w�z�~ToL�¢��o�y­��h���y g`fA®9�L���lz\h|}�w�z }�glv:m oL~�k�olh�vx}n��c�k�}����h���¸ �/�7̸��C����vxz\c�i?ol�T��gLh�i?oD{ ��z\��{�c�}�gL}x��olh�vë��}��Pv z\h�olc��Dw�}�o%k�olh�k�z\h?}���gL}nz olhX}�w�z1z�¦Xkn��z\h?} k�olh�vx}n��c�k�}x��olhoL~*��vxz\c�i?oD�T��gLh�i?ol{ � )$�8/b�;7B�H��»\� ��w�z�glvnvxc�{%��}x��olh'}�w�gL}1vxc�����ol�n}�v¬v:c�k�wKg¡kn�Pg`��{(�Pv0}�w�gL} }nw�z�k�ol{%��c�}�gL}x��olhoL~ ��vxz\c�i?ol�T��gLh�i?ol{ ~Tc�h�k�}x��olh�vO�Pv1{�c�knw�{%ol��z�z� 2��z\h�v����lzX}�w�gLh�}nw�z¡k�ol{%��c�}�g�}x��olh�oL~���g`�����Ty��Pvxz|��h�i?z\��z\h��i?z\h?}%��z\��{�c�}�g�}x��olh�v\����w�z\��z�~Tol��zl�ëk�ol{%��c�}x��h��=}�w�z¡�Lg`��c�z�oL~0}�w�zX��vxz\c�i?ol�T��g�h�i?ol{���z\��{�c�}�gL}:��oDh´��}�w�gL}O�±vk�olh�vx}n��c�k�}�z^i���h@(lz^k�}x��olh -?� olhKgLhFf���h���c�} oL~�r2F e?��}�v��Pv1z^v�v:z\hF}x�Pg`�¢��fKz^�lc?���Lg`��z\hF}�}�o|}xy�o���hF�Do2k\gL}:��oDh�v0oL~�g��vxz\c�i?ol�T��gLh�i?ol{ ~Tc�h�k�}x��olh�y­��}nw F��Te?��}O��h���c�}�v\�'>�h }�w?�Pv vxz^k�}x��olh y�z%vxw�oLy�}�w�g�}1y�z%k\gLhKc�vxz�z\�lz\h�y�z^gLmlz\���z\�n{�c�}�gL}x��olh�v���h�vx}�z^gli'oL~�}�w�z���g`�����Ty��Pvxz���h�i?z\��z\h�i?z\hF}�olh�z^vCD���z^v:c?��}:��h�����h g�h�z\�Dz\h�{%ol��z)z�¦¥kn��z\hF}�k�olh��vx}��nc�k�}x��olhXoL~,��vxz\c�i?ol�T��gLh�i?oD{ ��z\��{�c�}�gL}x��olh�v\�

NLt

Page 19: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

!1vë{%z\h?}x��olh�z^i|��h (lz^k�}:��oDh4����}�w�z0olh?��fX�?�Pglk�z1��h (lz^k�}x��olh -�y�z¬c�vxz1}nw�z0~ glk�}�}�w�g�} � ^ gLh�i � g���z¬��g����n�y��Pvxz���h�i?z\��z\h�i?z\hF}%��z\��{�c�}�gL}x��olh�v��PvN��h=}�w�z�����o?oL~�o�~ ° �nol��oFv¤��}:��oDh)-�� ��� >�h ~ glk�}`��}�w�z�z� �glk�}1��z^�Dc?���nz\{%z\hF}olh�� ^ gLh�i�� y�z1c�v:z0�±v�}�w�gL}ë~Tol� z\�lz\�nf � ��Z� ®

�;:�< ��� k q � ^ ���d�� ! � � ^ � � �� !�u � r K � � F�� �;:�< ��� w q � ���d�� � � � � �� ?u ��r K � ��c��n}�w�z\��{%ol�nzl��y�z�k\gLhK��z\�?�Pglk�z%r K � y���}�wKgLhFf � �7r K � gLh�i'vx}x�¢�¢�*�lz\}1g%k�olh�vx}��nc�k�}x��olhKoL~*��vxz\c�i?ol�T��g�h�i?ol{��z\�n{�c�}�gL}x��olh�vë��y���}�w%vxoD{%z\y w�gL}9�PgL���lz\�*iD�Pvx}x��h��lc?�Pvxw?��h��%���nole�gLe?�¢�¢��}xf����,_*oDh�v��Pi?z\�^�`~¨oD�,z� ìgL{��?��zl�D}�w�z���z\�D�±v:z^ivx}�g�}�z\{%z\h?}�o�~£��w�z\oD��z\{ -��srì®

� � L$WA] L1, TVUYM � ¸b� � ^¡µH�8E.� 6 ¸�E 7±»=�T¶�7 6 )$�;7B�H��»�� �+52¸`¶�¼ )$�Tµ �;7B�H��»m7B�C� � » )2/1�e���FµH���i�D¶%¸ C`¸^¶qh%r2FY3 6 7��»=�T¶�7��F·�» � ��Z� ��;:�< � � k ��+ k q � ^ ���d�� ! � � ^ � � �� !�u � � � F��5�;:�< � � w ��+ w q � ���d�� � � � � �� Du � �

� ¸���� ^ 6 ¸E 7±»=�T¶�7 6 )$�T¸�E�µ /�/q�l¶�E 7��F·'�;�3� ^ 0 � E 7±»=�T¶�7 6 )$�T¸�E|µ /q/��D¶*EH7B�?·'�;�6� µ �8E%³¢¸b�%� ^ ��� � � �76 ¸ ¶xµ �CE �l¼� )2�C/��;7�� ��» H �N¸B8 ��¸ � � � ^ ��� ^ � � ��� � � µL»7�� �1¸�8,�87��;7B�H� � H � �Xµ �8EX³¢¸b�3<��&� � 6 ¸�µX¶xµ �8EH�l¼ 5�¸^¶�¼ ) 3�Tµ �;7�� �?H ���F¸b� 0 �i�l¶�µ �Ch��D¶¤µH/^³¢¸%¼�µ /=�$7B��¸�* � �8� �,��¸q/�¸\»�» µl¶q7̳ h�µ � ¸� �/�7̸��C�,� ��¸ �����Fµ ��¼�µ <�¸\»%µ ��¼'�L»=� �+-)?¸^¶q7̸\»��

EJ�;:�< �Lq@* � 0 � � k ��N � � � N\u?> �;:�< �Lq@*� 0 � � k ��N � � � N\u�E�� � � � �

� r �

�­w�z����noFoL~�~¨o�����oLy¬vZ}�w�zë~T��gL{%z\y�ol�nm i?z^v�k��x��e�z^i©��h?(lz^k�}x��olhG���Z��w?�Pv,}x��{%z�}�w�z i?z�§�h?��}:��oDh¡oL~���! %)� � ^ ��� �vx}�g`f�v c�h�knw�gLh��lz^i=gLh�i�����h=ol��i?z\�1}�o�gL���?��f���w�z\ol�nz\{ ���sr���y�z�olh?��fKh�z\z^iK}�oXh�ol}�z�}�w�gL}�~¨ol� g�hFf'��oFv�v¤��e?��zgLh�iXk�olh�v¤�±v:}�z\hF};*3�T}���gLh�v�k��:����} �,�)�;:�< � � k 0 � w q �"�0��!+%)� � ^ ��� ��u ���

� � ��­w�z*k�olh�iD��}x��olh�vZolh6� ^�g�h�i6� ��h%��w�z\ol�nz\{ c��sr�gL��z*v:ol{%z\y w�gL}9h�olh�vx}�gLh�i�g���i)�¤v���h�k�z*}nw�z,��z^�lc?����z\{�z\hF}�vgL��z0olhXw�g`�¢~,}�w�z1e?��}�v�oL~�}�w�z1olc�}n��c�}\����d z\�Dz\��}�w�z���z^v�v\��}nw�z^vxz k�olh�iD��}x��olh�v0gL��z v�gL}:�±v¤§�z^i|eFf|{%ol��z0}���gDiD��}:��oDh�g`���z^�Dc?����z\{%z\h?}�v�olh�~¨c�h�k�}:��oDh��Ì~ gL{©���¢��z^v\�">�hX��gL��}:�±k�c?�PgL�`��y�zNk\gLhX}�gLmlz e�ol}�w/� ^¬g�h�i.� }�o�e�z g�iD�Pvx}��x��e�c�}x��olhoL~,��z\��{�c�}�g�}x��olh�v\� �=��vxc�knwX}�w�gL}�~Tol��z\�lz\��f4� ��Q� gLh�i|z\�Dz\��f��|���E� � ��� � � ���

�;:�< ��� ��+ q �d����� � �d� � � � �Lu �´�¤r � >�NL� K ^� �

(lc�knw�g¡iD�Pvx}n�x��e�c�}x��olh�� ~¨ol� � � �¤r � � NL� K ^ ���±v � � ���d� >�@�A� ����y�w�z\��z �|�Pv0c�h?�¢~Tol��{(��h � � :a %gLh�i'}�w�z{�c?��}x���?���Pk\gL}:��oDhK�Pvë��h ! � �xr � ���

!0h�ol}�w�z\��y­g`f%}no¡k�olh�vx}��nc�k�} � ^ gLh�i�� �Pv�e?f�)l»=7��F·9/�¸b7�»=�T¸^³H52¸`¶�¼ )$�Tµ �;7�� ��»�y���}�w � �;!�/�X ~¨c�h�k�}:��oDh�v\�!�iD�±v:}��x��e�c�}x��olhKolh � �� � ~Tc�h�k�}x��olh��&���D�Pv � �;!�/�X ��~,~Tol� z\�Dz\��f � ��Z� g�h�iXz\�lz\��f��|���E� � ��� � � ����;:�< ��� ��+ q �d����� � �d� � � � �Lu � �

��w�z%k�olh�k�z\��}1oL~ � �;! / X ~¨c�h�k�}x��olh�vOy glv oD�x���L��h�g`�¢��f�i?z�§�h�z^i eFf _�gL��}�z\�1gLh�i'��z\�l{¡g�h qON�-`ugf���z�c�vxz�}�w�z}�z\��{©��h�o���oD�lfXoL~*j�ol�Fg`y g`f¥q �8N\u��*bdz\}'�²e�z�g�iD�±v:}��x��e�c�}x��olh�oL~ � �;! / X ~Tc�h�k�}x��olh�v�olh<FKe?��}�v0vx}��x��h��Fv­}�w�z\h��y�z�k\gLh%i?z�§�h�z'� ^ }�o0e�z 2 � � ��+ gLh�i3� }�o0e�z�.2LK ^� � ��+ ���­w�z��nz^glvxolhO�±vZ}nw�gL}�~Tol�Zz\�lz\��f1}xy�o�EH7 �¬¸`¶x¸��8�r2F��Te?��}¬vx}��:��h��?v�� � ��; ^ �=< ^ �,gLh�i � � ��;8 �=<� ��*gLh�i|z\�lz\��f�~Tc�h�k�}x��olh��4� � � y�z0w�g`�lz¬e?f¡i?z�§�h?��}x��olh'}�w�gL}^®

2 � ���d� � ! � 2 � � � � � ! � ����< ^ ��� �d��< � � ; ^ ��; >T~ < ^ � < }nw�z\h�; ^ �� ; gLh�i|}nw�z\��z�~¨oD��zN2 �D����� � ! �� 2 �D� � � � ! ol}nw�z\��y��Pvxzl��eFf|}�w�z i?z�§�h?��}x��olhKoL~ � �;!�/�X ~Tc�h�k�}x��olh�v\®

�;:�< � � ��+ q 2 � ����� � ! � 2 � � � � � ! u � �;:�< � � ��+ q ����< ^ ��� �d��< � � ; ^ � ; u � �N�P

Page 20: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

��w?c�v\� � ^ v�gL}x�Pv�§�z^v­��}�v���z^�Dc?����z\{%z\h?}NgLh�iXv¤��{©���PgL�:��f�~¨oD�'� ��ëf|c�v���h��¡��z��Pvx}nz�����z\��{�c�}�g�}x��olh�v�}�o%k�olh�vx}n��c�k�}'� ^ g�h�i�� �y�z1�lz\}�}�w�z1ol�x���L��h�g`�,b�j���_*olh�v:}���c�k�}x��olhKglv

g%vx��z^kn�Pg`�£k\gDvxz��¤v���h�k�z%g���gLh�i?oD{ ~¨c�h�k�}:��oDhX�Pvë��hK��gL��}x�Pk�c?�PgL�1r K �l�;!�/�X ���*��w?c�v\��}�w�z)����o?oL~ªo�~ªvxz^k�c��x��}xf|��h(lz^k�}x��olh -�g��±v:o%w�oL�Pi�vë~Tol� }�w�z0ol�x���L��h�g`�ªb9j���_*olh�vx}n��c�k�}x��olh�����w�z0�Pi?z^g%oL~Zc�v���h�� � �;! / X ~Tc�h�k�}x��olh�vë��h�vx}�z^gDioL~ ��vxz\c�i?ol�T��gLh�i?ol{ ~Tc�h�k�}x��olh�vO~Tol� }�w�z©§���vx} �nolc�h�iKoL~ }�w�z¡b9j���_*olh�vx}n��c�k�}x��olh=y­gDv1����z\�D��olc�v���f�vxc��l�Dz^vx}�z^ie?f¥b�c�knm�v qsrHP^u��

!0h�ol}�w�z\�1gli?�LgLhF}�gL�lz�oL~*}�w?�Pv g�������oFglknwX�Pv1}nw�gL} ��} g`�¢��oLy¬v0c�v0}�oXc�vxz�{¡g�hFf'z�¦¥kn��z\hF} k�olh�v:}���c�k�}x��olh�v0oL~~Tc�h�k�}x��olh|~ g�{��¢����z^v\�\!¬h|z� ìg�{%�?��z1oL~�z�¦¥kn��z\hF}¬r K � �;!�/�X ~Tc�h�k�}x��olh�v gL��z��*gL¹�����gLh?�g`sv�H\vxw?�¢~T} JL�Ì~�gL{��¢��f�q � %^u���!mlz\fXoL~�v:c�k�wKg�~Tc�h�k�}x��olh'�Pv1g%c�h?�¢~Tol��{���f�knw�oFvxz\h�vx}n�x��h�� �4� � K ^ gLh�i'}�w�z � `sv�e?��}1oL~�� � ���d� ��N � � � F9��Pv¬i?z�§�h�z^i�}�o%e�z�� ��0/ ^ � � � � � � K ^ {%o�i%r��! vxc�e�vx}�gLh?}x�Pg`��gL{%oDc�hF}�oL~��nz^vxz^gL��knw�qON�-?�2rHaF��r ��� �CN�� �2Pì� cHa^u�i?z^g`�Pv�y���}�w|}�w�z k�olh�vx}��nc�k�}x��olhXoL~�¸ �/�7̸��8�w�glvxw�~¨c�h�k�}:��oDh�v\� ��w?�Pv��¢��h�z%oL~,y�oD��m�k�olh?}�g`��h�v¬k�oDh�vx}���c�k�}x��olh�v0}nw�gL} ole�z\f�y�z^gLmlz\�1i?z�§�h?��}x��olh�v1olh�~¨c�h�k�}:��oDh~�gL{��¢�¢��z^v­}�w�gLh%��g`�����Ty­�±v:z0��h�i?z\��z\h�i?z\h�k�z�gLh�i©��h¡��g���}x�Pk�c?�PgL� k�olhF}�g`��h�v�k�oDh�vx}���c�k�}x��olh�vëoL~ � �;! /�X ~¨c�h�k�}:��oDh�v\�X�h?~¨ol�n}�c�h�gL}�z���fl�l}nw�z^vxz�~Tc�h�k�}x��olh�v,y�z\��z i?z^v����lh�z^i�}�o1e�z�z^vx��z^kn�Pg`�¢��f¡z�¦Xkn��z\h?}�y w�z\h�}�w�z�����olc�}���c�}Z�Pv*vxc�e�v:}�gLh��}x�Pg`�¢��f%vx{¡g`�¢��z\�*}�w�g�h�}nw�z����£��h���c�} �¤v���h�k�zl�?}�w�z\f)y�z\�nz�{|g`��h?��f�e���oDc��lwF}Zc�����h%}�w�z k�olh?}�z� �},oL~dg�c�}�w�z\hF}:�±k\g�}x��olh��y w?�Pknw|�±vëh�ol}ë}���c�z���h¡olc�� k\glv:z1��e�c�}ë�Pv*�nz���z\�LgLh?}*��h (lz^k�}x��olh'tl����!0h¥gDi�iD��}:��oDh�g`��ole�«xz^k�}x���lz �Pvë}�o)��z^i?c�k�z1}�w�zv���¹\z�oL~*}�w�z)~�gL{��¢��f�oL~*w�glv:w�~Tc�h�k�}x��olh�v)��zl� ������q6N %F��r �LuT���">�hKolc��1vxz\}�}x��h��X}�w�z)��c�����o?vxz�oL~*}�w?�Pv��Pv0}�o¡�nz^i?c�k�z}�w�z1mlz\f?��v���¹\z o�~ª}�w�z)��vxz\c�i?ol�T��g�h�i?ol{ ��z\�n{�c�}�gL}x��olh�v\�

� � �,L�� ]�=� � � ����J��C���=� �+�U�� �U�=� � �������:������=�s��

��w�z\��z gL�nz��LgL�x��olc�v,kn����k�c�{¡v:}�gLh�k�z^v,y�w�z\��zë��}£�Pv,i?z^v�����gLe?��z¬}no¬w�g`�lz g���vxz\c�i?ol�T��gLh�i?oD{ ��z\�n{�c�}�gL}x��olh�olh �nz��±g��}x���lz���f � ¸ D e?��}�vë�¤v�g`fLN^r P?���Z��w?�PvZ�PvZz^vx��z^kn�±g�����f|}���c�z y�w�z\h%y�z�y gLh?}Z}�o1{���h?��{���¹\z¬}�w�z0v���¹\z oL~A}nw�z w�gL��i?y gL��z\�kn����k�c?��} }�w�g�}���{%�?��z\{%z\hF}�v1}�w�z)��z\��{�c�}�gL}:��oDh�oD� }�w�z%k�ol{%{�c�h?�Pk\gL}x��olhKe�gLh�i?y��Pi?}�wKy���}�wK}�w�z���w�gL��i?y gL�nz1ol�vxoL~T}xy gL��zL�ªk�oD{%��olh�z\h?} }�w�g�}¬k�ol{%��c�}�z^v­}�w�z1��z\��{�c�}�g�}x��olh��bdz\} � e�z�g���vxz\c�i?oD�T��gLh�i?ol{ ��z\��{�c�}�gL}x��olhXoDh 1e?��}�v0��h�ol}�z1}nw�gL} F � % rO��h (lz^k�}x��olh -?��k�olh�vx}n��c�k�}�z^i

~T��ol{�}���c?��f%��gLh�i?ol{ ~Tc�h�k�}x��olh�v���olh % r0e?��}�v��Zc�v���h���}nw�z¬b�j���_*oDh�vx}���c�k�}x��olh��\!Nvëvxw�oLy h%e?f ° g�}�gL�x��h�q.-HQ^u�� �k\gLh|e�z iD�Pvx}x��h��lc?�Pvxw�z^i ��y���}�wXk�olh�vx}�g�hF}ë����ole�gLe?�¢�¢��}¤f��,~T��ol{ g1��gLh�i?oD{ ��z\��{�c�}�gL}x��olh|c�v���h�� # �¤r � ��� �*�lc�z\�:��z^v��y w?�Pknw�{�z^gLh�v1}�w�g�}1}�w�z¡gLh�g`��f�v��Pv)oL~ }�w�z¡b�j���_ëolh�vx}���c�k�}:��oDh���y�w�z\��z%}�w�z¡iD�Pvx}:��h��Dc?�±v:w?��h�������ole�g�e?���¢��}xf�~Tol��(�lc�z\�x��z^v­�Pv # � � w �� � w ���D�±v­}x���lwF}Ú���,��w�z\��z�~Tol��zl�?}�w�z b�j���_ëolh�vx}���c�k�}:��oDhXolh�¬e?��}�v k\gLhXoDh?��f|e�z1c�v:z^i���~*r

����� �±v�PgL���lz1z\h�oDc��lw�}�o�e�olc�h�i'}�w�z1hFc�{�e�z\� oL~*�lc�z\�x��z^v­��h�}�w�z�gL}�}�glknm�olh�}nw�z1e?��o�knm�kn����w�z\�`�

>�hX}�w?�Pv vxz^k�}x��olh���g�v¤��{��?��z)�lz\h�z\��g`�¢��¹^gL}x��olh'oL~�}�w�z k�oDh�vx}���c�k�}x��olhXo�~�(lz^k�}x��olhe-O�Pv�����z^v:z\hF}�z^i��/X¬v���h��|}�w?�Pvk�olh�vx}n��c�k�}x��olh��l}nw�z¬gli?�lz\��vngL��f�`sv����nole�gLe?�¢�¢��}xf%o�~diD�Pvx}x��h��lc?�Pvxw?��h��%e�z\}¤y�z\z\h%}nw�z ��vxz\c�i?ol�T��g�h�i?ol{ gLh�i)��g�h�i?ol{��z\�n{�c�}�gL}x��olh�v1k\gLhKe�z���z^i?c�k�z^iK}�oX��oDc��lw?��f � � w � k�� k ����� � ~¨ol�0z\�lz\��f���hF}�z\�Dz\��r ��� � ¡�T~Tol� � � r|y�z)�lz\}}�w�z�ol�x���L��h�g`��k�oDh�vx}���c�k�}x��olh���� ��oXglknw?��z\�lz%}�w?�Pv1vxz^k�c��x��}xf�� � r���z\�n{�c�}�gL}x��olh�v1gL��z�k�ol{%��oFvxz^i�����w�z)��h?��}x�Pg`�gLh�i'§�h�g���gL��z���g`�����Ty��Pvxz���h�i?z\��z\h�i?z\h?}���z\��{�c�}�gL}x��olh�vÚ��}�w�z%�nz^vx} gL��z|���lz\h�z\��g`�¢��¹\z^i��1��z��Pvx}�z�����z\��{�c�}�g�}x��olh�vi?z�§�h�z^iXe?f �� ^ K ^ � �� � �� � � ��g�h�i?ol{ ��ol����vxz\c�i?oD�T��gLh�i?ol{X�Z~Tc�h�k�}x��olh�vO�¤vxz\z �9���lc���z-O~Tol� gLh|�¢����c�vx}n��gL}x��olh����° g�}�gL�x��h�q.-HP^u�vxw�oLy¬vë}�w�g�}*�¢~,y�z¬}�g�mlz¬v��¢ X��olc�h�i�v�oL~�}�w�z b9j���_*olh�vx}n��c�k�}x��olhK�T��h�vx}�z^gDi|oL~�}�w���z\z0ol�ë~Tolc��\���

}�w�z\h�}nw�z��nz^vxc?��}x��h�����z\�n{�c�}�gL}x��olh�k\gLh�h�oD}1e�z¡iD�Pvx}x��h��lc?�Pvxw�z^i ~T��ol{ g|��gLh�i?oD{ ��z\��{�c�}�gL}:��oDh�y���}�w�gli?��g�h��}�gL�Dz1e�z\}�}�z\�0}�w�gLh�� � k � �T��{%���no��D��h���q - QLuT���ë��w?�Pv0{%z^gLh�v�}�w�gL}¬iD�Pvx}x��h��lc?�Pvxw?��h��'}�w�z�v��¢ ��T��olc�h�iKk�olh�vx}n��c�k�}x��olh~T��ol{ g }���c?��f���gLh�i?oD{ ��z\��{�c�}�gL}x��olh3��y���}�w7k�oDh�vx}�gLh?}%����ole�g�e?���¢��}xf��%�nz^�lc?����z^v|gL}���z^gDvx} %N�¤r ��� I ���lc�z\�x��z^v\���w�zXe�olc�h�i�y�z�glknw?��z\�lz|��h�}�w?�Pv%vxz^k�}:��oDh$� %0�xr � ^ K ^ � �� � � � ���0�Pv�e�z\}�}�z\���T~¨oD�©g�hFf�� � �����)d�ol}�zX}nw�gL}�olc��k�olh�vx}n��c�k�}x��olh�c�v:z^v0��vxz\c�i?ol�T��gLh�i?oD{ ~Tc�h�k�}x��olh�v0y���}�w��±g����lz\����h���c�} v¤��¹\zl��y�w?�±knwK{����lw?}¬e�z©g|iD�Pv�gli?�LgLhF}�gL�lz~Tol�Nv:ol{%z gL���?�¢�Pk\gL}x��olh�v\��! ��z��¢��o�gLh�i��,z\h�m�gL}�z^vngLh�q6N�uªvxw�oLy g|k�olh�vx}n��c�k�}x��olhKoL~,��vxz\c�i?ol�T��gLh�i?oD{ � )$�8/b�;7B� �ì»olh �e?��}�v­~¨��oD{ ��vxz\c�i?oD�T��gLh�i?ol{(~Tc�h�k�}x��olh�v0olh % r�e?��}�v\�0�´w�z\h�c�v���h��X}��nc?��f'��gLh�i?ol{~Tc�h�k�}x��olh�v���h�}nw�z����k�olh�vx}n��c�k�}x��olh���iD�±v:}x��h��lc?�Pvxw?��h���}�w�z|~Tc�h�k�}x��olh�}nw�z\f��lz\}©~¨��oD{ g }���c?��f���gLh�i?ol{�~Tc�h�k�}x��olh$��y���}�w�k�olh�vx}�g�hF}����ole�g�e?���¢��}xf�����z^�Dc?����z^v %N�¤r ��� ���lc�z\�x��z^v\�

N-%

Page 21: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

1f

F2 F3

h1

F L 1 L 23

f3

1L

f2

h2-1

3L 1 L 2 L

Output

F F F1 2 3

Input

�9���lc���z-�®]_*olh�vx}��nc�k�}x��olh¡o�~£vx}n��olh�����vxz\c�i?ol�T��g�h�i?ol{ ��z\�n{�c�}�gL}x��olh�v�y���}�wX�nz^i?c�k�z^i�iD�Pvx}x��h��lc?�Pvxw?��h������nole�gL�e?�¢�¢��}xf'c�v���h��5� � r)��olc�h�i�vO��w�z\��z � � -?���,j�z^k\g������%� �,® �� ^ K ^ � �� � �� ��� ��w�z\��z � �,® ��� I �� ��� I ���

r a

Page 22: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

>�h�ol��i?z\�¬}�oXi?z^v�k��x��e�z%olc��0�lz\h�z\��g`�¢��¹\z^i�k�olh�vx}n��c�k�}x��olh�v�y�zO§���vx}0z� 2}nz\h�i���z��Pvx}nz��*��z\��{�c�}�gL}:��oDh�v }�o|i?z^g`�y���}�wK}�w�z�k\glvxz y�w�z\��z�}�w�z c�h�i?z\�x��fD��h��X~Tc�h�k�}x��olh�v0w�g`�lz�gL�ne?��}n��gL��f|��h���c�} gLh�i'olc�}���c�}���z\h��l}�w�v)�T��h�vx}nz^gliXoL~��z\h��l}�w�����z^v:z\���l��h��'~Tc�h�k�}x��olh�v%glvO��h�%0z�§�h?��}x��olh�r��6NL���X��z|h�ol}�z|}�w�gL} c�v¤��h��=vxc�k�w H�c�h?e�g`�PgLh�k�z^i�J��ìz��±v:}�z����z\�n{�c�}�gL}x��olh�v�y glv����nz\�l��olc�v���f�vxc��D�lz^vx}�z^i���h�q c���r P����2Q`u��"�L$# X�[�[�[OW�X��%U1W&%���L8X6L2]`_1(�[�� L ` 'EL [PYÚ[ L (�* L�] , Z�[\_�[�[6WYXdY -�/��l¶ëµ �8h+7��8�T¸x·l¸`¶�»�a � � � µ �CE µ �Ch�� )$�8/13�;7�� � �´® � K�� �� � ³¢¸���2 4 � � � 6 ¸����?¸ 52¸^¶�¼ )2�TµH�;7B� �FEl¸�8,��¸qE 6 h 2 4 ��; �<)��>�@�A� ��< �; ������<)��� 0_D �F¸`¶x¸EF;GE � �|µ �8E5EF<:E � �> � � 2:407±»+El¸�8,��¸qE �=�l¶1µ �Ch,� )$�8/b�;7B�H� � »=7B�C/�¸ � ��¸'/�µ ��¶x¸�µ E���� 0 ��� �> �����]H� z�k\gLh'h�o�y�i?z�§�h�z�}�w�z���z\�D�±v:z^i�k�oDh�vx}���c�k�}x��olh�gLh�i'k�olh�v��Pi?z\�0��}�v1vxz^k�c��x��}xfl�¬�­w�z^vxz%gL��z�v¤��{��?��z��lz\h�z\���

g`�¢��¹^gL}x��olh�v�oL~,}�w�z k�olh�vx}��nc�k�}x��olhX��h (lz^k�}:��oDhe-%gLh�i|o�~���}�v����noFoL~,oL~*vxz^k�c��x��}xfl�"�L$# X�[�[�[OW�X��%UYM %�� � r T SUW�Z�X�` V W�X�Y\[^]HZda�[�[6WYX3- /��l¶0µ �Chm7B�C�T¸¤·D¸^¶n»�r � � � 0 ³¢¸�� �|µ �CE6: 6 ¸ 7B�C�T¸¤·D¸^¶n»» )2/1�A���FµH� � �

�� �4: � D �?¸^¶x¸�: � ���]H /��l¶Xµ �Ch � ^ � � � �

� 0 � ^ ��� ���� ������® � K�� K ^ �� � � ^ µ �CE��� � ^ ���� � � ® � K�� �� � El¸B8 ��¸ � � ^ ��� ^ � � �� ��� ��>�@BA� 2:4

�� 2:4

� � k���� � 2:4 k �&� ^

µ �CE � � ^ ��� ^ ��� �������� � � ��>�@�A� �WK ^ � 2:4

�� 2�4

� � k�)�� � 2:4 k � � ^

� 9X¸N·D¸������F¸m/q� ��»=�T¶�7�/��;7�� �������N¸B8 �C7B�;7�� ���]H � 6 h�/1�2���L»=7��F· � � r 0 � � % r'µ �8E3: � a1H �� � L$WA] L1, �%U1W � ¸b� µH�8E 6 ¸KµL»e7�� �N¸B8 �C7B�;7�� ��$H � 0:D �F¸`¶x¸�� ^� � µl¶x¸L5�µ 7̶s3 D 7�»\¸ 7B�CEl¸�5�¸��8ED¸��8�52¸`¶�¼ )$�Tµ �;7�� ��»¬µH�8E � ^ � � ���� ��� µl¶x¸�5�» ¸ )2EH�D3¤¶xµ �CE �l¼�� )2�C/��;7�� ��» � � 7�»0µl³P³ � D ¸qE'�;� 6 ¸¬µ,� )$�8/��;7�� �L���� � � � ^ 0� µ �8E � ^ � � ���� � � µl¶x¸'7��8El¸ 52¸��CEl¸��C�T³ h/=�$�L» ¸b�?H ���?¸�� 0 7±»Nµ 5�»\¸-)$E �D3x¶xµ �8E �D¼ 5�¸^¶�¼ )$�Tµ �;7�� �Kµ �8E µ»=�T¶*�H�F· 5�» ¸ )2E � 3¤¶xµ �8EH�l¼ 52¸`¶�¼ )$�Tµ �;7B�H�?H

/ )?¶����?¸^¶�¼��D¶¤¸ 0 µL»�» )?¼�¸?���Fµ �+�C��¸� �/b7P¸b�8� �l¶xµ /^³¢¸13¤¼�µ /=�$7B��¸?���Fµ �0¼�µ <�¸\»|µ �¬¼'�L»=�6� � �'� �� +-)?¸^¶q7P¸Ú» 0E 7±»i�;7��F·$)27±»q�F¸\» 6 ¸�� D ¸�¸������F¸,5�» ¸ )2E � 3¤¶xµ �8EH�l¼ � )$�8/��;7�� �컬µ �8E|¶xµ �8EH�l¼�� )2�C/��;7�� ��» D 7����Xµ E�C^µH�8�Tµ^·D¸ � � � ��F9� H���F¸b� 0 �8�X¸ �/�7̸��C� �l¶xµ /^³¢¸13¤¼�µ /=�$7B��¸����FµH� ¼�µD<�¸Ú»©µH� ¼'�L»i� � +-)?¸^¶q7P¸Ú»m�;� � ¶x¸\»y5WH µ �8E K ^ ��E 7±»=�;7B�43·&)$7±»��F¸Ú» � ¶x¸Ú»g5WH � �\¶��l¼ µX¶xµ �CE �l¼ 5�¸^¶�¼ )$�Tµ �;7�� � D 7�����µ E�C`µ �8�Tµ^·D¸ � � � � � � w � � � � ����� � �

w �

>�h�k\glvxz)}�w�z1{��Pi�iD��z ~Tc�h�k�}x��olh�v0gL��z1}��nc?��f|��gLh�i?oD{ }�w?�Pv �nz^i?c�k�z^v }�o�®� � L$WA] L1, �%UYM � ¸b� 6 ¸�µL»7�� �1¸�8,�87��;7B�H��� H � 0 D �F¸`¶¤¸ � ^ µ �CE � µD¶¤¸"5�µ 7P¶ 3 D 7±»\¸�7��8ED¸�52¸b�8El¸b�8�C5�¸^¶�¼ )$�TµD3�;7�� ��»�µ �8EG� ^ � � ���� ��� µl¶x¸%¶xµ �CE �l¼ � )2�C/��;7�� ��»�µ �8EX³¢¸b� < � �

� 6 ¸%µX¶xµ �CE �l¼ 5�¸^¶�¼ )$�Tµ �;7�� �?H ���F¸b� 0 �i�l¶µ �Chm�l¶xµ /^³¢¸�¼�µ /=�$7B��¸ * � �C� ����¸q/�¸\»�» µl¶q7̳ h)µ ��¸ �/�7̸��8���H��¸������?µ ��¼�µ <�¸\» µH�*¼'�L»=� � +-)?¸^¶q7P¸Ú»��

EF�;:�<!�Lq=* � 0 � � k ��N � � � N\u > �;:�< �Lq@* � 0 � � k ��N � � � N\u�E � �r �

� r � K�� ��� �� �

� r �

�­w�z1����oFo�~ªoL~*��w�z\ol�nz\{ Q��srO~ToL�¢��oLy¬v­}�w�z0~¨��gL{%z\y�ol��m¡i?z^vnk��x��e�z^i���h (lz^k�}x��olh�����!1v�vxc�{%z0~Tol�¬v���{%�?�¢�Pkn��}xf}�w�gL}� � � � ����}nw�zNvxz\} ��!+%)� � ^ ��� ����%0z�§�h?��}:��oDh0-�� ���9�±vë��z\�?�Pglk�z^i�y���}�w|}�w�z vxz\} ��! % � � ^ ��� �*i?z�§�h�z^iX}�oe�zl®

���F¸�»\¸��,���%µl³Ì³ 5 �L»�»i7 6 ³¢¸%µ �CE0/q� ��»=7±»i�T¸b�8�2* 3*�T¶xµ ��»=/^¶q7G5 �Ì» 0 � � � � ^ � � ^ � ���� � � � � � � � � 0 »\µ ��37�»��ihD7��F·U���Fµ �,���F¸^¶x¸�¸=9D7�»=��N� (�� � ����µ �8ELN��O � �O» )$/=�?���Fµ �� � � ^� ���� � � � �=; ^� ���� �=; K ^� � � � � � ^� ���� � � � �; ^� ���� �;

K ^� � �

D �F¸^¶x¸X� � ^� � � � ���� � � � � � � ^ ��� � �¥µ �CEK��; ^� �; � ���� �; � � � � � � � � � E � ^� E � E � � E � �� �E � � E � EF;�^� E � EJ; � E � �� � EF; � E � � �$Hr N

Page 23: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

�­w?�±v­�lc�gL��gLh?}�z\z^v�}nw�gL}ë~¨ol�0gLhFf|��o?v�v���e?��z©g�h�iXk�olh�v��Pvx}�z\h?} *3�T}���g�h�v�k��x����} �Ky�z1w�g`�lz1}�w�gL}+�;:�< � � q�� � �� E��N��A��!+% � � ^ � � ��u � r K�� � �¤gLh�iKw�z\h�k�zl�d��}1�Pv g|����oD��z\��i?z�§�h?��}x��olh�gDk\k�ol��iD��h���}�o|}�w�z�~T��gL{�z\y�oD��m������w�z1��z^gDvxolh|�Pv }nw�gL}^�?c�h�i?z\�¬}nw�z1h�ol}�gL}x��olh�v�gLe�oL�lzl�

� ( � � � � ��� �T��� ��N �$( ���"� ��N ��O � � � � � � � ^� ���� � � � �; ^� ���� �; K ^� � � � � ���b ���w�z\��z�~Tol��zl�L�����Dz\h¡gLh?f�vx��z^kn��§Ak0knw�oL�Pk�z oL~ � ^ gLh�i � �T��h%}�w�z¬i?z�§�h?��}x��olh|oL~ ��vxc�k�w�}�w�g�} ���0��! % � � ^ ��� �}�w�z|z\�lz\h?}�� � � ���Pv�k�ol{%��oFvxz^i oL~��

��0��h�i?z\��z\h�i?z\h?}¡z\�Dz\hF}�vOz^glknw�oL~ y w?�Pknw�w�glv1���nole�gLe?�¢�¢��}xf�r K�� }�o

w�gL����z\h���>�h�ol��i?z\��}�o%gL���?��f���w�z\ol��z\{ ���sr��D��}¬��z\{|g`��h�v�}�o%h�ol}nz1}�w�gL}ë~¨oD�¬gLh?f¥vxc�knw��Ky�z1w�g`�lz1}�w�gL}

�;:�< � � k 0 � w q �"�0��!+% � � ^ � � ��u � � �� �r � �

r K � � K�� ��� �� � � �r �

� r � K�� ��� ��

S L1,=_�]�� �%U1W ���?¸/q� ��»=�T¶ )$/��;7�� ��������27±»¬»\¸�/b�;7B�H��µ /1�27P¸ C^¸Ú»Nµ�» ) 6 »=�Tµ �8�;7̵l³�7P¼"5A¶���C`¸^¼�¸��C��7��X»\¸�/ )F¶q7��;h���C^¸^¶���F¸ /��H��»=�T¶ )$/��;7�� � 7B� ��¸�/b�;7B�H� �´¸ C^¸b� �=�l¶Kµ�»\¼�µl³Ì³�/q� ��»=�Tµ �C��� � r � ���FµH�m7�» 0LD 7B���´µ0�\¸ D µ E E 7��;7B�H��µl³µq5 5�³ 7�/�µ �;7B�H��» ��� ���F¸�5�»\¸-)$E �D3x¶¤µH�8E �l¼ � )$�8/b�;7B�H��»��$H��1¸ C`¸^¶q���F¸^³¢¸Ú»�» 0 7���¼'7�· �2� 6 ¸ )l»\¸;� )?³q�i�l¶ë»=�l¼�¸1µq5 5A³ 7�/�µH�;7B� �ì»�;�?�TµD<L¸%µ�³¢µl¶T·l¸`¶;C^µl³�)?¸m��� � H ���$���L»=7B�?·0� � X¶¤¸qE&)$/�¸Ú»���F¸%µ E�C^µ �C�Tµ^·l¸L���F¸mE 7±»=�;7B�?·&)$7�»q�F¸^¶1¼�µ hXµH/=�27̸ C`¸m�;�¶��&)L·D�F³ h � � � w � H

� +9� �$* ����� � � �G��� ��� �N��� �Y�=� � � ��* � � � �$* ��� + � �G���� ��� �N�

_*olh�v¤�±i?z\�1}nw�z©g����?���Pk\gL}:��oDh�oL~*��vxz\c�i?ol�T��gLh�i?ol{ ��z\�n{�c�}�gL}x��olh�v�}�o¡z\h�k��nfF��}x��olh������Ûzl�±��c�v���h��<����*��ë��h�oD��i?z\�}�o'z\h�k���fF��}|gX{%z^v�vngL�lz�* �Zy w�z\��z4�=�Pv%g'��vxz\c�i?oD�T��gLh�i?ol{���z\�n{�c�}�gL}x��olh���!Nv�v:c�{%z¥g��±v:o�}nw�gL} y�z|y­g�hF}}�o|c�vxz�%+&](%~Tol�0}�w?�Pv ��c�����oFvxzl�0��z)h�o�y w�g`�lz }nw�z1~ToL�¢��oLy���h��X����oDe?��z\{'® y w?�¢��zm%+&,(Xy�ol��m�v�olhX§� �z^iKgLh�i��z��PgL}x���lz���f�vx{|g`�¢����z\h��l}�w�vx}��:��h��?v\��y�z1h�z\z^iXg���z\�n{�c�}�gL}x��olhXolh E * E �Te?��}���olh��¡v:}��x��h��Fv\��y�w�z\��z1}�w�z0��z\h��l}�wXoL~}�w�z1{%z^vnv�gL�lzl�3E * E¢�?{¡g`f%e�z1�PgL���Dz gLh�iX{¡g`f%�LgL��f|e�z\}xy�z\z\h�iD�¢p�z\��z\h?} {%z^v�v�g��lz^v\�

�­w?�±v)����oDe?��z\{²�Pv)h�ol} �nz^vx}��x�Pk�}�z^i }�o�}nw�z%c�v�gL�lz|oL~�%+&,( ��}�w�olc��lw }�w�z%~�glk�})}�w�gL}%+&,(Ky glv i?z^v¤���Dh�z^i~Tol�1w�gL��i?y gL��zO��{%�?��z\{%z\hF}�gL}x��olh�k�olhF}n�x��e�c�}�z^v1}�o|��}\��� X0vxc�g`�¢��fl�,gXiD���nz^k�}�k�olh�vx}n��c�k�}x��olh�oL~���vxz\c�i?ol�T��g�h�i?ol{��z\�n{�c�}�gL}x��olh�v�ol� ��vxz\c�i?ol�T��gLh�i?ol{~¨c�h�k�}x��olh�v)� ��~,y�z y gLh?}�}�o¡z\{��?��oLfX}�w�z�b�j���_*oDh�vx}���c�k�}x��olh���y���}�w��±g����lz��h���c�} v���¹\z1�Pv�z� 2��z\h�v����lzl�¬��w�z\�nz�~¨ol�nzl��y�z1y�oDc?�±i¥�¢��mDz©g©y­g`f|}�o¡k�olh�v:}���c�k�} ��vxz\c�i?oD�T��gLh�i?ol{(��z\��{�c�}�g�}x��olh�v��ol�ë~Tc�h�k�}x��olh�v���olh�³¢µl¶T·l¸ 6 ³ �b/=<^»£~¨��oD{ ��v:z\c�i?ol�T��gLh�i?ol{(��z\�n{�c�}�gL}x��olh�v0��oD�*~Tc�h�k�}x��olh�v���olhK»\¼�µl³P³ 6 ³ ��/1<^»\�(lz\�Dz\��g`�ªvxc�knw�k�oDh�vx}���c�k�}x��olh�v�y�z\��z vxc��l�Dz^vx}�z^i|��hK}�w�z k�olh?}�z� �}¬o�~\%+&](��¤vxz\z1zl� ����q6N N�u9~¨oD� }�w�z�iD�¢p�z\��z\h?}{%o�i?z^v�oL~�oD��z\��gL}:��oDh|~¨ol� %+&](����F��w�z v¤��{��?��z^v:}^��m?h�o�y�h�glvë}�w�z¬z���z^k�}��nolh?�Pk k�o�i?z\e�o?olmX{%o�i?z��*&,_ �ë�T{%o�i?zL����Pv0}�o�iD���l�Pi?z%}nw�z ��h���c�}O��h?}�o�vxc�e��Te?��o�k�m�v g�h�i�}no�gL���?��f�}�w�z���vxz\c�i?ol�T��gLh�i?ol{���z\��{�c�}�gL}x��olhKolh'z^glknw v:c�e��e?��o2knm�v:z\��gL��gL}�z���fl� �­w?�±v1v:oL��c�}x��olh�vxc?p�z\��v­~¨�nol{ }nw�z�oDeF�D��olc�v1i?��g`y e�glknm¡}nw�gL}¬z\�Dz\��f�vxc�e��Te?��o�k�mKoL~*oDc�}���c�}vxoL��z���f�i?z\��z\h�i�v�olh�g�v���h��L��z%vxc�e��Te?��o2knmXoL~���h���c�})�¤gLh�i��D��h���gL�n}x�Pk�c?�±g��^��}�w�z1��z\��{�c�}�gL}x��olhXolh|}�w�z k�ol{��?��z\}nz��h���c�}0�Pv0h�ol} ��vxz\c�i?ol�T��gLh�i?ol{X���0��w?�Pv {|g^f|��z^gLm|��h?~Tol��{¡g�}x��olh�gLe�olc�}0}�w�z {%z^vnv�gL�lz)e�z���h��Xz\h�k���f?��}�z^i �¤vxz\z~Tc���}�w�z\�¬iD�Pv�k�c�v�v¤��oDh���h (lz^k�}x��olh�tF� r?���

>�hK}�w?�Pv1vxz^k�}x��olh�y�z�k�oDh�v��Pi?z\��g��lz\h�z\��g`�¢��¹^gL}x��olh�o�~�}�w�z%k�olh�vx}n��c�k�}x��olhKoL~ (lz^k�}x��olh)-�}�w�gL}0c�vxz^v0��vxz\c�i?oD���gLh�i?oD{ ~¨c�h�k�}:��oDh�v1��oD� ��z\��{�c�}�g�}x��olh�v��*olhK»\¼�µl³Ì³Fe?��o�k�m�v�}�o¡k�olh�vx}n��c�k�}¬vx}��nolh�����vxz\c�i?ol�T��gLh�i?oD{ ��z\��{�c�}�gL�}x��olh�vOolh7³¢µl¶T·D¸1e?��o2knm2vÚ����w�z��Pi?z^g��Pv�gDv0~ToL�¢��oLy¬vÚ®�gL���?��f�g���g`�����Ty��Pvxz���h�i?z\��z\h�i?z\h?}%��z\��{�c�}�g�}x��olh�oDh�}�w�zz\h?}x����z ��h���c�}^��iD���D�±i?z)}�w�z �Lg`��c�z1flolc%�lz\}£��hF}�o%vxc�e��Te?��o�k�m�v gLh�i�gL���?��f¡}xy�o1��olc�h�i�vëoL~���z��Pvx}nz����T��z\��{�c�}�gL}x��olh�v��ol�9olh�z*��oDc�h�i1oL~�g ��v:z\c�i?ol�T��gLh�i?ol{ ��z\�n{�c�}�gL}x��olh���olh z^glknw vxc�e��Te?��o�k�m%vxz\��gL��gL}�z���fl�\§�h�g�����fl�?gL���?��f�g vxz^k�oDh�i��g`�����Ty��PvxzO��h�i?z\��z\h�i?z\h?} ��z\�n{�c�}�gL}x��olhXolhX}�w�z)z\hF}:���nz1��g`��c�z�flolc|�lz\}1�¤v:z\z �9���Dc���z ��~Tol� gLh|�¢�¢��c�vx}���gL}:��oDh����

�­w?�±v1v:oL��c�}x��olh���z^vxz\{�e?��z^v1}nw�z�z���z^k�}��nolh?�Pk¡k�o�i?z\e�o?olmK{%o�i?z©g�h�i'�Pv1g`��{%oFvx} glv1v¤��{��?��zl�m�ëc�}1w�z\��zl�9}�w�zvxz^k�c��x��}xfXy�z glknw?��z\�Dz �Pv���z��PgL}x���lz)}�o¡g���gLh�i?ol{ ��z\��{�c�}�gL}x��olhKgL���?�¢��z^i�oDh)���F¸%¸b�8�;7̶x¸�¼�¸Ú»�»\µ^·l¸0gLh�iXh�oD} olhz^glknw�vxc�e��Te?��o2knm�vxz\��gL��gL}�z���fl�!1v0�Pv0}�w�z|k\glvxz�y���}�w�}�w�z�z���z^k�}���oDh?�±k|k�o�i?z\e�o?olmK{%o2i?zl�9}�w�z%k�olh�vx}��nc�k�}x��olh'�±vw?���lw?��f�vxc?��}�g�e?��zO~¨oD� ��gL��g`�¢��z�����{%�?��z\{%z\h?}�gL}x��olh��

rlr

Page 24: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

h2

-1

f2 f2 f2

f1 f1 f1

h1

Input

Output

�9���lc���z ��® _*oDh�vx}���c�k�}x��olh'oL~�g|vx}���olh�����vxz\c�i?ol�T��gLh�i?oD{ ��z\��{�c�}�gL}:��oDh�olhK{¡gLh?fK�¤v��¢ X��hK}�w?�Pv1k\glvxzL��e?��o2knm2v~T��ol{ g���vxz\c�i?ol�T��gLh�i?ol{~¨c�h�k�}x��olh'olh�g%v���h��L��z)e?��o�knmA�

r -

Page 25: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

�ìol��v���{%�?�¢�Pkn��}¤fl�)y�zKolh?��f i?z^vnk��x��e�z�}�w�z�k�olh�vx}n��c�k�}x��olh$c�v���h�� }���c?��f´��gLh�i?ol{�~Tc�h�k�}x��olh�v ��ol�Xg�}��nc?��f��gLh�i?oD{ ��z\��{�c�}�gL}:��oDh����¡��w�z|gLh�g`��f2v¤�±v)oL~�}�w�z¡k�olh�v:}���c�k�}x��olh=y w�z\h���vxz\c�i?oD�T��gLh�i?ol{ ~¨c�h�k�}x��olh�v�gL�nz�c�v:z^i~ToL�¢��oLy¬v0z^gDv��¢��fl�'>�h�gli�iD��}x��olh���y�z���z^vx}��:�±k�}1oDc�� gL}�}�z\h?}x��olh�}noX}�w�z%k�olh�vx}���c�k�}:��oDh�o�~ »i�T¶�� �?·���vxz\c�i?ol�T��g�h�i?ol{��z\�n{�c�}�gL}x��olh�v\�"�L$# X�[�[�[OW�X��VU1W /��D¶�µH�8h� D �'7��8�T¸x·l¸`¶�»8�1µ �CE � 0 �=�l¶ µ �Ch�� )2�C/��;7�� � � � � � ³¢¸�� ��� � � � � � � 6 ¸ ���F¸�� )$�8/b�;7B�H�El¸B8 ��¸qE 6 h � � � � ��� ^ ��� ���� ��� � � >�@�A� ������� ^ � ������� � ���� ������� � ���/��l¶1µ �Ch � ^ � � � � � µH�8E � ^ � � � � � � 0 El¸�8,��¸ �

� � ^ ��� ^ ��� ��� ��>�@�A� �WK ^ � 2 � �4 w � 2 ��4 k � � ^

/��l¶1µ �Ch �4�5� � µ �8E � ^ ��� �5� � � 0 El¸B8 ��¸��� � � ^ � �E� � ��>�@�A� �WK ^ � � � � � � ^

� � L$WA] L1, �VU1W � ¸b� � ^ ��� �&� � � 6 ¸"52µ 7̶ 3 D 7±» ¸'7��8El¸ 52¸��CEl¸��C��5�¸^¶�¼ )$�Tµ �;7�� ��» 0 ³¢¸b� � ^ � � � � � 6 ¸�¶xµ �CE �l¼� )2�C/��;7�� ��»¬µH�8E��4�5� � µ%¶xµ �CE �l¼ 5�¸^¶�¼ )2�Tµ �;7�� � H �N¸B8 ��¸ � � � ^ � � ^ � � ��� �¬µ �CE � � � � � ^ � �%��� � � µL»7�� �1¸�8,�87��;7B� ��� H � ��µ �CE�³¢¸���< ��� � � 6 ¸¡µK¶xµ �CE �l¼ 5�¸^¶�¼ )2�Tµ �;7�� � H����F¸b� 0 �i�D¶%µ �8h��l¶xµ /^³¢¸|¼�µ /=�27���¸�*� �8� ����¸q/�¸Ú»�»\µl¶q7P³ h µH��¸ �/�7̸��C��� ��¸��m���Fµ ��¼�µD<�¸Ú» µ ��¼���»i� � +-)?¸^¶q7̸\»��

EF�;:�< �Lq@* � 0 � � k ��N � � � � N\u > �;:�< �Lq@* � 0 � � k ��N � � � � N\u�E � � ��

r � � � r � �

µ �CEEF�;:�<!�Lq=*��� 0 �� � k ��N � � � � N\u > �;:�< �Lq@* � 0 � � k ��N � � � � N\u�E � �

��

r � K ^�­w�z,����oFo�~2oL~���w�z\ol��z\{�t?�6NZ~Tol� ~ToL�¢��oLy¬vd}�w�zZ~¨��gL{%z\y�ol��m¬i?z^vnk��x��e�z^iO��hm(lz^k�}x��olh ������w�z*v:z\}���! %)� � ^ � � ��*%0z�§�h?��}x��olh -�� ���Z�Pv �nz\�?�±gDk�z^iXy���}�w'}�w�z vxz\}���!+% I � � ^ � � ��i?z�§�h�z^i'}�o�e�zl®���F¸)» ¸b������µl³Ì³$5 �L»�»=7 6 ³�¸�µ �CE�/q� �ì»i7±»i�T¸b�8�2* 3*�T¶xµ �ì»i/`¶�7G5 �Ì» 0 � � � � ^ � � ^ � ���� � � � � � � � � 0 » )$/=����Fµ � ¸b7B���F¸`¶���F¸`¶x¸¡µl¶x¸m� D �'¸ + )FµD³�C`µl³�)F¸Ú» 7��� � �� ^�� � � � 0 ^�� � � � �l¶ ���F¸^¶x¸|µl¶x¸m� D ��¸,+-)?µl³�C^µl³ 3)F¸Ú» 7�� ; � K ^� ^�� � � � 0 ^�� � � � 0SD �F¸`¶x¸%� � ^� � � � ���� � �

�� � � � ^ � �?����µ �CEX��;�^� �; � ���� �; �� � �� � � ��� � E � ^� E � E � � E � �� � E � �� E � EF; ^� E � EF; � E � �� � EF; �� E � F �]H��w?�Pv��lc�gL��gLh?}�z\z^vë}�w�gL}­~¨ol� gLh?f|��oFv�v¤��e?��z%gLh�iXk�olh�v¤�±v:}�z\hF};*3�T}���gLh�v�k��:����} �Ky�z1w�g^�Dz1}�w�gL}

�;:�< � � q�� � � � E ���0��! % I � � ^ � � ��u � r K � � � � ��¤gLh�i w�z\h�k�zl����}O�±v)g|����ol��z\��i?z�§�h?��}x��olh�glk\k�ol��iD��h��'}�oX}�w�z�~T��gL{�z\y�oD��m�������w�z���z^glvxolh'�Pv1}nw�gL}^��c�h�i?z\��}�w�zh�ol}�g�}x��olh�v gLe�o��Dzl�� ( � � � � ���?�T��� ��N �$( ���"� ��N � � ��� � � ^ � � �� � � � � K ^� � ; � K ^� � F��4� ��; � K ^� � � � �� � ; ����w�z\��z�~Tol��zl�L�����Dz\h¡gLh?f�vx��z^kn��§Ak0knw�oL�Pk�z oL~ � ^ gLh�i � �T��h%}�w�z¬i?z�§�h?��}x��olh|oL~ ��vxc�k�w�}�w�g�} ���0��! % I � � ^ ��� �}�w�z�z\�lz\h?} � � � � �Pv1k�ol{���oFvxz^i oL~­r&� �

�N��h�i?z\��z\h�i?z\h?}%z\�lz\h?}�v0z^glknw�o�~*y w?�Pk�w�w�gDv0����ole�gLe?�¢�¢��}¤f=r K ��}�ow�gL����z\h���>�h�ol��i?z\��}�o%gL���?��f���w�z\ol��z\{ ���sr��D��}¬��z\{|g`��h�v�}�o%h�ol}nz1}�w�gL}ë~¨oD�¬gLh?f¥vxc�knw��Ky�z1w�g`�lz1}�w�gL}

�;:�<!��� k 0 � w q �"����!+% I � � ^ ��� ��u ��r �� �

��

r � �r K � � �4

��

r ��­w�z¡����o?oL~ oL~¬��w�z\ol�nz\{ t?�6N�~Tol� � v��¢���lw?}x��f i?z\�D�PgL}�z^v)~T��ol{²}�w�z%~T��gL{�z\y�oD��m�i?z^v�k��:��e�z^i=��h�(lz^k�}x��olh�

������oL�D�PiD��h���fDz\}�gLh�ol}�w�z\�|z\�l�Pi?z\h�k�z�}no�}�w�z�kn�Pg`��{ }nw�gL} H h�ole�o�i?f��Pv|��z\�:~¨z^k�} J2������w�z�vxz\}0��! %)� � ^ ��� ��*%0z�§�h?��}x��olh -�� ���Z�Pv �nz\�?�±gDk�z^iXy���}�w'}�w�z vxz\}���!+% � � � ^ � � ��i?z�§�h�z^i'}�o�e�zl®r �

Page 26: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

���F¸)» ¸b������µl³Ì³$5 �L»�»=7 6 ³�¸�µ �CE�/q� �ì»i7±»i�T¸b�8�2* 3*�T¶xµ �ì»i/`¶�7G5 �Ì» 0 � � � � ^ � � ^ � ���� � � � � � � � � 0 » )$/=����Fµ �*¸b7B���?¸^¶ ���F¸^¶x¸ µD¶¤¸'� D �|¸ + )FµD³ C`µl³�)F¸Ú» 7��� � �� ^�� � � � 0 ^�� � � ��l¶ ���F¸`¶¤¸�µl¶x¸ � D �¡¸,+-)?µl³&C^µl³�)?¸\»7B�S ; � � ^�� � � � 0 ^�� � � � 0 D �?¸^¶x¸K� � ^� � � � ���� � �

�� � � � ^ ��� � ��µH�8E=��; ^� �;8 � ���� �; �� � � � � � � �� E � ^� E � E � � E � �� � E � �� E � EF; ^� E � EF; � E � �� � EF; �� E � r2F �$Hd�o�y3y�z0w�g`�lz1}�w�gL}­~¨ol� gLh?f|��oFv�v¤��e?��z%gLh�i'k�olh�v��Pvx}�z\h?}'*3�T}���gLh�v�k��:����} �,�

�;:�< ��� k 0 � w q �"�0��! % � � � ^ � � ��u ��r �� �

��

r � �r K � � �

��

r �

6 )$�,�8� D ~Tol� gLh?f¥v:c�k�w �,�

�;:�< ���q���� � � E ���0��!+% � � � ^ � � ��u � r � �

�¤r � >����`� �

��h�vx}�z^gli oL~�r K � � � � � glv�H���z^�Dc?���nz^i�J�e?f�}�w�zX~T��gL{�z\y�oD��mA�FI oLy�z\�lz\�^�ë}�w�z�iD�¢p�z\��z\h�k�z'��h�����oDe�gLe?�¢����}x��z^v¥�±v��gL}nw�z\�¬vx{¡g`�¢��y�w?�±knw��nz^vxc?��}���h�olh?��f�g�{���h�ol�0i?z\�l�PgL}x��olh'~T��ol{ }�w�z1����o?oL~,oL~*��w�z\ol��z\{ -ì�sr��

� $&# *"(�.&3�8>@58=0 �/( � A%5/, 0�; -�$ 02>@A%5!1v���h (lz^k�}x��olh c��sr�y�z�y�olc?�Pi��¢��mDz%}�o|��z^i?c�k�z%}�w�z���z^�Dc?����z\{%z\h?}�v�~¨�nol{ � ^ gLh�i � ��h���w�z\ol��z\{�t?�6Nl� B c��{¡g`��h�{�ol}x����gL}:��oDh���h�i?oL��h���vxo��±vO}�o El¸q/^¶x¸�µL» ¸L���F¸L<L¸�hX»=7Oj ¸1o�~�}�w�z%��v:z\c�i?ol�T��gLh�i?ol{���z\��{�c�}�gL}x��olh�v\����zy�olc?�Pi�����mlz|}�w�z�mlz\f?��v���¹\z%}�o|e�z%o�~�ol��i?z\��F DX}�w�z%v���¹\z%oL~�}nw�z©v:{¡g`�¢��vxc�e��Te?��o2knm�v gLh�i �8�H��o�~�ol��i?z\� r FV� D}�w�z v���¹\z)oL~ª}nw�z k�ol{%�?��z\}�z1��h���c�}��T��h�vxoD{%z k\glvxz^v�y�z1{¡g`fXg`�¢��o�y g%vx{¡g`�¢�ªi?z\��z\h�i?z\h�k�z%olh<�`���� z©v:mlz\}�knw�g|y g`fX}�o¡�nz^i?z�§�h�z%}�w�z¡iD�Pvx}��:��e�c�}:��oDh�v1olh � ^ gLh�i � ��h�}nw�z©i?z�§�h?��}x��olh=oL~ � �xg`��{%oFvx}0}�w�zv�gL{�zX�Pi?z^glvXgL���?��f�}no�}�w�z�i?z�§�h?��}x��olh3oL~ ���$�­w�z���z^�Dc?����z\{%z\h?}X}�w�z^vxz�iD�Pvx}n�x��e�c�}x��olh�vXw�g`�lzX}�o=ole�z\f=�±v

}�w�gL}�~Tol� gLh?f���o?v�v���e?��z¥gLh�iKk�olh�v¤�±v:}�z\hF}6*3�T}���g�h�v�k��x����} � y�z�w�g`�lz�}�w�g�}S�;:�< ��� k 0 � w q ���@��! % � � � ^ ��� ��u9�±vH\vx{|g`�¢� Jì�K��z¡c�v:zX}�w�z%~ToL�¢��oLy���h���h�ol}�gL}:��oDh�®%��ol�%gLh?f�r2F����Te?��}%vx}��x��h�� � � � � ^ ��� ���� ���������¤v:c�k�w=}�w�gL}

� � � E � � E � r2F9�NgLh�i�~Tol� g`�¢��N � ()���L��i?z\h�ol}�z%e?f � � � }�w�z¡v:c�e�vx}��x��h���� � ��}nw�z ( }�w�vxc�e�vx}��:��h��'oL~ �2���%��w�z��z^�Dc?����z\{%z\h?}¬gLe�oL�lz0k\gLh¡e�z glknw?��z\�Dz^i|eFf¡vngL{%�?�¢��h�� � ^ gLh�i � glk\k�ol��iD��h���}�o%g1��z\��{�c�}�gL}x��olhXiD�Pvx}��x��e�c�}x��olh��vxc�knwX}�w�gL}�~Tol� vxol{%z v:{¡g`�¢� � � r K �¡y�z0w�g`�lz1}�w�gL}^®ND� ��ol� gLh?f¥r F

����Te?��}0vx}��x��h�� �9����N �$( � � �S�L� �;:�< ��� ��+ q �d����� � � � �d����� � � u � � g�h�i

rì� ��ol� gLh?f¥r F����Te?��}0vx}��x��h��Fv � �� � " � ��N �$( � � ���L�)�;:�<!� � ��+ q �d�����=� � � ����� " �=� � u � � �

��z�vx}�g���}%e?f7i?z�§�h?��h��7g=��z\��{�c�}�gL}x��olh$iD�Pvx}��x��e�c�}x��olh � " }�w�gL}Xg`��{%oFvx}Xglknw?��z\�Dz^vX}�w?�Pv\® !���z\�n{�c�}�gL}x��olh� " � � "� k 0 � w vngL{%�?��z^i�~¨�nol{ � " �Pv i?z�§�h�z^i|e?f%}xy�o � " �;!�/�X ~Tc�h�k�}x��olh�v\� ^ ® �:�� � g�h�i ® ������� � � �� � �xvxz\z�i?z�§�h?��}x��olh´oL~ � �;! / X ~Tc�h�k�}x��olh�v©��h (lz^k�}x��olh cì�sr?�����ìol�%gLh?f � � � � ^ � � ���� �����x�%�xvxc�k�w }�w�gL}� � �NE � � E � r2F9���

� "� k 0 � w � �2��>�@�A� � � ^ � ^ � ���n� � �qNL� ��� � ^ � ���n��� �xr?� ���� ����� K ^ � ^ � ����� � ����>@NL� � ��� � ���`�n�>�}­�±v�h�ol} w�g���i|}�o%�lz\�:��~Tf|}�w�gL}^®

N " ��ol� gLh?f¥r F����Te?��}0vx}��x��h�� �9����N �$( � � �S�L� �;:�< � �� ��+ � q � " ���d� � � � � " ���d� � � u � � " gLh�i

r " ��ol�´gLhFf(r2F����Te?��} v:}��x��h��FvQ� �� � " » )$/=� ���Fµ � � � �� � " � gLh�i ~Tol�$g`�¢��N � ( � � � �L�

�;:�< � � � ��+ � q � " ���d� � � � � " ��� " � � � u � � " �

r c

Page 27: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

>�hKol��i?z\�¬}�o|z��¢��{���h�gL}�z%}�w�z%gli�iD��}x��olh�g��*��z^�lc?����z\{�z\hF}0��h=�¤r "±��}�w�g�} � � �� � " � ��y�z�i?z�§�h�z�}�w�z���z\�n{�c�}�gL}x��olhiD�Pvx}��x��e�c�}x��olh�� vxc�knw }�w�g�}dg­��z\��{�c�}�gL}:��oDh � vngL{%�?��z^iO~¨��oD{ � �PvZi?z�§�h�z^i }no e�z&� " � 2�� �¤vxz\z�%0z�§�h?��}x��olhmQ��6NL���y w�z\��z � " �Pv1v�gL{%�?��z^i'glk\k�ol��iD��h��|}�o.� " gLh�i���® � � � � K ^ � �� � �Pv1g � " �;! / X ~Tc�h�k�}x��olh�� X0v���h����qN " � gLh�i�¤r " ��gLh�i|}�w�zO~ gDk�}�}nw�gL}�~Tol� gLhFfXr2F

����Te?��}¬vx}n�x��h��Fv � �� � " ®�;:�< ���Fq 2��L����� � � 2���� � " � � u � � "

y�z1�lz\} }�w�g�} ��v�g�}x�Pv�§�z^v0��NL�*gLh�i �¤r?�Z~Tol� � � r � " �d�ol}x�Pk�z�}�w�gL}�}�w�z%k�ol{%��c�}�gL}:��oDh�oL~�g©~¨c�h�k�}:��oDh � � �²�Pv�z^v�vxz\h?}x�Pg`�¢��f�z^�Dc?����g`��z\h?}�}�o%olh�z%k�ol{%��c�}�gL}x��olh

oL~*gLh � �;! / X ~Tc�h�k�}x��olh�� �¥® � � � � K ^ � �� � ��gLh�i�g�~¨z\y gDi�iD��}:��oDh�g`� / B¬j$ol��z\��gL}x��olh�v­��z\�0e?��o�knmA� X¬v¤��h��z�¦¥kn��z\h?}©k�oDh�vx}���c�k�}x��olh�vOoL~ � �;!�/�X ~¨c�h�k�}x��olh�v|q6Nb-F�Zr a?��r ���6�8ND�6�2P���c aLu,y�z%�Dz\} gLh�z�¦¥kn��z\h?}1~Tc�h�k�}x��olh �9�'0��g`y k�¹\fFmKqsr �Lu�v:w�o�y0v g¡k�oDh�vx}���c�k�}x��olh'oL~ � � � � � k �;!�/�X ~Tc�h�k�}x��olh�v�~T��ol{ � e?��}�v�}�o 1e?��}�v y���}�w mlz\f?�Te?��}�v\�X0v���h��¡}�w�z^v:z0~¨c�h�k�}x��olh�v�y�z k\gLh�glknw?��z\�lz }�w�z�i?z^v�����z^iX�DoFg`��oL~,��z^i?c�kn��h��¡}�w�z1mDz\fF��v���¹\z�oL~ �'}�o�B1��h��ëe?��}�v\�� $! *"(�.&3�0�(�7�" A%;$#��w�z¬k�oDh�vx}���c�k�}x��olh�����z^vxz\h?}�z^iO��h|}�w?�Pv*v:z^k�}x��olh��Pv*k�z\��}�g`��h?��f�h�ol},}nw�z olh?��f%vxoL��c�}x��olh%}�o1}nw�z ����ole?��z\{ g�},w�gLh�i����z1��z�~Tz\����h�e��:��z�~*}no¡vxol{%z gDi�iD��}:��oDh�g`�ªvxoL��c�}x��olh�vÚ®

!1vë{%z\h?}x��olh�z^iXgLe�oL�lzl�$%+&,(�{%o�i?z^v�oL~�ol��z\��gL}x��olhXy�z\��z1vxc��l�lz^vx}nz^i¡glv�gOy­g`f%o�~dz\h�k��nfF��}x��h�����olh���{%z^vx�v�gL�Dz^v\� I�oLy�z\�lz\�^��h�olh�z)oL~,}�w�z^vxz {�o2i?z^v0k�olh�vx}x��}�c�}nz^v¬g%k�oDh�vx}���c�k�}x��olh'oL~�g���vxz\c�i?oD�T��gLh�i?ol{(��z\��{�c�}�g�}x��olh����oD����h�vx}�gLh�k�zl��y w�z\h�c�v���h��=}�w�z�kn����w�z\�Xe?��o�k�m´k�w�g`��h?��h���{%o�i?z��s_,� _ë�T{%o2i?zL���*}�w�z'z\h�k���f?��}x��olh�v|oL~1}¤y�o{%z^v�vngL�lz^vZy���}�w��Pi?z\h?}x�Pk\g`������z�§� %y��¢�¢�9g��±v:o w�g`�lz gLh��Pi?z\h?}x�Pk\g`������z�§� d��d�ol}�z }nw�gL},y w�z\h%}�w�z�z\h�k���fF��}:��oDh¡oL~�g{%z^v�vngL�lz;*6�Pv �9�)*����l~Tol� g)��vxz\c�i?ol�T��g�h�i?ol{ ��z\�n{�c�}�gL}x��olh4���ì}�w�z\h¡}nw�z1olh?��f%��h?~Tol��{¡gL}:��oDhX}�w�gL},�Pvë��z^gLmDz^iolh/* �Pv y w�z\}nw�z\� ol� h�ol} * �Pv�z^�lc�g`�Z}�o%����z\�D��olc�v���fXz\h�k���f?��}�z^iX{%z^vnv�gL�lz^v\���ëz��¢�PgL��z�z\}^��g`����q P^uZvxw�oLy$}�w�gL}}�w�zU_ �"_*�T{%o�i?z�i?o?z^v1i?z�§�h�z©g�k�olh�vx}���c�k�}:��oDh�o�~£g���vxz\c�i?ol�T��g�h�i?ol{ ~Tc�h�k�}x��olhKy���}�wKvx{¡g`�¢�,olc�}���c�}���z\h��D}�w����w�z\f¡g��±v:o ����oL�D�±i?z gN~¨oD��{¡g`�Avxz\}n}x��h�� ~Tol�ë}�w�zNg�h�g`��f2v��PvëoL~�}�w�z1vxz^k�c��x��}xf%oL~���vxz\c�i?ol�T��gLh�i?ol{º~¨c�h�k�}:��oDh�v�y���}�w§� �z^iX��h���c�}�gLh�i'olc�}���c�}���z\h��D}�w�v\��ëz��¢�PgL��z%z\}^��g`���Zq.QLu,k�olh�v��Pi?z\�1}�w�z%vxoXk\g`�¢��z^i /�µL»=/�µ El¸1k�olh�vx}��nc�k�}x��olhKoL~�g��vxz\c�i?ol�T��gLh�i?ol{(~Tc�h�k�}x��olhKy���}�w�vx{¡g`�¢�*olc�}���c�}���z\h��l}�w���ëz��¢�PgL��z¡g�h�i�j­ol�Fg`y g^fKq %`u*vxw�oLy w�o�y }�o|c�vxz�}�w�z_ �"_*�T{%o�i?z���h=ol��i?z\��}�oKk�olh�vx}��nc�k�}�g'��vxz\c�i?ol�T��g�h�i?ol{ 52¸^¶�¼ )2�TµH�;7B� �KoDhK�PgL���lz���h���c�}�v|��}�w?�PvN�±v©}�w�z%olh?��fy�ol��m�y�zNg���zNg`y gL��z�oL~�}�w�gL}�z� 2�?�¢�Pkn��}x��f���z�~Tz\��v£}�o�}�w�z¬���nole?��z\{X���*��w�z0y�ol��m)��hX}�w�z����¬k�olh�vx}n��c�k�}x��olh��±v�k�ol{%���gL��g�e?��z�}�o�}¤y�o¡g����?���Pk\gL}:��oDh�v1oL~*}�w�zU_ �"_*�T{%o�i?z|�¤gL������o` ?��{|gL}�z���fX}xy��Pk�z�}nw�z y�ol��m|oL~*olc��1k�olh�vx}��nc�k�}x��olh��glv�v:c�{���h�� }�w�gL}�� ^ gLh�i � gL��z���z��PgL}x���lz���f%z�¦¥kn��z\h?}\���*�­w�z¬vxz^k�c��x��}xf�oL~dg`�¢��}�w�z^vxz k�olh�vx}��nc�k�}x��olh�vZ�PvëoL~dv¤��{©���PgL�ol��i?z\�ë}�o }nw�zNvxz^k�c��:��}xf%o�~doDc���k�olh�vx}n��c�k�}x��olh���>�h¥k�olh?}���gDvx}*}�o1oDc��­k�oDh�vx}���c�k�}x��olh���q.Q?�$P�� %Lu�gL��z¬g�����vxz^�Dc�z\h?}x�Pg`���h�h�gL}nc���zl�

!�iD�¢p�z\��z\hF}0gL������oFglknwX}�w�gL}�{¡g`f|e�z gL}n}��x��e�c�}�z^i|��hX��gL�n} }�oL_�gL��}nz\�¬gLh�i|��z\�l{|gLh�q.c a`u��D�Pv }no©i?z�§�h�z�g��z\h��l}�wX����z^v:z\���l��h��%��v:z\c�i?ol�T��gLh�i?ol{ ~¨c�h�k�}x��olh 7� glv ! � � � �|y w�z\��zl� ���±v�g ��g����n�Ty��Pvxz0��h�i?z\��z\h�i?z\h?}1w�glvxw~Tc�h�k�}x��olhKy���}�w�vxw�oD��} olc�}���c�}`� � �±v0g©��z\h��D}�w�����z^v:z\���l��h��X��vxz\c�i?oD�T��gLh�i?ol{~¨c�h�k�}:��oDh�oDh�vxw�ol�n}���h���c�}�v1gLh�i! g1��vxz\c�i?ol�T��gLh�i?ol{ ��e?��}Ú���lz\h�z\��g�}�ol�^��>�}£�Pv*h�oLy���oFv�v���e?��z1}�o c�v:z¬}�w�z0b�j���_*olh�v:}���c�k�}x��olh���h¡ol��i?z\�*}�o)�lz\}*g��vxz\c�i?ol�T��gLh�i?ol{ ��z\��{�c�}�gL}x��olh|olh��±g����lz���h���c�}�v\��!0h�i?z\��vxoDh�gLh�i��£��w�gL{�q c^u�gLh�iXbdc�k�m�v0qsr P`u�vxw�oLy7w�oLy´}�oiD����z^k�}x��f¡gL���?��f¡v¤��{©���PgL�ë�Pi?z^glv£��hF}no }�w�z¬b9j���_*olh�vx}n��c�k�}x��olh���h�ol��i?z\�*}no1�lz\}�gO��vxz\c�i?ol�T��gLh�i?oD{ ��z\�n{�c�}�gL}x��olholh��±g����lz1��h���c�}�vÚ�N�­w�z©k�oD{%��gL�x�Pvxolh'e�z\}xy�z\z\hK}�w�z^vxz�k�oDh�vx}���c�k�}x��olh�v1g�h�iXolc���vO��e�ol}�wX��hK}�z\��{|v oL~�v:z^k�c��x��}¤fgLh�i���hX}�z\��{|v*o�~ªz�¦¥kn��z\h�k�f��*�Pv g)e?��} {%oD��zNk�oD{%�?�¢�±k\g�}�z^iXe�z^k\gLc�vxz }nw�z^vxz k�olh�vx}��nc�k�}x��olh�v�c�vxz gLh�gDi�iD��}:��oDh�g`����x��{���}x���lzCD�g0��vxz\c�i?ol�T��g�h�i?ol{��lz\h�z\��gL}nol�^���­w�z\��z�~¨oD��zl�l}�w�z k�ol{���gL�x�Pvxolh���z��¢��z^vëolh�}�w�z¬vx��z^kn��§Ak���gL��g�{%z\}�z\��voL~*}�w�z�iD�¢pdz\�nz\hF}0���x��{���}x���lz^v1}nw�gL}¬gL��z)c�vxz^i ����vxz\c�i?ol�T��gLh�i?ol{~¨c�h�k�}x��olh�vÚ����vxz\c�i?ol�T��gLh�i?oD{ �lz\h�z\��gL}�oD�¬gLh�ig�w�glv:w|~¨c�h�k�}x��olh����

S L1,=_�]�� �VU1W���)?¶m/q� ��»=�T¶ )$/��;7�� � � µL» D ¸^³Ì³,µL»m���F¸L� ���F¸`¶m/��H��»=�T¶ )$/��;7�� ��»'El¸\»=/^¶q7 6 ¸qE?7B� ���27±»�» ¸q/��;7�� ����� �¡µ5�»\¸-)$E �D3x¶¤µH�8E �l¼ 52¸^¶�¼ )2�TµH�;7B� ��� �X¼�µ �8h 6 ³ �b/=<`» �\¶��l¼ µ 5�»\¸-)$E �D3x¶¤µH�8E �l¼ � )$�8/b�;7B� � � �l¶\52¸`¶�¼ )$�Tµ �;7B�H����� �'µ

r Q

Page 28: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

»=7B�?·l³¢¸ 6 ³ �b/=<�7±»6C-)?³ ��¸`¶¤µ 6 ³¢¸'�;�Xµ 6 7̶����2EDµ hb3¤µ �;�Tµ /1<0� � ���F¸�»=76j\¸'����µ|»=7��F·l³¢¸ 6 ³ �b/=< ���O��� D �?E 7 �¬¸^¶x¸b�8� + )F¸`¶�7̸\»�;� ���F¸�5�» ¸ )2EH�D3¤¶xµ �CE �l¼ 52¸`¶�¼ )$�Tµ �;7B�H�@� ��¼�µ �Ch 6 ³ ��/1<^»"5A¶���E&)$/�¸L���F¸|»\µl¼�¸�7��D5 )2� �;�0���F¸ 5�» ¸ )2E � 3¤¶xµ �8EH�l¼� )2�C/��;7�� ��� �´µ=»i7��F·D³�¸ 6 ³ ��/1< � µ � µH�8h »i�Tµ^·D¸ 7B�����F¸ /q�l¼"5 )2�TµH�;7B� ��A���F¸b���&)F¶'µ ��µD³ h`»=7�» �\µ 7P³ » H�� � D ¸ C^¸`¶ 0�&)?¶�/q� �ì»i�T¶,)2/b�;7B�H� � µL» D ¸^³Ì³�µ�»����F¸�H���F¸^¶+/q� ��»=�T¶,)2/b�;7B� �ì» � ¶x¸qE&)2/�¸\» ���F¸,5A¶�� 6 ³¢¸^¼ � ���=� 7̳ 7��F· 6 7P¶q���2ElµHh�3xµ �;�Tµ /1<^»D �F¸b�?/�� �ì»i�T¶,)$/��;7��F·�µ 5�»\¸-)$E �D3x¶xµ �8E �D¼ 5�¸^¶�¼ )2�Tµ �;7�� ��� ��{¡gLh?f 6 ³ ��/=<`» �;�m���F¸�5A¶�� 6 ³�¸`¼ �����=� 7P³ 7��F· 6 7P¶q���2Elµ hb3µ �;�Tµ /1<^» D �?¸�� /�� �ì»i�T¶,)$/��;7��F·'µ'5�»\¸-)$E �D3x¶¤µH�8E �l¼ � )2�C/��;7�� � � �l¶ 52¸^¶�¼ )2�TµH�;7B� ��e� �'}xy�o 6 ³ ��/=<`» H »i�l³�)$�;7B�H��;�?���F¸�³¢µ �;�T¸^¶+7±»,5A¶��q5 �L» ¸qE 6 h +7P¸`³P³ �%µH�8E���¸��4<�µ �T¸Ú» µH��� �� H

' ����C������ ��������� �)(��� �� �� ���� �� ���L�"��:�"� � � �,� � ����,���s�+��

>�hK}�w?�Pv0vxz^k�}x��olh���y�z�vxc�{%{|gL�x��¹\z }�w�z�k�olh�h�z^k�}x��olhKe�z\}xy�z\z\hK}�w�z �LgL�x��olc�v0k�olh�vx}��nc�k�}x��olh�v o�~*}�w?�Pv ��gL��z\� gLh�i}�w�zK}�glv:m�oL~ oDe�}�g`��h?��h��ZO?�Ty��Pvxz��`��i?z\��z\h�i?z\h?}���z\��{�c�}�gL}x��olh�v\� !1v%{�z\hF}x��olh�z^i7��h (lz^k�}x��olh c��ONl� (Fk�w�h�oD���q ��t\u�vxc��l�lz^vx}nz^iKc�v���h���}�w�zXb�j���_ëolh�vx}���c�k�}:��oDh�y���}�w }���c?��fK��gLh�i?ol{ ~¨c�h�k�}x��olh�vO��h=ol��i?z\�1}�o'�lz\} gX��vxz\c�i?oD���gLh�i?oD{��lz\h�z\��g�}�ol�1}�w�gL}0�Pv�vxz^k�c���zXglvN��oDh���glvOh�ol} }�o?oX{¡gLh?fKe?��}�v1oL~���}�v)olc�}���c�} g���z¡glk\k�z^v�v¤��e?��zX}�o'}�w�zgli?�lz\��v�gL��fl�$��w?�Pv��Pi?z^g �Pv�~Tc���}�w�z\�|}���z^g�}�z^i�e?f�MKgLc���z\�XgLh�i�MKglv�v:z\f$q.- a`u�� MKgLc���z\�Kqsr&%`u1vxc��l�lz^vx}nz^i�}�o��z\�?�Pglk�z }nw�z�}n��c?��f ��gLh�i?oD{ ~¨c�h�k�}x��olh�vZy­��}nw%y w�gL}Zw�z¬k\g`�¢�PvZ��o�k\g`�¢��f���g�h�i?ol{ ��ol�,g`��{%oFvx}Z��gLh�i?oD{X��~¨c�h�k�}:��oDh�v\�>�h�}nw�z¡}�z\�n{���h�oL��ol�lf�oL~�O?�Ty��Pvxz|��h�i?z\��z\h�i?z\h�k�zK}�w�z^vxz��Pi?z^glv%k\gLh=e�z|��h?}�z\������z\}�z^i�gDv�g�y g^fKoL~0c�v���h���}�w�zb�j���_ëolh�vx}���c�k�}:��oDh���h´ol��i?z\��}�o�oDe�}�g`��hZO?�Ty��Pvxz �`��i?z\��z\h�i?z\h?}���z\�n{�c�}�gL}x��olh�v©~¨��oD{+O?�Ty��Pvxz�� " ��i?z\��z\h�i?z\h?}~Tc�h�k�}x��olh�v1�xglv£��oDh��¥glvCO��±v�h�ol}�}�o?o��PgL���lzL���*��w�z\ol��z\{ N0��h�qsr&%`u���{%�?�¢��z^v1}�w�gL}

D �F¸���OC3 D 7±» ¸ � " 3�El¸�5�¸��8ED¸��8�$� )$�8/��;7�� �ì»Nµl¶x¸0)l»\¸�EL7���»=�T¸�µ E'���,5�» ¸ )2E � 3¤¶xµ �8EH�l¼�� )2�C/��;7�� ��»+7B�����F¸��� 3���� �ì»i�T¶,)2/b�;7B�H�����F¸)¶x¸\» )F³ ��7�»¬µ�OC3 D 7�»\¸��H3*ED¸�52¸b�8El¸b�8�$5�¸^¶�¼ )2�Tµ �;7�� �ì»��=�l¶6� � # ��O % r � �(��"Ì� H

(L��{��¢�PgL�1ole�vxz\���LgL}x��olh�v g����?��fX}no%}�w�z iD�¢p�z\��z\hF}0k�olh�vx}���c�k�}:��oDh�v oL~,olc�� ��g���z\�¬glv�iD�±vnk�c�v�vxz^i���h�}�w?�Pv vxz^k�}:��oDh��

VW�]�W ( (±_�]�� �EU1W � �;� ���F¸q�l¶x¸^¼ �]H � � � ¸���� ^ � � � � ��6 ¸�52µ 7̶ 3 D 7±» ¸L7B�CEl¸�5�¸��CEl¸��C��52¸`¶�¼ )$�Tµ �;7B�H��»%µ �8E'³¢¸��� ^ � � � � �76 ¸ OC3 D 7�»\¸�� " 3*El¸ 52¸b�8El¸b�8�H� )$�8/b�;7B� �ì» H ���F¸b� 0 � � � ^ � � ^ � � ��� � � µL»�7����1¸�8,�87��;7B�H� �]H � �m7�»1µOC3 D 7±»\¸ �H3�El¸�5�¸��8ED¸��8��52¸`¶�¼ )$�Tµ �;7B�H�'�i�D¶

�G>�@BA�O r � �

O r � ��r&� "�¶��b�����ëb�z\} ^ � �5� � w�g`�lz1}�w�z0~ToL�¢��oLy���h��¥iD�Pvx}��:��e�c�}:��oDh�v\®

¯ ^ � � � ^ ��� ^ � � � � ���,y�w�z\��z�� ^ ��� � � � gL��z|��g`�����Ty��PvxzX��h�i?z\��z\h�i?z\hF}^� � � � � g"O?�Ty��Pvxz�� " �i?z\��z\h�i?z\h?} ~Tc�h�k�}x��olh�g�h�i�� ^ � � � g)}���c?��fX��gLh�i?oD{ ~¨c�h�k�}:��oDh��¯ � � � ^ � � ^ � � � � ����y�w�z\��z � ^ ��� �5� � g���z1��g`�����Ty��PvxzO��h�i?z\��z\h�i?z\hF}�gLh�i�� ^ � � � � � gL��z1}��nc?��f��gLh�i?ol{º~Tc�h�k�}x��olh�v\�

gLh�i���z\}N< ��� � e�z¡g%}n��c?��f���gLh�i?oD{ ��z\��{�c�}�gL}x��olh�� >�}��Pv0z\h�olc��lwK}�oXvxw�oLy }nw�gL} ~Tol�0z\�lz\��f<OKvx}��:��h��?v oL~r2F��Te?��}�v\��� ^ � � ���� � �� L�ìy�z1w�g`�lzl®ND� ' � � � ^ � � ��� � ���� � ��� � � > � ^ ��� ^ � � ^ ��� � ���� � ^ ��� � � ' ��� "

rì� ' � ^ ��� ^ � � ^ � � � ���� � ^ ��� � � > � � � ^ � � ��� � ���� � ��� � � ' � � "-ì� ' � ��� ^ � � � � � ���� � ��� � � > � <)��� ^ � �<)� � � ���� �<)��� � � ' � w r �

w wgr

r?t

Page 29: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

�­w�z1��z^glvxolh'�*-?�,w�oL�Pi�vë�Pv�}nw�gL}ë��~,y�z i?z�§�h�z�gLh|ol��gDkn��z1{|glk�w?��h�z3* vxc�knwX}�w�gL}ë��}�v�(T}nw��lc�z\��f©�±v0g`��y g`f2v� � ���?�T��g�h�i�vxc�knwX}�w�gL}

� � � � � ^ � � ^ � � � � � � � ���� � � � � � � D� � N� �;:�< �Lq � ��� ^ � ���� � ��� � � � � � ^ ������ � � u � �;:�< �Lq � <)� � ^ � ���� �<)��� � � � � � ^ ���� � � � u

y�z1�lz\} e?f¡}nw�z i?z�§�h?��}:��oDh�o�~ª�LgL�x�PgL}x��olhKiD�±v:}�gLh�k�z�g�h�i�~¨��oD{ ��w�z\ol��z\{ -��sr)}�w�gL}' � ��� ^ � � � � � ���� � ��� � � > � <)��� ^ � �<)� � � ���� �<)��� � � '

� EF�;:�<!�Lq=* � w 0 � � kw ��N � � � N\u?> �;:�< �Lq@* � 0 � � k ��N � � � N\u�E� O

r � �O r �

�qNL�*gLh�i'�¤r?�,w�oL�PiXe?fX}�w�z i?z�§�h?��}x��olhKoL~8O?�Ty��Pvxz � " ��i?z\��z\h�i?z\h?}0~¨c�h�k�}x��olh�vÚ���ìol��z� ìgL{��?��zl�ì�¢~' � � � ^ � � ��� � ���� � ��� � � > � ^ ��� ^ � � ^ ��� � ������ ^ ��� � � ' � � "

}�w�z\h%y�z¬k\g�h�§�  � ^ � � �5� � gLh�i�� � � � ��h¡}nw�z¬i?z�§�h?��}x��olhXoL~Ae�ol}�w gLh�i ^ vxc�knw%}�w�gL},}�w�z­��h�z^�Dc�g`�¢��}xfvx}x�¢�¢��w�oL�Pi�v\�*��w?�PvZi?z�§�h�z^v O vx}��:��h��?v�oL~VF��Te?��}�v\� � ^ ��� ���� ���� L�?��h�ol}�h�z^k�z^v�v�g��x�¢��f�g`�¢�ìiD�¢p�z\��z\h?}\��gLh�i g­~¨c�h�k�}:��oDh% ~¨oD��y�w?�±knw�® � ��� ^ � � ��� � ���� � ��� � � � %%� � � ^ � � ^ � � � ^ � � � ���� � � ^ � � � � �8� F��� ^ � � ^ � � ^ ��� � ���� � ^ ��� � � � %©� � � ^ � � ^ � � � ^ � � ������ ��� ^ � � � � ���z1�lz\}0g%k�olh?}���gliD�Pk�}x��olhKv���h�k�z1~Tol� gLhFf�~Tc�h�k�}x��olh�%|®

' %©� � � ^ � � ^ � ��� ^ � � � ���� � � ^ � � � � �2> %©� � � ^ � � ^ � � � ^ � � � ������ � ^ � � � � � '� ' � � ^ � � ^ ��� � ^ � � � ���� ��� ^ � �� L� � > � � ^ � � ^ � � � ^ � � ������ ��� ^ � �� D� � '� � "�

>�h�g%v���{��¢�PgL�1y g`f%y�z1�lz\}�}�w�z1~ToL�¢��o�y­��h��|}xy�o�_ëol��oL�¢�PgL�x��z^vë~T��ol{ }nw�z k�olh�vx}���c�k�}:��oDh�v�oL~,(lz^k�}x��olh�v�Q�T tF®VW�]�W ( (±_�]�� �EUYM � �;� ���F¸q�l¶x¸^¼ � H � � � ¸b� 6 ¸KµL»07�� �N¸B8 �87��;7�� �� H � 0:D �F¸`¶¤¸ � ^ µ �CE � µD¶¤¸U5�µ 7P¶ 3 D 7±»\¸7��8El¸ 52¸��CEl¸��C� 5�¸^¶�¼ )2�Tµ �;7�� �ì» µ �8E � ^ ��� ���� ��� µl¶x¸ OC3 D 7±» ¸ � " 3�El¸�5�¸��8ED¸��8�$� )$�8/��;7�� �ì» H ���F¸b� 0 7�»1µ OC3 D 7±»\¸�H3*El¸ 52¸b�8El¸b�8��5�¸^¶�¼ )2�Tµ �;7�� �'�=�l¶

�+>�@BA��r �

O� r � K�� ��� �� �

O� r � � � � � "

VW�]�W ( (±_�]�� �EU P � �;� ���F¸q�l¶x¸^¼ � H � � � ¸b� � ^ ��� � � � � 6 ¸?5�µ 7P¶ 3 D 7±»\¸)7��8El¸ 52¸b�8El¸b�8�,5�¸^¶�¼ )2�Tµ �;7�� �ì» 0 ³¢¸��� ^ � � � � � 6 ¸<� � OC3 D 7�»\¸�� " 3*El¸ 52¸��CEl¸��C��� )$�8/b�;7B� �ì»�µ �CE�³¢¸�� � � � � 6 ¸�µ ��OC3 D 7�»\¸ � " 3*El¸ 52¸b�8El¸b�8�52¸`¶�¼ )$�Tµ �;7�� �?H �1¸�8,��¸ � � � ^ � � ^ � � ��� �NµH�8E � � � � � ^ � �%� � � � µL»+7B� �1¸�8,�87��;7B� � �[H � �]H ���F¸b� 0 7±» µ

OC3 D 7±»\¸ �H3�El¸�5�¸��8ED¸��8��52¸`¶�¼ )$�Tµ �;7B�H�'�i�D¶

�G>�@�A�O ��

r � � O r � � ��r&� "

µ �CE � 7±» µ OC3 D 7�»\¸ ��D3�El¸�5�¸��CEl¸��C��52¸`¶�¼ )$�Tµ �;7�� �'�=�l¶

��G>�@�A�O ��

r � K ^ �.� "

r P

Page 30: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

�ëfX}�g�ml��h�� � � 1��h _*ol��oL�¢�PgL��f0Pì�sr%y�z)�lz\}¬g|v���{%�?��z¡k�olh�vx}��nc�k�}x��olhKoL~�g O?�Ty­�±v:z �`��i?z\��z\h�i?z\hF}1��z\��{�c��}�gL}:��oDh�oDh �e?��}�v0~Tol� �|glv1kn��oFvxz%}�o � � � ^ � � w � gDv0y�z�y��Pvxw��%�­w?�±v)k�olh�vx}��nc�k�}x��olhK��z^�lc?����z^v ©gL���?�¢�Pk\gL}x��olh�v)oL~O?�Ty��Pvxz5� " ��i?z\��z\h�i?z\h?} ~Tc�h�k�}x��olh�vN~¨��oD{ '>�N�e?��}�v0}�o�gXv���h��L��z%e?��}^� !0h���h?}�z\��z^vx}:��h��K�lc�z^v:}x��olhK�Pv0}�o|§�h�iKgv���{%�?��z�k�oDh�vx}���c�k�}x��olh|oL~ O?�Ty­�±v:z �^��i?z\��z\h�i?z\hF}0��z\�n{�c�}�gL}x��olh�v£~¨oD�­g�h�µl¶ 6 7��T¶xµl¶q7P³ h)» ¼�µl³Ì³ �)gLh�i|gLh�gL��e?��}���g���fO��

!0h H�oL�Pi�J����nol��oFvng`��eFf|}�w�z1§���vx} gLc�}�w�ol�1�xvxz\z%q �Fr?����gL�DzmNLt^uT�9�±v�}�o%c�v:z gLh H�ole?�¢���l��olc�v J¡k\gL��iXvxwFc�����h������o�k�z^i?c���z|}�w�gL}1��z^�Dc?����z^v)olh?��f�~Tz\y �nolc�h�i�v\�4B e?�¢���D��oDc�v%w�z\��z�{%z^gLh�v1}nw�gL}1}�w�z���o�k\gL}x��olh=oL~­g'k\gL��i�g`~T}�z\�z^glknw���olc�h�i=i?z\��z\h�i�v©olh�g|~Tz\y ��gLh�i?ol{ i?z^kn�Pv���olh�vÚ�?>�h´q �Fr`u*}nw?�±vO�Pi?z^g��Pv i?z^v�k��x��e�z^i ~¨ol��g�vx��z^kn�¢§AkXk\gL��ivxw?c��%��h��1����o�k�z^i?c���z�}�w�gL}Zy­gDv�vxc��l�lz^v:}�z^i)eFf+!��Pi?olc�v,gLh�i'%��Pglk�olh?�Pv�qsr`u�� X�h?~Tol��}�c�h�gL}nz���fl�L}no¬}�w�z�e�z^vx}�o�~�olc��m?h�o�y­��z^i?�Dzl��}�w?�Pv ���no2k�z^i?c���z)y glvëh�z\�lz\� ����oL�lz\h|}�o%�L���lz���y���}�w|~¨z\y3��olc�h�i�v���g�h�g`��{%oFvx}�c�h?�¢~¨oD��{ oD��i?z\�x��h��oL~,}�w�z k\gL��i�vÚ��I oLy�z\�lz\�^�Dy�z k\gLh�vx}x�¢�¢�ªc�v:z1}�w?�Pv }�z^knw�h?�P�lc�z)y���}�w�iD�¢p�z\��z\h?}¬k\gL��iXv:wFc��%��h��|����o�k�z^i?c���z^v\����ol�z� �gL{%�?��zl��olh�z|k\gLhK��z^k�c���v����lz���f�k�olh�v:}���c�k�} vxc�knw�g|����o�k�z^i?c���z%e?f���z\��{�c�}x��h���z^glknw�w�g`�¢~ oL~�}nw�z©i?z^knm�gLh�i{%z\������h���}�w�z�}¤y�o1w�g`���lz^v£��hXgLh¡g`��{%oFv:}*c�h?�¢~¨oD��{ y­g`f|��}�w�z�{%z\���L��h��1�Pv�g`�Pvxo)��z\�x~Tol��{%z^i���z^k�c���v¤���Dz���f����*�­w?�±v}���g�h�v��PgL}�z^vë}�o%gLh # � F �,��oDc�h�i�v�����o�k�z^i?c���z1~Tol� g)��z\��{�c�}�gL}:��oDhXolh<F'e?��}�v0��w�oLy�z\�lz\�^�?}�w�z1k�olh�vx}���c�k�}:��oDh|�±v��gL}nw�z\�ªk�c�{�e�z\��vxol{%zL���,��w?�PvZ����oD��oFv�g��2{¡g`f1e�z^k�ol{%z¬gL}n}���glk�}x���lz,�����Dz\h¡gLh z�¦Xkn��z\h?}�g�h�i�v¤��{��?��z H�ole?�¢���l��olc�v Jk\gL��iXv:wFc��%��h����bdz\olh�gL��i (Fknw?c?��{|gLh´�����x����g�}�z¡k�ol{%{�c�h?�Pk\gL}x��olh�� vxc��D�lz^vx}�z^i=gXy g`f�}�o'�lz\h�z\��g`�¢��¹\zX}�w�z¡g����Dz\e���g`�PkXk�olh��

vx}��nc�k�}x��olh%oL~���g`�����Ty��Pvxz���h�i?z\��z\h�i?z\hF}���z\��{�c�}�gL}:��oDh�v,}�w�gL},fD��z��Pi�v -��Ty��Pvxz���h�i?z\��z\h�i?z\h?} ��z\�n{�c�}�gL}x��olh�v\��I�z `svvxc��l�Dz^vx}x��olh �±v)}�o'c�vxz�vxw�gL�n�?��f -L�T}���gLh�v¤��}:���Dz¡��z\��{�c�}�gL}x��olh=�l��olc���vÚ�?! ��z\�n{�c�}�gL}x��olh=�l��olc���oL�lz\�)}�w�zXvxz\}q F�u � 2N2��r��� ����FE ��±v)gXvxc�e��l��oDc���oL~ }�w�z¡vxf?{%{%z\}n�x�Pk �D��olc�� � �m! ��z\��{�c�}�g�}x��olhK�l��olc�� ! o��Dz\�%q F�uZ�±vO?�T}���g�h�v���}x���lz)��~,~Tol�0z\�lz\��fX}xy�oGO?�T}�c��?��z^v !� ^ ���� � � ©g�h�i"!� ^ ���� ��� �oL~�iD�Pvx}:��h�k�}1z���z\{%z\h?}�v0oL~ q F�uZ}�w�z\��zz� ?�±v:} g|��z\��{�c�}�gL}:��oDh���� ! vxc�knw�}�w�gL}���N�� ()� O6���ª����� � � ���x�+! ��z\��{�c�}�gL}x��olhK�l�nolc�� ! oL�lz\��q F�u9�±vvxw�gL�n�?��f"O?�T}���gLh�v¤��}:���Dz��¢~*~Tol�¬z\�Dz\��f�}xy�o¥v:c�k�wK}�c��?��z^v1}nw�z\��z�z� F�Pvx}�v0z� �glk�}x��f'olh�z���z\��{�c�}�gL}:��oDh���� ! vxc�knw}�w�gL} ��N�$( ��O6���Z�����T� � ������! vxw�g����?��f O?�T}���gLh�v���}x���lz1��z\�n{�c�}�gL}x��olh|�l��olc����Pvë��hX��gL��}x�Pk�c?�PgL� O?�Ty��PvxzO��h�i?z\���z\h�i?z\h?} gLh�i)��h�i?z\z^i�}�w�z¬g`���lz\e���g��±k0k�olh�vx}n��c�k�}x��olh%oL~���g`�����Ty��Pvxz���h�i?z\��z\h�i?z\h?} ��z\��{�c�}�g�}x��olh�v,c�vxz0g1vxw�gL���?��frL�T}���gLh�v���}x���lz���z\��{�c�}�g�}x��olh%�l��oDc��¡�xk�olhF}�g`��h?��h�� g�����}nw�z��¢��h�z^g��*��z\�n{�c�}�gL}x��olh�v�����(FknwFc?��{¡g�h¡vxc��l�lz^v:}�z^i)}�o1c�vxz}�w�zO~ glk�}�}�w�gL}0}�w�z\��z�g���z1mFh�oLy hKk�olh�vx}��nc�k�}x��olh�v o�~�vxw�gL���?��f0-L�T}���gLh�v���}x���lz ��z\��{�c�}�gL}x��olh'�l��olc���vÚ� I oLy�z\�lz\�^�}�w?�Pv g�������oFglknw�k\gLh�h�ol})e�z%�Dz\h�z\��g`�¢��¹\z^i=}�o|�PgL���lz\�)��g`��c�z^v)oL~ O�®0~T��ol{�}nw�z¡kn�Pglv�v��¢§Ak\gL}x��olh=oL~�§�h?��}�z¡v���{%�?��z�l��oDc���vë��}�~¨o�����oLy¬v�}nw�gL}ë~¨ol� O ��Q)}�w�z\��z gL�nz1h�o O?�T}���gLh�v¤��}:���Dz �l��oDc���v*oL�lz\�)q F�uAoD}�w�z\� }�w�gLhX}nw�z vxfF{�{%z\}��x�Pk�l��oDc�� � gLh�i'}�w�z¡g���}nz\��h�gL}x��h����D��olc���� � gLh�i'}�w�z\��z¡g���z�olh?��f�~Tz\y vxc�knw��l��oDc���v�~¨ol� O � ��gLh�i"O � c�¤vxz\zKq6N^r?� �2a`uT��� B h�z�vxw�olc?�Pi e�zXk\gL��z�~Tc?�­h�oD}�}noX��hF}nz\������z\}%}�w?�Pv�glvO��{%�?��fl��h��=}�w�gL})~Tol� O �:�K}�w�z\��zXgL��zh�oXz�¦¥kn��z\h?} g`���lz\e���g`�Pk%k�olh�v:}���c�k�}x��olh�v0oL~�O?�Ty­�±v:z ��h�i?z\��z\h�i?z\hF}%��z\��{�c�}�gL}x��olh�vÚ��>�}0�Pv0w�o�y�z\�lz\�ë«xc�vx}x�¢§�z^iK}�oi?z^i?c�k�z%}�w�g�} ~Tol��O �Q��gLh?f�vx{¡g`�¢�,~�gL{��¢��f�oL~�O?�Ty­�±v:z���h�i?z\��z\h�i?z\h?}���z\��{�c�}�gL}x��olh�v��Pv0h�ol}1g|��z\�n{�c�}�gL}x��olh�l��oDc��K�T���Ûzl�Z�Pv h�oD}­kn��oFv:z^iXc�h�i?z\�1k�ol{%��o?v���}x��olh�gLh�i¥��hF�lz\��vxzL���

� ' ���� ��=�9������� � �� �'����� ��,� � ��� �

��w�z1k�olh�vx}��nc�k�}x��olh�v i?z^v�k��x��e�z^i|��h (lz^k�}x��olh�v -9T tOg���z¬oD��}x��{¡g`����hX}�w�z����¬k��nfF��}�oD�l��gL��w?�Pk�y�oD��m)��hX}nw�zNvxz\h�v:z}�w�gL}1}nw�z%}�ol}�g��ªh?c�{�e�z\�1oL~ e?��}�v1oDh�y�w?�±knw=}�w�z%k���fF��}nol�l��gL��w?�Pk)~Tc�h�k�}x��olh�v)gL��z¡gL���?�¢��z^i olhK�Pv1z� �glk�}x��fK}�w�zh?c�{�e�z\�1oL~*e?��}�v���hK}�w�z)��h���c�}`� ��w�z\��z�~Tol��zl�ì��} vxz\z\{¡v�}�w�gL}���hKol��i?z\�1}�o¥gDk�w?��z\�lz�}�w�z)�loFg`�,oL~�k�olh�vx}n��c�k�}x��h��z�¦¥kn��z\h?}¬e?��o�k�m?��kn����w�z\��v0��}��Pv0vxc?¦¥kn��z\hF}0}�o¡k�oDh�k�z\hF}���gL}�z0olh�}�w�z k�oDh�vx}���c�k�}x��olh'oL~,z�¦¥kn��z\hF}0��vxz\c�i?ol�T��g�h�i?ol{~Tc�h�k�}x��olh�v\�,��w�z�i?z\��}nw oL~�}�w�z�k�oDh�vx}���c�k�}x��olh�vÚ�Lolh1}�w�z*oD}�w�z\��w�gLh�i��`�Pv9}¤y­�±k�zë}�w�z�i?z\��}nw oL~�}�w�z�k��nfF��}�oD�l��gL��w?�Pk~Tc�h�k�}x��olh�v\� >�} �Pv0gLhX��h?}�z\��z^vx}:��h����Dc�z^vx}x��olh'y w�z\}�w�z\�0}�w�z\��z�k\gLh�e�z©g�k�olh�vx}���c�k�}:��oDh�o�~£v���{��¢�PgL� i?z\��}�w��0��w�z�loFg��ªoL~���z^i?c�kn��h���}�w�z%i?z\��}�w �±vOz\�lz\hK{%ol��z%v����lh?�¢§Ak\gLh?}1��h�}nw�z¡k\glvxz�oL~*}�w�z � � rL�T�nolc�h�i�k�olh�vx}n��c�k�}x��olh'��h(lz^k�}x��olh?Q���! iD�¢p�z\��z\hF}��lc�z^v:}x��olh%�Pv£§�h�iD��h��¡g v¤��{��?��z k�oDh�vx}���c�k�}x��olh|oL~ O?�Ty��Pvxz �`��i?z\��z\h�i?z\h?} ��z\��{�c�}�g�}x��olh�v~Tol�¬gLh�µl¶ 6 7��T¶xµl¶q7P³ h�»\¼�µl³P³ ��gLh�iXgLh�g���e?��}���gL��f4O��*��w?�Pv0�lc�z^v:}x��olhX�Pv iD�Pv�k�c�v�v:z^iX��h (lz^k�}x��olheP��

r&%

Page 31: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

� � ����� ��,��j� �]�����

��z1}�w�g�h�m¡j gLh _�g�h�z\}�}x����B¬i?z^i K¬o��±i?�nz��±knw�� '0ole�e?��d��Pv�v���{ g�h�i?�*z\h�h?f ° ��h�m�glv�~¨ol��{¡g�hFf%w�z����?~Tc?�£iD�Pv�k�c�v:�v���olh�v g�h�i�~¨ol��}�w�z����1iD�¢�����lz\h?}0��z^gliD��h��¡o�~�}�w�z1��gL��z\�^��>�}­�±v�iD��¦Xk�c?��}1}no�oL�lz\�nz^vx}x��{¡gL}�z B¬i?z^i�`sv k�oDhF}��:��e�c�}:��oDh}�o%}nw�z1����z^vxz\h?}�gL}x��olhXoL~,}�w?�Pv���gL��z\�^�

� � ( �,���"�� ������������ �����������������������������! "��#$���&%�'(����������)+*���,- -./���1023 - $�54"�6#7���98:�;��)� ".�<>=7�5?�@�������)BAC,$�!�(#EDF�5,-G9�� -�����(#H%�IKJ!L!M!N�OQP�R

S NUTWV�XQY�Z-[!\�[Q]!X_^3`+a:bKcKTCbedgfehi j�k�%�8:�14Q -?�,"�+l3�5 -��#7���9mn��Gpo�?� "��, q�4Q������4���%�q�o(,-����)��;,E<E�W��,-�r��)�%:�Hs5s�t(�

� uv�w=x��7�y�z��?�#3�!���2{C��=7�r��4Q�5����#H%�q� -,"����)B?(���|DF��,"G} -��G~�;#������x���(�� "�K,$�!�/����G}�3�!����#H%�IKJ!L!M!N/O$P�R S N~I�Y�Y�\ S PQJx��M1Z��zP�^� M1Z S O�R�%������E����%:�1s����(%�o�o&��t5s1<-s����

� �v�wl_�/ �����&%/8W�:*n�!@����������2x���E Q�!�E%��D��!#" ��!���2#"��G~o���� ,Q�!���z��G~�����1�2o��!,Q�!������������)���,"�� -.�G�D���, ".��xG9�1����G9�1�/�������Q<o/�����z���� #-�; o�,"��@�����G�%��5�:IK\�]�[!V S ZF� � R�%5�����E���z�F�6�;%:�Hs5��t�%5o�o&�/��t5�1<-�����(�

� ���wl_�: ���5�&%:�+�C�K�5�y�z,-���r4".&%/���C  ��#- $�5�����������:{g��,$���� Q��%Cq���G~o�����4Q�5��#- ",-?�4Q "������#_DF��,�����Gp��#" ¡5<��3��#"�B���/����o/���������� ,Q�!���z��G}����,-�r�!@�����#1%/b�M!N/J�[ �£¢ Z�V�¤�O�Z�¤�VQPQR�M!N�JxIK\�]�[!V S ZF� � R�%5���5������%:�1s�s5u�%�o�o&��u5��sv<>�5¥!���

� �v�w�_��7������,"#-�����!����¦���*���./�!G�%�A3�n�~o(,$��4� -�r4��!�C�!���§o�,-�!����@���0B#-�H4Q?(,-�B@�����4"�94Q��o�.��;,-#H¨7*©¦CK�ª������8:�-�Kl_%&fnV$[1O��« M1RQZ ¢ [>¬QZ�­nM!V$P�`©N�O;V�XQY�Z S [�N�%68®�H4Q "?�,-�Kl3�� "��#n���Bmn��Gpo�?� "��,Wq�4Q������4Q�5%������E���1¥��5s�%!q�o�,"���()���,><��W�;,-�r�!)/%��1s�s�t(%!o�o&�(���H�v<�1u�¥(�

� tv�w¯°��*������y��,-��%g����m3������ " -�W�!���± ���²7,Q�1��4Q�;06�:%&{�#-��?��z��,$�������5G£DF?���4Q "������#7,-������#-�� -�1�:¨3 -.(��4���#$4��5���B4Q����#" -,"?�4Q -���5�&%fnV$[1O��C³�´�ZF�BµQ`W`�` ¢ X � Y��n[!N « [!¤�N�J5M1Z S [!N�RB[E¬BT©[ � Y/¤�Z-P;V ¢ O S P�N/O$P;%&�1s�s5t�%5o�o&���(����<>�5u����

� �v�w¯°�6*������r�!,-�5%��+���K�5�y�z,-���r4".9�����Bq:���K�5�y�z����#-#-�;,H%5�E��4Q,-�;G~���� $���&4Q,-0�o� "��)5,$�!o(.60:¨5 -.��K4��!#"�K�!D&.���#-.�����)B�!���x#"��)�������)/%¶_·�¸1¹Hº®»$¼Q½ ¾�º�¿CÀEÁ�Â�ÃFÄ�ÅrÄ1Æ�Á~Ç7¿WÈ ÉWÊ3Ë3Ì£Í ÎHÏ %�8®�H4Q "?�,-�+l��� "��# ����mn��Gpo�?� -�;,�q�4����;��4Q��%/���5�E������s(%�q�o�,"���()���,><��W�;,-�r�!)/%�1s�s���%5o�o&��u(�Htv<>u5�����

� �v�w¯°��*������r�!,"��%/���&²7�����y�����!����{C�:����)6�1�3�10�%�A3.��x#-�14Q?�,-�� E0��!D©4Q��o�.��;,�@�����4-��4".������(���()�%�IKJ!L!M!N/O$P�R S NÐTWV;XQY�Z-[!\�[�]!XB^TCbKdgfehncÑi j;Ò�%�8®�H4Q -?(,-�Bl3�� "��# ���2mn��G~o(?� -��,3q�4Q�����/4Q��%/���5�����5��s(%6q�o(,-����)��;,E<E�W��,-�r��)�%:�Hs5s!�/%�o�o&���!�/�Q<-���5���

� sv�w¯°�&*W�;���r��,-�9�����U{C�&����)6�1�3�10�%�*�����4-�Ð4���o(.���,xG~�����x�!D3��o/��,$�� -������DF�5,�#-�14Q?�,-�5%©�����()� -.z<�o�,"��#-�;,-������)��;��4Q,-0�o� "�����&%G2�!��?�#Q4Q,-��o� n���~o�,"��o��!,Q�! "���5�&�

���H¥v��¯U�W*���?(GÓ�����Ðq:�W¯§�y4;�!���E%W 3�!�£ -��)������;,$�! "��4Q,"06o( -��)5,$��o�.��r4��!����0U#- ",-�5��)U#-�HÔ5?��;��4Q���!Deo(#-��?��z�!<E,$�!�/����GÕ@(�� "#H%¢ µ-IK�Ö�5�nT©[ � Y�¤5ZE�r%��5���E���1��%:�1s��!�/%�o(o&���5��¥1<-��t����

���������B�©*�,$��#-#Q�!,$�®% ×ÙØ&ÚgÛ6Ü!Ý£Þ!Ü!ß:àCáHØ/â�Ø�ã/ßW%W8:�H4� -?�,"�äl��� -�;#~���åmn��G~o(?� -��,Bq�4Q�����/4Q��%7�����E�C��u5��%3q�o�,"���()���,><��W�;,-�r�!)/%�1s��5���

���Huv��{C�/����m3��G~��,"���&%/'g���(�� "��o/��,-GB?� Q�! "���5�2)�,-�5?�o�#K�!���p�/���� -��#"��Gpo����K)�,-�5?�o�#1%&æ3¤�\r\ç��è®[�N�J�[�N��±MvZF��� ¢ [HO;�r%/���5���g�H�(%�1s��(��%5o�o&�&��<>u5u��

���H�v��8W�Wm3��,- -�;,������ЯU�g�U��)5G9�!�g%&é3�����5��,-#Q�!�3.���#-.UD�?���4Q "���5��#H% �5�K[E¬�T©[ � Y�¤5Z-P�V2M!N�J ¢ X1RQZ-P �ê¢ O S P�N�OQP�R�%W���5�E�W�H�(%�1s��5s�%5o�o&�&�;�6�v<��1�!���

��������* �Wmn.(��,B�!���ë�+�W�ì���r��,-�;�y4".&%W�7�í -.(�9o/�!�n��,+��De E�n�!<Eo��5���6 _@��!#"�H�U#Q�!G~o(������)/%��5�_T©[ � Y�\�P�î S Z�X!%C�5���E�C��%3�Hs5��s(%o(o&��s�tv<��1¥�t��

���H�v��q:�©¦������å�!�/�UïB�W¯��!�(#-��?(,H%nð4Q���(#- -,"?�4Q "���5�å�!D+��4Q��o�.���,wDF,-�5GÖ��#-����)5���~o�#"��?����5,$�!�/����Gño��;,-GB?� Q�! -���5�&%WAC���o�o/�H�!,7���Ð�5�3[E¬BTWV�XQY(Z>[�\�[�]vX!�/{C,-�;����Gp���/�!,-0B�5��,-#"����������IeJ�LvM�N�OQPQR S NUTWV;XQY�Z-[!\�[�]!XB^©I ¢ µ-IxTCbKd&fehòi j!ó5%�8®�H4Q -?(,-�l��� "��#3���§mn�5G~o�?( -��,3q�4Q������4���%:q�o�,-����)5��,E<E�W��,"�r�!)�%:�1s�s(���

- a

Page 32: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

���Htv���x�©�K�5�y�z,-���r4".&%��:Ø��CÝWÚ��(á���Ø�Ý��pاÞ!Ü!ß:àCá1Ø�ã/Ü���à �&ß���-Ü���ã��UÛ�Ý&á��2Ø����WØ:Ø�� �!%3�Hs5s��(��¦C���H4� -,-�5���r42o�?�@(���r4��v< "�����&¨n.� - "o&¨����!�3�3��� �H4;4�4!� ?����|<E -,-����,1�������!�14�4�4������zDF���5¦Wm3m3m�<>*�������#����H4�4�4$<�@/������#H� .� -Gp�3��¦C���H4� -,-�5���r4+mn�5������Ô5?���?�G}�5�mn�5G~o�?( $�! "����������mn��Gpo����Q���� E0��;�

���H�v���x�6�K�5�r��,-���r4".&%�q®�6�K�5�r������#-#"��,W�!���Bq:�5¯2�r4��!���E%� 3�!�í "�ì4�����#" -,-?/4Q 3,$��������G�DF?���4� -������#1%��5�&[>¬3Z��zPnIxTC���r%��5���E�!���(%�1s��5t�%5o�o&���5s�uv<>�5¥����

���H�v���x�W�K���r��,"���r4-.g%©q:�W�K�5�r������#-#"��,������Ðq®�W¯2�r4��!���E%��7�í -.(�§4�,-0�o� -�5)�,Q�!o�.��r42�!o(o����y4;�! -���5��#��!DK,$��������G DF?(��4Q -���5��#H%IKJ!L!M!N/O$P�R S N°TWV�XQY�Z-[!\�[Q]!Xx^+TCbKd&fKhnc i �HÒ�%/8:�H4� -?�,"��l��� -�;#e����mn��Gpo�?� "��, q�4Q������4���%/�����E�:�1s�t�%/q�o�,"���()���,><��W�;,-�r�!)/%�1s��5��%5o�o&��u5��tv<>u5�����

���Hsv���x���ì���r��,-�;�y4". �����ë+�n�å��)6�z��,-#"���&%3A3����0UDE�!G~��������#x�!DKDF?���4� -������#p�3�� -.å,Q�!�����5GÖo(,-��o/��," -����#H¨í�ÐÔ5?������� E05<E#-����� ",$�5���Q<E����DF�5,3.��!#".�����)�%/fnV$[1O�� 6kvZF�BIxTC� ¢ X � Y/�©[!Nëhg�zPQ[!V�X~[>¬BT©[ � Y�¤5Z S N�]!%:�Hs5s!��%�o(o&�������!<-�����(�

��u�¥v��q:�� 7�!�������&�!�/�9 _��²7,$�1�34Q��0��:%�¯�¯� _¨�Gp��#-#Q�!)��K�!?� ".����� -�r4��� -�����2���~#"�!DF E�3�!,"�K���2 ".����K@��� ���#-�H4Q�5���p,$�� -��#1%&fnV$[1O��« M1RQZ ¢ [E¬QZE­©M!VQPK`nN�O�V;XQY�Z S [!N�%/8:�H4� -?�,"�+l3�5 -��#7���2mn��Gpo�?� -�;,�q�4����;��4Q��%:q�o�,"����)���,><�����,-�r�!)/%:�Hs5s����

��u����+���/  �!#" $�5�:%����5�EG~o���)����r�!���;��%�8���+��8:�;�6���2�!���p¯U��8:?�@�0�%6mn�5��#- ",-?�4� -�����2�!DW��o(#-��?��z�!<E,$�!�/����G})5������,Q�! "��,3D�,-��G����0�������<��3�10KDF?��/4Q -�����g%�AC���!o�o/�H��,W��� ¢ µ"IK�Õ���CT©[ � Y/¤5Z���{C,"������G~�����!,"0K����,"#-������#�@60x�EG~o/�!)����r�!�;���3�� H���!�E�1���! �ó�R$Z¢ hnceTW%:�1s��5s+�����~ 7�!#- Q���p���" � �N/J ¢ hnceTW%/�Hs5s�¥(�

��u�uv�+���/² �����r�!�2�!����{C������)��1���10�%6 ��!�å -�po�,-�5 -�H4� e=K¦Wq2�!)��!����#- 3���z./�!?�#" -�������5��0~#"�H�!,Q4".&%:IeJ�LvM�N�OQPQR S NUTWV�XQY�Z-[!\�[Q]!X^KTCbKd&fehnc i j5k!%:�1s�s�t(%�o�o&��u5��u1<-u�t5���

��u��v�+A���²7�5,-���&%_c3NUZ��zP2OQ[!N�RQZEV�¤�OQZ S [!Ní[E¬_Y�RHP�¤�J5[!V$M�N�J�[ �$# \�[1O&%±O S Y(�zP;VQR�%�¯U��q�4��&A3.��;#-��#~�����Р3��@�,"��� ��%nm3qÐ=7��o� 1��%AC�H4".��(���5�&%��E#-,Q�!���E%/¯��10��Hs5��s��

��u!���� ���²7,Q�1��4Q�;06�:%�8&'Cq���<�@���#-�H�_.���#-.�����)K�!���x�!?� ".����� -�r4��� -�����g%�IeJ�LvM�N�OQPQR S N2TWV�XQY�Z-[!\�[Q]!X7^�TCbKdgfehncªi j;Ò�%�8®�H4Q -?(,-�l��� "��#3���§mn�5G~o�?( -��,3q�4Q������4���%/�����E�����5s�%�q�o�,"����)���,><�����,-�r�!)/%:�Hs5s!��%5o�o&�g�Hu5s1<��H��s(�

��u��v��¯U�W8:?(@60�%gÑ#"��Gpo����Bo��!,Q�!�������3�!��)��5,-�� -.�G DF��,_ -.��2G9�v����G~���&�������;o����/������ ~#"�� +o(,-��@(���;G�% ¢ µ"IK� �5�_T©[ � Y�¤5Z�� %�5���W�1���F����%:�1s���t(%�o(o&�:�H¥5��t1<��H¥5���(�

��u�tv��¯U��8®?�@�06%(')�;Û(��ÚgØ�*-Ü���ÝWÚgØ��UÝ�Û+���,��ÝWÚ-��àCàCâ.�EÞ��(á���Ø�Ý��5%!{C,-����4Q�; -����é3�������;,-#-�� E02{C,-��#"#H%C�Hs5s�t(�

��u��v��¯U��8®?�@�09�����2mK��� �54"�����W%� 3�!� -�~4Q�5��#- ",-?�4Q Ko�#"��?����5,$��������G o/��,"GB?� $�� -������#3�!�/�~o(#-��?��z��,$�������5G}DF?(��4Q -���5��#H%¢ µ-IK�Ö�5�nT©[ � Y�¤5ZE�r%��5���E���1��%:�1s����(%�o(o&���5���1<-���5t��

��u��v��q:�W8:?/4-��#1%�'/�!#" -��,~8®?�@�05<>�7��4"���/� 4���o(.���,-#1%7f©V$[1O�� « M1RQZ ¢ [>¬QZE­©M!VQPB`nN�O�V;XQY�Z S [!N�%38®�H4Q -?(,-��l��� -�;#~��� mn�5G~o�?� "��,q(4Q������4Q��%/�5���E���1¥��5s�%�q�o�,-����)5��,E<E�W��,"�r�!)�%:�1s�s5t�%�o�o&�:�1��sv<>u5¥����

��u�sv��é��n¯U�©¯���?�,-�;,H%3 #-��G~o����|���H�U�����ë)����(��,$���������1�í -,"�H�! "G~���� ~��Dì8®?�@�0�<-� �54"�����Ùo�#-��?/����,Q�!�����5GÖo/��,"GB?� $�� -�����)5������,Q�! "��,-#1%�IKJ!L!M!N�OQP�R S NUTWV;XQY�Z-[!\�[�]!Xx^©`+a®becKTCbKd&fKh�i j� 5%�8:�14Q -?�,"�+l3�5 -��#7���§mn�5G~o�?( -��,3q�4Q������4���%:q�o�,-����)5��,E<����,-�r�!)/%��1s�s5u�%�o�o&��u5��sv<>u5�����

����¥v��é�� ¯°��¯±�!?�,"��,��!��� ���38W�3¯���#-#"��06%K8:��4�����,$�������5G~����#"#~���åo�#"��?����5,$��������G #-�HÔ5?��;��4Q��#1%9�5��[>¬ÐTWV;XQY�Z-[!\�[�]!X!%�5���E�5����u5��%�q�o(,-����)��;,E<E�W��,-�r��)�%:�Hs5s��5%�o�o&�:�H�5�1<�����s��

�������+���:l ����, ������¯U�/l �!�5,H%/q�G9�����|<E@��r�!#Wo(,-��@/�!@������� E0B#-o��54Q��#H¨��1094Q������ e4Q�5��#- ",-?�4� -������#������2�!o�o����r4��� -������#1% ¢ µ"IK�Ö�5�T©[ � Y/¤5Z��r%��5���E��u�u����6�;%:�Hs�s5��%�o�og�������v<>�5��t(�

����uv��¯U�Cl �!�5,+�!�/�Ð�x����������)��5�r�:%&q�0��� -.��;#-������,"#~�!���� ".�����,���o�o����r4��! "������ -�� ".��~o���,$���������n4Q����#" -,"?�4Q -���5� ��D�o(#-��?��z�!<,Q�!���z��G�DF?(��4Q -���5��#H%®f©V$[1O��C³�k1Z���µQ`�`W` ¢ X � Y��3[!N « [!¤�N�J5M1Z S [!NzR�[E¬BT©[ � Y/¤5Z>P;V ¢ O S P;N�OQP�%g�Hs�s5��%5o�o&�:�1��¥1<��H�(���

�����v��l �� -��������� *W?(,-�H��? ��Dìq� Q�!���(�!,$�z#H%3=K�! $�±����4�,-0�o� -���5� #" $�������!,Q�:% « PQJ5P�VQM!\Cµ�N�¬H[�V � M1Z S [!NífnV$[1O$P�RQR S N�] ¢ Z-M!N/J�M!VQJ!%é_��q:��=7��o��!," -Gp���� ©��D�mn��GpG~��,Q4Q��%�'g�-{Wq�{Wé7*í�6t(%��Ð�!#-.(���()� -�5�&%�=emK%:�1s��5���

���!����ï��/� .(����#-.��E%�I�RQZE¤�J!X~[!N�J�M1Z-MwRHP$O;¤�V S ZEX!%�¯��!#" -��,3A3.(��#-��#������9���!o�������#"�H��%(A��5.�?���?9é3�(���5��,-#"�� E06%����!o����&%&�1s����(�

- N

Page 33: aL[libeccio.di.unisa.it/CRYPTO07/Papers/NR.pdf · 2011. 3. 29. · gf } w? Pv ±v1g© gL g` ¢ z k olhvx} nck }x olhKeglvxz^i olh gh z\y3 x { }x lz%k\g` ¢ z^iKg v:z\ci?ol T gLhi?ol{»

�����v�+����{C�! Q�!,"���g%�{C#-��?/����,Q�!�����5G}o/��,-GB?� Q�! "���5��#n@��!#"�H�p���~ ".���=K¦WqB#Q4-.(��G~��%/fnV$[1O��W[E¬7`+a®becKT3c�� `}i j��!%�8®�H4Q -?(,-�l��� "��#3���§mn�5G~o�?( -��,3q�4Q������4���%:q�o�,-����)5��,E<E�W��,"�r�!)�%:�1s�s(��%5o�o&�&�1s��v<>u5¥!���

����tv�+���/{��� $��,-���&%�l3���Ù,-��#"?��� -#7���~o(#-��?��z��,$�������5GÑo/��,-GB?( $�! "�����B)��;����,$�� -�5,-#3@���#-�H�p���2 ".���=e¦�qB#$4".��;G~��%�IKJ!L!M!N�OQP�RS NUTWV�XQY�Z-[!\�[Q]!X_^�TCbedgfehncÑi j!ó�%�8®�H4Q "?�,-�Bl3�5 -��#7���2mn��Gpo�?� -�;,�q�4����;��4Q��%:q�o�,"����)���,><�����,-�r�!)/%:�Hs5s�����o(o&����¥(�Q<-���Hu

�����v�+���W{C�! Q�!,"���g%W 3�!�} "�ä4Q�5��#- ",-?�4� Bo�#-��?/����,Q�!�����5GÖ�!�/�U#-?(o���,po�#-�;?�����,Q�!���z��GÕo/��,-GB?( $�! "������#KD�,-��G �5���~#"���()����o(#-��?��z��,$�������5G£DF?���4Q "�����&%:IKJ!L!M!N�OQP�R S NíTWV;XQY�Z-[!\�[�]!XB^ `xa:bKceTCbKdgfeh}i j/ �%:8:�14Q -?�,"�~l3�5 -��#K����mn��Gpo�?� "��,eq�4��ç<�;��4Q��%/q�o�,-����)5��,E<E�W��,"�r�!)�%g�Hs5s�u�%5o�o&��u5��tv<>u5t�t��

�����v�+���&{C�� $�!,"���&%:�EG~o(,-�!���1�~#"�H4Q?�,"�� E0�@/��?��/��#KDF�5,eo(#-��?��z��,$�������5Gðo/��,-GB?� Q�! "���5��#H%/AC�9��o�o/�H�!,����&¨7Ò�Z��9IxTC� T©[�N�^¬1P�VQP�N�OQP�[�NÐT©[ � Y/¤5Z>P;V�M!N�J±T©[ �x� ¤6N S OQM1Z S [!N�R ¢ PQO;¤�V S ZEX!%:�Hs�s5���

����sv�+���&{����;o�,-��0��:%C 3�!�ª "��4Q����#" -,"?�4Q xo�#-��?/����,Q�!�����5Gðo/��,-GB?( $�! "������#�DF,-�5Gð#-����)5���+o�#"��?����5,$��������G DF?���4� -������#1%&IKJ1^L!M!N/O$P�R S N±TWV�XQY�Z-[!\�[Q]!X7^�`xa:bKceTCbKdgfeh i j��!%�8®�H4Q -?(,-�el��� "��#©���Bmn��Gpo�?� -�;,�q�4Q�����/4Q��%����5�E�H�����(%�q�o�,"���()���,><��W�;,-�r�!)/%�1s�s(��%5o�o&�&�;�6¥v<��1��¥��

� �6¥v��=x���/�6q:���3�5@�����#-�5�&%�� Þ�Ø��CÜ��;Û �FÝUá �CÛBá��CÛ�Ø�Ü!ß±Ø+3ã�Ü!Ø��Cà������(ÝWÚ�ÛzÚF%�l3�;�íï©��,"�~¨Wq�o�,"����)���,><�����,-�r�!)/%��Hs5s�t(�

� ������{C�6����)��1���10�%!*W?�4"�5�� ©./�!#-.(���()+�!���w�� -#©��o�o����r4��! "���5�+ "�KD���#- nG~��#"#$�!)5� �!?� ".����� -�r4��� -�����g%6IKJ!L!M!N�OQP�R S N±TWV�XQY�Z-[!\�[Q]!X^KTCbKd&fehnc i j���%�8®�H4Q -?(,-�Bl3�� "��#3����mn��G~o(?� -��,3q�4Q�����/4Q��%/���5����s�t5��%�q�o(,-����)��;,E<E�W��,-�r��)�%:�Hs5s��(%�o�og���!��<>�5���

� �6uv��q:����?����r4".&%/è S � S Z�Rì[�N2Z��zP�Y�V$[�LvM # \�P+OQ[�N�RHP� ;¤�P�N/O$P�R�[>¬+[!N�P�^-­©M�X3¬�¤�N�OQZ S [�N�R�%�{C.�=�A3.���#"��#1%�é_��mK��*���,-�5������06�

� �6�v�����/+�/�3?��;o�o��;��%g� �± -.��x#-�H4�?�,-�� E0���D�q�4".����5,-,�� #Ko�#"��?����2,$�������5G )������;,$�! "��,1%&IeJ�LvM�N�OQPQR S NíTWV�XQY�Z-[!\�[Q]!Xx^ `xa:^bKcKTCbKd&fehi �6j�%�8®�H4Q -?(,-�+l��� -�;# ���9mn�5G~o�?� "��, q�4Q�����/4Q��%�qzo�,-����)5��,E<E�W��,"�y��)�%:�1s���s(%�o�o&����u��1<E�6u5���

� ������* �7q������;)�.���06��� �!�/�í��� {����;o�,-��0��:%K� �Ù���H4���#-#Q�!,-0ª�����í#"?(094Q������ �4Q�����z�� "������#pDF�5,~ -.(�ä4Q�5��#- ",-?�4� -����� ��D+#-?�<o/��,xo�#-�;?�����,Q�!���z��G o��;,-GB?� Q�! -���5��#H%CI # RQZEV$M5OQZ�Rw[>¬+I ¢ µ-IxTCbKd&fKh i j!ó5%W8:�H4� -?�,"�§l��� "��#+���Umn��Gpo�?� -�;,+q�4Q������4���%qzo�,-����)5��,E<E�W��,"�y��)�%:�1s�s��5%�o(o&�&�1s!�!<-u�¥5s��

� �6�v��* �Wq(������)5.���06���Ð�!���°���C{C����o�,-�;06�:%� 4Q�5��#- ",-?�4� -�����ëDF�5,+#"?�o��;,Bo�#-��?/����,Q�!�����5GÕo/��,-GB?� Q�! "���5��#KDF,"��GÕ�2#"���()����o(#-��?��z��,$�������5G£DF?���4Q "�����&%:IKJ!L!M!N�OQP�R S NíTWV;XQY�Z-[!\�[�]!XB^ `xa:bKceTCbKdgfeh}i j/ �%:8:�14Q -?�,"�~l3�5 -��#K����mn��Gpo�?� "��,eq�4��ç<�;��4Q��%/q�o�,-����)5��,E<E�W��,"�r�!)�%g�Hs5s�u�%5o�o&��u5t��v<>u5�!�

� �6tv��* �Cq�4".����;���;,+�!���±���C²7����#-��0�%Cé3��@��!�r����4Q�H��'��;��#" -���n���� E�n��,"��#+�!���±@�����4"��4Q��o�.���,x����#-��)5�&%WfnV$[1O�� « M1RQZ ¢ [E¬QZE­©M!VQP`nN�O�V;XQY�Z S [!N�%/8:�H4� -?�,"�+l3�5 -��#7���2mn��Gpo�?� -�;,�q�4����;��4Q��%/���5�E�:�H¥��5s�%�q�o�,"���()���,><��W�;,-�r�!)/%:�Hs�s5t�%�o�og�:�Hu���<��;���/�

� �6�v��mK�©{C�Wq�4".��(��,-,1%3� � -.���4Q�5��#- ",-?�4Q "�����å��Dì,Q�!���z��GÕ��?�GB@/��,x)������;,$�! "��,"#9�!�/�Ð,Q�!���z��G DF?���4Q "�����Ð)5������,Q�! "��,-#1%IKJ!L!M!N/O$P�R S NÙTWV�XQY(Z>[�\�[�]vXp^�`+a®becKTCbKd&fKh i ���5%W8:�H4� -?�,"�§l��� "��#B���Ðmn��G~o(?� -��,�q�4����;��4Q��%n���5�E�&���5¥�%Cq�o�,-����)5��,E<����,-�r�!)/%��1s��5��%�o�o&��u5u��v<>u5��u��

� �6�v��=x�vqz -����#-�5�&%!é3�����5��,-#Q�!��.��!#".�����)e��������?� -.��;�6 "�r4��! "���5�+4Q������#1%���PQR S ]!N�R��WT©[1J�P�R�M�N�JxTWV�XQY(Z>[�]vVQMQY(�6X!%1���5���;���Q�Hs�s��6�;%o(o&����t5s1<-����¥(�

� �6sv��é��(�+���©������,$�!�(��%/b3M!N�J5[ � N�PQRQR�� M�J!L!P;VQRHM!V S P�RìM�N�J2OQ[ � Y�¤5Z>MvZ S [!N�%/{C.�= A3.(��#-��#H%/é���mK�/*W��,"��������0�%&�1s��5t��

����¥v��¯U���U�;)�G9���9�����28W��m3��,- "��,H%&l���� .���#-.2DF?(��4Q -���5��# �!���§ -.�����,7?�#-��������?� -.(���� -�r4��! "�������!���p#"�� K�HÔ5?��!���� E06%&�5�©[>¬T©[ � Y/¤5Z>P;V�M!N�J ¢ X1RQZ-P �ò¢ O S P�N/O$P�R��:�����E��u5u�%:�Hs5���5%�o�og��u�t��v<>u5��s(�

�������++�:mK��ï3�!��%(A3.����5,-0��!���±�!o�o����r4��� -������#3��DW -,$��o��z�6�5,3DF?(��4Q -���5��#H%gf©VQ[HO;�� �³5V$JxµQ`�`W` ¢ X � Y��3[!N « [�¤6N/J�M1Z S [�N�Rw[>¬T©[ � Y/¤5Z>P;V ¢ O S P�N�OQP;%&�1s���u(%�o�o&���5¥1<-s����

����uv��ï����/.��;��)�%(A���¯��! "#-?�Gp�� -�x�!���2 ����EG2�!�E%!�EGpo��5#-#-��@������� E0��!���p��o( -��G9������ E0K,-�;#-?��� -#7���24Q����#" -,"?�4Q -����)Bo(#-��?��z��,$����<�z��Gðo/��,"GB?� $�� -������#1%&IKJ!L!M!N�OQP�R S NåTWV�XQY(Z>[�\�[�]vXp^�`xa:bKceTCbKdgfeh£i �6j�%�8®�H4Q -?(,-��l3�5 -��#����Ðmn�5G~o�?� "��,�q�4Q������4���%�5���E�5�6�!�/%�q�o�,"���()���,><��W�;,-�r�!)/%:�Hs�s5¥�%5o�o&�(���Huv<���u�u(�

-lr