A robust combiner for a cryptographic primitive takes multiple candidate constructions of and produces a secure construction of provided that sufficiently many of the candidates are secure. A closely related notion is that of a security amplifier, where given a weakly secure construction of , we aim to obtain a (strongly) secure one. Intuitively, one may expect that any robust combiner should act as an amplifier by thinking of "good randomness" as inducing secure instances, and of

Security Amplification via Robust Indistinguishability Combiners
Nathan Geier
Tags
