21

eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

Embed Size (px)

Citation preview

Page 1: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

������������ ������ �������������������� ������������! "����#%$&�('

)+*-,/.�021+34.6587:9

;2<>=@?BADCBE>?GF 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M�K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJcSUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]SeLVLbUeBYNbXSwSUY�WXTLY]xySUT>H�eBY!SUHaQ&SUOzKN{|YNZ/naY\MPeLVLSUHJbXcrK!WXWXOzW8SUHa^�egbUY&YNZ}cfx|bUOpSUORQ>j~KNQD^egbUY&YNZ�cfnuT>Hanu�iORQ>jL�`5�{zY&YN��K!S+SUTLHweLbUY&Y!ZlW2SUTDK]S+SUT>HwKNVgSUT>YNbUW/j\ORh�HwSUY�OR{z{RVLW8SXbuK!SUHSUTLH���j�K!MPHJcfT>YNe>e>ORQLj\�`SUHJn@TLQ>Oz�&V>Hk��ZlY!b/�LV>{R{pcr�/Y\M�KNORQ��+KNWXT�WXORj\QDK]SUVLbUHaWa�D*-{pc� K!M�KN{-HaQ>nJbXqgegSUOzYNQ[�vKNQD^��mbuKNMPHJbXc��iT>Y\VLe�HJQ>nJbXqgeLSUORYNQ���K!QD^�KNWX�"x:T>HJSUTLHJbSUTLHJbUHwORW2HahiOz^LHaQLnaH�SUTDK!S2KNVLSUYNM�K!SUH_^�SUTLHaYNbUHaMdcfegbUY!hiORQ>j�n_K!Q�nJY\Q&SXbUOR�>VLSUH`KNQ&qicSUTLOzQLjdYNZvh\K!{zVLH+SUYwSUT>H/WXHanaVLbUOpSrq�K!QDKN{pqgWXORW:YNZonJbXqgeLSUYNjNbuK!e>T>ORn2egbUYNSUY&naYN{zWa�

���[�|�~�-�>�k�B�¡ �¢G£_¤¦¥�§D£_¨i©ª£]«G¨&¤B¬]¨i¥�­U®o¬]¤g¯v°²±G³G´%®-¬]¤[¤Bµr­u¶!«o¨i¶]·v°²±G³G´%®-¢G¸m¹²°²¶º·B¨&»¶�¬]»t®o£_¤B³B¬!§D®m«6»B´-¼!°½³¦±o§D£]¢G¬]¨i¼i´G¨i±o¶�¬]»t®o£]°½¤¦±|¾���À¿ÂÁ6Ã�Äo�g�gÅrÆ/Á¦ÄoÇLÅ��mÈs�`ɦÊDËPÊBÌt´4ÍBÎDÏ�ÐiÌt´ÒÑ>Ó¦ �ÍDÉv´/ÐBÐ&Ï�ÔtÐ

ÐD¾�Õ!Ö:×4Ø4Ù�ÚkÛ�ÜÒ×ÒÝ�ÙkÖÏ�«G¨Þ®o¬!¨�­U®o¬]¤B³B¬!§B¥�¤Bµ�ßw¬]»t®o£_¤áàzÑBÍâ°²±o¶&¹²¢o©o¨i©ã§B±ä¤B®o£]°½¤¦±-§B¹�¨�åG¶&¢G¬!¼!°½¤¦±æ£_¤º£]«G¨

¸4¨i§B¢G£]°½µ8¢o¹kßP«o§B±o±G¨i¹�çJ¼]¹f§B±o©o¼�¤Dèy£]«G¨~¶�¤¦§B¼_£�±G¨i§D¬�év§B±6£]§�Ëd§D¬]¸-§D¬!§v¾�Ï�«o¨�¸4¤¦§D£�£_¬!°½®µ�¨i§D£]¢G¬]¨i©�¶&¹½¤¦¼_¨�­u¢G®�¨i±o¶�¤¦¢o±[£_¨&¬!¼wê�°½£]«�§�¥�»[¬!°f§B©�¤Bµ�¼_¨i§�¶�¬]¨i§D£]¢G¬]¨i¼sëì¼_¨&¯B¨&¬!§B¹m£u»t®4¨i¼¤Bµ/ê�«o§B¹½¨i¼i´o¼_¨i§B¹²¼&´o§B±o©�®Ò¤B¬!®Ò¤¦°f¼_¨i¼&´v§B±o©%í-¼]«%§B±-©%°²±6¯B¨&¬!£_¨&¸o¬!§D£_¨i¼�¤Bµ+¨&¯B¨&¬]»%¼]°²î&¨"§B±o©©G¨i¼!¶�¬!°½®o£]°½¤¦±:¾ï ±Gµr¤B¬!£]¢o±o§D£_¨i¹½»B´d£]«G¨�¼]¨i§B¼�êw¨&¬]¨�¬]¤¦¢o³¦«|¾á �¼�£]«G¨©o§i»Âêw¤B¬]¨�¤¦±|´P¥�¤¦¼]£�¤Bµ�£]«G¨

®-§D¬!£]°²¶&°½®-§B±[£]¼�³B¤B£�¸-§B©o¹½»y¼_¨i§B¼]°²¶!·m¾ºÏ�«o¨&¬]¨%ê`¨&¬!¨�ð_¢o¼]£�£]«o¬]¨&¨�«o§D¬!©G»y¼_¤¦¢o¹²¼�§B¥�¤¦±G³£]«G¨�®m§B¼]¼_¨i±G³B¨&¬!¼`ëòñB¤¦¼]«%Ëw¨i±o§B¹½¤¦«:´Gó�¯B¤�ô�¨i¼]¥�¨i©G£&´-§B±o©� �±o±%õ�°½¸-±G¨&¬Pö�¤B¸m¹²°½£_î�ëê�«o¤�ê`¨&¬]¨"¢-±o§>èÒ¨i¶�£_¨i©�¸[»�£]«G¨�¬N«6»t£]«o¥�°²¶�¬]¤v¶]·v°²±G³�¤Bµ+£]«G¨�¸Ò¤¦§D£&¾l÷�ét£]§B±o©o°²±o³~§D£�£]«G¨¸4¤gê�´t£]«o¨&»�£]§B¹½·B¨i©%§B±-©%¹²§B¢G³¦«G¨i©%§B±o©�¨i±>ð_¤g»B¨i©�£]«G¨�¶�¤[¤¦¹�¼_®o¬!§g»�§B¼Pêd§D£_¨&¬�¼_®-¹f§B¼]«G¨i©¤L¯B¨&¬�£]«G¨i¥ø¤¦±6£_¤�£]«G¨~©G¨i¶]·Ò¾�Ï�«G¨&»%êw¨&¬]¨�£]«G¨�¤¦±-¹½»%¤¦±G¨i¼�ê�«G¤�§D®o®o¬]¨i¶&°f§D£_¨i©ù¼]¨&¨i°²±G³£]«G¨�¯>§D¬!°²¨i©�¼_¨i§�¶�¬]¨i§D£]¢G¬]¨i¼�§D®o®o¬]¤¦§B¶N«o°²±G³�£]«G¨"¸4¤¦§D£�§B¼�¥�¤B¬]¨�§B±-©�¥�¤B¬]¨�©o°²¼_£_¬!¨i¼]¼_¨i©®-§B¼!¼_¨i±G³B¨&¬!¼�¹²¨i§B±G¨i©%¤g¯B¨&¬�£]«G¨�¼]°f©G¨�£_¤ûúaµr¨&¨i©�£]«G¨"í-¼!«G¨i¼&¾Rüñ¦¢-¼_£�¸4¨&µ�¤B¬]¨`£]«o¨`£_¬!°²®�¨i±o©G¨i©:´>£]«o¨`®-§D¬!£]°²¶&°½®-§B±[£]¼wý�£]«o¤¦¼_¨`ê�«G¤�êw¨&¬]¨d°²±�§�¶�¤¦±o©-°½£]°½¤¦±

£_¤�ê�¬!°½£_¨Lþsê`¨&¬!¨"³¦°½¯B¨i±�§�µ�¨&¨i©G¸-§B¶!·%ÿ[¢G¨i¼]£]°½¤¦±o±o§B°½¬!¨B¾+ �±o±%§B±o©ñB¤¦¼]«�êw¨&¬]¨�±G¨i§D¬�£]«G¨¶�¬]¨&ê�ê�«G¨i±£]«G¨&»%¬]¨i§B©ù£]«G¨�¬]¨i¼_®4¤¦±o¼]¨i¼&¾�Ï�«G¨�¶�¬]¨&ê ©G¤¦¢G¸-¹²¨i©%¤g¯B¨&¬"°²±¹²§B¢G³¦«[£_¨&¬�§B¼&´¤¦±G¨ù§Dµr£_¨&¬%§B±G¤B£]«o¨&¬i´�¢o±o©o¨&¬ûú � ¨&¨i©-¼�çJ¥�®-¬]¤g¯B¨i¥�¨i±[£]ü £]«G¨&»â¬]¨i§B©æ¶�¤¦¥�¥�¨i±[£]¼�¹²°½·B¨ú_¼_¨i§B¼w±G¨&¨i©�£_¤�¸4¨�¶&§B¹f¥�¨&¬i´Rüùúa¤t¶�¨i§B±�êd§B¼s£_¤t¤�¬!¤¦¢G³¦«|´Rüùúaêw§g¯B¨i¼dê`¨&¬]¨�£_¤[¤~«o°½³¦«:¾Rü�çJ£¼_¤¦¢-±o©G¨i©Þ§B¼"°½µ`£]«G¨~®-§B¼]¼_¨i±G³B¨&¬N¼�¨�åt®4¨i¶�£_¨i©(£]«o¨�¸Ò¤¦§D£�¤B®4¨&¬!§D£_¤B¬N¼�£_¤�©G¤�¼_¤¦¥�¨&£]«-°²±G³÷ 5`xÒHaQ&S�YNQ�SUT>H�H@ILnJVLbUWXORY\Q6�k�LVLS�Msq�MPHJMPYNbUORHaWPYNZ2SUTLH"^>Kaq�n_KNQ%�BH�WXVLMPM�K!bUO��aH_^��&q�SUTLH

3ÒH_K]SU{zHJW��D{RORQ>H,�{R{6SUTLH/x|Kaq�SUT>H2eDK!eBHJb:�DK!jwx|K!WkYNQ�Msq��gQLHaH\�R�R�R�

��� KNVL{�n]�4K]bXSUQ>HJq&�m�83ÒKNnu��ORQ�SUTLH��2�L�� �� ���������������������� "!�#w�%$'&)(+*-,@�.

Page 2: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

� ����������� �������

§D¸4¤¦¢G£`£]«o§D£�ë §B¼w°½µ|£]«G¨&¬]¨�êw¨&¬]¨�¼]¤¦¥�¨�©-°²§B¹o£]«o§D£d±G¨&¨i©G¨i©�£_¤~¸4¨�§B©>ð]¢o¼_£_¨i©�¤B¬d¼]¤¦¥�¨¶�¤¦¥�®m¢G£_¨&¬/¼]¤Bµr£@êw§D¬]¨d£]«o§D£+±G¨&¨i©G¨i©�£_¤�¸Ò¨w©G¨&¸-¢G³B³B¨i©:¾/Ïk¤�£]«o¨`¶�¬]¨&ê"´B£]«o¨i¼_¨s¬]¨i¼]®Ò¤¦±-¼_¨i¼ío£�°²±%®4¨&¬]µ�¨i¶�£]¹½»�ê�°½£]«�£]«o¨i°½¬�¼_£_¨&¬]¨&¤B£@»[®4¨�¤Bµ2£]«G¨úa£_¨i¶N«o±G¤¦±G¨&¬N©oü�ê�«G¤�¸4¨i¹²°½¨&¯B¨i¼�£]«o§D£¨&¯B¨&¬]»%°²±-¶�¤¦±6¯B¨i±o°²¨i±o¶�¨�¤B¬�©o°²¼!¶�¤¦¥�µr¤B¬!£�°²±%¹²°½µ�¨�¥�¢o¼]£�«o§i¯B¨�§�£_¨i¶!«o±o¤¦¹½¤B³¦°²¶&§B¹:íoåÒ¾ça±~£]«o°²¼/®-§D®4¨&¬+ç�¨�åG§B¥�°²±G¨P§B±G¤B£]«G¨&¬`¼]°½£]¢o§D£]°½¤¦±~°²±�ê�«-°²¶!«~¶�¬]»t®o£_¤B³B¬!§D®-«o¨&¬!¼2±o§B°½¯B¨i¹½»

«G¤B®4¨ù£]«o§D£%§Â¼]¢o°½£]§D¸-¹²»â©G¨i¼]°½³¦±G¨i©æ©G¨&¯v°²¶�¨ë ¼_¤¦¥�¨(¶&¹½¨&¯B¨&¬!¹½»áê�¬!°½£_£_¨i±æ¶�¤¦¥�®-¢o£_¨&¬¶�¤v©G¨�ë ê�°²¹²¹�¥�§D·B¨(¢o±o®-¹½¨i§B¼]§B±[£�±o§D£]¢o¬!§B¹�®m«G¨i±G¤¦¥�¨i±o§ ³B¤Â§iêd§i»B¾ ça±ã£]«-°²¼�¶&§B¼]¨£]«G¨�¢o±G®-¹½¨i§B¼!§B±6£�®m«G¨i±G¤¦¥�¨i±o§�§D¬!¨�£]«G¨"£_¨i©-°²¢o¥ ¤Bµ2ê�¬N°½£]°²±G³~¤¦¢G£�©o¨&£]§B°²¹½¨i©�®-¬]¤[¤Bµ8¼P¤Bµ¬]¨i©-¢o¶�£]°½¤¦±o°²¼]£�¼_¨i¶&¢o¬!°½£u»y£]«G¨&¤B¬]¨i¥�¼�§B±o©º£]«o¨%¨i¥�¸-§D¬!¬!§B¼]¼]¥�¨i±[£�ê�«o¨i±Â£]«G¤¦¼_¨�®o¬!¤[¤Bµ8¼§D¬]¨�¹f§D£_¨&¬"µr¤¦¢-±o©ù£_¤�«o§i¯B¨�¨&¬]¬]¤B¬!¼"§B±-©Þ³¦§D®-¼&¾�Ï�«G¨�®o¬!¤B®Ò¤¦¼]¨i©£_¨i¶N«o±G¤¦¹½¤B³¦°f¶&§B¹�íGåÞ°²¼§B¢G£_¤¦¥�§D£_¨i©�£]«G¨&¤B¬]¨i¥�­U®o¬]¤g¯v°²±G³G¾

� ¾���Ý��i×|ÙkØ��Ï�«G¨�¼_£_¤B¬!»¤Bµw§D£_£_¨i¥�®o£]¼"£_¤�§B¢o£_¤¦¥�§D£_¨�£]«G¨&¤B¬]¨i¥�­U®o¬]¤g¯v°²±G³�³B¤t¨i¼�¸-§B¶!·ù¯B¨&¬!»�µ8§D¬i¾

 �¶&¶�¤B¬!©o°²±o³�£_¤~ét£]°²¹f¹½ê`¨i¹f¹4ý�� � Ñ��U´[®:¾6Ó6ÍBѦþN´/ú!év°f±o¶�¨�£]«G¨�£]°f¥�¨�¤Bµ��:¨i°½¸m±o°½îB´6§B±o©�®Ò¨&¬N«o§D®-¼¨i§D¬!¹f°½¨&¬i´�§D£_£_¨i¥�®o£]¼�«o§i¯B¨%¸4¨&¨i±Â¥�§B©G¨�£_¤�¥�¨i¶N«o§B±o°½î&¨%¥�§D£]«G¨i¥�§D£]°²¶&§B¹d¬]¨i§B¼_¤¦±o°f±G³G¾RüÏ�«o¨i¼_¨P¨�èÒ¤B¬!£]¼�¸4¨i¶&§B¥�¨�¥�¤B¬]¨�°²±6£_¨i±-¼_¨�§Dµr£_¨&¬`£]«G¨�¼_»v¼_£_¨i¥�§D£]°²¶�©G¨&¯B¨i¹½¤B®-¥�¨i±[£�¤Bµ4¼_»v¥~­¸4¤¦¹²°²¶�¹½¤B³¦°f¶%¸[»ºËw¤t¤¦¹½¨§B±o©! G¬]¨&³B¨Þ°²±º£]«G¨ûÐiÑ>£]«æ¶�¨i±[£]¢G¬]»B¾æçJ±ã£]«o°²¼�¨i§D¬!¹²»y®4¨&¬!°²¤t©£]«G¨�¶&¢o¹f¥�°²±o§D£]°½¤¦±�¤Bµs£]«G¨(úaµ�¤B¬!¥�§B¹²°f¼_£]ü�®-¬]¤B³B¬!§B¥¡êd§B¼�£]«G¨~®-¢G¸-¹²°f¶&§D£]°½¤¦±�°²±ÂÐiÑvÐ&É�¤Bµ"$#&%�')(*%,+)%.-0/1-32�4 5*67-328%8(&- ¸t»�Ë`¨&¬!£_¬!§B±o©:9�¢o¼]¼_¨i¹²¹|§B±-©% �¹½µ�¬]¨i© � ¤B¬]£]«:;ä«o°½£_¨i«o¨i§B©|¾Ï�«G¨�¥�§B°f±ù¥�¤B£]°½¯B¨�µr¤B¬�£]«o¨�ío¬!¼_£�êw§g¯B¨�¤Bµw¥�§D£]«G¨i¥�§D£]°²¶&§B¹�µr¤B¬!¥�§B¹²°²¼]¥ êw§B¼�±G¤B£&´

«G¤Lê`¨&¯B¨&¬g´o£_¤�¥�§D·B¨�°½£w®4¤¦¼]¼]°½¸-¹²¨�µ�¤B¬�§�¥�§B¶!«o°²±o¨�£_¤�®-¬]¤g¯B¨"§~£]«G¨&¤B¬!¨i¥%¾<9�§D£]«G¨&¬g´G£]«G¨°²©o¨i§�êd§B¼�£_¤�®o¬]¤g¯v°²©G¨~§�³¦¢o§D¬!§B±[£_¨&¨�¤Bµs¬!°²³B¤B¬�£]«-§D£�¶�¤¦¢-¹²©�¸4¨~¶!«G¨i¶!·B¨i©û°²±ù§�®-¢G¬]¨i¹²»¥�¨i¶N«o§B±o°²¼]£]°²¶"êd§i»B´|ê�°²£]«G¤¦¢G£�£]«G¨~±G¨&¨i©µr¤B¬�°²±[£]¢o°½£]°²¤¦±%¤B¬�¨�åt®4¨&¬!°½¨i±-¶�¨B¾�ça±�µ8§B¶�£&´4¤¦±G¨êw¤¦¢o¹²©â±o¨&¨i©â£_¤y·t±G¤Lê ¤¦±o¹²»y£]«o¨¹²°²¼]£�¤Bµ"§>åv°½¤¦¥�¼�§B±o©ã£]«G¨�®o¬N°²±o¶&°½®-¹²¨i¼�¤Bµ"¹²¤B³¦°²¶&§B¹©G¨i©-¢o¶�£]°½¤¦±|¾/çJ±�£]«G¨&¤B¬]»�¤¦±G¨�êw¤¦¢o¹²©�±G¤B£d«o§i¯B¨�£_¤~·t±o¤gêæê�«o§D£w¤B¸vða¨i¶�£]¼i´v°²µ:§B±6»B´vêw¨&¬]¨¼]¢o®o®4¤¦¼_¨i©�£_¤�«o§g¯B¨�£]«G¨�®o¬]¤B®4¨&¬]£]°½¨i¼�°²± £]«G¨%§>åv°½¤¦¥�¼�§B±-© £]«o¨&¤B¬]¨i¥�¼&¾û �¼=9�¢o¼!¼_¨i¹²¹±G¤B£_¤B¬N°½¤¦¢o¼]¹½»�®-¢G£�°½£&´�ú?>§D£]«G¨i¥�§D£]°²¶&¼�°²¼P§�¼]¶&°²¨i±o¶�¨"°²±�ê�«o°f¶!«�ê`¨�±G¨&¯B¨&¬�·v±G¤gê ê�«o§D£êw¨"§D¬]¨"£]§B¹½·v°²±G³�§D¸4¤¦¢G£�±o¤B¬�ê�«G¨&£]«G¨&¬Pê�«o§D£�êw¨�¼]§i»%°²¼d£_¬N¢G¨B¾RüA@ça± ÐiÑBÊvÐCB0D¤¦©o¨i¹XàR¼�®-¬]¤[¤Bµ2¤Bµ`«o°²¼�ça±o¶�¤¦¥�®m¹½¨&£_¨i±G¨i¼]¼�Ï�«G¨&¤B¬]¨i¥ £_¤t¤B·�£]«G¨�ê�°²±o©�¤¦¢G£

¤BµÒ£]«G¨�¼]§B°f¹²¼+¤Bµm£]«o¨�µr¤B¬N¥�§B¹²°²¼_£+®-«-°²¹½¤¦¼_¤B®-«[»"¤Bµ|¥�§D£]«G¨i¥�§D£]°²¶&¼&¾2Ëd¢G£s°½£�©o°f©�±G¤B£2¬]¨&µ8¢G£_¨£]«G¨�±o¤B£]°½¤¦±Â£]«o§D£�§(¼]¢FE�¶&°½¨i±[£]¹½» ©G¨&£]§B°f¹½¨i©º¥�§D£]«G¨i¥�§D£]°f¶&§B¹P®o¬]¤t¤BµPë ¼!¢o¶!«â§B¼�£]«G¨¤¦±G¨i¼w°²± "G#H%I')(J%K+�%8-L/1-32�4 5*67-328%8(&- ë ¹²¤[¤B·v¼`¥�¤B¬]¨�¹f°½·B¨�£]«G¨�¬]¨i¼]¢o¹²£�¤Bµ�§�¥�¨i¶!«o§B±-°²¶&§B¹®o¬!¤t¶�¨i¼]¼�£]«o§B±%£]«G¨�®o¬!¤t©o¢-¶�£w¤Bµ2«o°²³¦«v­u¹½¨&¯B¨i¹|«t¢o¥�§B±%£]«G¤¦¢o³¦«6£&¾ça±�£]«G¨�¶�¤¦¥�®-¢o£_¨&¬w§D³B¨�¼_¤¦¥�¨�®4¨&¤B®-¹½¨�¼_£]§D¬]£_¨i©�£_¤�¼]¨i§D¬!¶!«�µ�¤B¬`êd§i»v¼w£_¤�¥�¨i¶!«o§B±-°½î&¨

¶�¨&¬]£]§B°f±Þ£u»t®Ò¨i¼"¤Bµs®o¬]¤t¤Bµ8¼�°²±Þ§%¥�¢o¶N«�¥�¤B¬]¨�¹²°²£_¨&¬!§B¹+¼_¨i±o¼_¨B¾~ça±®m¢G¬]¨�¥�§D£]«G¨i¥�§D£]°f¶&¼§�êd§D£_¨&¬!¼]«G¨i©û¨&¯B¨i±6£�êw§B¼�£]«G¨�§B±o±G¤¦¢o±-¶�¨i¥�¨i±6£�¤Bµ`£]«G¨�®o¬]¤t¤Bµs¤Bµd£]«G¨�µ8§B¥�¤¦¢o¼M G¤¦¢o¬ßw¤¦¹²¤B¬�ßw¤¦±>ð_¨i¶�£]¢G¬]¨�§D£�£]«G¨� �¥�¨&¬!°f¶&§B±N>§D£]«G¨i¥�§D£]°²¶&§B¹Pét¤v¶&°½¨&£u»�¼]¢-¥�¥�¨&¬�¥�¨&¨&£]°f±G³°²±ùÐiѦÔDÍt¾O o¤B¬P£]«G¨�í-¬!¼_£w£]°²¥�¨�°²±�£]«o¨�®-¬]¤[¤Bµ|¤Bµ/§~¥�§Lða¤B¬d£]«G¨&¤B¬!¨i¥%´o§~¶�¤¦¥�®-¢G£_¨&¬dêd§B¼¢o¼]¨i©�£_¤~¬!¢-±�£]«o¬]¤¦¢G³¦«�§~¹²§D¬]³B¨�±[¢-¥�¸4¨&¬d¤Bµk¶&§B¼_¨i¼i¾O>�§D£]«o¨i¥�§D£]°²¶&°²§B±o¼P©-°²©�±o¤B£w¬!¨i§B¶�££_¤�£]«-°²¼P±G¨&ê�§D®o®m¹²°²¶&§D£]°½¤¦±�¤Bµ2¶�¤¦¥�®-¢o£_¨&¬�£_¨i¶!«-±G¤¦¹½¤B³B»�ê�°½£]«�¢-±6¸o¬N°²©o¹½¨i©�¨i±6£]«t¢o¼]°f§B¼]¥%¾ �¼�ô�¾mñG¾o �¹½¸4¨&¬!¼d¬]¨&®4¤B¬]£_¨i©�°²±!P 4 5 PRQTS�U�V 5?-�#XW S�Y�Y 5[Z�5�/1-A2�4 5\67-328%.(\]_^ S�` #H')- Y�´

@ 5�Q�Y\VLb`^LK_q"SUTLOzW�WXHaQ&SUORMPHaQ&S2ORW�MPY\W8Ss{ROR��Ha{pq"SUY��BHPHJIgeLbUHaWXWXHa^��&q�,�MPHJbUORn_KNQ�W8SUVD^gHaQ&SUWa�t�LVLSSUT>HJq�^gY\Q%� S�MPH_K!Q�OpS�ORQ�SUT>H/WUKNMPH2WXHaQLWXH�KNW�3ÒHJbXSXbuK!QD^ �V>WXWXHa{R{½�

Page 3: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

��������)���:�A��� � � ��������G� �F��� ����� ��F�������F� �� ��� �

>�§D£]«G¨i¥�§D£]°²¶&°²§B± §Dµ�£_¨&¬á¥�§D£]«G¨i¥�§D£]°²¶&°²§B± ¨�åt®o¬!¨i¼]¼_¨i© ¢o±o¨i§B¼]°²±G¨i¼]¼ê�°½£]«Þ§�®o¬]¤t¤Bµs°²±ùê�«o°f¶!«Þ§�¶�¤¦¥�®-¢G£_¨&¬"«o§B©Þ®m¹²§i»B¨i©(§%¥�§Lð_¤B¬�¬]¤¦¹½¨B¾Ï�«G¨&»"êw¨&¬]¨d¸4¤B£]«G¨&¬]¨i©�¸[»�£]«G¨wµ�§B¶�£2£]«o§D£2¥�¤B¬!¨`£]«o§B±%Ð&ÉBÉBÉ�«o¤¦¢G¬!¼k¤Bµ¶�¤¦¥�®-¢G£_¨&¬d£]°²¥�¨�«o§B©�¸Ò¨&¨i±�¨�åv®Ò¨i±-©G¨i©�°f±�¶!«o¨i¶]·v°²±G³�¼_¤¦¥�¨~Ð&ÉBÉv´RÉBÉBɶ&§B¼_¨i¼"§B±o©ù¤Bµ�£_¨i±(¼]¢G³B³B¨i¼_£_¨i©âý8«G¤B®4¨i©��>þ£]«o§D£�£]«G¨&¬]¨~¥�°½³¦«[£�¸4¨�§B±¨&¬]¬]¤B¬�¸-¢o¬!°½¨i©~°²±�£]«G¨�«t¢o±o©G¬]¨i©-¼k¤BµÒ®-§D³B¨i¼s¤BµÒ¶�¤¦¥�®m¢G£_¨&¬�®o¬!°f±6£/¤¦¢G£]¼&¾Ë`¨&»B¤¦±-©�£]«o§D£�¶�¤¦±o¶�¨&¬N±�êw§B¼�£]«G¨�«G¤B®4¨d£]«o§D£�§�¥�¢-¶!«�¼]«o¤B¬]£_¨&¬2®o¬]¤t¤Bµ¶�¤¦¢o¹²©%¸4¨�µ�¤¦¢o±o©|¾/ós¢|¾oç\¾�>§B±o°²±|àR¼P¤B¸m¼_¨&¬]¯D§D£]°½¤¦± ��� � Ê��U´o®�¾GÓ6Î �k£]«o§D£ú_§�®o¬!¤[¤Bµ|¤¦±o¹²»�¸4¨i¶�¤¦¥�¨i¼d§�®o¬]¤t¤Bµ:§Dµr£_¨&¬w£]«G¨�¼_¤t¶&°f§B¹-§B¶�£w¤Bµ��z§B¶&¶�¨&®o£a­°²±G³�°½£�§B¼�§�®o¬]¤t¤Bµ&àRü�ío£]¼P£]«G¨"¼!°½£]¢o§D£]°½¤¦±�¯B¨&¬]»�êw¨i¹²¹X¾

ça±%£]«G¨�£]«o¬]¨&¨�©G¨i¶&§B©G¨i¼�¼]°²±o¶�¨�£]«-§D£�£]°²¥�¨�£]«G¨"¬]¤¦¹½¨�¤Bµ2¶�¤¦¥�®m¢G£_¨&¬_­u§B¼]¼]°f¼_£_¨i©�®o¬!¤[¤Bµ8¼°²±�®m¢G¬]¨�¥�§D£]«G¨i¥�§D£]°f¶&¼�«o§B¼P¸4¨&¨i±%¨�åv£_¬]¨i¥�¨i¹²»�¥�¤t©G¨i¼]£&´G¨�åv¶�¨&®o£�°²±%¶�¨&¬]£]§B°²±�¢o±[¢-¼]¢o§B¹¼]¢o¸-¼_®4¨i¶&°²§B¹½£]°½¨i¼�£]«o§D£�§D¬]¨~µ�§D¬�µ�¬]¤¦¥¡£]«G¨�°²±[£_¨&¬]¨i¼_£]¼�¤Bµ`¥�¤¦¼_£�¥�§D£]«G¨i¥�§D£]°²¶&°f§B±o¼&¾� �¶\­¶�¤B¬!©-°²±G³y£_¤â¤¦±G¨Þ®o¬]¤¦¥�¤B£_¨&¬�¤Bµ�§B¢G£_¤¦¥�§D£_¨i© £]«G¨&¤B¬]¨i¥~­U®-¬]¤g¯v°²±G³ �pÊDÉ��U´�ú_Ï�«G¨�¥�¤¦¼_£¨�åG¶&°½£]°²±G³�¬]¨i¶�¨i±[£�¼]¢o¶&¶�¨i¼]¼P°f±�¥�§D£]«G¨i¥�§D£]°²¶&¼P«o§B¼d¸4¨&¨i±�£]«G¨�¼_¨&£_£]¹²°f±G³�¤Bµk£]«G¨�9�¤B¸o¸m°²±o¼®o¬!¤B¸-¹½¨i¥ ¸t»�£]«G¨d 2Ï��(¼_»v¼_£_¨i¥�����/¾>çJ±�ÐiÑBÊBÊ�õ�¨&¬!¸Ò¨&¬!£R9�¤B¸-¸-°²±o¼k¶�¤¦±>ða¨i¶�£]¢o¬]¨i©�£]«o§D£§�®-§D¬]£]°²¶&¢-¹²§D¬�³B¬!¤¦¢G®¤Bµw§>åv°²¤¦¥�¼�µr¤B¬!¥ø§�¸-§B¼]°²¼�µ�¤B¬�Ëw¤t¤¦¹½¨i§B±(§B¹½³B¨&¸o¬N§v´Ò¸m¢G£�±G¨i°²£]«G¨&¬«G¨"±o¤B¬�§B±6»B¤¦±o¨"¨i¹²¼_¨�ý8¢o±[£]°²¹4£]«G¨�¼_¤¦¹²¢G£]°½¤¦±�¸t»�����dþw¶�¤¦¢o¹²©%®o¬!¤g¯B¨"£]«o°f¼&¾Rü��ça± ¶�¤¦±[£_¬!§B¼_£&´�°²± ¥�§B°²±o¼_£_¬!¨i§B¥ ¥�§D£]«G¨i¥�§D£]°²¶&§B¹�¬!¨i¼_¨i§D¬!¶!«¡¶�¤¦¥�®m¢G£_¨&¬_­u§B¼]¼]°f¼_£_¨i©

£]«G¨&¤B¬!¨i¥~­U®o¬]¤L¯t°²±o³�«o§B¼d¸4¨&¨i±�¶�¤¦±o¼_®-°f¶&¢G¤¦¢o¼w¸[»�°½£]¼�§D¸m¼_¨i±o¶�¨B´-¥�¢o¶!«�£_¤�£]«G¨"¼]¢G¬!®o¬!°²¼_¨¤Bµ�¥�§B±6»y±G¤¦±v­u¥�§D£]«G¨i¥�§D£]°²¶&°²§B±o¼&¾( �µr£_¨&¬� �±o©G¬!¨&ê ;ä°²¹½¨i¼&à+§B±o±G¤¦¢-±o¶�¨i¥�¨i±[£�¤Bµ�£]«G¨®o¬!¤[¤Bµ:¤Bµ G¨&¬!¥�§D£&àR¼ ��§B¼_£�Ï�«G¨&¤B¬]¨i¥%´G¼_¤¦¥�¨�¬!¨&®Ò¤B¬!£_¨&¬!¼dê`¨&¬!¨�©-°²¼]§D®o®4¤¦°²±[£_¨i©�£_¤�¹²¨i§D¬!±£]«o§D£�¶�¤¦¥�®-¢G£_¨&¬!¼�«o§B©�®-¹²§g»B¨i©�±G¤�¬]¤¦¹²¨�ê�«o§D£]¼_¤t¨&¯B¨&¬�°²±�£]«o¨"®o¬]¤t¤Bµ@¾ý � ¤B£_¨B�`õ�¨&¬]¨�ç`§B¥ ±G¤B£d¬]¨&µ�¨&¬]¬!°²±o³�£_¤�§D£_£_¨i¥�®o£]¼�£_¤�µ�¤B¬!¥�§B¹f¹½»�¯B¨&¬!°½µ�»�®o¬!¤[¤Bµ8¼w£]«o§D£

«o§g¯B¨%§B¹½¬]¨i§B©G» ¸Ò¨&¨i±yê�¬N°½£_£_¨i±û¤¦¢o£~°f± ©G¨&£]§B°f¹`¸t» ¥�§D£]«G¨i¥�§D£]°²¶&°²§B±-¼&¾1 G¤B¬�§ù¬]¨i¶�¨i±[£¨�åG§B¥�®-¹½¨~¤Bµ`£]«o°²¼�¼_¨&¨ �"!\S #&67- Y�Y$#&% 5*#&% ' 5)(=+)# SJS*! S+! 2�4 5 +�#&%�6C57' ` 6-,&5\#02�4 5 S #�5*6¸t»� �¯v°½³¦§B©|´oô�¤¦±o±G¨i¹²¹²»B´)B�¬!§i»B´Ò§B±o©:9�§>è �lÐ\�U¾}þ. ¢G£]¼!°²©G¨�¤Bµ�¥�§D£]«G¨i¥�§D£]°²¶&¼&´w£]«G¨%¥�§B°²±Â¢o¼_¨i¼~¤Bµ�§B¢G£_¤¦¥�§D£_¨i©º£]«o¨&¤B¬]¨i¥~­U®o¬]¤L¯t°f±G³G´

§B¶&¶�¤B¬!©-°²±G³~£_¤:�pÊDÉ��U´o§D¬]¨�°²±Âú_¼_¤Bµ�£uêd§D¬]¨"³B¨i±G¨&¬!§D£]°²¤¦±%§B±o©�¯B¨&¬!°½í-¶&§D£]°²¤¦±|´v®o¬]¤B£_¤v¶�¤¦¹4¯B¨&¬_­°½ím¶&§D£]°½¤¦±|´G§B±o©�«o§D¬N©Gêw§D¬!¨�¯B¨&¬!°½í-¶&§D£]°½¤¦±:¾Rü1 G¤B¬�¨�åG§B¥�®-¹²¨C�pÊDÉ��U´

�  �év  ¢o¼_¨i¼� 2Ï/� £_¤á¶�¨&¬!£]°½µr»ä¼]§Dµ�¨&£u» ®o¬!¤B®Ò¨&¬!£]°½¨i¼�¤Bµ~§D¨&¬!¤¦¼_®-§B¶�¨¼_¤Bµr£@êw§D¬!¨�£]«-§D£�«o§B¼�¸4¨&¨i±û§B¢G£_¤¦¥�§D£]°²¶&§B¹²¹½»�³B¨i±o¨&¬!§D£_¨i©yµr¬]¤¦¥ «o°½³¦«G­¹½¨&¯B¨i¹"¼_®4¨i¶&°½í-¶&§D£]°²¤¦±o¼&¾ÀÏ�«o¨i°½¬%¶�¤t©G¨(³B¨i±o¨&¬!§D£_¤B¬�®o¬]¤v©o¢o¶�¨i¼�¼]§Dµ�¨&£u»¤B¸-¹²°½³¦§D£]°½¤¦±-¼�£]«o§D£+§D¬]¨`®o¬]¤g¯D§D¸-¹½¨`¤¦±o¹½»"°½µv£]«G¨d¶�¤v©G¨`°²¼/¼]§Dµ�¨B¾/ �±~ 2Ï��¼_»t¼]£_¨i¥�©o°²¼]¶N«o§D¬]³B¨i¼�£]«G¨i¼]¨�¤B¸-¹²°½³¦§D£]°²¤¦±o¼&´|§B±o©Þ£]«G¨�¤¦¢G£_®m¢G£�®o¬]¤t¤Bµ�¼&´ê�«o°²¶N«�¶&§B±�¸Ò¨�¯B¨&¬!°½ío¨i©�¸[»�§B±�°²±o©G¨&®4¨i±o©G¨i±[£+®o¬]¤t¤Bµ|¶!«G¨i¶!·B¨&¬i´o¼_¨&¬]¯B¨§B¼�¶�¨&¬]£]°½ím¶&§D£_¨i¼&¾

;ä«o§D£�°f¼"¥�¨i§B±[£�«G¨&¬!¨ùý8¼_¨&¨�§B¹²¼_¤ �lÐ � ��þ�°²¼�§�¥�¨&£]«G¤v©�¤BµP®m§D¬]£]°²§B¹²¹½»Þ§B¢G£_¤¦¥�§D£]°f±G³£]«G¨�¯B¨&¬!°½í-¶&§D£]°½¤¦±�£]«o§D£�¼]¤Bµr£@êw§D¬]¨�ê�°²¹f¹4µ�¢o±-¶�£]°½¤¦±�§B¼�°½£&àR¼�¼]¢o®o®4¤¦¼_¨i©�£_¤10Ò°²£�°²¼�§�¸-°½£P¤Bµ§�¼_£_¬]¨&£]¶!«£_¤�¶&§B¹²¹:£]«o§D£�úa£]«G¨&¤B¬]¨i¥~­U®-¬]¤g¯v°²±G³G¾Rüº �¼�°f±%¤B£]«G¨&¬�§D¬]¨i§B¼�¤Bµ2£]«G¨�¼_¤D­u¶&§B¹f¹½¨i©

� 5rS:ORW:TDK]bu^�SUYwbUHaWXORW8S�SUT>H/SUHJMPeLSuK!SUORYNQ�SUYdWUKaq�WUK!bUn_K!W8SUOznaKN{R{pq&�|�83ÒH2W8SUOR{R{½�DMsq��BH_K!SUORQ>jwT>H_K]bXS+2 �

Page 4: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

� ����������� �������

 �¬]£]°½í-¶&°f§B¹vçJ±[£_¨i¹²¹²°½³B¨i±-¶�¨�ío¨i¹²©|´B¨�åv£_¬!§g¯>§D³¦§B±[£d£_¨&¬!¥�°²±G¤¦¹²¤B³B»~«-§B¼�¤¦¢G£_®-§B¶�¨i©�§B¶�£]¢o§B¹m§B¶\­¶�¤¦¥�®m¹²°²¼]«o¥�¨i±6£]¼&¾��

�����

Ï�«G¨sµr¤B¬!¥�§B¹²°²¼_£]°²¶+§D®o®-¬]¤¦§B¶!«�£_¤�¼_¨i¶&¢o¬!°½£u»�§B±o§B¹²»t¼]°f¼|¤Bµv£]«G¨�®o¬]¤B£_¤v¶�¤¦¹²¼�¤BµG®-¢G¸-¹²°f¶\­U·B¨&»¶�¬]»t®o£_¤B³B¬!§D®m«6»�³B¤t¨i¼d¸-§B¶]·�§B¹²¥�¤¦¼_£d§B¼wµ�§D¬d§B¼w£]«G¨�±o¤B£]°½¤¦±�¤Bµ�®-¢G¸-¹²°f¶\­U·B¨&»~¶�¬!»[®o£_¤B³B¬N§>­®-«[»�°½£]¼]¨i¹½µ@¾�Ï�«G¨~ío¬!¼_£�¯B¨&¬!¼]°²¤¦±¤Bµd¼]¢o¶N«(§�µr¤B¬!¥�§B¹/¶&§B¹f¶&¢o¹²¢o¼�°²¼�¢o¼]¢-§B¹²¹½»�§D£_£_¬!°½¸m¢G£_¨i©£_¤�ô�¤¦¹½¨&¯%§B±o©�ós§D¤�°²±(ÐiÑBÎBÊ �lÐiÊ��U¾Ï�«G¨(ô�¤¦¹½¨&¯[­Xós§D¤ã§D®o®o¬!¤¦§B¶!«ä£_¤º§B±o§B¹½»tîi°²±G³Â®-¢G¸m¹²°²¶\­U·B¨&»º®o¬]¤B£_¤v¶�¤¦¹²¼%°²¼�§D¸-¼_£_¬N§B¶�£

§B±o© ¼]¶!«o¨i¥�§D£]°²¶D¾%çJ£�¯v°½¨&ê�¼"¶�¬]»t®o£_¤B³B¬!§D®m«o°²¶�®o¬N°²¥�°½£]°½¯B¨i¼�§B¼�°²©o¨i§B¹²°½î&¨i©(¸-¹f§B¶]·Þ¸4¤iåv¨i¼£]«o§D£�¥�¢o¼]£�¸4¨"§B¼]¼]¢o¥�¨i©�£_¤�«o§g¯B¨�¶�¨&¬]£]§B°²±�®o¬]¤B®4¨&¬]£]°½¨i¼�°f±%§B±�§D¸-¼_¤¦¹f¢G£_¨"¼_¨i±o¼_¨B¾`ç@£�°²¼¸-§B¼]¨i©�¤¦±�§B±§B¹²¹l­U¤B¬_­u±o¤B£]«o°²±G³�¯v°½¨&ê�¤Bµ�¼]¨i¶&¢G¬!°½£@»�§B±-©�¼_¤�«-§B¼�¹²°²¥�°½£_¨i©%§D®o®-¹²°f¶&§D¸-°²¹²°½£@»°²±�®-¬!§B¶�£]°²¶&§B¹:¼_¨&£_£]°f±G³¦¼&¾ça± ¬!¨i¶�¨i±6£~»B¨i§D¬!¼&´`¨i¼_®4¨i¶&°²§B¹²¹½»�¼!°²±o¶�¨�£]«o¨�®m¢G¸-¹²°²¶&§D£]°²¤¦±�¤BµL�pÊ �U´s¬]¨i¼_¨i§D¬!¶N«G¨&¬!¼�«o§g¯B¨

¸4¨&¨i±�£_¬]»v°²±G³�£_¤�¸o¬!°f±G³�£]«G¨&¤B¬]»�¶&¹½¤¦¼_¨&¬`£_¤�®o¬N§B¶�£]°²¶�¨�¸t»~³¦°½¯t°f±G³�¬]¨i©o¢o¶�£]°²¤¦±o°²¼_£�¼_¨i¶&¢o¬!°½£u»§D¬]³¦¢-¥�¨i±6£]¼�£]«o§D£�°f±o¶&¹²¢o©G¨�®o¬!¨i¶&°²¼_¨"°²±G¨iÿt¢o§B¹²°²£]°½¨i¼P°²±[¯B¤¦¹½¯t°f±G³~®o¬]¤B¸-§D¸-°f¹²°½£]°½¨i¼d§B±o©%¬N¢o±v­±o°f±G³�£]°²¥�¨i¼w§B±-©�£]«o§D£&´o°f±�®o¬N°²±o¶&°½®-¹²¨B´6¶&§B±%¹½¨i§B©�£_¤�¶�¤¦±o¶�¬]¨&£_¨�¬]¨i¶�¤¦¥�¥�¨i±o©o§D£]°½¤¦±o¼wµ�¤B¬·B¨&»%¹½¨i±G³B£]«-¼P§B±o©%®-§D¬!§B¥�¨&£_¨&¬�¼_¨i¹½¨i¶�£]°²¤¦±|¾Ï�«G¨ù®o¬]¤v¶�¨i¼]¼�¤Bµ�°²±6£_¨&¬!®o¬]¨&£]°²±G³y§y¬]¨i©o¢o¶�£]°½¤¦±-°²¼_£�¼]¨i¶&¢G¬!°½£@»á§D¬]³¦¢o¥�¨i±6£�µ�¬]¤¦¥ £]«G¨

¼_£]§B±-©G®4¤¦°²±6£`¤Bµ�¶�¬]»t®o£_¤B³B¬!§D®-«-°²¶�®-¬!§B¶�£]°²¶�¨�°²¼wµr¬N§B¢G³¦«6£wê�°½£]«�©o° E�¶&¢o¹½£]°½¨i¼`§B±o©�®-°½£_µ8§B¹²¹²¼&´§B¼7>�¨i±G¨&î&¨i¼�§B±-© ç�§D¬]³¦¢G¨i©º°²± �lÐiÑv´ � É��U¾âét¤¦¥�¨�¤Bµ�£]«G¨i¼_¨�®o¬]¤B¸m¹½¨i¥�¼~¶�¤¦¥�¨%µ�¬]¤¦¥µ8§B¹²¹²§B¶&°½¨i¼d¤B¬�§B¥�¸-°²³¦¢o°½£]°½¨i¼P°²±�£]«o¨�¼_¨i¶&¢G¬!°²£u»�¬]¨i©o¢o¶�£]°½¤¦±-¼d£]«G¨i¥�¼_¨i¹½¯B¨i¼i¾ �¥�¤¦±G³�¬]¨i¼_¨i§D¬N¶!«G¨&¬!¼`°²±Þúa®o¬]¤L¯>§D¸-¹²¨�¼_¨i¶&¢G¬!°½£@»tü�£]«o¨�ÿ[¢o§B¹f°½£u»[­u¶�¤¦±6£_¬!¤¦¹G®o¬]¤B¸-¹²¨i¥ «o§B¼

¸4¨&¨i±�ê�°²©o¨i¹½»�§B¶!·t±G¤Lê�¹½¨i©G³B¨i©:¾s �¶&¶�¤B¬N©o°²±G³�£_¤�õ�§B¹½¨&¯v°T�lÐiÍ��U´Ï�«G¨�®o¬!¤B¸-¹½¨i¥ °²¼|£]«-§D£k§B¼�§�¶�¤¦¥�¥�¢o±o°½£@»B´Lêw¨s³B¨i±G¨&¬N§D£_¨`¥�¤B¬]¨s®o¬]¤t¤Bµ�¼£]«o§B±Þê`¨�¶&§D¬!¨&µ�¢o¹f¹½»�¯B¨&¬!°½µ�»yý8§B±-©(§B¼"§%¶�¤¦±o¼_¨iÿt¢G¨i±o¶�¨�¼_¤¦¥�¨�¤Bµs¤¦¢G¬®-¢G¸-¹²°f¼]«G¨i©�®o¬]¤t¤Bµ�¼P§D¬]¨�°²±o¶�¤B¬]¬]¨i¶�£NþN¾

Ëw¨i¹²¹²§D¬!¨"§B±o© 9�¤B³¦§gêw§g» �pÌ ��ê�¬N°½£_¨B�çJ±y¤¦¢G¬�¤B®-°f±o°½¤¦±|´+¥�§B±[»û®o¬]¤t¤Bµ8¼�°f± ¶�¬]»t®o£_¤B³B¬!§D®m«6»y«o§i¯B¨%¸4¨i¶�¤¦¥�¨¨i¼]¼_¨i±[£]°²§B¹²¹½»�¢o±[¯B¨&¬!°½í-§D¸m¹½¨B¾ . ¢G¬�ío¨i¹²©�¥�§g»�¸Ò¨`§D®o®o¬]¤¦§B¶N«o°²±G³�§�¶�¬!°²¼]°²¼¤Bµ/¬N°½³B¤B¬i¾

. ®-°f±o°½¤¦±o¼d©o°lè4¨&¬�§B¼P£_¤�£]«o¨�¶&§B¢o¼_¨i¼�¤Bµk£]«o°f¼�¶�¬!°²¼]°f¼&¾kça± � � Í�� � ¤Lêw§D·�¼]§g»t¼�£]«o§D£¾½¾½¾p®o¬]¤t¤Bµ�¼ � §D¬]¨\��¨&¬!¬]¤B¬_­U®o¬]¤¦±o¨�§B±o©ã©o° E�¶&¢o¹½£~£_¤ ¶N«G¨i¶]·Ò¾½¾½¾ ¸4¨i¶&§B¢o¼_¨¶�¬]»[®-£_¤B³B¬!§D®-«o°²¶�¼]¶!«G¨i¥�¨i¼s§D¬]¨�¸-§B¼_¨i©�¤¦±�±G¤¦±v­U£_¬!°½¯v°²§B¹G¥�§D£]«o¨i¥�§D£]°²¶&¼¼]¢o¶!«�§B¼�±t¢o¥�¸4¨&¬P£]«G¨&¤B¬!»B´o³B¬]¤¦¢G®�£]«o¨&¤B¬]»�¤B¬�®o¬]¤B¸-§D¸m°²¹²°½£@»�£]«G¨&¤B¬]»B¾

Ï�«-°²¼P¨�åv®-¹²§B±o§D£]°½¤¦±ù©G¤t¨i¼�±o¤B£�¼_¨&¨i¥¡¶�¬]¨i©-°½¸-¹½¨B¾� �µr£_¨&¬�§B¹²¹U´m°½µ2£]«o°f¼�êw¨&¬]¨�£]«o¨�¬]¨i§B¼]¤¦±|´£]«G¨i±�ê�«6»(°²¼"£]«G¨&¬]¨�±G¤áú_¶�¬!°²¼]°²¼"¤Bµw¬N°½³B¤B¬!ü�°²±û¥�§D£]«G¨i¥�§D£]°²¶&¼�°½£]¼_¨i¹½µJ´k§�ío¨i¹²©(£]«o§D£�°²¼§B¹²¼]¤Âúa¸m§B¼_¨i©Þ¤¦±Þ±G¤¦±v­U£_¬!°½¯v°²§B¹/¥�§D£]«G¨i¥�§D£]°f¶&¼]ü � >�¤B¬!¨�®-¹²§B¢o¼]°²¸-¹½¨"¨�åv®-¹²§B±o§D£]°²¤¦±o¼�§D¬]¨³¦°½¯B¨i±�¸t»�Ëw¨i¹²¹²§D¬]¨�§B±o©X9�¤B³¦§gêw§g»1�pÌ��U´vê�«G¤~¼]§i»�£]«o§D£d£]«o°²¼w¶�¬!°²¼]°²¼�ú_«o§B¼P§D£P°½£]¼d¶�¤B¬]¨�§¼]°²³¦±o°½í-¶&§B±[£P¶&¢o¹½£]¢G¬!§B¹4¨i¹²¨i¥�¨i±6£&´Rü�§B±o©%¸t»�õ�§B¹½¨&¯v°T�lÐiÍ��U´oê�«o¤�§B¶]·v±G¤gê�¹²¨i©G³B¨i¼�£]«o§D£

� 5�Q�$'&��)&w�+H'�Oz{R{RYL�>.[ORegSUY\Q[�LK!QD^ � H@bU{zORW� $+$�¦eLV>�L{zORWXTLH_^�K�SUT>YNV>j\T&SXZ�V>{6KNQ>KN{pqgWXOzW|Y!ZG�BYNSUT�SUHanuTLcQ>ORn_K!{4KNQ>^�WXY&naOzKN{|ORWXWXVLHaWwORQih�Y\{Rh�Ha^�ORQ�KNVgSUY\M�K!SUHa^�h�HJbUO �DnaK!SUORY\Q�Y!ZknJY\MPe>VgSUHJb�eLbUYNjNbuK!MPWa�"74T>HaOpbK!bXSUORna{RH2ORWkW8SUOR{R{¦bUHa{RHah\K!Q&S/K!QD^�OzQ&SUHJbUHJW8SUOzQLjwSUYwbUH_KN^�SUTLbUHJH�^LHan_KN^LHaW:{zK!SUH@b_�

Page 5: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

��������)���:�A��� � � ��������G� �F��� ����� ��F�������F� �� ��� �

ét¤¦¥�¨�¤Bµ~£]«G¨�¬!¨i§B¼_¤¦±o¼�µ�¤B¬�£]«-°²¼�®o¬]¤B¸-¹²¨i¥ §D¬]¨ ¼_¤v¶&°²§B¹�ý�¨B¾p³G¾½´�ê`¨¥�¤¦¼_£]¹½»�®-¢G¸-¹f°²¼]«�°²±%¶�¤¦±Gµ�¨&¬]¨i±o¶�¨i¼�¬N§D£]«G¨&¬�£]«o§B±�ð_¤¦¢G¬!±-§B¹²¼NþN¾

çd§B¹²¼_¤�¶�¤¦¥�¥�¨i±6£�¤¦±�£]«G¨"¶&¢o¹½£]¢o¬!§B¹|§B±o©�¼_¤v¶&°²§B¹|°²¼!¼]¢G¨i¼P°²±1�lÐgÔ �/§B±o© �lÐiÎ��U¾;ä«o§D£_¨&¯B¨&¬�£]«o¨�¬!¨i§B¼_¤¦±o¼Pµ�¤B¬�£]«G¨"¶�¬!°f¼]°²¼d°²±�£]«G¨&¤B¬]¨&£]°²¶&§B¹�¶�¬]»[®-£_¤B³B¬!§D®-«[»B´o£]«G¨"«G¤B®4¨

¤Bµ�§B¢G£]«G¤B¬!¼�¤Bµ�¬]¨i¶�¨i±[£�®-§D®4¨&¬!¼~¤¦±º§B¢G£_¤¦¥�§D£_¨i©ã£]«G¨&¤B¬]¨i¥~­U®-¬]¤g¯v°²±G³�°²¼�£_¤�£]§D·B¨�£]«G¨¢o±-¶�¨&¬]£]§B°²±[£]°½¨i¼&´��m§iê�¼&´d§B±o©â«t¢o¥�§B±âµr¤¦°½¸m¹½¨i¼~¤¦¢G£�¤Bµ�£]«G¨�®o¬!¤t¶�¨i¼]¼�¤Bµ�©o¨&¬!°½¯v°²±G³ù¬]¨�­©o¢-¶�£]°½¤¦±o°²¼_£`¼_¨i¶&¢G¬!°½£@»�§D¬]³¦¢o¥�¨i±[£]¼&¾�Ï�«o¨i¼_¨�§B¢o£]«G¤B¬!¼w§B©G¤B®o£d§�¶�¤¦¥�®m¢G£]§D£]°½¤¦±o§B¹Ò¥�¤v©G¨i¹£]«o§D£�¨i±o§D¸-¹½¨i¼�£]«G¨i¥ £_¤�·B¨&¨&®Þ£_¬!§B¶!·�¤Bµ2®o¬]¤B¸m§D¸-°²¹²°½£]°²¨i¼P§B±o©�¬N¢o±o±o°²±o³�£]°f¥�¨i¼�§B¼�£]«G¨&»³B¤�¼]£_¨&®G­U¸[»[­u¼_£_¨&®�µr¬!¤¦¥ ¤¦±G¨�úa³¦§B¥�¨iü�£_¤�§B±G¤B£]«G¨&¬i¾2Ï�«G¨�°²©G¨i§�°²¼2£_¤�³B¬!§B©o¢o§B¹f¹½»�£_¬!§B±-¼a­µ�¤B¬!¥ £]«G¨�¬]¨i§B¹²°²¼_£]°f¶�¼!¶�¨i±o§D¬!°½¤û°f±6£_¤û§B±ã°²©G¨i§B¹²°½î&¨i©Â¤¦±o¨�ê�«G¨&¬]¨�£]«G¨�§B©G¯B¨&¬!¼!§D¬]»º«o§B¼î&¨&¬]¤~¶!«-§B±o¶�¨�¤Bµ:¼]¢o¶&¶�¨&¨i©o°²±o³G¾ . µr£_¨i±�§B±�¨&¬]¬]¤B¬d°²¼`°f±6£_¬]¤v©o¢o¶�¨i©�§B±o©�¬]¨i¶�¤B¬!©G¨i©�§B¼w¤¦±G¨³B¤t¨i¼Pµ�¬]¤¦¥ ¤¦±G¨�úa³¦§B¥�¨iü�£_¤�£]«G¨"±o¨�åt£�¤¦±o¨�ý�úa³¦§B¥�¨�­u«G¤B®o®-°f±G³G´Rü�§B¼�°²£�°²¼P¼_¤¦¥�¨&£]°²¥�¨i¼¶&§B¹²¹²¨i©mþN¾PÏ�«G¨�¼]¢-¥ ¤Bµ+£]«G¨i¼_¨�¨&¬]¬]¤B¬!¼�¶&§B±�£]«o¨i±�¸4¨�°²±[£_¨&¬]®o¬]¨&£_¨i©§B¼�£]«o¨�®o¬]¤B¸m§D¸-°²¹²°½£@»£]«o§D£�£]«G¨�°²±o°²£]°²§B¹�úa³¦§B¥�¨iü©-°lèÒ¨&¬N¼�µr¬!¤¦¥ £]«G¨�¹²§B¼]£"¤¦±G¨~ë °²±Þ¤B£]«G¨&¬�ê`¤B¬!©-¼&´k°½£"°f¼"§¸4¤¦¢o±o©�¤¦±~£]«G¨d®o¬]¤B¸-§D¸m°²¹²°½£@»�£]«-§D£2£]«G¨P§B©G¯B¨&¬!¼]§D¬]»�¼]¢o¶&¶�¨&¨i©o¼i¾+Ï�«o°²¼/§D®o®o¬]¤¦§B¶N«|´¦ê�«o°f¶!«¸4¨i¶&§B¥�¨�®4¤B®-¢o¹f§D¬d§Dµ�£_¨&¬L�pÌ��k§B±o©1� � Ô �k§D®-®Ò¨i§D¬!¨i©�°²± � ÉBÉDÓG´m°f¼P¶&¢G¬]¬]¨i±[£]¹½»�£]«G¤¦¢G³¦«[£�£_¤¸4¨�£]«o¨�©o°²¬]¨i¶�£]°½¤¦±�¤Bµ�¬]¨i¼_¨i§D¬!¶N«�£]«-§D£w°²¼w¥�¤¦¼_£d¹²°½·B¨i¹²»�£_¤~®o¬!¤t©o¢-¶�¨�§B¢G£_¤¦¥�§D£_¨i©�®o¬!¤[¤Bµ8¼¤Bµ+¼_¨i¶&¢G¬!°²£u»�£]«o§D£�«o§g¯B¨�®o¬!§B¶�£]°f¶&§B¹:¼]°½³¦±o°²í-¶&§B±o¶�¨B¾ç�¼]«-§B¹²¹:¨�åG§B¥�°²±G¨�£]«G¬]¨&¨�¤Bµ�£]«G¨i¼]¨�®m§D®Ò¨&¬N¼�ý��pÍ��U´<� � Í��U´|§B±o© �lÐiÍ���þ�ê�°½£]«®-§D¬]£]°f¶&¢o¹²§D¬

§D£_£_¨i±[£]°½¤¦±£_¤�£]«G¨�¨�åv§B¥�®-¹½¨i¼�£]«o¤¦¼_¨�§B¢G£]«o¤B¬!¼�³¦°²¯B¨�£_¤�¼]«G¤gê £]«G¨�®4¤B£_¨i±[£]°²§B¹:¤Bµ2£]«o¨i°½¬¥�¨&£]«o¤t©o¼i¾ . ±G¨�¤Bµ�£]«G¨i¼_¨~§D®o®-¹²°f¶&§D£]°½¤¦±o¼�°²¼�£_¤�¼]°½³¦±o§D£]¢G¬!¨i¼&´Ò§B±-©�£]«G¨�¤B£]«G¨&¬�£uêw¤%§D¬]¨£_¤�¨i±-¶�¬]»[®-£]°½¤¦±|¾

Êt¾��dÛ�������Ù ���:ÝrÖ ���R���Ï�«G¨�¸-§B¼!°²¶X o¢o¹²¹l­uô�¤¦¥�§B°f±ºõ�§B¼]« ý8 +ô�õ�þ~¼]°½³¦±o§D£]¢o¬]¨%¼]¶!«G¨i¥�¨N� Ó���°²¼~¤¦±G¨�¤Bµ�£]«G¨

¼]°f¥�®-¹½¨i¼_£"§B±-© ¥�¤¦¼]£�¨i¹½¨&³¦§B±[£�¶�¤¦±o¼_£_¬!¢-¶�£]°½¤¦±o¼�°²±û¶�¬]»t®o£_¤B³B¬!§D®m«6»B¾ �:¨&£��ä����� �¸4¨�§�®4¨&¬!¥�¢G£]§D£]°½¤¦±¤Bµs§�ím±o°½£_¨�¼]¨&£��w¾ ;(¨�§B¼]¼]¢-¥�¨���£_¤�¸4¨�§ 28#�-&+�( S S # S '�5 U Q - #µ8¢o±o¶�£]°½¤¦±:¾�ça±ù¤B£]«G¨&¬�ê`¤B¬!©-¼&´|¢o¼]°²±G³�£]«G¨~®-¢G¸-¹f°²¶"°²±Gµ�¤B¬!¥�§D£]°²¤¦±�§B±[»�¬!§B±o©o¤¦¥�°½î&¨i©ù§B¹l­³B¤B¬!°²£]«o¥ «o§B¼2±G¨&³¦¹²°²³¦°½¸-¹½¨w®o¬]¤B¸-§D¸m°²¹²°½£@»�ý�£]§D·B¨i±�¤g¯B¨&¬`£]«G¨P¨i¹½¨i¥�¨i±[£]¼2¤Bµ��Þ§B±o©~£]«G¨�¼]¨&£]¼¤Bµ2¶�¤¦°²±�£_¤¦¼]¼_¨i¼�°²±%¨�åv¨i¶&¢G£]°²±G³�£]«G¨�§B¹²³B¤B¬!°½£]«o¥�þd¤Bµ/ím±o©o°²±G³�� � . ý��oþP°²±§�¬]¨i§B¼_¤¦±o§D¸m¹½¨§B¥�¤¦¢-±6£P¤Bµ+£]°²¥�¨B¾ ï ¼]°²±o³�¼_¨i¶�¬]¨&£�°²±oµr¤B¬!¥�§D£]°½¤¦±|´��Þ¶&§B±%¨i§B¼]°²¹²»�¸4¨"°²±[¯B¨&¬]£_¨i©|¾�:¨&£! �¸4¨"§�«o§B¼!«%µ�¢-±o¶�£]°½¤¦±�ë §�µ�¢o±-¶�£]°½¤¦±�µr¬!¤¦¥ ¥�¨i¼]¼!§D³B¨�¼_£_¬!°²±o³¦¼P¤Bµ2§D¬]¸-°½£_¬!§D¬!»

¹½¨i±o³B£]«ã£_¤º£]«G¨Þ¼_¨&£"� ë ê�«G¤¦¼_¨ù¯D§B¹²¢G¨i¼�¬!§B±G³B¨(¢o±o°²µr¤B¬!¥�¹½» ¤L¯B¨&¬�£]«G¨ù¨i±6£]°²¬]¨(¼_¨&£�w¾ùý8Ï�«o°²¼"°f¼�ê�«o§D£�úaµ8¢o¹²¹l­u©o¤¦¥�§B°²±oü�¥�¨i§B±o¼i¾}þÂça±�§B©o©o°½£]°²¤¦±|´|ê`¨�¼]¢G®o®4¤¦¼_¨~£]«o§D£�£]«G¨«o§B¼!«ãµ8¢o±o¶�£]°½¤¦±æ°²¼�°²±o©o°f¼_£]°²±G³¦¢o°f¼]«o§D¸-¹½¨�µ�¬]¤¦¥�§ ¬N§B±o©G¤¦¥ µ�¢o±-¶�£]°½¤¦±ãµ�¬]¤¦¥�¥�¨i¼]¼!§D³B¨¼_£_¬N°²±G³¦¼�£_¤#�w¾�Ï�«-§D£`°²¼&´t£]«G¨�«o§B¼]«�µ�¢o±-¶�£]°½¤¦±�¶&§B±�¸4¨�¥�¤t©G¨i¹²¨i©�¸t»�§B±yúa¤B¬N§B¶&¹½¨iü�£]«o§D£¬]¨&£]¢o¬!±o¼�¬!§B±o©o¤¦¥ ¯>§B¹f¢G¨i¼"°²±$�æê�«G¨i±G¨&¯B¨&¬�°²£"°²¼�ÿ[¢o¨&¬!°½¨i©Þµ�¤B¬�§%¯D§B¹²¢G¨� ký&%�þN¾�Ï�«G¨¤¦±o¹²»�¶�¤¦±o©o°²£]°½¤¦±�¤¦±%£]«G¨�¤B¬!§B¶&¹½¨�°²¼d£]«o§D£�°½µk£]«G¨�¼]§B¥�¨'% °²¼Pÿt¢G¨&¬!°½¨i©%§D³¦§B°f±|´o°½£P¥�¢-¼_£¬]¨&£]¢o¬!±�£]«G¨"¼]§B¥�¨�¯>§B¹²¢o¨' �ý&% þN¾Ï�«G¨�¸-§B¼]°²¶�¼]°½³¦±o§D£]¢o¬]¨�¼]¶N«G¨i¥�¨�ê`¤B¬!·t¼�§B¼�µr¤¦¹f¹½¤gê�¼i¾�Ï�«G¨�¼]°½³¦±G¨&¬� �¹f°²¶�¨�®4¤¦¼]¼_¨i¼!¼_¨i¼

§ù¼_¨i¶�¬]¨&£~·B¨&»�£]«o§D£�§B¹²¹²¤gê�¼�«G¨&¬~£_¤ù°f±6¯B¨&¬]£��/¾ÞÏ�¤Þ¼]°½³¦±y§¥�¨i¼]¼]§D³B¨(% ´�¼!«G¨�ím±o©o¼ ký&%�þ�§B±o©£]«G¨i±*)�+,� � . ý& �ý&% þ_þN´|ê�«o°²¶N«°f¼�«G¨&¬�¼]°½³¦±-§D£]¢G¬]¨B¾� �µ�£_¨&¬�¬!¨i¶�¨i°½¯t°f±G³-%§B±o©.)¦´mË`¤B¸ù¯B¨&¬!°½í-¨i¼�£]«G¨�¼!°½³¦±o§D£]¢G¬]¨�¸[»�¶N«G¨i¶]·v°²±G³�£]«o§D£!�2ý&)Dþ�+/ �ý&% þN¾�Ï�«o§D£&àR¼�§B¹²¹£]«G¨&¬!¨"°²¼P£_¤�°½£&¾

Page 6: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

� ����������� �������

� ¤gê¼]¢G®o®4¤¦¼_¨2£]«o§D£/§B±�§B©G¯B¨&¬N¼]§D¬]»�£]«o§D£k©o¤[¨i¼k±G¤B£�«o§g¯B¨w �¹²°²¶�¨BàR¼:¼]¨i¶�¬]¨&£k·B¨&»�êd§B±[£]¼£_¤%µ�¤B¬]³B¨�§�¼!°½³¦±o§D£]¢G¬]¨B¾�Ëw¨i¶&§B¢o¼_¨�£]«G¨�¯>§B¹f¢G¨i¼' �ý&% þ�§D¬]¨�§B¼]¼]¢o¥�¨i©Þ£_¤�¸Ò¨~¬!§B±-©G¤¦¥§B±o©û¢o±o°½µ�¤B¬!¥�¹½»ù©o°²¼_£_¬N°½¸-¢G£_¨i©ù¤g¯B¨&¬#�w´/£]«G¨�§B©o¯B¨&¬!¼]§D¬]»(¶&§B±o±G¤B£�©G¤�£]«o°f¼"ê�°½£]«û±G¤¦±v­±G¨&³¦¹f°½³¦°½¸-¹½¨�®o¬]¤B¸m§D¸-°²¹²°½£@»�¢o±o¹²¨i¼]¼�°½£"¶&§B±áý�ê�°²£]«(±G¤¦±v­u±G¨&³¦¹²°²³¦°½¸-¹½¨�®o¬]¤B¸-§D¸m°²¹²°½£@»Gþ�°²±[¯B¨&¬]£�/´|§B±o©ù£]«o°²¼�°²¼�®o¬]¨i¶&°f¼_¨i¹½»%ê�«o§D£�£]«G¨~¤¦±G¨�­Uêd§i»v±G¨i¼]¼"§B¼!¼]¢o¥�®o£]°²¤¦±�¬!¢-¹½¨i¼�¤¦¢o£&¾�Ï�«t¢o¼&´¼]°²³¦±o§D£]¢G¬]¨i¼�§D¬]¨�¢o±Gµ�¤B¬]³B¨i§D¸-¹½¨�°²±�£]«o°f¼�¼_¨i±-¼_¨�°½µ2£]«o¨�§B¼]¼!¢o¥�®o£]°½¤¦±-¼�ý�¤¦±G¨�­Uêd§i»v±G¨i¼]¼�¤Bµ�ù§B±o©%¬N§B±o©G¤¦¥�±G¨i¼!¼d¤Bµ Òþd«G¤¦¹²©:¾;ä«o§D£`¤¦±o¨�êd§B±6£]¼i´v«o¤gêw¨&¯B¨&¬i´o°²¼w§�¼_£_¬!¤¦±G³B¨&¬P±G¤B£]°½¤¦±�¤Bµ:¢o±Gµ�¤B¬]³B¨i§D¸-°²¹²°²£u»B¾ � §B¥�¨i¹½»B´

êw¨�¼]¢G®-®Ò¤¦¼]¨�£]«o§D£�£]«G¨�§B©G¯B¨&¬!¼]§D¬!»�°²¼�§B¹²¹½¤Lê`¨i©�£_¤�§B¼_·%µ�¤B¬�§�¸4¤¦¢o±o©G¨i©%±t¢o¥�¸Ò¨&¬�ý8±G¤¥�¤B¬!¨P£]«o§B±����Nþ/¤Bµ|¼]°½³¦±o§D£]¢G¬!¨i¼2¤BµÒ¥�¨i¼]¼]§D³B¨i¼`¤Bµ4°²£]¼�¶!«G¤¦°f¶�¨B¾2ç@£�°²¼s¶�¤¦±o¼]°²©G¨&¬!¨i©�£_¤"¸4¨�§¼]¢-¶&¶�¨i¼]¼_µ8¢o¹m§B©o¯B¨&¬!¼]§D¬]»~ë §B±ºúa¨�åG°²¼_£_¨i±[£]°²§B¹Òµr¤B¬!³B¨&¬d¢-±o©G¨&¬d¶!«G¤¦¼_¨i±G­u¥�¨i¼]¼]§D³B¨"§D£_£]§B¶!·tüëò°½µ2°½£�®o¬]¤v©o¢o¶�¨i¼�§�¯D§B¹²°²©�¼!°½³¦±o§D£]¢G¬]¨�¤Bµ�¼_¤¦¥�¨~¥�¨i¼]¼]§D³B¨�¤Bµ�°½£]¼�¶N«G¤¦°²¶�¨�¤B£]«G¨&¬�£]«o§B±£]«G¨�¤¦±o¨i¼�ê�«G¤¦¼]¨"¼]°½³¦±o§D£]¢G¬!¨i¼P°½£�«o§B¼P¸4¨&¨i±%³¦°½¯B¨i±:¾ �¼R>�¨i±G¨&î&¨i¼k§B±-©"ç|§D¬]³¦¢G¨i©"°f±C�lÐiÑ��U´Dµr¬!¤¦¥ §�¶�¤¦¥�¥�¤¦±v­u¼_¨i±o¼_¨`¼_£]§B±o©G®4¤¦°²±[£:°½£:°²¼:¼]£]°²¹²¹

¶&¹½¨i§D¬�£]«o§D£�¼!°½³¦±o§D£]¢G¬]¨i¼�§D¬]¨�¢-±Gµr¤B¬!³B¨i§D¸-¹½¨"°²±�£]«o°²¼�¼_£_¬!¤¦±G³�¼_¨i±-¼_¨"®o¬]¤L¯t°f©G¨i©%£]«o§D£�£]«G¨¤¦±G¨�­Uêd§i»v±G¨i¼]¼�§B¼]¼]¢o¥�®-£]°½¤¦±ùµr¤B¬�� §B±o©Þ£]«G¨�¬N§B±o©G¤¦¥�±G¨i¼!¼�§B¼!¼]¢o¥�®o£]°²¤¦±µ�¤B¬� («o¤¦¹²©|¾Ï�«o¨�¬]¨i§B¼_¤¦±(°f¼�£]«o§D£�£]«G¨�µ�¬]¨&¨i©G¤¦¥¡£]«o§D£�£]«G¨�§B©G¯B¨&¬!¼]§D¬!»�«o§B¼�£_¤%ÿ[¢G¨&¬!»�¼]°½³¦±o§D£]¢o¬]¨i¼¤Bµ�¥�¨i¼]¼]§D³B¨i¼d¤Bµ�°½£]¼d¶N«G¤¦°²¶�¨�§B±o©�£]«G¨i±�µr¤B¬]³B¨�§B±[»�¥�¨i¼]¼!§D³B¨�¤Bµ�°½£]¼w¶!«G¤¦°²¶�¨�°²¼d°²¹f¹²¢o¼_¤B¬]»B´¸4¨i¶&§B¢o¼_¨`°½£�«o§B¼/±G¤�¶�¤¦±[£_¬]¤¦¹[¤g¯B¨&¬+£]«G¨w«o§B¼]«�¯D§B¹²¢G¨i¼�¤BµG£]«G¤¦¼_¨`¥�¨i¼]¼]§D³B¨i¼&¾2Ï�«G¨`¶!«G¤¦¼_¨i±G­¥�¨i¼!¼]§D³B¨�ÿt¢G¨&¬!°²¨i¼�¬]¨i¼!¢o¹½£�°²± §¼]¨&£�¤Bµ � � . ­U¯D§B¹²¢G¨i¼�¤Bµ�¬!§B±o©o¤¦¥ ¨i¹½¨i¥�¨i±6£]¼ ���¤Bµ��w´§B±o©�£]«G¨i±�°½£�°f¼�¬]¨iÿt¢o°½¬]¨i©~£_¤�í-±o©#� � . ¤Bµ|¼_¤¦¥�¨�¢o±G¬]¨i¹²§D£_¨i©�¬!§B±o©G¤¦¥À¨i¹½¨i¥�¨i±[£ ���.�w¾Ï�«-°²¼�°²¼�±o¤�¨i§B¼]°½¨&¬�£]«o§B±ûím±o©o°²±G³(� � . ý��Gþ�ê�°½£]«G¤¦¢o£"·t±o¤gê�°²±o³"� � . ¤BµP£]«G¤¦¼_¨�¤B£]«o¨&¬¬!§B±-©G¤¦¥ ¯D§B¹²¢G¨i¼&¾2Ïk¤�¼_¨&¨�£]«o°²¼&´[¼]°²¥�®-¹²»�±G¤B£_¨�£]«o§D£`¸4¤B£]«�¼_¨&£]¼ �� ��§B±o©� )����¦´[ê�«G¨&¬]¨)�� + � � . ý& ��uþN´2§D¬]¨�©o°f¼_£_¬!°½¸-¢o£_¨i©(¢o±o°½µ�¤B¬!¥�¹½»ù§D£�¬!§B±-©G¤¦¥ °²± �w¾�Ï�«G¨�¼_¨&£�¤BµP®m§B°½¬!¼ý& �� � )��Uþ"¶�¤¦¢o¹f©û¨iÿt¢o§B¹²¹½»(êw¨i¹²¹w«o§i¯B¨%¸4¨&¨i± ³B¨i±G¨&¬!§D£_¨i©â¼]£]§D¬]£]°²±G³ê�°½£]« £]«G¨%¼_¨&£� )�� �¦´£]«o§D£�°²¼i´4§B¼�ý&�2ý&) � þ�� ) � þN¾�Ï�«o¨�§B©G¯B¨&¬N¼]§D¬]»¶�¤¦¢-¹²©Þ«o§i¯B¨�©G¤¦±o¨�£]«o°f¼�ê�°½£]«G¤¦¢G£�¥�§D·v°²±G³§B±[»�ÿt¢G¨&¬!°²¨i¼&¾�Ï�«t¢o¼&´G£]«G¨"¶N«G¤¦¼_¨i±v­u¥�¨i¼!¼]§D³B¨�§D£_£]§B¶!·%³¦°½¯B¨i¼�°²£�±G¤B£]«o°²±G³�¢o¼]¨&µ�¢o¹U¾õ�¤gêw¨&¯B¨&¬i´�¥�§B±[»�®4¨&¤B®-¹½¨�§D¬]¨�±o¤B£�¼]§D£]°f¼_ío¨i©ê�°½£]«ù§B±ù°f±6£]¢o°²£]°½¯B¨�§D¬]³¦¢o¥�¨i±6£�¼]¢o¶N«

§B¼d£]«o°f¼s¤¦±G¨�0G£]«o¨&»�êd§B±6£�§�¬]¨i©o¢-¶�£]°½¤¦±o°²¼_£w¼_¨i¶&¢G¬!°²£u»�§D¬!³¦¢o¥�¨i±[£&¾�Ï�«o§D£P°²¼&´v£]«G¨&»�êd§B±[££_¤ ·t±G¤Lê £]«-§D£�°½µ�§B±á¨�åv°f¼_£_¨i±6£]°f§B¹�µ�¤B¬]³B¨&¬%¢o±o©G¨&¬�¶N«G¤¦¼_¨i±v­u¥�¨i¼]¼]§D³B¨(§D£_£]§B¶]·á¨�åv°²¼]£]¼&´£]«G¨i±�£]«o§D£�§B©o¯B¨&¬!¼]§D¬]»�¶&§B±¸4¨�¢o¼_¨i©§B¼�§�¼]¢G¸o¬]¤¦¢o£]°²±G¨�£_¤�¶�¤¦±-¼_£_¬!¢o¶�£�§B±�§B¹½³B¤B¬!°²£]«o¥£]«o§D£�¯t°½¤¦¹f§D£_¨i¼"£]«G¨�¢-±o©G¨&¬!¹½»v°²±G³�§B¼]¼]¢-¥�®o£]°½¤¦±Þ£]«o§D£ �°²¼"§%¤¦±o¨�­Uêw§g»�®4¨&¬!¥�¢o£]§D£]°½¤¦±|¾Ï�«-°²¼wêw§B¼�®o¬]¤g¯B¨i©�¸[»�Ëw¨i¹²¹²§D¬]¨"§B±-©:9�¤B³¦§gêw§g»�°²±1� Ó3�U¾õ�¨&¬]¨�°²¼`«o¤gêä£]«G¨�¬]¨i©o¢o¶�£]°½¤¦±�°²± � Ó3�Òêw¤B¬]·v¼&¾`év¢G®-®Ò¤¦¼]¨�£]«o§D£wê`¨�§D¬]¨�³¦°½¯B¨i±� �¹f°²¶�¨BàR¼

®-¢o¸-¹²°²¶~·B¨&»û§B±-© §B±Â§D¬]¸-°²£_¬!§D¬]»*��� �w´2§B±o©yê`¨�§D¬]¨�§B¼_·B¨i©y£_¤ùím±o©��º¼]¢o¶N«y£]«o§D£�#+ �2ý��|þN¾T;(¨�¥�¢o¼_£�¼]«G¤gê�«G¤gê ê`¨�¶�¤¦¢o¹²©%í-±-©��Âý�ê�°²£]«�«o°½³¦«�®o¬!¤B¸-§D¸-°²¹²°²£u»oþs°²µkêw¨«o§B©%§�µr¤B¬]³B¨&¬�£]«o§D£�¶&§B±�¥�¤¦¢o±6£�¶!«G¤¦¼_¨i±G­u¥�¨i¼]¼]§D³B¨�§D£_£]§B¶]·v¼&¾ét¤y¼]¢G®o®4¤¦¼_¨%£]«o§D£�êw¨«o§g¯B¨ù¼]¢-¶!«æ§�µ�¤B¬]³B¨&¬i¾ ;(¨ù³¦°½¯B¨ù°²£� �¹f°²¶�¨BàR¼�®-¢o¸-¹²°²¶�·B¨&»

§B±o©�êw§B°²£�µ�¤B¬�°½£]¼�ÿ[¢G¨&¬N°½¨i¼&¾dç@£�§B¼_·v¼�µ�¤B¬�£]«o¨�«o§B¼]«�¯>§B¹f¢G¨i¼�¤Bµ�§D£�¥�¤¦¼_£�����¥�¨i¼]¼]§D³B¨i¼§B±o©�µr¤B¬�¼]°½³¦±o§D£]¢G¬!¨i¼P¤Bµ2§D£�¥�¤¦¼_£����P¤Bµ+£]«G¨i¼_¨�¥�¨i¼]¼]§D³B¨i¼i¾`ça±�§B¹²¹:¶&§B¼]¨i¼�¸-¢o£P¤¦±G¨B´-êw¨¬]¨i¼]®Ò¤¦±-©�£_¤%£]«G¨~«o§B¼]«Þÿt¢G¨&¬]»�µ�¤B¬�§�¥�¨i¼]¼]§D³B¨�%��s¸t»�¬!§B±o©G¤¦¥�¹½»�¼_¨i¹½¨i¶�£]°²±o³������ �§B±o©º¼]¨&£_£]°²±G³Þ£]«G¨�«o§B¼]«Â¯D§B¹²¢G¨( ���¨iÿt¢o§B¹d£_¤ �2ý����8þN¾ G¤B¬�ð]¢o¼_£~¤¦±G¨%¯D§B¹²¢G¨(%�����êw¨¬]¨i¼]®Ò¤¦±-©�£_¤�£]«G¨"«o§B¼]«�ÿ[¢G¨&¬!»�¸t»�¼]¨&£_£]°²±G³ ��� + �m¾<;(¨�¶!«G¤t¤¦¼_¨ ��!�§D£�¬!§B±o©G¤¦¥ §B±o©«G¤B®4¨�£]«-§D£ %��"��«o§D®o®4¨i±o¼s£_¤�¸4¨�£]«G¨�¥�¨i¼]¼]§D³B¨�ê�«G¤¦¼_¨�¼]°½³¦±o§D£]¢o¬]¨�ê�°f¹²¹G¸4¨�µ�¤B¬]³B¨i©�¸[»¤¦¢G¬�¨�åv°f¼_£_¨i±6£]°f§B¹:µ�¤B¬]³B¨&¬i¾� �±6»%£]°f¥�¨�£]«G¨�§B©G¯B¨&¬!¼]§D¬!»�¥�§D·B¨i¼�§�¼]°½³¦±-§D£]¢G¬]¨�ÿt¢G¨&¬]»%µ�¤B¬

Page 7: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

��������)���:�A��� � � ��������G� �F��� ����� ��F�������F� �� ��� �

§�¥�¨i¼]¼]§D³B¨�%��sê�°½£]«����+ � ! ê`¨~¼_¨i±o© � �s§B¼�°½£]¼�¼]°½³¦±o§D£]¢G¬!¨B¾ � ¤B£]°²¶�¨�£]«o§D£�£]«o°²¼�ê�°²¹²¹¼]§D£]°f¼_µr»�£]«G¨"µ�¤B¬]³B¨&¬i´-¼!°²±o¶�¨'�2ý�� � þ + � ¾2çJµ/£]«G¨"µ�¤B¬]³B¨&¬�¨i±o©-¼P¢G®�¤¦¢G£_®-¢o£_£]°²±G³�§�¯D§B¹²°²©¼]°²³¦±o§D£]¢G¬]¨ )��"��µ�¤B¬ %��"�>´4£]«o§D£�¥�¨i§B±o¼�£]«o§D£�ê`¨~«o§g¯B¨�£]«o¨~¼]¤¦¹²¢G£]°½¤¦± �*+ )��"��£_¤�¤¦¢G¬¤B¬!°²³¦°²±o§B¹Ò¨iÿ[¢-§D£]°½¤¦± �#+ �2ý��4þN¾çJµ2ê`¨�³¦¢G¨i¼]¼_¨i©ê�¬]¤¦±G³�§B±o© %��"�"°²¼�±G¤B£�£]«G¨�¥�¨i¼]¼]§D³B¨�£]«o§D£�£]«G¨�µ�¤B¬]³B¨&¬�¨i±o©o¼�¢G®

¼]°²³¦±o°²±G³G´[£]«G¨i±�ê`¨�êw¤¦±|àp£P¸4¨�§D¸-¹½¨�£_¤�³¦°½¯B¨"§�¯>§B¹f°²©�¬]¨i¼_®4¤¦±o¼_¨�£_¤�§~¼]°½³¦±o§D£]¢G¬!¨�ÿt¢G¨&¬]»µ�¤B¬�% ��� °½µw£]«G¨�µ�¤B¬]³B¨&¬�¬!¨iÿ[¢G¨i¼]£]¼�£]«o§D£�¼]°²³¦±o§D£]¢G¬]¨B¾�Ï�«G¨�µr¤B¬!³B¨&¬"¨i°½£]«G¨&¬"ê�°²¹²¹/µ�§B°f¹+¤B¬ê�°f¹²¹t³¦°½¯B¨�¢o¼`¢o¼_¨i¹½¨i¼!¼�¤¦¢G£_®-¢o£&´[§B±o©�ê`¨�«o§i¯B¨�£_¤�¼_£]§D¬!£s¤g¯B¨&¬d§D³¦§B°²±|¾ ;(¨�§B¹²¼_¤�«o§i¯B¨�£_¤¼_£]§D¬!£/¤L¯B¨&¬s§D³¦§B°²±~°½µo£]«o¨wµ�¤B¬]³B¨&¬�¼]¢-¶&¶�¨&¨i©o¼2°²±�µr¤B¬]³¦°f±G³�§�¼]°²³¦±o§D£]¢G¬]¨wµr¤B¬2§�¥�¨i¼]¼!§D³B¨ %��ê�°²£]« ���+ � ! ´:¼]°f±o¶�¨�£]«-§D£sð]¢o¼_£�³¦°½¯B¨i¼"¢-¼�°f±Gµr¤B¬N¥�§D£]°½¤¦±ê`¨�§B¹½¬]¨i§B©o»�·t±o¤gê"´:±o§B¥�¨i¹½»B´��� + � � . ý& ��uþN¾M9�¨i¶&§B¹²¹/£]«o§D£ ����°²¼�£]«G¨�¸4¤¦¢o±o©�¤¦±Þ£]«G¨�±t¢o¥�¸4¨&¬�¤Bµsÿt¢G¨&¬!°²¨i¼�¤Bµs£]«G¨«o§B¼!«�µ8¢o±o¶�£]°½¤¦±|¾�ça±û§B±[»�°½£_¨&¬!§D£]°½¤¦±û¤BµP£]«G¨�®-¬]¤t¶�¨i©-¢G¬]¨�êw¨�«o§g¯B¨%§�®o¬]¤B¸m§D¸-°²¹²°½£@»�¤Bµ¼]¢-¶&¶�¨i¼]¼�§D£�¹½¨i§B¼_£%Ð�� ���G¾ ç@µ�ê`¨%³B¤(£]«G¬!¤¦¢G³¦«��°½£_¨&¬!§D£]°½¤¦±o¼i´�£]«G¨�®o¬]¤B¸-§D¸m°²¹²°½£@»(£]«o§D£¨&¯B¨&¬]»%¼]°f±G³¦¹½¨�£]°²¥�¨�êw¨�µ�§B°f¹4£_¤�¼_¤¦¹½¯B¨��#+ �2ý��|þ`µr¤B¬��°²¼P§D£�¥�¤¦¼_£�ýaÐ�âÐ�� ���6þ�6¾T o¤B¬¹²§D¬!³B¨���ë ±o§B¥�¨i¹½»B´[µ�¤B¬ ��³B¬]¨i§D£_¨&¬d£]«o§B±���ý ���¦þ/ë £]«o°²¼`§D®o®o¬]¤¦§B¶N«G¨i¼wî&¨&¬]¤10o¼_¤�ê�°½£]««o°²³¦«�®o¬]¤B¸-§D¸-°f¹²°½£u»�ê`¨"¼]¢-¶&¶�¨&¨i©|¾`Ï�«-°²¼d¶�¤¦¥�®-¹½¨&£_¨i¼�£]«G¨"§D¬]³¦¢o¥�¨i±[£&¾Ï�«G¨~¤B¬!°²³¦°²±o§B¹k®-§D®4¨&¬0� Ó��s©o¨i§B¹½£�ê�°½£]« 9�év �­[ +ô�õ�´|ê�«G¨&¬!¨�£]«o¨�¤¦±o¨�­Uêw§g»®4¨&¬!¥�¢v­

£]§D£]°½¤¦± �û°²¼�³¦°²¯B¨i±¸t» �2ý��|þ + ���s¥�¤t©�� ¾�çJ±ù£]«o§D£�¶&§B¼_¨�ßw¤B¬]¤¦± �pÎ��2¼]«G¤Lê`¨i©Þ«G¤Lê£_¤ù¬]¨i©o¢o¶�¨�£]«G¨�±[¢-¥�¸4¨&¬�¤Bµ�°½£_¨&¬!§D£]°½¤¦±o¼�±G¨&¨i©G¨i©yµ�¬]¤¦¥���ý ���¦þ�£_¤���ý ���NþN´2ê�«G¨&¬]¨ � �°²¼�£]«G¨�¸Ò¤¦¢-±o©�¤¦±£]«G¨~±[¢o¥�¸4¨&¬�¤Bµ`¼]°½³¦±o§D£]¢G¬!¨�ÿt¢G¨&¬!°½¨i¼�°²±�£]«o¨�¶N«G¤¦¼_¨i±v­u¥�¨i¼!¼]§D³B¨�§D£a­£]§B¶!·m¾�õ�¨&¬]¨�°²¼�«o°f¼�°²©G¨i§v¾�év¢o®o®4¤¦¼_¨�£]«o§D£�ê�«G¨i±%£]«G¨�§B©G¯B¨&¬!¼]§D¬]»�¥�§D·B¨i¼�°²£]¼ ����«-§B¼]«ÿt¢G¨&¬!°½¨i¼i´6êw¨�¶!«o¤[¤¦¼_¨�§�³B¬]¨i§D£_¨&¬P±[¢-¥�¸4¨&¬s¤Bµ�¯>§B¹²¢o¨i¼ ��|ë ±G¤B£�ð]¢o¼_£�£]«G¨�¼]°²±o³¦¹½¨�¯D§B¹²¢G¨ �����ë °²±(§%êd§i»Þ£]«o§D£�ê�°²¹²¹+¹²§D£_¨&¬"¨i±o§D¸m¹½¨�¢o¼�£_¤�ím±o©Þ£]«G¨��&­U£]«�¬]¤t¤B£"¤Bµ ��¥�¤t©��°½µ %��2£]¢G¬!±o¼P¤¦¢o£�£_¤�¸4¨"£]«o¨�µ�¤B¬]³B¨i©¥�¨i¼]¼]§D³B¨B¾ � §B¥�¨i¹½»B´Òµr¤B¬�¼_¤¦¥�¨�¬N§B±o©G¤¦¥�¹½»�¶!«o¤D­¼_¨i±û¼]¢G¸-¼_¨&£�� !�¶�¤¦±o¼!°²¼_£]°²±G³�¤BµM� �������F�d°²±o©o°f¶�¨i¼�êw¨�¶N«G¤[¤¦¼]¨�§�¶�¤B¬]¬]¨i¼]®Ò¤¦±-©o°²±G³�¼_¨&£"¤Bµ¬!§B±-©G¤¦¥ ¯D§B¹²¢G¨i¼����J´Ò§B±-©�£]«G¨i±ê`¨�¬]¨i¼_®4¤¦±o©�£_¤�§�«o§B¼]«ÿ[¢G¨&¬!»%µr¤B¬�%��sê�°½£]« ���� !¸t»�¼_¨&£_£]°²±o³ � +�� �� �m¾_ o¤B¬ � ��!� !L´:§B¼�¸4¨&µ�¤B¬]¨�ê`¨�¶!«o¤[¤¦¼_¨ � � §D£�¬!§B±-©G¤¦¥¡§B±o©Þ¼_¨&£ ���+ ���� ¥�¤t©�� ¾ � ¤B£_¨�£]«o§D£�°²µ2£]«G¨�§B©G¯B¨&¬N¼]§D¬]»�¨i±o©-¼�¢G®µr¤B¬]³¦°f±G³�§�¼]°½³¦±o§D£]¢o¬]¨�µ�¤B¬¤¦±G¨�¤Bµ�£]«o¨ � ���"������¥�¨i¼]¼]§D³B¨i¼#%���ê�°²£]«�� �#� ! ´2£]«G¨i±yêw¨�±o¨&¨i© ¤¦±-¹½»û©o°½¯v°²©G¨�£]«G¨¼]°²³¦±o§D£]¢G¬]¨ )��k¸t»$���/£_¤�³B¨&£�£]«G¨���­U£]«%¬]¤t¤B£�¤Bµ��~¥�¤t©�� ¾;ä«o§D£`¼]«o¤¦¢o¹²©�ê`¨�¶!«G¤t¤¦¼_¨%��£_¤�¸4¨ � ;(¨�«o§i¯B¨�£_¤�¸4¨�¶&§D¬]¨&µ�¢-¹o±G¤B£�£_¤�¥�§D·B¨�°½£�£_¤t¤

¼]¥�§B¹²¹X¾ �`§B¶!«£]°²¥�¨"£]«G¨�§B©G¯B¨&¬!¼]§D¬]»�¥�§D·B¨i¼�§�¼!°½³¦±o§D£]¢G¬]¨�ÿ[¢G¨&¬!»�µ�¤B¬�§�¥�¨i¼]¼]§D³B¨ % � ´£]«G¨&¬!¨w°²¼/§D®o®o¬!¤iåG°²¥�§D£_¨i¹½»"§�Ð�����¶!«-§B±o¶�¨d£]«o§D£ � ��� ! ´B°²±�ê�«o°²¶N«�¶&§B¼_¨ ��Ò°²¼k¤¦±G¨`¤Bµ-£]«G¨� ���������s«o§B¼]«Þ¯D§B¹²¢G¨i¼�µ�¤B¬�ê�«o°²¶N«êw¨�©G¤�±G¤B£�·v±G¤Lê §B±&��­U£]«(¬]¤t¤B£�¥�¤t©'�û¾�ça±Þ£]«o§D£¶&§B¼_¨B´4êw¨�¶&§B±o±o¤B£�§B±o¼]ê`¨&¬�£]«G¨~ÿ[¢G¨&¬!»B´Ò§B±o©�ê`¨~¥�¢o¼_£�¬!¨i¼_£]§D¬]£�£]«G¨�§B©o¯B¨&¬!¼]§D¬]»B¾�Ï�«G¨¶N«o§B±o¶�¨�£]«o§D£dê`¨�ê�°²¹f¹-±G¤B£d«o§i¯B¨�£_¤�©G¤�£]«o°²¼`µr¤B¬P§B±[»�¤Bµ:£]«o¨ ���d¼!°½³¦±o§D£]¢G¬]¨�ÿ[¢o¨&¬!°½¨i¼w°²¼¬]¤¦¢o³¦«o¹½»(ýaÐ%� .

( þ�)+*%,-� �.)/*10�(o¾PÏ�«o°²¼�¥�¨i§B±o¼�£]«o§D£�êw¨�¼]«o¤¦¢o¹²©�±G¤B£�¶!«G¤t¤¦¼_¨��ù¥�¢o¶N«¼]¥�§B¹²¹½¨&¬"£]«o§B± ���&¾ � ¤B£_¨�£]«o§D£�£]«G¨�®o¬]¤B¸-§D¸m°²¹²°½£@»�¤Bµ�¼]¢-¶&¶�¨i¼]¼�¤Bµ�§¼]°f±G³¦¹½¨�°½£_¨&¬N§D£]°½¤¦±°²¼ .( ýaÐ��

.( þ�)/* 0k°½µ2ê`¨�¶N«G¤[¤¦¼]¨���, � ��´|£]«G¨i±ù¨i§B¶!«�°²£_¨&¬!§D£]°½¤¦±Þ«o§B¼�§�®o¬]¤B¸-§D¸-°f¹²°½£u»�¤Bµ¼]¢-¶&¶�¨i¼]¼P¬]¤¦¢G³¦«-¹½»�¨iÿt¢o§B¹|£_¤�Ð�� � �i¾

G¬]¤¦¥ §®o¬!§B¶�£]°²¶&§B¹`¼_£]§B±o©G®4¤¦°²±[£"°½£�¥�§D·B¨i¼�§�ê`¤B¬!¹f©�¤Bµ�©o°lè4¨&¬]¨i±o¶�¨�ê�«G¨&£]«G¨&¬�£]«G¨µ�¤B¬]³B¨&¬�§B¹½³B¤B¬!°½£]«o¥ ¥�¢-¼_£�¸4¨"¬!¨&®Ò¨i§D£_¨i© ����£]°²¥�¨i¼�¤B¬ � � £]°²¥�¨i¼&¾�Ëw¨i¶&§B¢o¼_¨�¼]°½³¦±-§D£]¢G¬]¨ÿt¢G¨&¬!°½¨i¼+¬!¨iÿ[¢o°²¬]¨�§�¬]¨i¼_®4¤¦±o¼]¨wµ�¬]¤¦¥À£]«G¨P£]§D¬]³B¨&£w¤BµÒ£]«o¨�§D£_£]§B¶]·Ò´G¤¦±G¨�¶&§B±�¬!¨i§B¹²°²¼_£]°²¶&§B¹f¹½»¼]¢o®o®4¤¦¼_¨s£]«o§D£2£]«o¨i°½¬2±[¢o¥�¸4¨&¬2°²¼+¼_¤¦¥�¨&ê�«o§D£�¹f°²¥�°½£_¨i©�ë ¼]§i»B´ ���2, � � ! ¾/ça±�¶�¤¦±6£_¬!§B¼]£&´

Page 8: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

� ����������� �������

§"«-§B¼]«�ÿt¢G¨&¬]»�¶�¤B¬]¬]¨i¼]®Ò¤¦±-©o¼�°²±�®-¬!§B¶�£]°²¶�¨�£_¤�¨&¯>§B¹f¢o§D£]°²±G³"§�®-¢G¸-¹²°f¶&¹½»�§i¯D§B°²¹²§D¸m¹½¨�µ8¢o±o¶\­£]°½¤¦±:¾+Ï�«G¨&¬]¨�°²¼`±o¤�ð]¢o¼_£]°½ím¶&§D£]°½¤¦±�µ�¤B¬P§B¼]¼]¢o¥�°²±G³"£]«o§D£P§B±�§D£_£]§B¶]·B¨&¬gàR¼�ÿt¢G¨&¬!°½¨i¼`£_¤~£]«G¨«o§B¼!«�¤B¬!§B¶&¹½¨"§D¬]¨�¸4¤¦¢o±o©o¨i©�¸t»�§B±6»t£]«o°²±G³�¼]¥�§B¹²¹½¨&¬P£]«o§B±�£]«G¨�¬N¢o±o±o°²±o³�£]°²¥�¨B¾`Ï�¤�¸4¨¼]§Dµ�¨~¤¦±G¨�¼]«G¤¦¢o¹f©�£]§D·B¨���� , � � ! ¾"Ï�«t¢o¼&´4£]«G¨�Ëw¨i¹²¹²§D¬]¨�­[9�¤B³¦§iêd§i»Þ¬]¨i¼]¢o¹²£�µ�¤B¬�9�év �­ +ô�õ °²¥�®m¹²°½¨i¼�£]«o§D£�ê`¨�§D¬]¨�³¦¢o§D¬!§B±[£_¨&¨i©ÂÎDɸ-°½£]¼"¤Bµ�¼_¨i¶&¢G¬!°²£u»(¤¦±o¹½»(°½µdêw¨�¶N«G¤[¤¦¼]¨¤¦¢G¬�®-§D¬!§B¥�¨&£_¨&¬!¼�¼_¤�£]«-§D£�£]«G¨L9�év  µ�¢-±o¶�£]°½¤¦±"�(¶&§B±-±G¤B£�¸4¨"°²±[¯B¨&¬]£_¨i©�°f±%£]°²¥�¨�¹²¨i¼]¼£]«o§B± � . � ! ¾ . ±~£]«G¨P¤B£]«G¨&¬`«-§B±o©|´[ßw¤B¬]¤¦±:àR¼2¬]¨i¼]¢o¹²£+°f¥�®-¹²°½¨i¼k£]«o§D£�êw¨�§D¬]¨P³¦¢-§D¬!§B±6£_¨&¨i©£]«o§D£�¹½¨&¯B¨i¹/¤Bµs¼_¨i¶&¢o¬!°½£u»�®o¬]¤g¯v°²©G¨i©�£]«o§D£�°½£�°²¼�±o¤B£�®4¤¦¼]¼]°²¸-¹½¨"°²±£]°²¥�¨~¹½¨i¼]¼�£]«o§B± � . ! !£_¤ù°²±6¯B¨&¬!£�£]«G¨ 9�év  µ8¢o±o¶�£]°½¤¦±:¾ûý . µ�¶�¤¦¢G¬!¼_¨B´2°½µdêw¨�©o¤¦±|àp£�°²±-¼]°²¼_£�¤¦± ¬]¨i©o¢o¶�£]°²¤¦±o°²¼_£§D¬]³¦¢-¥�¨i±6£]¼~§B±o©yí-±-©û£]«G¨%¶�¤¦¥�¥�¤¦±v­u¼_¨i±o¼_¨%§D¬]³¦¢-¥�¨i±6£�¶�¤¦±[¯t°f±o¶&°²±G³G´2£]«G¨i±yêw¨%¶&§B±¸4¨�¶�¤¦±oí-©G¨i±[£�£]«o§D£0 +ô�õ «o§B¼�ÎDÉù¸-°½£]¼�¤Bµ�¼_¨i¶&¢G¬N°½£u»�®-¬]¤g¯v°²©G¨i© £]«o§D£��â¶&§B±o±G¤B£~¸4¨°²±[¯B¨&¬]£_¨i©�°f±�£]°²¥�¨"¹½¨i¼]¼�£]«o§B± � � ! ¾}þ;ä«G¨i± � ��°f¼�¯B¨&¬]»�¼!¥�§B¹²¹X´Òßd¤B¬]¤¦±�³¦°²¯B¨i¼�¢o¼�§�£]°²³¦«6£�¬]¨i©o¢o¶�£]°²¤¦± 0m°²±�¤B£]«G¨&¬�ê`¤B¬N©o¼&´

«G¨�¼]«G¤Lê�¼�£]«o§D£�°²± £]«o§D£�¶&§B¼]¨%ê`¨�³B¨&£�ÎDÉù¸-°½£]¼�¤Bµ�¼_¨i¶&¢G¬N°½£u»�µ�¤B¬09�év �­[ +ô�õ °½µPêw¨¶N«G¤[¤¦¼]¨�®-§D¬N§B¥�¨&£_¨&¬!¼~¼_¤ù£]«o§D£ �&­U£]«y¬]¤[¤B£]¼~¥�¤v© � ¶&§B±o±o¤B£�¸4¨�µ�¤¦¢o±o© °²± £]°²¥�¨�¹²¨i¼]¼£]«o§B± � � ! ¾/ça±�£]«G¨�¼_®4¨i¶&°²§B¹G¶&§B¼_¨�¤Bµ|§�®-§B¼!¼]°½¯B¨�§D£_£]§B¶]·�ë £]«o§D£s°f¼&´ ����+ É�ëìßw¤B¬!¤¦±|àR¼§D¬]³¦¢-¥�¨i±6£�°²¼"®m§D¬]£]°²¶&¢o¹²§D¬N¹½»ù¼!°²¥�®-¹½¨B¾X;(¨�¬]¨i¼_®4¤¦±o©�£_¤ù§B¹²¹s¤Bµ�£]«G¨�§D£_£]§B¶]·B¨&¬iàR¼�«-§B¼]«ÿt¢G¨&¬!°½¨i¼�¸t»�¶!«G¤t¤¦¼]°²±o³ ���`§D£�¬!§B±o©o¤¦¥ø§B±-©ù¼]¨&£_£]°²±G³ ���+ � �� ��¥�¤t©�� ¾ � ¤%¥�§D£_£_¨&¬ê�«-§D£`¥�¨i¼]¼!§D³B¨�% � °½£`µr¤B¬!³B¨i¼P§�¼]°²³¦±o§D£]¢G¬]¨�µr¤B¬i´têw¨�°²¥�¥�¨i©o°²§D£_¨i¹½»~³B¨&£d£]«G¨���­U£]«�¬]¤t¤B£¤Bµ ��¥�¤t©�� ¸t»�©o°²¯t°²©-°²±G³�£]«o¨�¼]°½³¦±o§D£]¢o¬]¨�¸[» ���J¾Ï�«G¨79�év  ®-¬]¤B¸-¹½¨i¥ ë £]«o§D£"°f¼&´|í-±o©o°f±G³ �&­U£]«(¬]¤t¤B£]¼�¥�¤t©'� ë «-§B¼"§%¼_®4¨i¶&°²§B¹

®o¬!¤B®Ò¨&¬!£u»(£]«o§D£~¥�§D·B¨i¼�ßw¤B¬]¤¦±|àR¼~§D¬]³¦¢-¥�¨i±6£�®4¤¦¼]¼]°½¸m¹½¨B��µ�¤B¬~íGåt¨i© ·B¨&»áý � � �Þþ�°½£�°²¼¼_¨i¹²µf­U¬]¨i©-¢o¶&°½¸-¹½¨B¾~Ï�«o°f¼�¥�¨i§B±o¼�£]«o§D£�§B±[»(°²±o¼_£]§B±-¶�¨��ù¶&§B±û¸Ò¨�úa¬N§B±o©G¤¦¥�°½î&¨i©-ü�ë °½£¶&§B±Â¸4¨�¼]«o°½µ�£_¨i©y£_¤�§¬N§B±o©G¤¦¥ °²±o¼_£]§B±-¶�¨ �"��� ¼!¢o¶!«y£]«o§D£�§Þ¼_¤¦¹²¢o£]°½¤¦±y£_¤(£]«G¨%±G¨&ê°²±-¼_£]§B±o¶�¨ùê�°²¹²¹�°²¥�¥�¨i©o°f§D£_¨i¹½»º¨i±o§D¸-¹½¨Þ¢o¼�£_¤â¼_¤¦¹½¯B¨Þ£]«G¨Þ¤B¬!°²³¦°²±o§B¹�°²±o¼_£]§B±o¶�¨B¾ Ï�«o°²¼®o¬!¤B®Ò¨&¬!£u»�°²¥�®m¹²°½¨i¼2£]«o§D£P§B¹²¹Ò°²±o¼]£]§B±o¶�¨i¼�ý�¨�åv¶�¨&®o£dµ�¤B¬P§�±G¨&³¦¹f°½³¦°½¸-¹½»�¼]¥�§B¹²¹-¼]¢o¸-¼_¨&£Nþs§D¬]¨¨iÿt¢o§B¹²¹½»�«o§D¬!©|¾Ï�«G¨¼_¨i¹½µr­U¬]¨i©o¢o¶&°½¸m°²¹²°½£@»ãý�µr¤B¬�íGåt¨i©â·B¨&»Gþ�¤Bµ 9�év �­[ /ô�õ °²¼�§�±o°²¶�¨%®o¬!¤B®Ò¨&¬!£u»Â£_¤

«o§g¯B¨�¸Ò¨i¶&§B¢-¼_¨%°½£�§B¹f¹½¤gê�¼~¢o¼�£_¤(¬!¢-¹½¨�¤¦¢G£~£]«G¨�®4¤¦¼]¼]°²¸-°²¹²°½£@»£]«-§D£�£]«o¨&¬]¨%°²¼~§ù¼!¥�§B¹²¹¸-¢o£w±G¤¦±G­u±G¨&³¦¹²°½³¦°½¸m¹½¨�®o¬!¤B®Ò¤B¬!£]°½¤¦±��P¤Bµ�£]«G¨"¼_¨&£ � ¤¦±�ê�«-°²¶!«�£]«G¨�£_¬!§D®|©G¤t¤B¬d¤¦±G¨�­Uêd§i»®4¨&¬!¥�¢G£]§D£]°½¤¦±*� � � � �ã°f¼�¬]¨i¹f§D£]°½¯B¨i¹½»�¨i§B¼_»�£_¤�°f±6¯B¨&¬]£�§B±o©ù£]«o§D£�£]«o°²¼�¼]¢G¸m¼_¨&£�¤Bµ�á°²¼�¨i§B¼]°²¹½»�°f©G¨i±6£]°²í-§D¸-¹½¨B¾�Ï�¤�¼_¨&¨~ê�«o§D£�£]«G¨~©o§B±G³B¨&¬�ê`¤¦¢-¹²©�¸4¨~°²±£]«G¨�¶&§B¼]¨�¤Bµ`§B±�y£]«o§D£�°²¼"±G¤B£�¼_¨i¹½µr­U¬]¨i©o¢o¶&°²¸-¹½¨B´:¹½¨&£�¢o¼"¼]¢G®-®Ò¤¦¼]¨�£]«o§D£�µ�¤B¬�§�®o¬]¤B®4¤B¬]£]°½¤¦±���+ � � � !¤Bµ`¯>§B¹²¢o¨i¼���� �ä°²£�°f¼�®Ò¤¦¼!¼]°½¸-¹½¨�£_¤�¶�¤¦¥�®-¢G£_¨�� � . ý��oþ�°²± � � ! ¼_£_¨&®-¼&¾=;(¨�§D¬]¨�§B¹f¼_¤¼]¢o®o®4¤¦¼]°²±G³%£]«o§D£�£]«G¨Âúa¨i§B¼_»vü¯D§B¹²¢G¨i¼�¤Bµ �û¶&§B±y¸4¨�ÿt¢o°²¶!·t¹²»ù¬!¨i¶�¤B³¦±o°½î&¨i©|¾ÞÏ�«G¨i±y§®-§B¼!¼]°½¯B¨�§D£_£]§B¶!·B¨&¬�¶&§B±�¬N¢o±�£]«G¬!¤¦¢G³¦«�¬]¤¦¢o³¦«o¹½» � � ! ¥�¨i¼]¼!§D³B¨i¼ %À´v§B±6»�¤¦±G¨�¤Bµ|ê�«o°f¶!«°½£|êw¤¦¢o¹²©"¸Ò¨�«-§D®o®[»�£_¤�µ�¤B¬]³B¨s§�¼]°½³¦±o§D£]¢G¬!¨2µr¤B¬i´D¢o±[£]°²¹B°½£:³B¨&£]¼/§�«o§B¼!«�¯>§B¹f¢G¨ ��+ �ý&% þ£]«o§D£�°²¼d¨i§B¼_»�£_¤�°²±[¯B¨&¬]£&¾�çJ£P£]«G¨i±%µ�¤B¬]³B¨i¼�§�¼]°½³¦±o§D£]¢G¬!¨"°²±�£]°²¥�¨ � � ! ¾Ï�«t¢o¼&´d°½£�°²¼�±G¤B£�¼]¢o¬]®o¬!°²¼!°²±G³ù£]«o§D£�£]«G¨�£uêw¤y¥�¤¦¼]£�°²¥�®4¤B¬]£]§B±[£C +ô�õ�­U£@»[®4¨Þ¼]°½³D­

±o§D£]¢o¬]¨�¼]¶N«G¨i¥�¨i¼�ë 9�éG �­[ +ô�õÀ§B±o©£]«G¨~Ëw¤¦±G¨i«v­[�:»v±o±v­JéG«o§B¶!«o§B¥¡¼]¶N«G¨i¥�¨:�RÔ �kë¸4¤B£]«�«-§i¯B¨~£]«G¨~¼_¨i¹½µr­U¬]¨i©o¢o¶&°½¸m°²¹²°½£@»�®o¬]¤B®4¨&¬]£@»%µr¤B¬�íGåv¨i©�·B¨&»B¾�çJ£�êw¤¦¢o¹²©�¸4¨�¬!°²¼_·t»%°²±v­©G¨&¨i©�£_¤�¢-¼_¨�§B± /ô�õ�¼]¶!«o¨i¥�¨"µ�¤B¬Pê�«o°²¶N«�£]«o¨�©-°�E�¶&¢o¹½£@»�¤Bµ+°²±6¯B¨&¬!£]°²±G³��¥�°½³¦«6£d¸4¨©G¬N§B¥�§D£]°²¶&§B¹²¹½»�©o°lè4¨&¬]¨i±[£wµ�¤B¬�©-°lèÒ¨&¬!¨i±6£d¯D§B¹²¢G¨i¼P¤Bµ���� �w¾

� ¤B£_¨�§B¹²¼]¤�£]«o§D£�°f±%£]«G¨�¼]°²£]¢o§D£]°½¤¦±�©G¨i¼!¶�¬!°½¸4¨i©%§D¸4¤g¯B¨~§�¢o¼_¨&¬� �¹²°f¶�¨"¥�°½³¦«[£�¨i§B¼]°²¹½»µ�¤[¤¦¹�«o¨&¬!¼_¨i¹½µ�°f±6£_¤º£]«o°f±G·t°f±G³û£]«o§D£¼]«G¨(«o§B¼�ÎDɸ-°²£]¼�¤Bµ�¼_¨i¶&¢o¬!°½£u»B¾ év¢o®o®4¤¦¼_¨B´�µ�¤B¬

Page 9: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

��������)���:�A��� � � ��������G� �F��� ����� ��F�������F� �� ��� �

°²±-¼_£]§B±o¶�¨B´Ò£]«o§D£�£]«o¨�§B¹½³B¤B¬N°½£]«o¥�� £_¤�°f±6¯B¨&¬]£��(£]§D·B¨i¼�§�¼]¥�§B¹f¹�§B¥�¤¦¢o±[£�¤Bµ�£]°²¥�¨��§B±o© £]«o§D£~¤¦±G¨�°½£_¨&¬!§D£]°½¤¦±y¤Bµ�� «o§B¼�®o¬]¤B¸-§D¸-°f¹²°½£u»��/ý��oþ�¤Bµ�í-±o©o°f±G³ � � . ý��GþN´�ê�«G¨&¬]¨µ�¤B¬�íoåt¨i©"�%£]«G¨�®o¬!¤B¸-§D¸-°²¹²°²£u»�°²¼�£]§D·B¨i±Þ¤L¯B¨&¬�£]«o¨�¼_¨&£]¼�¤Bµs¶�¤¦°²±�£_¤¦¼]¼_¨i¼�°²±�¨�åt¨i¶&¢G£]°f±G³��¾�çJµ��/ý��oþ , � � � ! µr¤B¬�§�®o¬]¤B®4¤B¬]£]°½¤¦± � + � � � ! ¤Bµ � �$�â§B±o©�/ý��oþ�°f¼�±G¨&³¦¹f°½³¦°½¸-¹½¨µ�¤B¬d¤B£]«G¨&¬ �m´v£]«G¨i±�£]«G¨�®o¬]¤B¸-§D¸m°²¹²°½£@»�¤Bµk¼]¢o¶&¶�¨i¼]¼d¤Bµ� £]§D·B¨i±%¤g¯B¨&¬P¸4¤B£]«�°²±o¼_£]§B±-¶�¨i¼ �§B±o©�¼_¨&£]¼`¤Bµ:¶�¤¦°²±�£_¤¦¼]¼]¨i¼`°²¼ � � � ! ¾sét¤� �¹²°²¶�¨�¥�°½³¦«6£s¸Ò¨i¹f°½¨&¯B¨�£]«o§D£w¼]«G¨�«-§B¼`ÎDÉ�¸-°½£]¼2¤Bµ¼_¨i¶&¢o¬!°½£u»B´6ê�«G¨&¬]¨i§B¼2°²±�¬]¨i§B¹f°½£u»�«G¨&¬�¼]°½³¦±o§D£]¢o¬]¨i¼+§D¬]¨P¨�åv°f¼_£_¨i±6£]°f§B¹²¹½»"µ�¤B¬]³B¨i§D¸-¹½¨B¾ G¬!¤¦¥ §¥�§D£]«o¨i¥�§D£]°²¶&§B¹/¼_£]§B±o©G®4¤¦°²±[£� �¹²°²¶�¨BàR¼�µ�§B¹²¹f§B¶�»�°²¼�¢-¼]°²±G³�¥�¢o¹½£]°²®-¹²°²¶&§D£]°½¤¦±�¬N§D£]«G¨&¬�£]«o§B±§B©o©-°½£]°½¤¦±�ë � � ! � � �

! + � � ! ¬N§D£]«G¨&¬`£]«-§B± � � ! � � � ! + � � . ë ê�«G¨i±�¼]«o¨�¨i¼_£]°²¥�§D£_¨i¼«G¨&¬�§B©G¯B¨&¬!¼!§D¬]»màR¼�¬N¢o±o±o°²±o³(£]°²¥�¨Þ°²±ã£]«o¨ù¼]¶�¨i±-§D¬!°½¤º©G¨i¼]¶�¬!°²¸Ò¨i©á§D¸4¤g¯B¨B¾ Ï�«G¨ù¸4¨i¼_£êd§i»â£_¤ ®o¬]¤B£_¨i¶�£� �¹f°²¶�¨�µ�¬]¤¦¥ ¼!¢o¶!«æ§û¶&§B¹²§B¥�°½£u»â°²¼�£_¤y¢-¼_¨�§ £_¬!§D®|©G¤[¤B¬�¤¦±G¨�­Uêd§i»®4¨&¬!¥�¢G£]§D£]°½¤¦±(�ù£]«o§D£�«o§B¼P£]«G¨"¼_¨i¹²µf­U¬]¨i©-¢o¶&°½¸-°²¹f°½£u»�®o¬!¤B®Ò¨&¬!£u»B¾

�����

ça±�£]«G¨�®-§D®4¨&¬L�pÍ �+£]«G¨�¥�§B°²±�¨�åG§B¥�®-¹½¨�£]«o§D£�Ëd¹²§B±-¶!«G¨&£�§B±o© �/¤¦°²±[£]¶!«o¨&¯>§B¹+¢o¼_¨�£_¤°²¹f¹²¢o¼_£_¬!§D£_¨�£]«o¨i°½¬�§D®-®o¬]¤¦§B¶!«y£_¤Þ§B¢G£_¤¦¥�§D£_¨i©º¼_¨i¶&¢o¬!°½£u»û®o¬]¤t¤Bµ�¼�°²¼�£]«o¨�³B¨i±G¨&¬N§B¹O o¢-¹²¹l­ô�¤¦¥�§B°²±ùõ�§B¼]«Þ¼]°½³¦±o§D£]¢G¬!¨�¼]¶N«G¨i¥�¨B¾�Ïk¤�£]«o¨�¶&§B¼]¢-§B¹k¬!¨i§B©G¨&¬�£]«G¨�§B¢o£]«G¤B¬!¼�³¦°½¯B¨�£]«G¨°²¥�®o¬]¨i¼]¼]°²¤¦±�£]«-§D£�£]«G¨i°½¬�§B¢G£_¤¦¥�§D£]°²¶�£]«G¨&¤B¬!¨i¥~­U®o¬]¤L¯B¨&¬w°²¼+¨i¼!¼_¨i±6£]°f§B¹²¹½»�¬]¨i¶�¤¦±o¼_£_¬!¢-¶�£]°²±G³£]«G¨�¬!¨i©o¢o¶�£]°½¤¦±o°f¼_£�¼]¨i¶&¢G¬!°½£@»ù§D¬]³¦¢-¥�¨i±6£�¤BµdËw¨i¹²¹²§D¬]¨�§B±o© 9�¤B³¦§iêd§i»!� ÓA�U¾�ça±o©G¨&¨i©:´�°²±� Ð�£]«G¨&»�¼!§i»�£]«-§D£�úa£]«o¨�¤¦±-¹½»�êd§i»�£_¤ �Rµ�¤B¬!¥�§B¹²¹²»màÒ®o¬]¤L¯B¨ � ¼]¨i¶&¢G¬!°½£@» ��°²¼�¸[»¼]«G¤gê�°²±G³£]«o§D£"§B±û§D£_£]§B¶]·B¨&¬�§D³¦§B°²±o¼_£�£]«G¨�¶�¬]»t®o£_¤B³B¬!§D®-«o°f¶�®-¬]¤B£_¤t¶�¤¦¹s¶&§B±�¸4¨�¢o¼_¨i©(§B¼�§%¼!¢G¸G­®-§D¬!£�°²±�§B±�§B¹½³B¤B¬!°²£]«o¥ ý�£]«G¨�¬]¨i©-¢o¶�£]°½¤¦±mþk£]«o§D£`¶&§B±�¸o¬]¨i§D·�£]«G¨�¸-§B¼!°²¶P¶�¤¦¥�®-¢G£]§D£]°²¤¦±o§B¹§B¼]¼!¢o¥�®o£]°½¤¦±-ü�0�§B±o© °f± � ÓG¾²Ð�£]«G¨&»û©G¨i¼!¶�¬!°½¸4¨�£]«G¨�¬]¨i¼]¢o¹²£�¤BµP£]«G¨i°½¬�£]«G¨&¤B¬]¨i¥�­U®o¬]¤g¯B¨&¬§B¼ úa£]«G¨¢o¼!¢o§B¹P¢G®o®4¨&¬_­U¸4¤¦¢o±o©-ü�£]«o§D£&àR¼�°²± � ÓA�U¾æõ�¤gêw¨&¯B¨&¬i´�§�¶&§D¬!¨&µ�¢o¹�¬]¨i§B©G¨&¬�ê�°²¹²¹©o°f¼]¶�¤g¯B¨&¬`£]«o§D£�ê�«o§D£s£]«G¨�§B¢G£_¤¦¥�§D£_¨i©�£]«G¨&¤B¬]¨i¥�­U®o¬]¤g¯B¨&¬d©G¤t¨i¼s°²±:�pÍ��m°²¼�°²±~µ8§B¶�£`¥�¢o¶N«¹½¨i¼!¼d£]«o§B±%ê�«o§D£�Ë`¨i¹f¹²§D¬]¨"§B±o©:9�¤B³¦§iêd§i»�©-°²©�°²±1� Ó3�U¾ça± £]«o¨�ío¬N¼_£�®m¹²§B¶�¨B´2£]«G¨%§B¢G£_¤¦¥�§D£_¨i©Â£]«G¨&¤B¬!¨i¥~­U®o¬]¤L¯B¨&¬�°²± �pÍ �P©o¤[¨i¼~±G¤B£�³¦°½¯B¨%§

¬]¨i©-¢o¶�£]°½¤¦±�§D£+§B¹²¹X¾kç@£/©G¤t¨i¼k±G¤B£/©G¨i¼]¶�¬!°²¸Ò¨`«G¤gêy£_¤�¢-¼_¨`§B±�§B©G¯B¨&¬!¼]§D¬!»"§B¼/§�¼]¢G¸o¬!¤¦¢G£]°²±G¨°²± ¤B¬!©G¨&¬�£_¤(°²±[¯B¨&¬]£~£]«G¨%¤¦±G¨�­Uêd§i»y®4¨&¬!¥�¢G£]§D£]°½¤¦±|¾ûÏ�«o§D£�°²¼&´2£]«G¨�£]«G¨&¤B¬]¨i¥�­U®o¬]¤g¯B¨&¬³¦°½¯B¨i¼�±G¤(°²±o©o°²¶&§D£]°²¤¦± ¤Bµ�«G¤Lê §(¼]°²¥�¢o¹²§D£_¤B¬�¼]«o¤¦¢o¹²© ¬]¨i¼_®4¤¦±o©y£_¤�£]«G¨�§B©G¯B¨&¬N¼]§D¬]»ÒàR¼«o§B¼!«�§B±o©�¼]°½³¦±o§D£]¢G¬!¨�ÿ[¢o¨&¬!°½¨i¼&¾/çJ±-¼_£_¨i§B©|´t£]«G¨�£]«G¨&¤B¬!¨i¥~­U®o¬]¤L¯B¨&¬d¢-¼_¨i¼�¨i¼]¼]¨i±6£]°²§B¹f¹½»~£]«G¨¼]§B¥�¨�ú_¶�¤¦¥�¥�¤¦±G­u¼_¨i±o¼_¨iü~§D¬]³¦¢o¥�¨i±6£w£]«o§D£wç2³¦§i¯B¨�ý8¼_¨&¨�§D¸Ò¤L¯B¨Lþs£_¤�ð]¢o¼_£]°½µ�»~£]«G¨�¶&¹f§B°²¥£]«o§D£�£]«G¨�����¼!°½³¦±o§D£]¢G¬]¨�ÿt¢G¨&¬!°²¨i¼"¶�¤¦¢o¹²©o±:àp£�®Ò¤¦¼!¼]°½¸-¹½»�«o¨i¹½®�£]«G¨�§D£_£]§B¶!·B¨&¬i¾ � §B¥�¨i¹½»B´°½£�±G¤B£_¨i¼�£]«o§D£�ý8°²±�¤¦¢G¬�±G¤B£]§D£]°½¤¦±mþ�£]«G¨�¼]¨iÿ[¢G¨i±-¶�¨i¼�ý& � � � . ý& mþ_þ�§B±o©yý&�2ý&)Dþ�� )DþP«o§g¯B¨£]«G¨�¼]§B¥�¨�©o°²¼_£_¬N°½¸-¢G£]°½¤¦±:´m°X¾p¨B¾½´:£]«o¨&»ù§D¬]¨�úa¤B¸m¼_¨&¬]¯D§D£]°½¤¦±o§B¹²¹½»¨iÿ[¢-°½¯>§B¹²¨i±6£&¾Rü çJ±Þ¤B£]«o¨&¬êw¤B¬!©o¼&´4ê�°²£]«G¤¦¢G£�¹²¤¦¼]¼�¤Bµs³B¨i±G¨&¬!§B¹f°½£u»�¤¦±o¨~¶&§B±Þ£]§D·B¨ � ��+ Év¾ . ±o¶�¨�¤¦±o¨~°f¼�©o¨i§B¹²°²±G³¤¦±o¹²»ê�°²£]«(§�®-§B¼]¼!°½¯B¨�§B©G¯B¨&¬!¼]§D¬!»B´k£]«G¨�¬]¨i¼_£"¤Bµd£]«G¨�§D¬]³¦¢o¥�¨i±[£"¸4¤¦°²¹²¼�©G¤Lê�±(£_¤£]«G¨¤B¸-¼]¨&¬]¯>§D£]°²¤¦±~£]«o§D£&´6°²±Gµ�¤B¬!¥�§B¹f¹½»"¼_®4¨i§D·t°f±G³G´¦°½µ���°²¼+£]«o¨P®o¬]¤B¸-§D¸-°f¹²°½£u»�¤BµÒ°²±[¯B¨&¬]£]°²±G³ ��°²±¤¦±G¨�°½£_¨&¬!§D£]°½¤¦±¤Bµ�§B±ù§B¹½³B¤B¬!°½£]«o¥ ê�°½£]«%¬N¢o±o±o°²±o³�£]°²¥�¨���´Ò£]«G¨i±ù§�µ�¤B¬]³B¨&¬�£]«o§D£�£_¬N°½¨i¼£_¤�í-±o©*� � . ¤Bµs±G¤�¥�¤B¬]¨�£]«o§B± ����¬!§B±o©G¤¦¥ ¯>§B¹f¢G¨i¼�«-§B¼�§D£�¥�¤¦¼]£ �����(®o¬]¤B¸m§D¸-°²¹²°½£@»¤Bµ+¼]¢o¶&¶�¨i¼]¼�°²±�£]°²¥�¨�¬!¤¦¢G³¦«o¹½»��¾ �

� 74T>ORW:�BY\VLQD^�������n_KNQ��BH+bUH_KNnuT>H_^�ORQ�KwWXOpSUVDK]SUOzYNQ�x:T>H@bUH+SUT>H2KN^Lh�HJbUWUK]bXq�naKNQ��&VLOznu�i{pq�^gHJSUHJbXcMPORQ>H4x:T>H@SUT>HJb4K2buK!QD^gY\Mûh\K!{zVLH:OzWÒY\Q>H�YNZ¦SUTLH���� � �\hNKN{RV>HJW-Z�YNb4x:TLOznuT���� ÷ n_KNQ��BH:ZlYNV>QD^dORQPSUORMPH�! LORQ�SUT>K!S:n_K!WXH"�rSUORMPH/bUY\VLj\TL{Rq����wMPH_K!Q>W4SUORMPH+Y!ZGSUT>H/Z�YNbUM"�$#%� ��& x:OpSUT & WXM�KN{R{½�

Page 10: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

. ! ����������� �������

ça±%£]«G¨�¼_¨i¶�¤¦±-©�®-¹²§B¶�¨B´-¨&¯B¨i±�£]«G¤¦¢G³¦«�£]«G¨"µ8§B¶�£_¤B¬ ����°²±�£]«G¨�§B©G¯B¨&¬N¼]§D¬]»ÒàR¼�¼]¢o¶&¶�¨i¼!¼®o¬!¤B¸-§D¸-°²¹²°²£u»�°²¼�£]«G¨~¼]§B¥�¨~§B¼�°²± � Ó��U´4°²£�§D¬!°²¼]¨i¼�µ�¤B¬�§�¶�¤¦¥�®-¹²¨&£_¨i¹½»�©o°lè4¨&¬]¨i±[£�¬]¨i§B¼]¤¦±|¾ça± � Ó3����Þ°²¼~§ ú_±G¤¦±6£]°²³¦«6£]±G¨i¼!¼]üÞµ�§B¶�£_¤B¬�¶�¤¦¥�°²±G³Þµ�¬]¤¦¥ £]«G¨�¬]¨i©o¢o¶�£]°²¤¦±º§D¬]³¦¢o¥�¨i±[£&´ê�«o¨&¬]¨i§B¼%°²± �pÍ��"£]«G¨&¬!¨�°²¼%±G¤º¬]¨i©o¢-¶�£]°½¤¦± §D¬]³¦¢o¥�¨i±[£&´�§B±o©ä£]«G¨(µ8§B¶�£_¤B¬ ���º¶�¤¦¥�¨i¼¸4¨i¶&§B¢o¼_¨�£]«G¨~§B©G¯B¨&¬!¼]§D¬!»�«o§B¼�§�¶N«G¤¦°²¶�¨~¤Bµ ����«o§B¼]«ù¯D§B¹²¢G¨i¼�¤Bµ�ê�«o°²¶N«°²£�±G¨&¨i©ù¤¦±o¹½»í-±-©*� � . ¤Bµd§B±6»ù¤¦±G¨B¾~ç@µ�ý�µr¤B¬�§�íGåt¨i©Þ·B¨&»oþ��y°²¼�¨iÿt¢o§B¹²¹½»«o§D¬!©Þ£_¤�°²±[¯B¨&¬]£�µ�¤B¬"§B¹²¹��� �áý�¨�åv¶�¨&®o£wµ�¤B¬w§�±G¨&³¦¹²°½³¦°²¸-¹½»�¼!¥�§B¹²¹-¼!¢G¸-¼_¨&£NþN´t£]«G¨i±�°²±�£]°²¥�¨ , �ä£]«G¨�§B©o¯B¨&¬!¼]§D¬]»«o§B¼�®o¬!¤B¸-§D¸-°²¹²°²£u»(¤Bµ�¼!¢o¶&¶�¨i¼]¼~¤¦±o¹½» ��´�±G¤B£ ��� ��´s§B±-©y°²£�£]§D·B¨i¼�£]«G¨%¼]§B¥�¨%§B¥�¤¦¢o±[£¤Bµ`£]°²¥�¨~£_¤%¼]°½³¦±ù¨i°½£]«G¨&¬"§�íGåv¨i©(¥�¨i¼]¼]§D³B¨�¤B¬"§B±[»�¤¦±o¨�¤Bµd¥�§B±[»¥�¨i¼!¼]§D³B¨i¼&¾�Ï�«o§D£°²¼i´+°²£�¥�§D·B¨i¼�±G¤ù©o°lè4¨&¬]¨i±o¶�¨�ê�«G¨&£]«G¨&¬�¨i§B¶!«º±o¨&ê °½£_¨&¬N§D£]°½¤¦± ¢-¼_¨i¼~§±G¨&ꪥ�¨i¼]¼!§D³B¨¤B¬�ð]¢o¼_£�§(±G¨&ê ¼_¨&£�¤Bµ�¶�¤¦°²±Â£_¤¦¼]¼_¨i¼�ê�°½£]«y£]«G¨�¼]§B¥�¨�¥�¨i¼]¼]§D³B¨B¾Âç@µJ´�¤¦±Â£]«G¨%¤B£]«o¨&¬«o§B±-©|´[£]«o¨&¬]¨BàR¼P§~¼]¥�§B¹²¹m¸-¢G£d±G¤¦±v­u±G¨&³¦¹f°½³¦°½¸-¹½¨�¼]¢G¸-¼_¨&£d¤Bµ � ¤¦±�ê�«o°²¶!« �°²¼w¬]¨i¹²§D£]°½¯B¨i¹½»¨i§B¼_»�£_¤�°²±6¯B¨&¬!£�§B±o©�°²µk¨i¹½¨i¥�¨i±6£]¼�¤Bµ/£]«-°²¼�¼]¢G¸m¼_¨&£�§D¬]¨"¨i§B¼]»%£_¤�¬]¨i¶�¤B³¦±o°²î&¨B´-£]«G¨i±�£]«G¨§B©G¯B¨&¬N¼]§D¬]»ÒàR¼�¼]¢o¶&¶�¨i¼!¼�®o¬!¤B¸-§D¸-°²¹²°²£u»�¥�§i»�¸4¨s§B¼�³B¬!¨i§D£k§B¼ ������¾kÏ�«t¢o¼&´>£]«G¨s§D®-®Ò¨i§D¬N§B±o¶�¨¤Bµ:£]«o¨�§B±o±o¤g»v°²±G³�µ�§B¶�£_¤B¬����°²± �pÍ �4°²¼w¶&§B¢o¼_¨i©�¸t»�§�£_¤B£]§B¹²¹½»�©-°lèÒ¨&¬!¨i±6£w¶�¤¦±o¼]°²©G¨&¬N§D£]°½¤¦±£]«o§B±ù°²± � Ó3�U´|±o§B¥�¨i¹½»B´Ò£]«G¨�®Ò¤¦¼!¼]°½¸-°²¹f°½£u»�¤Bµs§�®4¤t¤B¬!¹½»%¶�¤¦±o¼_£_¬N¢o¶�£_¨i©.��µr¤B¬�ê�«-°²¶!«�£]«G¨°²±[¯B¨&¬!¼]°²¤¦±�®o¬]¤B¸-¹½¨i¥ª°²¼�±G¤B£�¢o±o°½µ�¤B¬!¥�¹²»�©o°�E�¶&¢-¹½£&¾ça±�£]«G¨�£]«o°½¬!©�®-¹²§B¶�¨B´G£]«o¨"§B¢G£_¤¦¥�§D£_¨i©%®o¬!¤[¤Bµ/°²± �pÍ���¶&§B±o±G¤B£P¬]¨i§B©-°²¹½»�¸4¨�¥�¤t©-°½ío¨i©

£_¤�³B¨&£�§�¥�¢o¶N«%¸4¨&£_£_¨&¬�¸4¤¦¢o±o©�µ�¤B¬ 9�éG �­[ +ô�õ §B±o©�¤B£]«G¨&¬�¼]¨i¹½µf­U¬!¨i©o¢o¶&°½¸-¹²¨�¯B¨&¬!¼]°²¤¦±o¼¤Bµ$ +ô�õ�¾+Ï�«o°²¼�°²¼�°²±û¼]«o§D¬]®y¶�¤¦±6£_¬!§B¼]£�£_¤£]«G¨�Ëw¨i¹²¹²§D¬!¨�­[9�¤B³¦§iêd§i» ®o¬]¤t¤Bµdµr¤B¬L9�év �­ +ô�õ�´/ê�«o°f¶!«û¶&§B±y¸4¨�¥�¤t©o°²ío¨i©�°²±y§±-§D£]¢G¬!§B¹�êd§i»äý8¼_¨&¨ �pÎ��w§B±o© £]«G¨�©o°²¼]¶&¢-¼]¼]°½¤¦±§D¸4¤g¯B¨Lþ�¼_¤Þ§B¼�£_¤³¦°½¯B¨�¥�¢-¶!«y£]°½³¦«[£_¨&¬�¸4¤¦¢o±o©-¼�ë °f±o¶&¹²¢o©o°f±G³%§¶�¤¦¥�®m¹½¨&£_¨i¹½»(£]°½³¦«[£¸4¤¦¢o±o©�°²±�£]«o¨�¶&§B¼_¨"¤Bµ+§�®-§B¼]¼!°½¯B¨"§D£_£]§B¶]·Ò¾ça±~£]«G¨Pµr¤¦¢o¬]£]«~®-¹²§B¶�¨B´¦£]«o¨�¼_¨i¶&¢G¬!°½£@»�¥�¤v©G¨i¹v°²±:�pÍ �-¢o¼]¨i¼2§�¥�¨i§B¼]¢G¬]¨P¤BµÒ®o¬]¤B¸m§D¸-°²¹²°½£@»

£]«o§D£/¥�¢-¼_£�¸4¨`°f±6£_¨&¬]®-¬]¨&£_¨i©"ê�°²£]«"³B¬]¨i§D£2¶&§B¢G£]°½¤¦±:¾ � §B¥�¨i¹½»B´D£]«G¨w¼]¢o¶&¶�¨i¼]¼/®o¬]¤B¸m§D¸-°²¹²°½£@»¤Bµ2°²±[¯B¨&¬]£]°²±G³��(� � � �â°²¼�§B¼]¼]¨i¼]¼_¨i©�±o¤B£�¤¦±o¹½»�¤g¯B¨&¬�£]«G¨�¼]¨&£]¼�¤Bµ2¶�¤¦°²±�£_¤¦¼]¼_¨i¼�§B±o©£]«G¨d°²±o¼]£]§B±o¶�¨i¼ ��� �d´B¸-¢G£k§B¹f¼_¤�¤g¯B¨&¬2£]«G¨d·B¨&»v¼+£]«o§D£2§D¬]¨`³B¨i±o¨&¬!§D£_¨i©�µ�¬]¤¦¥ §�¬!§B±-©G¤¦¥¼_¨&¨i©�¸[»�£]«G¨"·B¨&»[­U³B¨i±G¨&¬!§D£_¤B¬�§B¹½³B¤B¬!°²£]«o¥%¾�:¨&£�¥�¨�©o¨i¼]¶�¬!°½¸4¨�£uêw¤(¼]¶�¨i±o§D¬!°²¤¦¼"£]«o§D£�¼]«G¤gê £]«G¨�®Ò¤¦¼!¼]°½¸-¹½¨~®-°²£_µ�§B¹²¹f¼�£]«o§D£�§D¬N°²¼_¨

µ�¬]¤¦¥ £]«o¨�¢o¼_¨�¤Bµ2£]«o°²¼�®-¬]¤B¸-§D¸-°²¹f°½£u»�¼_®-§B¶�¨B¾�ça±�¸4¤B£]«�¶&§B¼]¨i¼�ç�¼]¢o®o®4¤¦¼_¨�£]«o§D£�ê`¨�§D¬]¨°²±Þ£]«o¨�µr¤¦¹²¹²¤gê�°²±o³�«[»t®Ò¤B£]«o¨&£]°²¶&§B¹�¼]°½£]¢-§D£]°½¤¦±|¾~ç�§B¼!¼]¢o¥�¨�£]«-§D£�£]«G¨�¤¦±o¹½»¬]¨i§B¼_¤¦±o§D¸m¹½¨êd§i»y£_¤û°²±[¯B¨&¬]£#��� � � � °²¼�¸[»y¬]¨i¶�¤L¯B¨&¬!°²±G³�£]«o¨�®-¬!°½¯D§D£_¨�·B¨&»B´P§B±o©Â£]«-§D£�£]«G¨µ8§B¼_£_¨i¼_£�êd§i»�£_¤�¬]¨i¶�¤L¯B¨&¬�£]«o¨�®o¬!°½¯D§D£_¨�·B¨&»%°²¼d£_¤�¬!¢o±�¥�§B±[»�°½£_¨&¬!§D£]°½¤¦±o¼�¤Bµ/§�¶�¨&¬]£]§B°f±§B¹½³B¤B¬N°½£]«o¥ ��¾ o¤B¬�¬!¨i§B¼_¤¦±o§D¸-¹½¨®-§D¬!§B¥�¨&£_¨&¬%¶N«G¤¦°²¶�¨i¼�£]«G¨§B¹²³B¤B¬!°½£]«o¥ �¡£]§D·B¨i¼%§¼]¥�§B¹²¹:§B¥�¤¦¢o±[£�¤Bµ2£]°²¥�¨ ��´m¼_¤�£]«o§D£�£]«o¨�¬!¢-±o±o°²±G³~£]°²¥�¨�£_¤�°²±6¯B¨&¬!£!�(°²¼�¨i¼]¼_¨i±[£]°²§B¹²¹½»¨iÿt¢o§B¹2£_¤�£]«o¨�±[¢-¥�¸4¨&¬�¤BµP°½£_¨&¬!§D£]°½¤¦±-¼�¤Bµ ��´/§B±o©(£]«o°²¼�°²¼�¨iÿ[¢-§B¹2£_¤�£]«G¨�¬]¨i¶&°½®o¬]¤v¶&§B¹¤Bµd£]«G¨�®-¬]¤B¸-§D¸-°²¹f°½£u»�£]«-§D£�§�¼]°²±o³¦¹½¨�°½£_¨&¬!§D£]°½¤¦±�¤Bµ � ê�°f¹²¹/¬]¨i¶�¤g¯B¨&¬~£]«G¨�®-¬!°½¯D§D£_¨�·B¨&»B¾çwµ�¢o¬]£]«G¨&¬P¼]¢G®o®4¤¦¼_¨�£]«o§D£�£]«G¨�·B¨&»6­U³B¨i±o¨&¬!§D£]°½¤¦±ù§B¹½³B¤B¬!°½£]«o¥ ¢-¼]¢o§B¹²¹½»�®o¬]¤v©o¢o¶�¨i¼P§�·B¨&»®-§B°²¬�£]«o§D£�¬!¨iÿ[¢o°²¬]¨i¼ � °½£_¨&¬N§D£]°½¤¦±o¼�£_¤�¸o¬]¨i§D·Ò´-¸-¢o£�§�¶�¨&¬]£]§B°f±�¼]¥�§B¹f¹|®o¬]¤B®4¤B¬]£]°½¤¦± ��¤Bµ£]«G¨�£]°²¥�¨�°½£w®o¬]¤v©o¢o¶�¨i¼s§�·B¨&»�®m§B°½¬`£]«-§D£w¶&§B±�¸4¨�¸-¬]¤B·B¨i±�°²±�¤¦±o¹²»���� � °½£_¨&¬!§D£]°²¤¦±o¼&¾ +°²±o§B¹f¹½»B´sç�¼]¢G®-®Ò¤¦¼]¨�£]«-§D£�°½£�°f¼�¬]¨i¹²§D£]°½¯B¨i¹²» ¨i§B¼_»º£_¤y©G¨&£_¨&¬!¥�°f±G¨%µr¬!¤¦¥ £]«G¨�®m¢G¸-¹²°²¶·B¨&»ê�«G¨&£]«G¨&¬�¤B¬"±G¤B£�§�·B¨&»ù®-§B°½¬�°²¼�¤¦±G¨~¤Bµs£]«G¨�êw¨i§D·�¤¦±o¨i¼ 0�£]«o§D£�°²¼i´Ò¤¦±o¨�«o§B¼�§B±§B¹½³B¤B¬N°½£]«o¥ £_¤�©G¤�£]«-°²¼�©o°½¬]¨i¶�£]¹½»B´4¬!§D£]«o¨&¬�£]«o§B±Þ«o§i¯v°²±G³�£_¤�¼]°²¥�®m¹½»�£_¬]»�¤¦¢G£��Àê�°½£]«©o°½èÒ¨&¬]¨i±[£d·B¨&»t¼i¾

Page 11: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

��������)���:�A��� � � ��������G� �F��� ����� ��F�������F� �� ��� .'.

G¤B¬�¤¦¢G¬�ío¬!¼_£�¼!¶�¨i±o§D¬!°½¤(¼]¢G®-®Ò¤¦¼]¨�£]«-§D£ � + � � ! ´ � + � � � ! ´`§B±-© � °²¼�¼!¥�§B¹²¹X¾Ï�«o¨i±�£]«G¨�®o¬]¤B¸m§D¸-°²¹²°½£@»�¤Bµ/°²±[¯B¨&¬]£]°²±G³ ��°²±�£]°²¥�¨ � � °²¼`¤Bµ�¤B¬!©G¨&¬ � � � ! ´G¼_¤�ê`¨�¥�°½³¦«[£¶�¤¦±o¶&¹f¢o©G¨�£]«-§D£`êw¨�«-§i¯B¨�¤¦±o¹½»�Ó¦É�¸-°½£]¼`¤Bµ�¼_¨i¶&¢G¬N°½£u»B´vê�«o°f¶!«�°f¼sêw¤B¬]£]«o¹½¨i¼!¼&¾2õ�¤Lê`¨&¯B¨&¬i´°½µP£]«o¨&¬]¨�§D¬!¨B´s¼]§i»B´`§D¸Ò¤¦¢o£ � � � ¢o¼_¨&¬!¼i´/£]«o¨i±y§B±Â§D£_£]§B¶!·B¨&¬�êw¤¦¢o¹²© ¸Ò¨�¤g¯B¨&¬�ÑBÑt¾zÑBÑ �¶�¨&¬]£]§B°f± ' S 2 £_¤û¸Ò¨�§D¸m¹½¨%£_¤�í-±o©º§(¢-¼_¨&¬�ê�°½£]«º§�ê`¨i§D·Â·B¨&»B´�°²±Âê�«-°²¶!«º¶&§B¼_¨�£]«G¨°²¥�®-¹½¨i¥�¨i±[£]§D£]°½¤¦±�êw¤¦¢o¹²©%°²±�®o¬N§B¶�£]°²¶�¨"«o§i¯B¨~ÎDÉ�¸-°½£]¼�¤Bµ/¼_¨i¶&¢o¬!°½£u»B¾ça±¶�¤¦±[£_¬!§B¼_£&´4µ�¤B¬�¤¦¢G¬�¼_¨i¶�¤¦±o©Þ¼]¶�¨i±-§D¬!°½¤�¼!¢G®o®4¤¦¼_¨"£]«o§D£ � + � �+. ´ � + � � � � ´4§B±o©

��+ � � � ¾�ça±�£]«o°²¼P¶&§B¼_¨�£]«G¨�®o¬]¤B¸-§D¸m°²¹²°½£@»�¤Bµ2°²±6¯B¨&¬!£]°²±G³#�Þ°²±�£]°²¥�¨ ��°²¼P§D¸4¤¦¢G£ � � � ! ´¼_¤�êw¨�¥�°½³¦«[£k¸4¨P¶�¤¦±Gí-©o¨i±6£+£]«o§D£2êw¨P«o§i¯B¨�ÎDÉ�¸m°½£]¼/¤Bµm¼_¨i¶&¢G¬N°½£u»B¾2õ�¤gêw¨&¯B¨&¬i´t¼!°²±o¶�¨w£]«G¨êw¨i§D··B¨&»v¼�¶&§B±�¸Ò¨~¬]¨i§B©-°²¹½»°f©G¨i±6£]°²ío¨i©|´|°½µs£]«o¨&¬]¨�§D¬]¨�¤g¯B¨&¬ � � � ¢o¼_¨&¬N¼�§B±(§D£_£]§B¶]·B¨&¬«o§B¼d§�³B¤t¤t©�¶!«-§B±o¶�¨�¤Bµ�í-±o©-°²±G³�§~¢o¼_¨&¬dê�°²£]«�§�êw¨i§D·�·B¨&»�®m§B°½¬i´v§Dµr£_¨&¬Pê�«-°²¶!«�°½£d¶&§B±¤B¸o£]§B°f±�£]«o§D£�¢o¼_¨&¬gàR¼�¼_¨i¶�¬]¨&£�·B¨&»�°f± � � � ¤B®Ò¨&¬N§D£]°½¤¦±o¼&¾. µ4¶�¤¦¢G¬!¼_¨B´v¼]°²±-¶�¨Pç/§B¥�§B¼]¼]¢o¥�°f±G³�£]«o§D£�êw¨i§D·�·B¨&»t¼`¶&§B±�¸4¨P¬]¨i¶�¤B³¦±-°½î&¨i©�©o°²¬]¨i¶�£]¹½»B´

£]«G¨�·B¨&»[­U³B¨i±G¨&¬!§D£]°½¤¦±á§B¹½³B¤B¬!°½£]«-¥ ¶�¤¦¢-¹²©Â¸4¨�¥�¤v©o°½í-¨i© ¼_¤�§B¼�£_¤�°²©G¨i±[£]°½µr»�§B±-©º±G¤B£§B¼]¼!°½³¦±%êw¨i§D·%·B¨&»t¼&¾Põ�¤gêw¨&¯B¨&¬i´|°²±%®o¬N§B¶�£]°²¶�¨"®o¬]¤B£_¤v¶�¤¦¹/©G¨i¼]°½³¦±G¨&¬N¼Pê�«G¤�¸4¨i¹²°½¨&¯B¨�£]«o§D££]«G¨&»æ«o§i¯B¨ §º®o¬]¤t¤Bµ"¤Bµ~¼_¨i¶&¢G¬!°½£@»æ¼]¤¦¥�¨&£]°²¥�¨i¼�©o¨i¶&°²©G¨Þ£_¤â°²±o¶�¬]¨i§B¼]¨(¨*E�¶&°½¨i±o¶�»á¸[»©o°f¼_®4¨i±o¼]°²±G³(ê�°½£]«æ·B¨&»ã¯D§B¹²°²©o§D£]°½¤¦±á®o¬]¤v¶�¨i©o¢G¬!¨i¼�£]«-§D£�§D¬!¨�±G¤B£�¬]¨iÿ[¢-°½¬]¨i©æ°²±ã£]«o¨i°½¬®o¬!¤[¤BµJ¾/Ï�«o°²¼+êd§B¼2¤¦±G¨�¤Bµ4£]«G¨�¶�¨i±[£_¬!§B¹-°f¼]¼]¢G¨i¼2°²±~£]«o¨�¶�¤¦±6£_¬!¤g¯B¨&¬!¼_»�¤L¯B¨&¬wõ > ��� ý8¼]¨&¨� � ÐB´ � Óo´ � Ì ��þN¾<>�¤B¬]¨&¤L¯B¨&¬i´[§B±�§D£_£]§B¶]·B¨&¬w¥�°½³¦«[£k¸4¨`ê�°²¹²¹²°f±G³d£_¤�°²±[¯B¨i¼_£+¥�¤B¬]¨w¬]¨i¼_¤¦¢G¬N¶�¨i¼°²±�ê`¨i§D·[­U·B¨&»�¼]®Ò¤B£_£]°f±G³�£]«o§B±�£]«G¨d©G¨i¼]°½³¦±G¨&¬N¼:¤Bµo£]«G¨w¼_»v¼_£_¨i¥�êw¤¦¢o¹²©�êd§B±6£/£_¤�®m¢G£�°²±[£_¤£]«G¨�·B¨&»[­U³B¨i±G¨&¬!§D£]°²¤¦± §B¹½³B¤B¬N°½£]«o¥%´�¼!°²±o¶�¨�£]«G¨�¹f§D£_£_¨&¬�êw¤¦¢o¹²©Þ¸4¨�¢o±o©G¨&¬"¶�¤¦¥�®Ò¨&£]°²£]°½¯B¨®o¬!¨i¼]¼]¢G¬]¨�£_¤�¬!¨i©o¢o¶�¨"°²¥�®m¹½¨i¥�¨i±[£]§D£]°½¤¦±�£]°²¥�¨"ê�«o°²¹½¨�§B±�§B©G¯B¨&¬!¼!§D¬]»�ê`¤¦¢o¹f©�¸Ò¨"¥�¢o¶N«¹½¨i¼!¼`¹²°f¥�°½£_¨i©|¾�ét¤�£]«G¨&¬]¨�¶�¤¦¢o¹²©�¸4¨�·B¨&»v¼d£]«o§D£P§D¬]¨�±o¤B£wêw¨i§D·�¨i±o¤¦¢G³¦«�£_¤�¸4¨�¼_®4¤B£_£_¨i©¸t»�£]«o¨�·B¨&»6­U³B¨i±o¨&¬!§D£]°½¤¦±�§B¹½³B¤B¬!°½£]«o¥ ¸m¢G£�§D¬]¨�°²©o¨i±6£]°½í-¨i©�¸t»~£]«G¨�§B©G¯B¨&¬!¼!§D¬]»�§B¼�¸4¨i°²±G³¥�¢o¶!«�ê`¨i§D·B¨&¬�£]«o§B±�§B±�§g¯B¨&¬!§D³B¨�·B¨&»B¾ça± � � É�� >�¨i±G¨&î&¨i¼P§B±o©�çs¶�¤¦¥�¥�¨i±[£_¨i©�£]«o§D£wê�«G¨&£]«G¨&¬w¤B¬P±G¤B£`¤¦±o¨�°²¼`¸4¤B£]«G¨&¬]¨i©�¸[»

£]«G¨�®4¤¦¼]¼]°½¸-¹²¨"¨�åv°f¼_£_¨i±o¶�¨�¤Bµs§�¼!¥�§B¹²¹:®-¬]¤B®4¤B¬]£]°½¤¦±�¤Bµsê`¨i§D·�·B¨&»v¼�©G¨&®4¨i±o©o¼�¤¦±¤¦±o¨BàR¼®4¤¦°²±[£`¤Bµk¯t°²¨&êæë µr¤B¬P¨�åG§B¥�®-¹½¨B´Gê�«G¨&£]«G¨&¬d¤¦±G¨"°²¼P§B±%°²±-©o°½¯v°²©o¢o§B¹G¢o¼]¨&¬P¤B¬�§�¼_»t¼]£_¨i¥§B©o¥�°²±o°²¼_£_¬N§D£_¤B¬i�

¾½¾½¾R¹½¨&£&àR¼~¼]¢G®o®4¤¦¼_¨�£]«-§D£�°²± §�¶�¨&¬]£]§B°²±y¶�¬]»t®o£_¤¦¼_»v¼_£_¨i¥ §�¼]¥�§B¹f¹�®o¬]¤D­®Ò¤B¬!£]°½¤¦±ãë ¼]§i»B´�Ð&É � � ë ¤Bµ�£]«o¨ù¬N§B±o©G¤¦¥�¹½»á§B¼]¼]°½³¦±G¨i©æ®o¬N°½¯>§D£_¨·B¨&»t¼w§D¬]¨�¯v¢o¹²±o¨&¬!§D¸-¹½¨d£_¤�§�¶�¨&¬]£]§B°²±�§D£_£]§B¶]·Ò¾O G¬]¤¦¥À£]«G¨�¼]£]§B±o©G®4¤¦°²±[£¤Bµ�§B± °²±-©o°½¯v°²©o¢o§B¹+¢o¼_¨&¬g´k£]«G¨�¼_»v¼_£_¨i¥ °f¼�¼_¨i¶&¢G¬!¨B�~¼!«G¨�°²¼�ÑBÑt¾zÑBÑBÑ �¼]¢G¬]¨�£]«o§D£~«G¨&¬�¼]¨i¶�¬]¨&£�°²¼�¼!§Dµr¨B¾Þõ�¤Lê`¨&¯B¨&¬g´sµ�¬]¤¦¥ £]«G¨�¼]£]§B±o©G®4¤¦°²±[£¤Bµ�£]«G¨~¼_»t¼]£_¨i¥ §B©o¥�°²±o°²¼_£_¬N§D£_¤B¬i´-ê�«o¤�°²¼�§B±o¼_êw¨&¬!§D¸-¹½¨�£_¤�§�¥�°²¹²¹f°½¤¦±¢o¼_¨&¬!¼&´+£]«G¨�¼_»v¼_£_¨i¥ °f¼�°²±o¼]¨i¶&¢G¬]¨�¸4¨i¶&§B¢o¼_¨�§B± §D£_£]§B¶!·B¨&¬�°²¼�§B¹²¥�¤¦¼_£¶�¨&¬]£]§B°²±|¾½¾½¾p£_¤�¨&¯B¨i±6£]¢o§B¹f¹½»�¤B¸o£]§B°²±%£]«G¨�®-¬!°½¯D§D£_¨�·B¨&»%¤Bµk¤¦±G¨�¤B¬�¥�¤B¬]¨¤Bµ/£]«o¨"¢o¼_¨&¬!¼&´Gê�«G¤�ê�°²¹²¹Ò£]«G¨i±�¼]¢G¨�£]«G¨�§B©-¥�°²±o°²¼]£_¬!§D£_¤B¬i¾

Ï�«t¢o¼&´v°²±�¶�¨&¬]£]§B°²±�¶&°½¬!¶&¢o¥�¼_£]§B±o¶�¨i¼w£]«G¨�®o¬]¤B¸-§D¸m°²¹²°½£@»�¤Bµ/§�µ�¤B¬]³B¨&¬iàR¼d¼]¢-¶&¶�¨i¼]¼P§B¼d©G¨�­í-±o¨i©�°²± �pÍ��4¶&§B±�¸4¨�§�¥�°²¼]¹²¨i§B©o°²±G³�¥�¨i§B¼]¢o¬]¨�¤Bµ|£]«G¨�£_¬!¢G¨�¼]¨i¶&¢G¬!°½£@»�¤Bµ|£]«o¨�¼]°½³¦±-§D£]¢G¬]¨¼]¶N«G¨i¥�¨B¾+çJ£�¥�°½³¦«[£2¨i°½£]«G¨&¬�¹½¨i§B©� �¹²°²¶�¨P£_¤"©G¤¦¢o¸o£+£]«G¨�¼_¨i¶&¢G¬N°½£u»�¤BµÒ§�®o¬!¤B£_¤t¶�¤¦¹G£]«-§D£s°²±®o¬N§B¶�£]°²¶�¨�°²¼d¼_¨i¶&¢G¬]¨�¤B¬i´G¨&¯B¨i±�êw¤B¬!¼_¨B´o¹½¨i§B©�«G¨&¬P£_¤�«o§g¯B¨"¶�¤¦±Gí-©G¨i±o¶�¨�°²±�£]«G¨�¼_¨i¶&¢o¬!°½£u»¤Bµ+§�®o¬]¤B£_¤v¶�¤¦¹|£]«o§D£�°²¼�§B¶�£]¢o§B¹²¹²»�¯v¢o¹²±G¨&¬N§D¸-¹½¨�£_¤�§D£_£]§B¶]·Ò¾

Page 12: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

.[� ����������� �������

+°²±o§B¹²¹²»B´6°½£s°²¼`§B¥�¢-¼]°²±G³"£_¤�±G¤B£_¨�£]«o§D£s£]«G¨�£]«G¨&¤B¬]¨i¥~­U®-¬]¤g¯B¨&¬d¢o¼_¨i©�°²± �pÍ �Ò¬]¨iÿ[¢-°½¬]¨i©Ð�Ó6ÎDÉBÉ%¹²°f±G¨i¼�¤Bµ . ¶&§B¥�¹k¶�¤v©G¨B´|§B±o©£]«G¨~¼]¢o¥�¥�§D¬!»%¸[»�Ëd¹²§B±-¶!«G¨&£�§B±o© �/¤¦°²±6£]¶N«G¨&¯D§B¹¤Bµ:ê�«o§D£`£]«o¨�£]«o¨&¤B¬]¨i¥~­U®o¬]¤L¯B¨&¬�©o°²©�°²±�£]«o¨�¶&§B¼]¨�¤Bµ o¢o¹²¹mô�¤¦¥�§B°²±%õ�§B¼]«(ý8 �®o®4¨i±o©-°låßÀ°²±�£]«o¨i°½¬�®m§D®Ò¨&¬�þ�¤v¶&¶&¢G®-°½¨i¼�ío¯B¨�¼]°²±G³¦¹½¨�­u¼]®-§B¶�¨i©û®m§D³B¨i¼��(Ï�«G¨�¬!¨i¼]¢o¹½£�¤Bµ�§B¹²¹�£]«-°²¼¨�è4¤B¬]£�°²¼~§ùê`¨i§D·y£]§B¢G£_¤¦¹½¤B³¦°²¶&§B¹�¼_£]§D£_¨i¥�¨i±[£�£]«o§D£�¬!§B°²¼_¨i¼~¥�¤B¬!¨�ÿt¢G¨i¼_£]°²¤¦±o¼�£]«o§B±º°½£§B±o¼]ê`¨&¬!¼i¾;ä«o§D£`¹½¨i¼!¼_¤¦±o¼�¶&§B±�¸4¨�¹½¨i§D¬!±G¨i©�µ�¬]¤¦¥À£]«G¨�§D¸4¤g¯B¨�§B±o§B¹½»v¼]°²¼2¤Bµ4£]«G¨�¼]¨i¶&¢G¬!°½£@»�®-¬]¤[¤Bµ

µ�¤B¬ /ô�õã¸[»�£]«G¨w§B¢o£_¤¦¥�§D£_¨i©�£]«G¨&¤B¬]¨i¥�­U®o¬]¤g¯B¨&¬�°f±X�pÍ � ��Ï�«G¨dËd¹²§B±o¶!«o¨&£a­ �k¤¦°f±6£]¶N«G¨&¯>§B¹®-§D®4¨&¬/êw§B¼2§B¶&¶�¨&®-£_¨i©~µr¤B¬+®o¬]¨i¼]¨i±6£]§D£]°½¤¦±�§D£sßw¬!»[®o£_¤G´Dê�«-°²¶!«�°²¼/£]«G¨d¥�¤¦¼_£+®o¬]¨i¼_£]°²³¦°½¤¦¢o¼¤Bµ�£]«G¨ù§B±o±t¢o§B¹�¶�¬]»t®o£_¤B³B¬!§D®m«6»â¶�¤¦±Gµ�¨&¬]¨i±o¶�¨i¼i´�ê�°½£]«â§B±æ§B¶&¶�¨&®o£]§B±o¶�¨Þ¬!§D£_¨ù¤Bµ�¤¦±o¹½»§D¸4¤¦¢G£�ÐiÌ � ¾�Ï�«G¨ ��¬]¤B³B¬N§B¥¡ßw¤¦¥�¥�°½£_£_¨&¨�§D®-®-§D¬]¨i±[£]¹½»%µr¨i¹²£�£]«o§D£�£]«o°²¼�êw¤B¬]·�¬!¨&®o¬]¨�­¼_¨i±[£_¨i©%¤¦±G¨�¤Bµk£]«G¨"¥�¤¦¼_£�°²¥�®-¬]¨i¼]¼]°½¯B¨�§B©G¯D§B±o¶�¨i¼�¼]¤�µ�§D¬�°f±�£]«G¨�§D¬]¨i§�¤Bµ+§B¢G£_¤¦¥�§D£_¨i©£]«G¨&¤B¬!¨i¥~­U®o¬]¤L¯t°²±o³G¾�ó�¨&£�êw¨�«o§g¯B¨�¼_¨&¨i±û£]«o§D£"£]«G¨�«[¢o¥�§B±v­u¥�§B©G¨�¬!¨i©o¢o¶�£]°½¤¦±o°f¼_£�¼_¨�­¶&¢G¬N°½£u»�®o¬]¤t¤Bµ+¤Bµ+Ëw¨i¹²¹f§D¬]¨�§B±o©:9�¤B³¦§iêd§i»B´|¨&¯B¨i±�£]«G¤¦¢G³¦«�°²£�°²¼�§�¬N§D£]«G¨&¬�¶�¬!¢-©G¨"¨i§D¬!¹½»¬]¨i¼!¢o¹½£&´k°f¼�¥�¢o¶!«y¥�¤B¬]¨�¼]§D£]°²¼_µ�»t°f±G³%µr¬!¤¦¥ ¸4¤B£]«�®-¬!§B¶�£]°²¶&§B¹s§B±-©�£]«G¨&¤B¬]¨&£]°f¶&§B¹`¼_£]§B±-©v­®4¤¦°²±[£]¼�£]«o§B±á£]«G¨�®m§B¹½¨°²¥�°½£]§D£]°½¤¦±â£]«-§D£�£]«G¨ù§B¢G£_¤¦¥�§D£_¨i©ä£]«G¨&¤B¬]¨i¥�­U®o¬]¤g¯B¨&¬%°²± �pÍ��êd§B¼�§D¸m¹½¨�£_¤(¶�¤¦¥�¨�¢G®ûê�°½£]«|¾�ça±û£]«o¨�¥�¨&£]§D®-«o¤B¬!°²¶&§B¹`¬!§B¶�¨�¸4¨&£@ê`¨&¨i±Â«t¢o¥�§B±y§B±o©¥�§B¶N«o°²±G¨B´G°½£P¼_¨&¨i¥�¼d£]«o§D£Pê`¨"«t¢o¥�§B±�£]«G¨&¤B¬!¨i¥~­U®o¬]¤L¯B¨&¬!¼�±G¨&¨i©o±:àp£wêw¤B¬]¬]»�§D¸4¤¦¢G£d£]«G¨§B¢G£_¤¦¥�§D£_¨i©�¤¦±G¨i¼�¼]±o§D®o®-°f±G³�§D£�¤¦¢G¬�«G¨&¨i¹²¼�§B±6»�£]°²¥�¨�¼]¤[¤¦±|¾

ÓG¾������ � � � ���oÖ�ÜÒØ���o×ÒÝ�ÙkÖça± � � Í��U´ � ¤Lêw§D·�©G¨i¼!¶�¬!°½¸4¨i¼�ú_§"µ�¬!§B¥�¨&êw¤B¬]·�°²±�ê�«-°²¶!«~®o¬!¤[¤Bµ8¼�§D¬]¨�®-¬]¨i¶&°²¼_¨�¨i±o¤¦¢G³¦«

£_¤�¸4¨�¥�¨i¶!«-§B±o°²¶&§B¹²¹½»%¶N«G¨i¶]·B¨i©|´:§B±-©�¬]¨i§B©-§D¸-¹½¨�¨i±o¤¦¢G³¦«�£_¤�¸4¨�«t¢o¥�§B±o¹½»%¶N«G¨i¶]·B¨i©|¾Rüõ�¨�°f¹²¹²¢o¼_£_¬N§D£_¨i¼�«o°f¼�§D®o®-¬]¤¦§B¶!«ù£_¤ºúa³¦§B¥�¨�­U¸-§B¼_¨i©û¼_¨i¶&¢G¬!°½£@»�®o¬]¤t¤Bµ8¼]ü�¸t»�®o¬!¤g¯v°²±G³�¼_¨�­¥�§B±[£]°²¶�¼]¨i¶&¢G¬!°½£@»ù¤Bµ��`¹IB�§B¥�§B¹s¨i±o¶�¬]»t®o£]°½¤¦±�¢-±o©G¨&¬"£]«G¨�ô�¨i¶&°f¼]°½¤¦±ûô�°�E�¨�[õ�¨i¹²¹f¥�§B±§B¼]¼!¢o¥�®o£]°½¤¦± ý8ô�ô�õ�þN¾ � ¤Lêw§D·�¨�åv®-¹²§B°f±o¼ £]«G¨�¸Ò¨i±o¨&ío£]¼ ¤Bµâ¶�¤¦¥�®m¢G£_¨&¬_­u§B¼]¼]°f¼_£_¨i©£]«G¨&¤B¬!¨i¥~­U®o¬]¤L¯t°²±o³�§B±o©%®o¬]¤t¤Bµr­u¶!«G¨i¶!·t°²±o³�§B¼�µ�¤¦¹²¹½¤gê�¼&�

Ï�«G¨�¥�§B°²±�§B©G¯>§B±[£]§D³B¨i¼d¤Bµk¢-¼]°²±G³�§�®o¬]¤t¤Bµ�§B¼]¼!°²¼_£]§B±[£w§D¬]¨�£]«o§D£d¬]¨i§>­¼_¤¦±o°²±G³�¨&¬]¬!¤B¬!¼"§D¬]¨�±o¤B£�®Ò¤¦¼!¼]°½¸-¹½¨~§B±o©Þ£]«o§D£�§B¹²¹+£]«G¨�§B¼]¼]¢-¥�®o£]°½¤¦±o¼¥�¢o¼]£�¸4¨Þ¼_£]§D£_¨i©|¾ . ±á£]«G¨¤B£]«o¨&¬�«-§B±o©á§B¹f¹�£_¨i©o°²¤¦¢o¼�©o¨&£]§B°²¹²¼�¤Bµ£]«G¨"®o¬]¤t¤Bµ+¥�¢o¼]£P¸Ò¨"©o¨i§B¹½£Pê�°½£]«|�2»B¤¦¢�¶&§B±o±G¤B£�¼!°²¥�®-¹½»�¶&¹f§B°²¥ £]«o§D£¼_¤¦¥�¨&£]«o°²±o³�°²¼P¤B¸t¯t°½¤¦¢-¼&¾

ça±%£]«o°²¼P¼]¨i¶�£]°½¤¦±�çP©o°²¼!¶&¢o¼]¼ � ¤gêd§D·màR¼�®o¬]¤t¤Bµk¤Bµ2¼_¨i¥�§B±6£]°²¶�¼_¨i¶&¢G¬!°²£u»�¤Bµ �`¹IB�§B¥�§B¹:¨i±v­¶�¬]»t®o£]°½¤¦±�ý�µ�¤B¬2¸o¬]¨&¯v°½£u»�çkê�°²¹²¹¦¹²¤[¤B·"¤¦±-¹½»�§D£+£]«G¨P±G¤¦±v­u«o§B¼!«G¨i©�¯D§D¬!°²§B±[£Nþk§B±o©�¨�åv§B¥�°²±G¨¸4¤B£]«�£]«G¨w¼!°½³¦±o°½í-¶&§B±-¶�¨s¤Bµoê�«-§D£/°²¼k®o¬]¤L¯B¨i©~§B±o©�£]«o¨`¨�åv£_¨i±6£2£_¤�ê�«o°f¶!«�«o°²¼:¤B¸Gða¨i¶�£]°½¯B¨i¼ë «t¢o¥�§B±%¶N«G¨i¶]·D§D¸-°²¹f°½£u»%§B±o©�¥�§B¶!«o°²±o¨"¶!«G¨i¶!·>§D¸-°f¹²°½£u»�ë «o§g¯B¨�¸4¨&¨i±%§B¶!«-°½¨&¯B¨i©|¾Ï�«G¨ �`¹IB�§B¥�§B¹/¨i±o¶�¬]»t®o£]°½¤¦±ù¼]¶N«G¨i¥�¨B´�§B¼�©G¨i¼!¶�¬!°½¸4¨i©°f± � � Í3�U´:°²¼�§B¼�µr¤¦¹²¹²¤gê�¼&¾M��¨&£

� ¸4¨�§�í-±o°½£_¨~¶�»v¶&¹²°²¶�³B¬]¤¦¢G®(¤Bµw¤B¬!©G¨&¬ �t´:¹½¨&£� �� � ¸4¨�§�³B¨i±G¨&¬!§D£_¤B¬g´k§B±o©Þ¹½¨&£�� )©G¨i±o¤B£_¨�£]«o¨�°²±6£_¨&³B¨&¬N¼�¥�¤t©-¢o¹½¤ �[¾ Ï�«G¨%¼]¶!«o¨i¥�¨�¶�¤¦±o¼]°²¼]£]¼�°²±û£]«o¬]¨&¨%®o¬]¤B¸-§D¸m°²¹²°²¼_£]°f¶§B¹½³B¤B¬N°½£]«o¥�¼&�/·B¨&»�³B¨i±G¨&¬N§D£]°½¤¦±|´vê�«o°²¶N«�¶N«G¤[¤¦¼]¨i¼ ��¬N§B±o©G¤¦¥�¹½»~µ�¬]¤¦¥�� ) §B±o©�¼_¨&£]¼w£]«G¨®-¢o¸-¹²°²¶�§B±o©%¼_¨i¶�¬]¨&£�·B¨&»v¼�ý � � � � )Dþw¨iÿt¢o§B¹4£_¤ý� ���� �|þ 0o¨i±o¶�¬]»t®o£]°½¤¦±:´tê�«o°²¶!«:´t³¦°²¯B¨i±�� �§B±o©�§�¥�¨i¼]¼]§D³B¨�� � � ´-¶N«G¤t¤¦¼_¨i¼ ��¬!§B±o©o¤¦¥�¹½»�µ�¬]¤¦¥�� ) §B±o©�¼_¨&£]¼�£]«G¨�¶&°½®-«G¨&¬]£_¨�åv£

Page 13: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

��������)���:�A��� � � ��������G� �F��� ����� ��F�������F� �� ��� . �

� ¨iÿ[¢o§B¹`£_¤Þ£]«G¨�®-§B°½¬�ý� �� � � ��� �þ 0`§B±o©y©G¨i¶�¬]»t®o£]°½¤¦±|´+ê�«-°²¶!«|´+³¦°½¯B¨i±�� )�§B±o©y§ù¶&°l­®-«o¨&¬]£_¨�åt£ � ´G¶�¤¦¥�®-¢G£_¨i¼�� � ý � þ�ý�� . ý � þ�

� þ � . ý�ê�«G¨&¬]¨�� . §B±o©�� � §D¬]¨�£]«o¨�®-¬]¤>ða¨i¶�£]°²¤¦±o¼¤Bµ/£]«G¨�¶&°½®m«G¨&¬]£_¨�åv£P¤¦±6£_¤�°²£]¼Pío¬!¼_£�§B±-©%¼_¨i¶�¤¦±o©�¶�¤¦¥�®Ò¤¦±o¨i±6£]¼NþN¾Ëw¨&µr¤B¬!¨�©o°f¼]¶&¢o¼]¼]°f±G³ � ¤Lêw§D·ÒàR¼~®o¬]¤t¤Bµ@´+¹½¨&£&àR¼�¬]¨i¶&§B¹²¹w°²±�°²±oµr¤B¬!¥�§B¹2£_¨&¬!¥�¼�ê�«o§D£�¼_¨�­

¥�§B±[£]°²¶"¼]¨i¶&¢G¬!°½£@»�¥�¨i§B±o¼�ý8°f±�£]«G¨�¼_¨i±o¼_¨�¤Bµ$�lÐiÌ3��þP§B±o©«G¤gê�¤¦±G¨�¶&§B±�¸4¨�¶�¤¦±[¯t°f±o¶�¨i©£]«o§D£ �s¹IB�§B¥�§B¹s¨i±-¶�¬]»[®-£]°½¤¦±û°²¼�¼_¨i¥�§B±[£]°²¶&§B¹²¹½»�¼]¨i¶&¢G¬]¨�§B¼!¼]¢o¥�°²±o³�ô�ô�õ�¾�ét¨i¥�§B±[£]°²¶¼_¨i¶&¢o¬!°½£u»ºý8°²±�§B±û¨iÿ[¢-°½¯>§B¹²¨i±6£�µ�¤B¬!¥�¢o¹²§D£]°½¤¦±(·v±G¤Lê�±�§B¼�°f±o©o°²¼_£]°f±G³¦¢o°²¼]«-§D¸-°²¹²°l£@»�¢-±o©G¨&¬¶N«G¤¦¼_¨i±®-¹²§B°²±[£_¨�åt£�§D£_£]§B¶]·Ò´|ç � ô�­Jß �4 �þ�§B¼]¼]¢-¥�°²±G³�ô�ô�õ ¥�¨i§B±-¼�£]«G¨�µr¤¦¹f¹½¤gê�°f±G³G�`°½µ§B±ù§B©G¯B¨&¬!¼]§D¬!»�¶!«G¤t¤¦¼_¨i¼�£@ê`¤%¥�¨i¼]¼!§D³B¨i¼ � ! §B±o© � . §B±o©ù¼_¨i±o©-¼�£]«G¨i¥ø£_¤�£]«G¨~�tÈ:�Á¦�L�kÇw§B¹½³B¤B¬N°½£]«o¥%´Dê�«o°f¶!«"¨i±-¶�¬]»[®-£]¼�¤¦±G¨`¤Bµo£]«G¨i¥ ����¶N«G¤¦¼_¨i±~§D£k¬N§B±o©G¤¦¥%´>£]«G¨i±�£]«G¨§B©G¯B¨&¬N¼]§D¬]»ùê�°²¹²¹+±G¤B£�¸4¨�§D¸-¹½¨�£_¤�³¦¢o¨i¼]¼� �ê�°½£]«Þ®o¬!¤B¸-§D¸-°²¹²°²£u»�¼]°²³¦±o°½í-¶&§B±[£]¹½»�³B¬]¨i§D£_¨&¬£]«o§B± .� ë £]«o§D£�°²¼i´�ê�°½£]«º§B± ú_§B©o¯>§B±[£]§D³B¨iüû³B¬!¨i§D£_¨&¬�£]«o§B±ã¼_¤¦¥�¨�¼_®4¨i¶&°½ío¨i© ��ë¢o±-¹½¨i¼]¼d°½£�°²¼�§D¸m¹½¨�£_¤�¼_¤¦¹½¯B¨"ô�ô�õ ê�°½£]«�®-¬]¤B¸-§D¸-°²¹f°½£u»�³B¬!¨i§D£_¨&¬�£]«o§B± .�

�� ����� ¾

Ëw»�©G¨&í-±o°²£]°½¤¦±|´�¼_¤¦¹²¯t°²±o³�ô�ô�õ °²±û§�³B¬]¤¦¢G® � ê�°½£]«(³B¨i±G¨&¬!§D£_¤B¬� (¥�¨i§B±o¼"£]«-§D£&´³¦°½¯B¨i±�§"£_¬!°²®-¹½¨�ý� ���� �� � ��LþN´t¤¦±G¨�¥�¢o¼_£w©G¨&£_¨&¬!¥�°²±o¨Pê�«G¨&£]«G¨&¬`¤B¬w±G¤B£2��� � ��¥�¤v© �t´£]«o§D£�°f¼&´�ê�«G¨&£]«G¨&¬%¤B¬�±G¤B£ � + ��� ¾ Ï�«G¨(ô�ô�õ §B¼!¼]¢o¥�®o£]°²¤¦±æ¼!§i»v¼&´�¬]¤¦¢G³¦«o¹²»¼_®4¨i§D·v°²±G³G´w£]«o§D£�£]«G¨&¬]¨°f¼�±G¤ ¨*E�¶&°½¨i±[£�§B¹½³B¤B¬!°²£]«o¥ £]«o§D£�¶&§B±ä©G¤�£]«o°²¼�ê�°½£]«á±G¤¦±v­±G¨&³¦¹f°½³¦°½¸-¹½¨�®o¬]¤B¸-§D¸m°²¹²°½£@»B´2ê�«G¨&¬]¨�£]«G¨%®o¬!¤B¸-§D¸-°²¹²°²£u»�°²¼~£]§D·B¨i±ã¤g¯B¨&¬�§B¹²¹P°f±o¼_£]§B±o¶�¨i¼~¤Bµô�ô�õâ§B±o©~§B¹²¹6¬!§B±o©G¤¦¥�¼_¨iÿt¢G¨i±o¶�¨i¼/¤Bµ-¶�¤¦°²±�£_¤¦¼]¼_¨i¼+¢o¼]¨i©�°²±�£]«G¨d§B¹½³B¤B¬!°½£]«-¥%¾�ça±�¤B£]«o¨&¬êw¤B¬!©o¼&´>£]«G¨&¬]¨w°²¼�±o¤�¼]¢o¶N«�§B¹½³B¤B¬N°½£]«o¥ ê�«o¤¦¼_¨s®o¬!¤B¸-§D¸-°²¹²°²£u»�¤BµG¬!¨&£]¢G¬!±o°²±o³�úa£_¬!¢G¨iü�ê�«G¨i±®o¬!¨i¼_¨i±6£_¨i©�ê�°²£]«�°²±o®-¢G£:¤Bµm£]«G¨`µ�¤B¬!¥ ý� � � � � ��� þ:©o°½èÒ¨&¬!¼k¸t»�¥�¤B¬]¨d£]«o§B± � ����� µ�¬]¤¦¥°½£]¼�®o¬]¤B¸-§D¸m°²¹²°½£@»�¤BµP¬]¨&£]¢G¬N±o°²±G³ãúa£_¬N¢G¨iü�ê�«o¨i±�®o¬]¨i¼]¨i±6£_¨i© ê�°½£]« °²±G®-¢G£�¤BµP£]«o¨�µ�¤B¬!¥ý� � � � � � þ�ê�°²£]« �Þ¬N§B±o©G¤¦¥%¾(çJµ�¤¦±G¨%«o§B¼�§Þô�°�E�¨�­uõ�¨i¹²¹²¥�§B± £_¬N°½®-¹½¨�§B±o©Â§(±G¤¦±v­ô�°�E�¨�­uõ�¨i¹²¹²¥�§B±û£_¬!°²®-¹½¨�§B±o©y¬!§B±o©G¤¦¥�¹²»�¶!«G¤t¤¦¼_¨i¼�¤¦±G¨�¤Bµ�£]«G¨i¥ §B¼�°²±G®-¢o£�£_¤�¼]¢o¶N«§B±§B¹½³B¤B¬!°½£]«o¥�´-°½£�ê�°²¹²¹|¶�¤B¬]¬]¨i¶�£]¹²»�©G¨&£_¨&¬!¥�°²±o¨�ê�«G¨&£]«G¨&¬�¤B¬�±G¤B£�£]«G¨�£_¬N°½®-¹½¨"°²¼�¤Bµ2£]«G¨µ�¤B¬!¥ ý� � � � � ��� þwê�°½£]«�®o¬!¤B¸-§D¸-°²¹²°²£u»�³B¬]¨i§D£_¨&¬�£]«o§B± .�

�� ����� ¾

çJ£&àR¼2°²±6£]¢-°½£]°½¯B¨i¹½»"¶&¹½¨i§D¬+£]«o§D£2£]«o¨d§B©o¯B¨&¬!¼]§D¬]»ÒàR¼+£]§B¼_·�°f±�£_¬]»v°²±G³�£_¤�¯t°²¤¦¹²§D£_¨P¼_¨i¥�§B±[£]°²¶¼_¨i¶&¢o¬!°½£u»�ë ±o§B¥�¨i¹²»B´m³¦°½¯B¨i± � ´ -´ � ´4§B±o© � +ªý� � � ��� ���!þ�©G¨&£_¨&¬!¥�°f±G¨�ê�«o¨&£]«G¨&¬£]«G¨�¹²§B¼_£P¶�¤¦¥�®4¤¦±G¨i±[£d³¦°½¯B¨i¼P§~ô�°�E�¨�­uõ�¨i¹²¹²¥�§B±�£_¬!°½®-¹²¨�§Dµ�£_¨&¬�°½£w°f¼w©-°½¯t°f©G¨i©�¸t» � ! ¤B¬§Dµ�£_¨&¬�°½£�°f¼�©o°½¯v°²©G¨i©�¸t» � . ë °²¼P¯B¨&¬]»%¼]°f¥�°²¹²§D¬P£_¤�£]«o¨"®o¬]¤B¸-¹²¨i¥ ¤Bµ2©o°²¼_£]°²±o³¦¢o°²¼]«o°f±G³¸4¨&£uêw¨&¨i±�§�ô�°�E�¨�[õ�¨i¹²¹²¥�§B±�£_¬N°½®-¹½¨�§B±o©%§~¬!§B±o©o¤¦¥ª£_¬!°½®-¹½¨B¾+çJµ�¤¦±G¨�êd§B±[£]¼�§~µr¤B¬N¥�§B¹§D¬]³¦¢-¥�¨i±6£&´/¤¦±G¨�¶&§B±y¶�¤¦±o¼_£_¬N¢o¶�£�§%¬]¨i©-¢o¶�£]°½¤¦±(µ�¬]¤¦¥ ô�ô�õª£_¤�¸-¬]¨i§D·t°f±G³ �s¹IB�§B¥�§B¹¨i±o¶�¬!»[®o£]°²¤¦±%°²±%£]«G¨�¼]¨i±o¼_¨�¤Bµ2¼_¨i¥�§B±[£]°²¶"¼_¨i¶&¢o¬!°½£u»B¾ � §B¥�¨i¹½»B´m¼]¢o®o®4¤¦¼_¨�£]«o§D£�¤¦±G¨�«o§B¼§B±�§B©G¯B¨&¬!¼]§D¬!»�£]«o§D£`¯v°½¤¦¹²§D£_¨i¼w¼_¨i¥�§B±[£]°²¶�¼_¨i¶&¢G¬!°½£@»�ê�°½£]«�§B©G¯>§B±[£]§D³B¨�� � ����� ¾TB�°²¯B¨i±§�£_¬!°½®-¹²¨�ý� � � � ���/þ�ê�«G¨&¬!¨��º¥�§i»�¤B¬�¥�§g»�±G¤B£�¸4¨�¨iÿt¢o§B¹/£_¤ ��� ´4¤¦±G¨�¼]¨i±o©o¼�£]«G¨®-¢o¸-¹²°²¶w·B¨&» ���£_¤�£]«G¨�§B©G¯B¨&¬!¼]§D¬!»B´tê�«o°²¶!«�¼_¨i¹½¨i¶�£]¼`£uêw¤�¥�¨i¼]¼]§D³B¨i¼ � ! §B±o© � . ¾ . ±G¨£]«G¨i±y¬!§B±-©G¤¦¥�¹½»�¶N«G¤[¤¦¼]¨i¼� � gÉ �iÐ �§B±o©Â¼_¨i±-©o¼�£]«o¨�§B©o¯B¨&¬!¼]§D¬]» £]«G¨%¶&°½®-«G¨&¬]£_¨�åv£ý� � ��� ���!þN¾sç@µ/£]«G¨"§B©G¯B¨&¬!¼!§D¬]»%¶�¤B¬]¬]¨i¶�£]¹½»%©G¨&£_¨&¬!¥�°²±G¨i¼� L´G£]«G¨i±%¤¦±G¨�¤¦¢G£_®-¢G£]¼�úa£_¬N¢G¨iüý8°X¾p¨B¾½´B¤¦±o¨BàR¼k£_¬N°½®-¹½¨s°f¼�§�ô�°�E�¨�[õ�¨i¹²¹²¥�§B±�£_¬!°½®-¹½¨Lþ 0D¤B£]«G¨&¬!ê�°²¼_¨së £]«-§D£/°²¼i´D°²µo°½£�¤¦¢G£_®m¢G£]¼£]«G¨2ê�¬]¤¦±G³� /¤B¬:¨i¹²¼]¨2µ�§B°²¹f¼4£_¤�³¦°½¯B¨s¥�¨i§B±-°²±G³Bµ8¢o¹>¤¦¢G£_®-¢G£&´D§B¼:¶�¤¦¢o¹²©�«o§D®o®4¨i±�°½µ�� �+ ���§B±o© � °²¼"±G¤B£�§B±û¨i±o¶�¬]»t®o£]°½¤¦±Þ¤Bµd¨i°½£]«G¨&¬�¥�¨i¼]¼]§D³B¨�ë ¤¦±G¨�¤¦¢o£_®-¢G£]¼�úaµ8§B¹²¼_¨B¾RüÀç@£�°²¼¨i§B¼_»£_¤%¼_¨&¨~£]«o§D£�£]«G¨~®o¬]¤B¸-§D¸-°f¹²°½£u»�¤Bµ`¤¦¢G£_®-¢G£_£]°²±o³ úa£_¬!¢G¨iü%°f¼�� .� ê�«o¨i±�� �+ ���§B±o© � .�

�� ����� ê�«G¨i±�� + ��� ¾

Page 14: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

. � ����������� �������

Ï�«G¨æúa®o¬]¤t¤Bµ�¤Bµ�¼_¨i¶&¢G¬N°½£u»vü °f±â£]«G¨Þ¹²§B¼_£�®-§D¬!§D³B¬!§D®-«áê�°²¹f¹P®o¬]¤B¸-§D¸m¹½»º¼_£_¬!°½·B¨£]«G¨¬]¨i§B©o¨&¬"§B¼�¬!§D£]«G¨&¬�¤B¸t¯t°²¤¦¢o¼&¾�çJ±ùµ8§B¶�£&´k§�¬]¨i§B©G¨&¬�ê�«G¤GàR¼"°²±Þ§B±(¢o±o¶N«o§D¬!°½£]§D¸m¹½¨�¥�¤[¤v©¥�°²³¦«6£P¨&¯B¨i±¶!«o§D¬!§B¶�£_¨&¬N°½î&¨�°½£�§B¼�§�£_¬!°½¯v°²§B¹4£]§B¢G£_¤¦¹½¤B³B»B¾

� ¤gê ¹½¨&£&àR¼�¹²¤[¤B·%§D£ � ¤gêd§D·ÒàR¼�®-¬]¤[¤BµJ¾dõ�¨�¼]£]§D¬]£]¼�¤¦¢o£�ê�°½£]«ãúa³¦§B¥�¨�­Uî&¨&¬]¤G´Rü�ê�«o°f¶!«°²¼�£]«G¨�µ�¤¦¹²¹½¤Lê�°²±G³�µ�¤B¬!¥�§B¹²°½î&¨i©Þ¯B¨&¬N¼]°½¤¦±Þ¤Bµs£]«o¨�©G¨&í-±o°½£]°²¤¦±�¤Bµd¼_¨i¥�§B±[£]°²¶�¼_¨i¶&¢G¬N°½£u»Þ°²±£]«G¨�ç � ô�­Jß �4  µ�¤B¬!¥�¢o¹²§D£]°½¤¦±:¾�õ�¨&¬]¨%� . ©G¨i±G¤B£_¨i¼�£]«G¨~§B¹½³B¤B¬!°²£]«o¥ø£]«o§D£�£]«o¨~§B©o¯B¨&¬_­¼]§D¬!»�¢-¼_¨i¼P£_¤�®-¬]¤t©-¢o¶�¨�£uêw¤�¥�¨i¼!¼]§D³B¨i¼���! � � . ´Ò§B±o© � � ©G¨i±G¤B£_¨i¼�£]«G¨�§B©G¯B¨&¬N¼]§D¬]»ÒàR¼§B¹½³B¤B¬N°½£]«o¥ª£]«o§D£P³¦¢G¨i¼!¼_¨i¼�ê�«-°²¶!«�¸-°½£�°f¼d£]«G¨"¼]¢G¸-¼!¶�¬!°½®o£w¤Bµk£]«o¨�¨i±o¶�¬]»t®o£_¨i©�¥�¨i¼]¼!§D³B¨�0¸4¤B£]«$� . §B±o©$� � §D¬]¨�®o¬!¤B¸-§D¸-°²¹²°f¼_£]°²¶D´D§B±o©�¼_¤�©o¨&®Ò¨i±-©~¤¦±�§�¬!§B±-©G¤¦¥ ¼_£_¬!°f±G³���£]§D·B¨i±µ�¬]¤¦¥ ¼_¤¦¥�¨"¼_¨&£��~¾

���������������s¬�������

����������

¹½¨&£sý � � � � )Dþ�� �m�6���m�tÈdýUþ4°f±¹½¨&£��������º°²±¹½¨&£sý � ! � � . þ�� � . ý�� � � �|þ|°²±¹½¨&£ ���� 6Ð � � �d°f±¹½¨&£ � � �vÈkÁ¦�g�kÇ[ý � � � ���!þ|°²±¹½¨&£�� �� � � ý�� � � � � � þ:°²±� � +"!� ?�

#%$$$$$$$$&� �

��������������� � �����

Ï�«G¨ù¼_£_¬!¢o¶�£]¢o¬]¨�¤Bµ"£]«o¨®o¬!¤[¤Bµ"°²¼�§ ¼]¨&¬!°½¨i¼�¤Bµ�ú_«G¤B®-¼]ü µ�¬]¤¦¥ ¤¦±o¨³¦§B¥�¨ù£_¤Â§B±¨i¼]¼]¨i±6£]°²§B¹f¹½»%¨iÿ[¢-°½¯>§B¹²¨i±6£�¤¦±G¨B´|¢o±6£]°f¹:í-±o§B¹f¹½»�¤B¸o£]§B°²±o°²±o³�§�³¦§B¥�¨~ê�«G¤¦¼_¨�£_¬!¢G£]«ù°²¼�§B±°²¥�¥�¨i©o°²§D£_¨i¹½»"¶�¤¦±-¼_¨iÿ[¢o¨i±o¶�¨d¤Bµ-¤¦±G¨d¤Bµ � ¤gêd§D·ÒàR¼�¶�¤B¬]¤¦¹²¹²§D¬N°½¨i¼&¾Pý8Ï�«G¨w¨i§D¬!¹²°½¨&¬+®-§D³B¨i¼+¤Bµ� � Í��v¶�¤¦±6£]§B°f±�§�¹²°½¸o¬N§D¬]»�¤BµGµ�¤¦¢G¬]£_¨&¨i±�£]«G¨&¤B¬!¨i¥�¼&´D®o¬]¤B®4¤¦¼]°½£]°²¤¦±o¼&´L§B±-©�¶�¤B¬]¤¦¹²¹f§D¬!°½¨i¼�¹f§D£_¨&¬£_¤�¸4¨�¢o¼_¨i©£_¤�¨�èÒ¨i¶�£�£]«G¨�£_¬!§B±o¼!°½£]°½¤¦±�¼]£_¨&®-¼�°²±�£]«G¨~¼_¨i¶&¢G¬N°½£u»�®-¬]¤[¤Bµ8¼�µr¤B¬��s¹IB�§B¥�§B¹§B±o©%«-§B¼]«G¨i©v­ �`¹IB�§B¥�§B¹|¨i±-¶�¬]»[®-£]°½¤¦±|¾}þÏ�«G¨�£_¬!§B±o¼]°½£]°²¤¦±Âµr¬]¤¦¥ ³¦§B¥�¨�­Uî&¨&¬]¤y£_¤û³¦§B¥�¨�­U¤¦±G¨ù°²±[¯B¤¦¹½¯B¨i¼�¬]¨&®m¹²§B¶&°²±G³'�m�6���m�tÈ

§B±o©%�vÈkÁ¦�g�kÇ�¸t»�£]«G¨i°½¬�©G¨&ím±o°½£]°½¤¦±o¼i�������������������

��¬(������

��������������

¹½¨&£ �)�*� � ) °²±¹½¨&£sý � � � � )Dþ+� ý� ���� �|þÒ°²±¹½¨&£������,�º°f±¹½¨&£sý � ! � � . þ�� � . ý�� � � �4þ:°²±¹½¨&£ -��� 6Ð � � �w°²±¹½¨&£ �.��� � ) °²±¹½¨&£ � � ý� �� � � ��� ���]þ4°²±¹½¨&£ � -� � � ý�� � � � � � þ�°²±� � + ! �

#%$$$$$$$$$$$$&� �

������������������

� � �����

 �µr£_¨&¬�£]«G¬]¨&¨�¥�¤B¬]¨�³¦§B¥�¨i¼�ý�ê�«o°²¶!«�ç�ê�°²¹²¹+¤¦¥�°²£�¼_¤§B¼�±G¤B£�£_¤ù¢o±-©o¢o¹½»£]§>å�£]«G¨¬]¨i§B©o¨&¬!¼&àG£]°²¥�¨"§B±-©%£_¬]»�£]«G¨i°½¬�®-§D£]°²¨i±o¶�¨LþN´ � ¤gêd§D·%¨i±o©o¼dê�°½£]«%§�í-±o§B¹4³¦§B¥�¨�­Uío¯B¨B�

��¬(������ ��������

¹²¨&£ �/��� � ) °²±¹²¨&£ �0��� � ) °²±¹²¨&£��1�*�,�º°²±¹²¨&£ 2�*� 6Ð � � �P°²±¹²¨&£ �3� � � ) °²±� � � ý�� � ����gý� �� � �� ���&ý � . ý�� � �tþ_þ_þ_þ"+"! �

#%$$$$$$&+ �

Page 15: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

��������)���:�A��� � � ��������G� �F��� ����� ��F�������F� �� ��� . �

Ï�«-°²¼`¶�¤¦±-¶&¹²¢o©G¨i¼w£]«G¨�®o¬]¤t¤BµJ´t¸4¨i¶&§B¢o¼]¨�³¦§B¥�¨�­Uío¯B¨�°²¼w£_¬!¢G¨�§B¶&¶�¤B¬!©-°²±G³~£_¤�§~¶�¤B¬]¤¦¹²¹²§D¬]»£]«o§D£�¼]§i»v¼�£]«-§D£�£]«G¨"®-¬]¤B¸-§D¸-°²¹f°½£u»�¤Bµ+¶N«G¤t¤¦¼]°²±G³�§�®-§D¬]£]°²¶&¢-¹²§D¬P¨i¹½¨i¥�¨i±[£�� � � ê�«G¨i±§B±%¨i¹²¨i¥�¨i±6£�°²¼d¬!§B±o©G¤¦¥�¹½»�¶N«G¤¦¼_¨i±�µ�¬]¤¦¥ ��°²¼P¨iÿt¢o§B¹|£_¤Ð���� ���}¾�:¨&£&àR¼%¶�¤¦¥�®-§D¬]¨ � ¤gêd§D·màR¼%®-¬]¤[¤Bµ�¤Bµ�¼_¨&¯B¨&¬!§B¹�®m§D³B¨i¼�ê�°½£]«á£]«G¨Þ¤¦±G¨�­U®-§D¬!§D³B¬!§D®m«

¤¦±G¨�çP³¦§i¯B¨�¸4¨&µ�¤B¬]¨B¾�õ�°²¼�®o¬!¤[¤Bµ�«o§B¼�£]«G¨~§B©G¯D§B±6£]§D³B¨~¤Bµ2¸4¨i°²±G³�¥�§B¶!«o°²±o¨�­u¶!«G¨i¶!·>§D¸-¹²¨¢o¼!°²±G³�£]«G¨L G¬]¨i±o¶N«äú!ßw¤tÿtü�®o¬]¤t¤Bµf­u§B¼]¼!°²¼_£]§B±[£&¾ ��¬!¤B¸-§D¸-¹½» � ¤gêd§D·°²¼�§B¹²¼_¤�¶�¤B¬]¬]¨i¶�£�°²±¶&¹²§B°f¥�°²±G³�£]«o§D£�«o°²¼/®o¬!¤[¤BµÒ°²¼�ú_«[¢-¥�§B±o¹½»�¶N«G¨i¶]·D§D¸-¹½¨B´Rü�§B¹½£]«G¤¦¢o³¦«~£]«o§D£s¥�°½³¦«[£2©G¨&®4¨i±o©¤¦±%ê�«G¤�£]«G¨"«o§D®-¹²¨i¼]¼P«[¢-¥�§B±�°²¼dê�«o¤�°²¼�§B¼]¼]°²³¦±G¨i©�£]«o°²¼P£_¨i©-°½¤¦¢o¼d£]§B¼_·Ò¾õ�¤gêw¨&¯B¨&¬i´|°²±�§�©G¨&¨&®4¨&¬�¼]¨i±o¼_¨ � ¤gêd§D·màR¼�¼]°½å[­U³¦§B¥�¨�®o¬]¤t¤Bµ/°f¼�¥�¢-¶!«�¹²¨i¼]¼�¼]¢-°½£]§D¸-¹½¨

µ�¤B¬�«[¢-¥�§B±�¶�¤¦±o¼]¢o¥�®-£]°½¤¦±�£]«o§B±�£]«G¨�¤¦±G¨�­U®-§D¬N§D³B¬!§D®-«%®o¬!¤[¤Bµ:£]«-§D£Pçsê�¬]¤B£_¨"°f±�®m¹²§B°²±�`±G³¦¹²°²¼]«:¾�Ï�«o¨�©o§B±o³B¨&¬�£_¤�«t¢o¥�§B±-¼�¬!¨i§B©o°²±G³�«o°²¼�®o¬]¤t¤Bµs°²¼�£]«o§D£�£]«G¨&»ê�°²¹²¹k±G¤B£�¼_¨&¨£]«G¨�µr¤B¬]¨i¼]£�µr¤B¬s£]«G¨�£_¬]¨&¨i¼&¾�Ï�«o§D£s°²¼&´6£]«G¨&»màR¹f¹G³B¨&£`¼_¤�¸Ò¤B³B³B¨i©�©G¤gê�±�°²±�¯B¨&¬!°²µr»v°²±G³�¨i§B¶!«ú_«G¤B®mü�µr¬!¤¦¥ ¤¦±G¨�³¦§B¥�¨�£_¤�§B±G¤B£]«G¨&¬w£]«o§D£s£]«G¨&»~êw¤¦±|àp£`¼]¨&¨�£]«G¨�¸-°½³�®-°²¶�£]¢o¬]¨B¾+çJ±�£]«-°²¼¶&§B¼_¨�£]«G¨�¸-°½³�®-°²¶�£]¢o¬]¨�°²¼`£]«o§D£dê�«o§D£d°²¼`¸4¨i°²±G³�®-¬]¤g¯B¨i©%°²¼w¹²°½£_£]¹²¨�¥�¤B¬]¨�£]«o§B±�§�£_¬!°½¯v°²§B¹£]§B¢G£_¤¦¹²¤B³B»B¾2çJ±�§B±[»~¨&¯B¨i±6£&´t£]«G¨&¬]¨�¶&§B±�¸4¨P±G¤�©G¤¦¢G¸-£/£]«-§D£�£]«G¨�³¦§B¥�¨�­u«o¤B®o®-°²±G³�®-¬]¤[¤Bµ°²± � � Í��mêw¤¦¢o¹²©�«o§i¯B¨�£_¤�¸Ò¨�¬!§D£_¨i©�§�É�¤¦±�§�É>­U£_¤D­!Ð&É�¼]¶&§B¹½¨�°²µ4°²£`°²¼|ð_¢o©o³B¨i©�§B¶&¶�¤B¬!©o°f±G³£_¤�£]«G¨�¶�¬!°½£_¨&¬N°½¤¦±�³¦°½¯B¨i±�§D£s£]«G¨�¨i±o©�¤Bµ|£]«G¨�©o°²¼]¶&¢o¼!¼]°½¤¦±~¤Bµ|®o¬]¤t¤Bµ8¼�°²±~ós¢|¾[çN¾�>�§B±o°f±|àR¼¸4¤t¤B·�¤¦±%¥�§D£]«G¨i¥�§D£]°f¶&§B¹|¹½¤B³¦°²¶�ý�� � Ê��U´G®:¾oÌvÐgþN��ú_§~³B¤t¤t©�®o¬!¤[¤Bµ/°²¼w¤¦±G¨�ê�«o°²¶N«�¥�§D·B¨i¼¢o¼dê�°²¼_¨&¬i¾Rü

�����

Ëw¤B£]« ¥�»ã¤¦±G¨�­U®-§D¬N§D³B¬!§D®-«ä®o¬]¤t¤Bµ�¤Bµ�£]«G¨Þ£]§B¢G£_¤¦¹½¤B³B» §B±o© � ¤gêd§D·màR¼¼]°låt­U³¦§B¥�¨®o¬!¤[¤Bµ"µ8§B°²¹�£_¤â¥�§D·B¨û¢-¼_¨Þ¤Bµ�§B± °²¥�®Ò¤B¬!£]§B±6£�®o¬]¤B®4¨&¬]£@»ã¤Bµ �s¹IB�§B¥�§B¹�¨i±-¶�¬]»[®-£]°½¤¦±£]«o§D£�°²¥�®-¹²°²¨i¼�§ ¥�¢-¶!«ã¼]£_¬]¤¦±G³B¨&¬�¬!¨i¼]¢o¹½£&¾ � §B¥�¨i¹½»B´P£]«o¨�©o°²¼]¶�¬!¨&£_¨�­u¹½¤B³¦§D¬!°½£]«o¥ §B±o©ô�°�E�¨�[õ�¨i¹²¹²¥�§B±"®o¬]¤B¸m¹½¨i¥�¼/°²±�§�íGåv¨i©�®o¬N°²¥�¨�­U¤B¬!©G¨&¬/³B¬]¤¦¢G®~«o§g¯B¨d§�¼_¨i¹½µr­U¬]¨i©o¢-¶&°½¸-°²¹²°²£u»®o¬!¤B®Ò¨&¬!£u»�£]«-§D£�§B¹²¹½¤Lê�¼P¢o¼d£_¤�¥�§D·B¨�§�¼_®4¨i¶&°½í-¶�°²±o¼_£]§B±-¶�¨"°²±6£_¤�§~¬N§B±o©G¤¦¥ °²±o¼]£]§B±o¶�¨B¾ �¼�§�¬]¨i¼!¢o¹½£d£]«G¨"¬]¨i©-¢o¶�£]°½¤¦±o°²¼]£w§D¬]³¦¢-¥�¨i±6£�¶&§B±�¸4¨"¼_£_¬]¨i±G³B£]«o¨i±G¨i©%£_¤�¼]«o¤gê £]«o§D£�§B±§B©G¯B¨&¬N¼]§D¬]»~£]«o§D£w³¦¢G¨i¼]¼_¨i¼ wê�°½£]«�®-¬]¤B¸-§D¸-°²¹f°½£u» � .�

��`¶&§B±�¸4¨�¢-¼_¨i©�£_¤�¶�¤¦±o¼_£_¬!¢o¶�£w§

ô�ô�õ�­u¼]¤¦¹½¯B¨&¬�£]«o§D£P¼]¢o¶&¶�¨&¨i©-¼P±G¤B£kð_¢o¼]£`ê�°²£]«�®o¬!¤B¸-§D¸-°²¹²°²£u»�� .��� ����� ´v¸-¢o£w°²±�µ8§B¶�£

ê�°²£]«�®o¬]¤B¸-§D¸-°f¹²°½£u» � Ð � �&¾Ïk¤û¼_¨&¨%£]«o°²¼i´`¼]¢G®-®Ò¤¦¼]¨�£]«o§D£�ê`¨�§D¬]¨%³¦°²¯B¨i±â§(£_¬!°½®m¹½¨Þý� ��� �� ���+þ~§B±o©ºêd§B±[£�£_¤

©G¨&£_¨&¬N¥�°²±G¨�ê�«G¨&£]«G¨&¬�¤B¬�±G¤B£ � + ��� ¾� G¤B¬"¬N§B±o©G¤¦¥�¹½»%¼_¨i¹²¨i¶�£_¨i© � ���%êw¨�¼_¨i±o©£]«G¨§B©G¯B¨&¬N¼]§D¬]»�£]«G¨�®-¢G¸m¹²°²¶d·B¨&» �� � ´v§B±o©�ê`¨�¨i±o¶�¬]»t®o£`£]«G¨�¥�¨i¼]¼]§D³B¨ ����ý�µ�¤B¬P§�¬!§B±-©G¤¦¥ � gÉ �iÐ �>þs§B¼�ý� ��� ��� � � ���]þN¾ � ¤B£_¨�£]«o§D£�ý� � � � ��� ��� � � þ+°f¼�§�ô�°�E�¨�[õ�¨i¹²¹²¥�§B±�£_¬N°½®-¹½¨°½µ/§B±o©�¤¦±o¹½»�°½µwý� ��� �� ���+þd°²¼d¤¦±o¨B¾s �µ�£_¨&¬�§�¹f§D¬]³B¨"±[¢-¥�¸4¨&¬P¤Bµ+©o°lè4¨&¬]¨i±6£P®m§B°½¬!¼�ý�� ���[þêw¨�¹½¤t¤B·(§D£�£]«G¨�®o¬]¤B®4¤B¬]£]°½¤¦±(¤Bµ�¶�¤B¬!¬]¨i¶�£�³¦¢G¨i¼!¼_¨i¼�¤Bµ� �¸t»Þ£]«G¨�§B©o¯B¨&¬!¼]§D¬]»B¾%çJµd¤¦¢G¬£_¬!°²®-¹½¨�ý� ���� �� ���/þ�°²¼�§ ô�° E�¨�[õ�¨i¹f¹²¥�§B±º£_¬!°²®-¹½¨B´s£]«o¨i±ã°½£�°f¼�§B¹²¥�¤¦¼_£�¶�¨&¬]£]§B°²±ã£]«o§D££]«G¨�®o¬]¤B®4¤B¬]£]°½¤¦±�¤Bµ�¶�¤B¬]¬]¨i¶�£d§B±o¼_êw¨&¬!¼`ê�°²¹²¹G¸4¨�¼!°½³¦±o°½í-¶&§B±[£]¹½»~³B¬]¨i§D£_¨&¬d£]«o§B± .� 0G°½µ|±G¤B£&´£]«G¨i±�°²£�°²¼2§B¹²¥�¤¦¼_£�¶�¨&¬!£]§B°²±�£]«o§D£2£]«G¨�§B©G¯B¨&¬!¼]§D¬]»�ê�°²¹f¹6¨i°½£]«o¨&¬s±G¤B£2³¦°½¯B¨�¢o¼]¨&µ�¢o¹v¤¦¢o£_®-¢G£¤B¬w¨i¹²¼_¨�¤¦¢G£_®-¢G£`£]«G¨�ê�¬]¤¦±G³�³¦¢G¨i¼]¼d¶&¹½¤¦¼_¨�£_¤�ÌDÉ � ¤Bµ:£]«G¨�£]°²¥�¨B¾�ý�çNàp¯B¨�¤¦¥�°²£_£_¨i©�¼]¤¦¥�¨©G¨&£]§B°f¹²¼&¾}þ_;(¨�£]«[¢o¼d«o§g¯B¨"§~¥�¨&£]«G¤v©�£_¤�¼_¤¦¹½¯B¨�ô�ô�õ ê�°²£]«�§B¹²¥�¤¦¼_£�Ð&ÉBÉ � ¶!«o§B±o¶�¨�¤Bµ¼]¢-¶&¶�¨i¼]¼&¾ï ±Gµr¤B¬!£]¢o±o§D£_¨i¹½»B´v£]«o°²¼`¼_£_¬]¤¦±G³B¨&¬P§B±o©�¥�¤B¬!¨�°²±[£_¨&¬]¨i¼_£]°f±G³�¬]¨i¼!¢o¹½£`©o¤[¨i¼w±G¤B£d¼_¨&¨i¥ª£_¤

¸4¨�¬!¨i§B©o°²¹½»�¤B¸o£]§B°²±o§D¸m¹½¨�¤B¬�¶!«o¨i¶]·D§D¸-¹½¨~¢o¼]°²±G³ � ¤Lêw§D·ÒàR¼�£_¨i¶!«-±o°²ÿt¢G¨i¼&¾�Ï�«G¨�¤B¸-¼]£]§B¶&¹½¨§D®o®4¨i§D¬!¼�£_¤¸4¨�£]«o§D£�£]«o¨�§D¬]³¦¢-¥�¨i±6£�¬]¨iÿt¢o°½¬]¨i¼�¼_¤¦¥�¨�£]«G¤¦¢G³¦«[£�§B±o©y°²¼�±G¤B£�ð]¢o¼_£�§

Page 16: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

. � ����������� �������

¼_¨iÿt¢G¨i±o¶�¨�¤Bµ:£_¬!°½¯v°²§B¹G¨iÿt¢o°½¯D§B¹½¨i±o¶�¨i¼s£]«o§D£d¶&§B±�¸4¨�¹²¤[¤B·B¨i©�¢G®�°²±�§�¹²°½¸o¬!§D¬!»�¤Bµ|³B¨i±G¨&¬N°²¶£]§B¢G£_¤¦¹²¤B³¦°½¨i¼&¾ +°²±o§B¹²¹²»B´P£]«G¨Þ¬]¨i§B©G¨&¬%¥�°½³¦«[£�«-§i¯B¨�±G¤B£]°²¶�¨i©æ£]«o§D£%¥�»ã©G¨&í-±-°½£]°½¤¦±á¤Bµ �s¹IB�§B¥�§B¹

¨i±o¶�¬!»[®o£]°²¤¦±�§D£s£]«G¨P¸4¨&³¦°²±o±o°²±o³�¤BµÒ£]«o°²¼2¼_¨i¶�£]°½¤¦±~ë ê�«o°²¶N«~ç�£_¤t¤B·�©o°½¬]¨i¶�£]¹½»�µr¬!¤¦¥ � � Í��ë °²¼"¥�°²¼!¼]°²±G³%§�¶�¬!¢-¶&°²§B¹�¶�¤¦±o©o°²£]°½¤¦±|´�±o§B¥�¨i¹½»Þ£]«o§D£"£]«G¨�³B¬]¤¦¢G®�¤B¬!©o¨&¬ �%°²¼�®-¬!°²¥�¨B¾Ï�«-°²¼�¶�¤¦±o©o°½£]°½¤¦±Þ©G¤t¨i¼�±G¤B£&´k¤Bµ`¶�¤¦¢G¬!¼]¨B´k§>è4¨i¶�£ � ¤Lêw§D·ÒàR¼"®-¬]¤[¤Bµ`¤Bµw¼]¨i¶&¢G¬!°½£@»B´�ê�«o°f¶!«°²¼�µ�¤B¬!¥�§B¹+§B±o©ù³B¨i±G¨&¬!°f¶D¾�õ�¤gêw¨&¯B¨&¬i´k°½£�¯v°½£]§B¹²¹½»§>èÒ¨i¶�£]¼�£]«o¨�¬!¨i§B¹l­Uê`¤B¬N¹²©Þ¼_¨i¶&¢G¬!°½£@»�¤Bµ�`¹IB�§B¥�§B¹X¾�ç@µ ��°²¼"¼]¥�¤[¤B£]«æý�£]«o§D£�°²¼i´�±G¤B£�©-°½¯t°f¼]°½¸-¹½¨�¸[»Þ§�¹f§D¬]³B¨�®o¬!°f¥�¨�±[¢o¥�¸4¨&¬\þN´£]«G¨i±û©o°²¼]¶�¬]¨&£_¨�¹½¤B³¦¼"°²± � §D¬]¨�¨i§B¼_»(£_¤�í-±o©|¾�çJµ ��«-§B¼�§�¹²§D¬!³B¨�®o¬!°²¥�¨�µ8§B¶�£_¤B¬�¸-¢G£§B¹²¼]¤�§�¼]¥�§B¹²¹�µ�§B¶�£_¤B¬�ëòµr¤B¬�¨�åG§B¥�®-¹½¨B´4°½µ � °²¼�£]«o¨�¥�¢o¹½£]°½®m¹²°²¶&§D£]°½¯B¨�³B¬]¤¦¢o®����Þ¤Bµs§í-±-°½£_¨�í-¨i¹²©��â¤Bµw¶!«o§D¬N§B¶�£_¨&¬!°²¼_£]°²¶��+ � ë £]«G¨i±ù£]«G¨�ô�ô�õ�§B¼]¼]¢o¥�®o£]°½¤¦±Þ¶&§B±Þ¨i§B¼]°²¹½»¸4¨�¼]«G¤Lê�±%£_¤�¸4¨�µ8§B¹²¼_¨B´o§B±o© �`¹IB�§B¥�§B¹�°²¼P±G¤B£�¼_¨i¥�§B±6£]°²¶&§B¹f¹½»�¼_¨i¶&¢o¬]¨B¾çJ£k°²¼kÿ[¢o°²£_¨s¶�¤¦¥�¥�¤¦±�µr¤B¬+§B¢G£]«G¤B¬!¼�¤BµG®o¬]¤L¯>§D¸-¹²¨s¼_¨i¶&¢G¬!°²£u»�®-§D®4¨&¬!¼:£_¤�°²±o§B©G¯B¨&¬!£_¨i±6£]¹½»

±G¨&³¦¹²¨i¶�£�¼_¤¦¥�¨w°²¥�®4¤B¬]£]§B±[£:¶�¤¦±o©o°½£]°½¤¦±�§B±-©"£]«G¨&¬]¨&¸t»�°²¥�®4¨&¬!°²¹L£]«G¨`¬]¨i§B¹l­Uêw¤B¬!¹²©"¼_¨i¶&¢o¬!°½£u»¤Bµ�£]«G¨�¼_»v¼_£_¨i¥%¾ Ï�«G¨�®o¬]¨i¼_¨i±o¶�¨�¤Bµ�¼]¥�§B¹²¹d¼]¢o¸o³B¬]¤¦¢G®-¼�°²± � ¤B¬�°²±Â§Þ³B¬]¤¦¢o®º£]«o§D£±o§D£]¢o¬!§B¹²¹½»Â¶�¤¦±6£]§B°f±o¼ � ý�µ�¤B¬�¨�åG§B¥�®-¹²¨B´����æ¤B¬�£]«o¨�µ8¢o¹²¹P³B¬]¤¦¢o®ã¤Bµ"®4¤¦°²±[£]¼�¤¦±á§B±¨i¹²¹f°½®o£]°²¶2¶&¢G¬!¯B¨Lþ�¶&§B±~¥�§D·B¨P§�¼_»v¼_£_¨i¥�¯t¢-¹²±G¨&¬!§D¸-¹²¨�£_¤�§D£_£]§B¶!·m¾wñ¦¢o¼_£/§B¼ � ¤Lêw§D·�°²±X� � Í��§D®o®m§D¬]¨i±6£]¹²»�µ�¤B¬]³B¤B£�§D¸Ò¤¦¢o£�£]«G¨�±G¨&¨i©�£_¤�¶N«G¤[¤¦¼]¨�®o¬!°f¥�¨�­U¤B¬!©G¨&¬ � ´m¼]°²¥�°²¹²§D¬!¹½»�°½£�êd§B¼£]«G¨`¤¦¥�°²¼]¼!°½¤¦±�¤Bµo§�®m¢G¸-¹²°²¶\­U·B¨&»�¯D§B¹²°²©o§D£]°½¤¦±�¼_£_¨&®�£]«-§D£kêw¤¦¢o¹²©"«-§i¯B¨w®o¬]¨&¯B¨i±[£_¨i©�¼!¥�§B¹²¹l­¼]¢o¸o³B¬]¤¦¢G®%§D£_£]§B¶]·v¼�£]«o§D£�¹½¨i©�£_¤ �-§iê�¼�°²±%¼_¤¦¥�¨�¤Bµ/ö�¬N§iêd¶�î&»[·ÒàR¼�õ > ��� ®o¬]¤B£_¤v¶�¤¦¹²¼ý8¼_¨&¨ � � Óo´ � Ì���þN¾+ �±-©"°²±�¹²°½·B¨�¥�§B±o±G¨&¬:£]«G¨`Ëw§B±o³B¨&¬]£_¨&¬ vßd§B¥�¨i±-°²¼]¶!«��>�§B¢G¬!¨&¬G� � �6î&¨&¬!¤D­·v±G¤gê�¹½¨i©G³B¨P®o¬]¤t¤BµÒ¤BµÒ®4¤¦¼]¼]¨i¼]¼]°½¤¦±�¤Bµ|§"©-°²¼]¶�¬]¨&£_¨�¹½¤B³¦§D¬N°½£]«o¥ °²±�§�³B¬]¤¦¢G®�¤Bµ|¢o±o·t±G¤Lê�±¤B¬!©o¨&¬kêd§B¼+¼]«G¤gê�±�°²± � �3� �v£_¤�¸4¨ �-§iêw¨i©�¸Ò¨i¶&§B¢-¼_¨w±o¤B£]«o°²±G³�êw¤¦¢o¹²©�®o¬]¨&¯B¨i±[£+§�¯B¨&¬!°²ío¨&¬µ�¬]¤¦¥ ¢-¼]°²±G³�°²±[¯D§B¹²°²©%®-§D¬N§B¥�¨&£_¨&¬!¼�£_¤�¸o¬]¨i§D·%£]«o¨�®o¬]¤B£_¤v¶�¤¦¹X¾�Ï�«o¨i¼_¨�¶&§B¼_¨i¼�°²¹²¹f¢o¼_£_¬!§D£_¨£]«G¨%©o§B±o³B¨&¬�¤Bµ�®m¢G£_£]°²±G³Þ¼_¤�¥�¢o¶!«º¨i±o¨&¬]³B»y°f±6£_¤Þ¨&¯B¨&¬�¥�¤B¬]¨%µr¤B¬N¥�§B¹²°²¼_£]°f¶�¼_¨i¶&¢o¬!°½£u»®o¬!¤[¤Bµ8¼&�+ê�«o°²¹²¨�¹½¤v¶]·v°²±G³~£]«G¨�µr¬!¤¦±6£d©G¤t¤B¬P£]°½³¦«6£_¨&¬�§B±-©�£]°²³¦«6£_¨&¬i´G®4¨&¤B®-¹²¨�¥�°²³¦«6£w¨i§B¼]°²¹½»µ8§B°²¹4£_¤�±G¤B£]°f¶�¨�£]«o§D£�£]«G¨"¸m§B¶]·%©G¤t¤B¬�«o§B¼�¼_ê�¢o±G³~ê�°²©G¨�¤B®4¨i±|¾

Ìt¾���Ø � ���oØ�� �kÙ�Û � �oÖkÜmØ���-×mÝ8Ù�Öça± �lÐiÍ��kõ�§B¹½¨&¯v°:°²¹²¹f¢o¼_£_¬!§D£_¨i¼d£]«G¨�«G¤B®4¨i©v­Uµr¤B¬�¸Ò¨i±o¨&ío£]¼P¤Bµ2¶�¤¦¥�®-¢G£_¨&¬]­u§B°²©G¨i©%®o¬!¤[¤Bµ8¼

¤Bµ-¼]¨i¶&¢G¬!°½£@»�¸t»"³¦°½¯v°²±G³�§�©o¨&£]§B°²¹½¨i©�¤¦¢G£]¹²°²±o¨s¤Bµm«o¤gê£]«o§D£2êw¤¦¢o¹²©�ê`¤B¬]·�µr¤B¬+£]«G¨P¶&¹²§B¼!¼]°²¶¬]¨i©-¢o¶�£]°½¤¦±o°²¼]£�¼]¨i¶&¢G¬!°½£@»¬]¨i¼!¢o¹½£�¤Bµ�ßw¬!§B¥�¨&¬�§B±-© év«G¤¦¢G®!�pÑG´sÐ&É��U¾�ça±(£]«o°²¼�¼_¨i¶�£]°½¤¦±�ç¶�¤¦¥�®m§D¬]¨P§�±o¤¦±v­u¶�¤¦¥�®-¢G£_¨&¬]­u§B°²©G¨i©�¯B¨&¬!¼]°½¤¦±�¤Bµ-£]«o¨w®-¬]¤[¤Bµ/ý�µr¤¦¹²¹²¤gê�°²±o³�£]«G¨d¨�åv®Ò¤¦¼!°½£]°½¤¦±°²± �lÐiÑ���þ�ê�°½£]«(õ�§B¹½¨&¯v°XàR¼�£_¬]¨i§D£]¥�¨i±[£&¾ o¤B¬�¸o¬]¨&¯v°½£@»ç�¼]«o§B¹²¹2©-°²¼]¶&¢o¼]¼�±G¤B£�£]«G¨�¨i±6£]°²¬]¨®o¬!¤[¤BµJ´v¸-¢G£P¤¦±o¹½»�¤¦±G¨�¤Bµ+£]«G¨�·B¨&»�¼_£_¨&®m¼�°²±%°½£&¾;(¨�¼]£]§D¬]£�¸t»�¬]¨i¶&§B¹f¹²°²±G³~£]«G¨"¥�§B°f±%¬]¨i¼]¢o¹²£d°f±1�pÑv´:Ð&É��U¾� 5 ( ` (J28% S 'F%I]H2 ]*5 ( ` #&%82 # ( Y -�%�6� çJµ�£]«o¨�ô�¨i¶&°²¼]°½¤¦±ºô�°�E�¨�[õ�¨i¹²¹²¥�§B± ��¬]¤B¸-¹²¨i¥ °²¼

«o§D¬N©°²±ù£]«G¨~³B¬]¤¦¢o® � §B±-©(°½µ2£]«G¨�«o§B¼]«Þµ8¢o±o¶�£]°½¤¦±�� °f¼�¶�¤¦¹f¹²°²¼]°½¤¦±G­U¬]¨i¼]°²¼_£]§B±[£&´Ò£]«G¨i±£]«G¨�¨i±o¶�¬]»t®o£]°½¤¦±�¼]¶N«G¨i¥�¨�©G¨i¼]¶�¬!°½¸4¨i©�¸4¨i¹½¤Lêã°²¼`°²±o©o°²¼]£]°²±G³¦¢o°²¼!«o§D¸-°²¹½°l£@»6­u¼_¨i¶&¢o¬]¨`§D³¦§B°²±-¼_£¶N«G¤¦¼_¨i±v­u¶&°½®m«G¨&¬]£_¨�åv£�§D£_£]§B¶]·Ò¾�=5H]*(*#H%K+�28% S ' S*! 2�4 5 W # -�6C5*#����F4 S�` + 5*')(*# # +�28% S ' ]\(\4 5\6C5� ��¨&£ � +¡ý�� . � � � þN´

�.+¡ý�� . � � � þN´ �"+ ý � . � � � þ�©o¨i±G¤B£_¨�®-§B°½¬N¼�¤Bµw°f±6£_¨&³B¨&¬!¼�¸4¨&£uêw¨&¨i±ãÐ�§B±o©�� � Ð 0+¹½¨&£ + ý� . � � þs§B±o© � + ý � . � � � þs©G¨i±G¤B£_¨�®-§B°½¬!¼s¤Bµ�¨i¹½¨i¥�¨i±6£]¼w¤Bµ � 0o§B±-©�¹½¨&£ ��©o¨i±G¤B£_¨

Page 17: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

��������)���:�A��� � � ��������G� �F��� ����� ��F�������F� �� ��� .+�

§�¬!§B±-©G¤¦¥�°²±[£_¨&³B¨&¬�¸4¨&£uêw¨&¨i±ãÐ�§B±-©�� �äÐD¾7;(¨�¢o¼_¨�£]«G¨�±o¤B£]§D£]°½¤¦± ��(+ � ÷. � @� ´ �� �'+ � � ÷. � � @� ´o§B±o©�¼_¤�¤¦±|¾Ï�«G¨d³B¬]¤¦¢o® � ¤Bµm®o¬!°²¥�¨`¤B¬!©o¨&¬ ��°²±�£]«G¨dío¨i¹²©�¤Bµ ��¨i¹½¨i¥�¨i±6£]¼�ý�ê�«G¨&¬]¨ ��� � ��Ðgþ/§B±o©

£@ê`¤ù¬!§B±o©G¤¦¥ ±G¤¦±v­u°²©o¨i±6£]°½£@»(¨i¹½¨i¥�¨i±[£]¼� . � � §D¬]¨�®-¢G¸-¹f°²¶&¹½»�·v±G¤gê�±|¾:;(¨�¼]¢G®o®4¤¦¼_¨£]«o§D£�£]«G¨�¶�¤¦¹²¹f°²¼]°½¤¦±v­U¬!¨i¼]°²¼_£]§B±[£�«o§B¼]«ãµ�¢o±-¶�£]°½¤¦± � £]§D·B¨i¼�£_¬!°½®-¹½¨i¼�¤Bµ�°f±6£_¨&³B¨&¬!¼�¥�¤v©�æ£_¤y°²±[£_¨&³B¨&¬!¼�¸4¨&£uêw¨&¨i±áÉy§B±o© � � Ðyý�£]«-§D£�°²¼i´d°²£�£]§D·B¨i¼�¸-°½£a­u¼_£_¬N°²±G³¦¼�¤Bµ"¹²¨i±G³B£]«Ê���¹½¤B³ � ����£_¤�¸-°²£a­u¼_£_¬!°²±G³¦¼~¤Bµ�¹½¨i±G³B£]«���¹½¤B³ � ���LþN¾á �¹²°²¶�¨BàR¼~®o¬N°½¯>§D£_¨%·B¨&»º¶�¤¦±o¼!°²¼_£]¼�¤Bµ£]«G¬!¨&¨�¬N§B±o©G¤¦¥�¹½»(³B¨i±o¨&¬!§D£_¨i©º®-§B°½¬N¼ � � ��� �G´w§B±o©Â«G¨&¬~®-¢G¸-¹f°²¶�·B¨&»Â¶�¤¦±o¼]°²¼_£]¼�¤Bµ�£]«G¨£]«G¬!¨&¨�³B¬]¤¦¢G®�¨i¹½¨i¥�¨i±6£]¼ � + ��G´� + ��6´.��+ ��D¾Ïk¤"¼_¨i±o©~§�¥�¨i¼]¼]§D³B¨ � � � ´6Ëw¤B¸�¶!«G¤t¤¦¼_¨i¼�§�¬!§B±-©G¤¦¥ �v´¦¼_¨&£]¼ � . + � . ´�� � + �� ´§B±o©� + ��� �(´/§B±-©û¶�¤¦¥�®-¢o£_¨i¼�£]«G¨�«o§B¼]«û¯>§B¹²¢o¨ + �yý � . � � � � �þ"¤BµP£]«G¨�¶�¤¦±v­

¶&§D£_¨i±o§D£]°²¤¦±�¤Bµ|£]«G¨i¼]¨�£]«G¬]¨&¨�¥�¤v©���°f±6£_¨&³B¨&¬!¼i¾�õ�¨�¶�¤¦¥�®-¢G£_¨i¼�� + � ����� � ´t§B±o©�¼_¨i±-©o¼ �¹²°²¶�¨%£]«G¨ù¶&°½®-«G¨&¬!£_¨�åt£�ÓD­U£]¢o®-¹½¨ ý � . � � � � � �GþN¾ ça±â£]«o°²¼�¶&°½®-«G¨&¬]£_¨�åv£�£]«G¨¨i¹½¨i¥�¨i±[£��§B¹f¹½¤gê�¼� �¹²°²¶�¨~£_¤�¶N«G¨i¶]·Þ£]«o§D£"Ëw¤B¸�¨i±-¶&°½®-«G¨&¬]¨i©ù£]«G¨�¥�¨i¼!¼]§D³B¨�®o¬]¤B®4¨&¬!¹²»�0� ¶�¤¦±v­£]§B°²±-¼�£]«G¨%¥�¨i¼!¼]§D³B¨ � ú_©o°f¼_³¦¢o°²¼_¨i©-ü�¸t»�£]«G¨�µ�§B¶�£_¤B¬ ��� 0d§B±o©!� . §B±o© � � §D¬]¨�£]«G¨°²±oµr¤B¬!¥�§D£]°½¤¦±� �¹²°f¶�¨"±G¨&¨i©o¼P£_¤�¬!¨i¥�¤g¯B¨�£]«o°²¼dµ8§B¶�£_¤B¬�¢o¼!°²±G³�«G¨&¬P®o¬!°²¯>§D£_¨�·B¨&»B¾>�¤B¬]¨�®-¬]¨i¶&°²¼_¨i¹½»B´-£_¤�©G¨i¶&°²®-«G¨&¬�£]«G¨�ÓD­U£]¢G®-¹½¨�ý � . � � � � � �vþ� �¹²°²¶�¨"ío¬N¼_£�¶�¤¦¥�®-¢o£_¨i¼

-+ �yý � . � � � � �þ�§B±o©�¢o¼_¨i¼`«G¨&¬`¼_¨i¶�¬!¨&£`·B¨&»�£_¤�í-±o©�� ���� ��ý�£]«-°²¼s°²¼`¼]«G¤B¬]£]«-§B±o©�µ�¤B¬

� � ÷ � � � ÷. � � @ � � � @� þN´2ê�«o°²¶!« ¼]«G¤¦¢o¹f©�¸4¨�¨iÿt¢o§B¹`£_¤��ãý�¸4¨i¶&§B¢o¼]¨�� ��� � � + � ����� � � +� ����� � þN¾�çJµ`°½£"°²¼�±o¤B£"¨iÿ[¢-§B¹2£_¤��-´/ �¹f°²¶�¨~¬]¨Jða¨i¶�£]¼�£]«G¨�¥�¨i¼!¼]§D³B¨B¾�çJµ`£]«G¨�¶&°½®-«G¨&¬]£_¨�åv£®-§B¼!¼_¨i¼�£]«o°²¼�£_¨i¼]£&´k¼]«G¨�®-¬]¤t¶�¨&¨i©-¼�£_¤�©G¨i¶�¬]»t®o£�¸t»ù©o°²¯t°²©-°²±G³��¸[» � � ¾�éG°²±o¶�¨ � � + �� ��+ ����§B±o©� + ��� �(´4£]«o°²¼�³¦°½¯B¨i¼�«G¨&¬�£]«G¨~®-¹f§B°²±6£_¨�åv£��(¾�Ï�«o°²¼�¶�¤¦±o¶&¹²¢-©G¨i¼�£]«G¨©G¨i¼!¶�¬!°½®o£]°½¤¦±�¤Bµ+£]«G¨"¶�¬]»t®o£_¤¦¼_»v¼_£_¨i¥%¾;(¨¼!§i»y£]«o§D£�§(ÓD­U£]¢G®m¹½¨�ý � . � � � � � �vþ�°²¼�°²±[¯>§B¹²°f©�ë ±G¤B£�§(®4¤¦¼]¼]°½¸m¹½¨�¶&°½®m«G¨&¬_­

£_¨�åv£�ë °½µP¹½¤B³�� ÷ � . �+ª¹½¤B³�� @ � � ¾% �±G¤B£]«G¨&¬�êw§g»(£_¤ù¼!§i»(£]«o°²¼�°²¼"£]«o§D£�£]«G¨�ÓD­U£]¢o®-¹½¨ý � . � � � � � �Gþ�°²¼�°²±[¯D§B¹²°²©�°½µP§B±o© ¤¦±o¹½»(°½µP£]«o¨�ô�¨i¶&°²¼]°½¤¦±yô�°�E�¨�[õ�¨i¹²¹²¥�§B± ��¬!¤B¸-¹½¨i¥«o§B¼�§%±o¨&³¦§D£]°½¯B¨�§B±o¼_êw¨&¬"µ�¤B¬"£]«G¨�ÓD­U£]¢G®m¹½¨�ý� . � � � � . � � � þN¾�ý8õ�¨&¬]¨�êw¨�§D¬]¨�¢-¼]°²±G³�§©o°½èÒ¨&¬]¨i±[£d¯>§D¬N°²§B±6£�¤Bµ/ô�ô�õ £]«o§B±�°²± � ÓG´-ê�«G¨&¬]¨�£]«G¨�³B¨i±o¨&¬!§D£_¤B¬�êd§B¼�íoåt¨i©%§B±o©�£]«G¨°²±o®-¢G£"êd§B¼�§ù¯>§D¬N°²§D¸-¹½¨�£_¬!°½®-¹½¨�0w±G¤gêªêw¨�¹½¨&£�£]«G¨�³B¨i±G¨&¬!§D£_¤B¬ . ¯>§D¬]»B´`§B±o©Â¼_¤Þ£]«G¨°²±o®-¢G£d°²¼P§�ÓD­U£]¢G®-¹²¨B¾}þ. ±G¨�¤Bµ�£]«G¨~¸-§B¼!°²¶"®-§D¬!£]¼�¤Bµ`£]«G¨�®o¬]¤t¤Bµ2¤Bµs£]«G¨~¼_¨i¶&¢G¬!°²£u»�¶&¹²§B°f¥ °²¼�£_¤%¼]«G¤Lê £]«o§D£

§B±�°²±[¯D§B¹²°²©~¶&°½®-«G¨&¬!£_¨�åt£2ê�°f¹²¹[§B¹f¥�¤¦¼_£�¶�¨&¬]£]§B°²±-¹½»�¸4¨d¬]¨Jð_¨i¶�£_¨i©�¸t»� �¹²°²¶�¨B¾ ;(¨�ío¬N¼_£+³¦°½¯B¨£]«G¨"§D¬!³¦¢o¥�¨i±[£P¤Bµ2ßw¬N§B¥�¨&¬ vév«G¤¦¢o® �pÑt´:Ð&É3��°²±�£]«G¨�µ�¤B¬!¥ª¤Bµ/§�¥�§D£]«G¨i¥�§D£]°²¶&§B¹|®-¬]¤[¤Bµ¢o¼!°²±G³(¹½¤B³¦°²¶%§B±o©ã±o§D£]¢G¬!§B¹P¹²§B±o³¦¢o§D³B¨B¾á �µr£_¨&¬�£]«o§D£�ç~©o°²¼]¶&¢-¼]¼�õ�§B¹²¨&¯t°XàR¼�§D®o®o¬]¤¦§B¶N«¢o¼!°²±G³~¶�¤¦¥�®-¢G£_¨&¬�¶�¤t©G¨B¾ça±(£]«G¨�¼_¨iÿt¢G¨i¹�¥�¤¦¼]£�©o°²¼]¶�¬!¨&£_¨�¹½¤B³¦§D¬!°½£]«o¥�¼�ê�°²¹²¹/¸4¨~¨�åt®o¬!¨i¼]¼_¨i©(£_¤�£]«o¨�¸-§B¼_¨ . ¾ô�¨&í-±G¨��*+ ¹²¤B³ � ÷ � ¾dÏ�«G¨i±%£]«G¨�©o°²¼]¶�¬]¨&£_¨�¹½¤B³¦¼P£_¤�£]«o¨"¸-§B¼_¨ . ¤Bµ2£]«G¨�¨i¹½¨i¥�¨i±[£]¼ �§B±o©���¤Bµ2 �¹f°²¶�¨BàR¼d®-¢G¸-¹f°²¶�·B¨&»%§D¬]¨�³¦°½¯B¨i±%¸t»

ýaÐgþ �(+ ¹½¤B³ � ÷ � + � .� � � � ¥�¤v© � 0 ��+ä¹½¤B³ � ÷ � + � .

� ��� � ¥�¤t©��! ��¨&£w¢o¼`¬]¨&³¦§D¬!©�£]«G¨�£uêw¤~®-§B°½¬!¼ ��´ ��§B¼w¨i¹½¨i¥�¨i±[£]¼d¤Bµ:§�ÓD­u©o°²¥�¨i±o¼!°½¤¦±o§B¹G¯B¨i¶�£_¤B¬�¼]®-§B¶�¨" ¤g¯B¨&¬�£]«G¨�ío¨i¹²©Þ¤Bµ ��¨i¹½¨i¥�¨i±[£]¼&¾� �¹²°²¶�¨BàR¼"®-¢G¸-¹²°f¶�·B¨&»(¶�¤¦±o¼_£_¬N§B°²±o¼ � � �Þ£_¤�£]«o¨ � ­©o°f¥�¨i±o¼]°½¤¦±-§B¹`§�E�±o¨�¼]¢G¸-¼_®m§B¶�¨ � ©G¨&í-±G¨i©Â¸t»y£]«G¨�§D¸4¤g¯B¨�£@ê`¤û¨iÿ[¢o§D£]°²¤¦±o¼&¾ � ¤B£_¨£]«o§D£�£]«G¨�¯>§B¹²¢o¨i¼#��§B±o©$��§D¬]¨�íGåt¨i©¤¦±o¶�¨~«G¨&¬�®-¢G¸-¹²°f¶�·B¨&»°²¼�¼]®Ò¨i¶&°²ío¨i©|´-§B¹½£]«o¤¦¢G³¦«£]«G¨i¼]¨�¯>§B¹f¢G¨i¼�§D¬]¨�±G¤B£s±G¨i¶�¨i¼]¼!§D¬!°²¹½»�·t±o¤gê�±�¨&¯B¨i±�£_¤� �¹²°²¶�¨B¾ G¤B¬w³¦°½¯B¨i±�¯>§B¹²¢o¨i¼2¤Bµ4£]«G¨

Page 18: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

. � ����������� �������

®-¢o¸-¹²°²¶�·B¨&»%§B±o©%£]«G¨"®m¢G¸-¹²°²¶�®-§D¬!§B¥�¨&£_¨&¬!¼&´- �¹²°²¶�¨BàR¼P®-¬!°½¯D§D£_¨�ÓD­U£]¢G®-¹½¨�ý�� . � � � � � . � � � þ°²¼d¨iÿt¢o§B¹²¹²»�¹²°½·B¨i¹²»�£_¤�¸4¨"§B±[»�®4¤¦°²±[£d¤Bµ��w¾çJµk¹½¤B³ � ÷ � . + ��§B±o©%¹²¤B³ � ÷ � � + � ��¥�¤v© ��µ�¤B¬�¼_¤¦¥�¨"�v´v£]«G¨i±�£]«G¨"¶&°²®-«G¨&¬]£_¨�åv£P°²¼

¯D§B¹²°²©|¾�çJ±Þ£]«-§D£�¶&§B¼_¨�£]«G¨�¯B¨&¬N°½í-¶&§D£]°½¤¦±Þ¨iÿt¢o§D£]°½¤¦± � + � ��� � ��«G¤¦¹²©o¼�¨i°²£]«G¨&¬�¨&¯B¨&¬]»[­ê�«o¨&¬]¨�¤¦±.� ý8°½µ ��«-§B¼P£]«G¨"¯D§B¹²¢G¨�µ�¤B¬�ê�«o°f¶!«%¹½¤B³ � ÷ � + �Gý � � ��Dþ2¥�¤t© �¦þN´o¤B¬�¨i¹f¼_¨±G¤Lê�«G¨&¬]¨�¤¦±*��ý8°½µ �%«o§B¼�§B±[»�¤B£]«G¨&¬�¯>§B¹f¢G¨LþN¾ . ±£]«G¨�¤B£]«G¨&¬�«o§B±o©|´4¼]¢G®o®4¤¦¼_¨�£]«o§D££]«G¨�¶&°½®m«G¨&¬]£_¨�åv£d°f¼P°²±6¯D§B¹²°²©:´6£]«o§D£�°f¼&´G¹½¤B³�� ÷ � . + �~§B±o©%¹½¤B³�� ÷ � � + � � �¥�¤v© ��ê�°½£]«� � + ¹½¤B³ � @ � � �+ �v¾Ï�«G¨i±û£]«G¨�¯B¨&¬!°½í-¶&§D£]°½¤¦± ¨iÿt¢o§D£]°½¤¦± �$+ � ��� � � «o¤¦¹²©o¼�°²µ�§B±o©¤¦±o¹²»�°½µý � þ ¹½¤B³ � ÷ ��+ �Gý � � ��Dþ � �wý�� � � �6þ�ý�� � � � � þ 9�¨&³¦§D¬!©o¹½¨i¼]¼�¤Bµ"£]«G¨ù¯D§B¹²¢G¨�¤Bµ��-´�£]«o°f¼�¨iÿt¢o§D£]°½¤¦±æ°²¥�®4¤¦¼_¨i¼�§B±G¤B£]«G¨&¬%°²±o©o¨&®Ò¨i±-©G¨i±6£¹²°f±G¨i§D¬�¶�¤¦±o©-°½£]°½¤¦±�¤¦± � � �Ò´|§B±o©�¼]¤� �¹²°²¶�¨�§B¶&¶�¨&®o£]¼�£]«G¨�ÓD­U£]¢G®-¹½¨�ý � . � � � � � �vþ�¤¦±o¹½»°½µ � � �â¹f°½¨%¤¦±ã§û®-§D¬]£]°²¶&¢o¹f§D¬�¹²°²±G¨�°f± �w¾äÏ�«G¨�¶N«o§B±o¶�¨ù¤Bµ�£]«-§D£�°²¼�Ð�� �[´Pê�«o°²¶!«ã°²¼±G¨&³¦¹f°½³¦°½¸-¹½¨B¾+Ï�«t¢o¼&´o �¹²°²¶�¨�ê�°²¹f¹Ò§B¹f¥�¤¦¼_£�¶�¨&¬]£]§B°f±o¹½»�¬!¨Jða¨i¶�£�§B±°²±[¯>§B¹²°f©�¶&°½®m«G¨&¬]£_¨�åv£&¾ça±�õ�§B¹²¨&¯t°XàR¼"¯B¨&¬!¼]°½¤¦±|´k£]«G¨�®-§D¬!£�§D¸4¤¦¢G£"±G¤¦±v­u§B¶&¶�¨&®o£]§B±-¶�¨�¤Bµd°²±[¯>§B¹²°f©(¶&°½®-«G¨&¬]£_¨�åv£

¶�¤¦¥�¨i¼�§D£P£]«G¨�¨i±o©�¤Bµ�£]«o¨�®o¬]¤t¤Bµk§Dµ�£_¨&¬�£]«G¨�¶�¤t©o¨"«o§B¼d¸4¨&¨i±%¥�¤t©-°½ío¨i©�¸[»�§D®o®-¹½»v°²±G³ío¯B¨~©o°lè4¨&¬]¨i±[£�úa³¦§B¥�¨i¼i¾Rüæ �¥�¤¦±G³�¥�§B±[»�¤B£]«G¨&¬�£]«o°²±o³¦¼&´m£]«o¨i¼_¨�³¦§B¥�¨i¼�«-§i¯B¨�°²±[£_¬]¤D­©o¢-¶�¨i©%£]«G¨�¯D§D¬!°²§D¸m¹½¨i¼#��´��k´Ò§B±o© �6¾ � õ�¨�±G¤Lê�¥�¤v©o°½í-¨i¼d£]«G¨�¶�¤v©G¨�¸t»�°²±[£_¬]¤v©o¢o¶&°²±G³§�±G¨&ê�¯D§D¬!°²§D¸-¹²¨�� ý8©o¨i±G¤B£_¨i© � � °²± �lÐiÍ3��þdµ�¤B¬�£]«G¨�¬!°½³¦«[£�¼]°²©o¨�¤Bµ2¨iÿ[¢o§D£]°²¤¦± ý � þN¾�õ�¨£]«G¨i±á¥�¤v©o°½ío¨i¼�£]«o¨ù¶�¤v©G¨�¸t»â°²±o¼]¨&¬]£]°²±G³�¹²°f±G¨i¼�£]«o§D£�£_¬]¨i§D£�£]«o¨ù±G¨&ê ¯>§D¬N°²§D¸-¹½¨�� ´§B¹½¤¦±o³�ê�°½£]«�£]«G¨�¤¦¹²©�¯D§D¬!°²§D¸m¹½¨�� � ´o§B¼�°²±o©G¨&®4¨i±o©o¨i±6£]¹½»�¶N«G¤¦¼_¨i±§B±o©�£]«o§D£�©G¨&ím±G¨�£]«G¨¯D§D¬!°²§D¸-¹²¨i¼ � � ´ � . ´ � . °²±�£_¨&¬!¥�¼d¤Bµ:£]«o¨�¤B£]«o¨&¬P¯>§D¬!°f§D¸-¹½¨i¼&¾ G¤B¬P¨�åG§B¥�®-¹½¨B´v¤¦±G¨�¹²°f±G¨�¤Bµ£]«G¨"±o¨&ê�¶�¤t©o¨"¬]¨i§B©o¼�§B¼�µr¤¦¹²¹²¤gê�¼�ý8°f±�¤¦¢G¬�±G¤B£]§D£]°½¤¦±Òþ 0

ÉBɦÑ>¸ � � � ��� ���� � ���� � � ��� �� � � � ¥�¤v© �õ�§B¹½¨&¯v°�¤B¸-¼]¨&¬]¯B¨i¼�£]«o§D£ � + � . ±G¤Lê ©o¨&®Ò¨i±-©o¼�±G¤B£�¤¦±£]«G¨�¨i§D¬N¹²°½¨&¬�¯>§D¬!°f§D¸-¹½¨i¼&´m¸-¢G£¤¦±o¹²»"¤¦±�§�±G¨&ê�¹½»[­u©G¨&í-±o¨i©�¤¦±o¨B´6§B±o©�£]«o°²¼+¨i±o§D¸m¹½¨i¼/£]«G¨�©G¨&í-±o°²£]°½¤¦±�¤Bµ��"£_¤"¸4¨d¥�¤g¯B¨i©£_¤"£]«o¨�¨i±o©~¤Bµ4£]«G¨�¶�¤v©G¨�ê�«o¨&¬]¨�§�úa¸-§B©v­ �m§D³¦ü�ý8¶�¤B¬]¬]¨i¼_®4¤¦±o©-°²±G³�£_¤"£]«G¨�úa¸m§B©oü�¨&¯B¨i±[£¤Bµw§B¶&¶�¨&®o£]°²±G³�§B±(°²±[¯D§B¹²°²©ù¶&°½®-«G¨&¬]£_¨�åv£Nþ�°²¼�¹½¤v¶&§D£_¨i©|¾� �µ�£_¨&¬"¼_¤¦¥�¨�¥�¤B¬]¨�¶N«o§B±G³B¨i¼�¤Bµ¯D§D¬!°²§D¸-¹²¨i¼w§B±-©%¥�¤g¯v°²±G³~¤Bµ+¶�¤t©G¨B´oõ�§B¹½¨&¯v°|«o§B¼d£]«G¨"¶�¤v©G¨"©G¨&í-±-°²±G³�£]«o¨�úa¸-§B©oü~¨&¯B¨i±[£ê�«o¨&¬]¨�«G¨"êd§B±6£]¼�°½£&¾ça±�§B¹²¹v£]«o°²¼s¥�¤g¯v°²±G³"§D¬]¤¦¢-±o©~¤Bµ|¶�¤t©G¨�§B±-©�¬]¨&®-¹²§B¶&°f±G³�¤¦±G¨�¼_¨i¶�£]°½¤¦±�¤BµÒ¶�¤v©G¨�¸t»~§B±v­

¤B£]«G¨&¬P¤¦±o¨�ê�°½£]«�¶!«o§B±o³B¨i©%¯>§D¬N°²§D¸-¹½¨i¼&´G°½£P°²¼w¨i§B¼_»�£_¤�¹½¤¦¼]¨�¼!°½³¦«6£d¤Bµ/ê�«o§D£P¼_£]§B±o©-¼d¤¦¢G£§B¼+£]«G¨�¶�¨i±[£_¬!§B¹v®4¤¦°²±[£2°²±�£]«G¨P¥�§D£]«G¨i¥�§D£]°²¶&§B¹-§D¬]³¦¢o¥�¨i±[£&�/Ï�«G¨&¬]¨P°²¼+±G¨&³¦¹²°½³¦°²¸-¹½¨s®-¬]¤B¸G­§D¸-°f¹²°½£u»�Ð�� ��¤BµÒ§B¶&¶�¨&®o£]°f±G³�§B±�°²±[¯D§B¹²°²©~¶&°½®-«G¨&¬!£_¨�åt£2¸4¨i¶&§B¢o¼_¨P£]«-§D£&àR¼s§"¶�¤v©o°²¥�¨i±-¼]°½¤¦±v­!Ш&¯B¨i±[£ 0-£]«o§D£�°²¼&´o°½£�«o§D®o®4¨i±o¼d¤¦±o¹½»�°½µ/ �¹²°f¶�¨BàR¼�¼_¨i¶�¬]¨&£�·B¨&»%¹²°½¨i¼�°²±%§�¼]¢G¸-¼]®-§B¶�¨�¤Bµ+¤¦±G¨©o°f¥�¨i±o¼]°½¤¦±�¹½¤Lê`¨&¬�£]«o§B±%£]«o§D£�¤Bµ+£]«G¨�µ8¢o¹²¹4¼_®m§B¶�¨"¤Bµ2«G¨&¬�®4¤¦¼]¼]°½¸m¹½¨�¼]¨i¶�¬]¨&£�·B¨&»v¼&¾;ä«o§D£/§D¬!³¦¢o¥�¨i±[£k©G¤t¨i¼�£]«o¨`¶�¤v©G¨�­U¸-§B¼_¨i©�³¦§B¥�¨d°²± �lÐiÍ��v¢o¼_¨`£_¤2ð]¢o¼_£]°½µ�»�£]«o°²¼�¶�¬N¢o¶&°²§B¹

®o¬!¤B¸-§D¸-°²¹²°²£u»�¼_£_¨&®�� � ¤¦±G¨B¾+õ�§B¹½¨&¯t°[¼]°²¥�®m¹½»�©G¨i¶�¬]¨&¨i¼k£]«o§D£�úa£]«o¨s£_¤t¤¦¹6¶&§B±"¸4¨2¨i±o©o¤gêw¨i©ê�°²£]«%§~¬!¢o¹½¨�£]«o§D£�¹²¨&£]¼�°½£�§B¼]¼!°½³¦±%§�®o¬]¤B¸m§D¸-°²¹²°½£@»�¤BµdÐ�� �~µr¤B¬�£]«o°²¼d£_¨i¼_£&¾½¾½¾RüÏ�«t¢o¼&´4°²±�¤B¬N©G¨&¬�£_¤�¸4¨~¶�¤¦±6¯v°²±o¶�¨i©¤Bµ�£]«G¨~¹½¤B³¦°²¶&§B¹+¶�¤B¬]¬]¨i¶�£]±o¨i¼]¼�¤Bµ�£]«G¨�®o¬]¤t¤Bµ2¸[»

¶�¤¦¥�®m¢G£_¨&¬�³¦§B¥�¨�­U®-¹²§i»v°²±G³G´+¤¦±G¨�«o§B¼�£_¤ù§B¹²¬]¨i§B©G»(·v±G¤gê £]«G¨�¹½¤B³¦°²¶�¤Bµ�£]«G¨�¤B¬!°²³¦°²±o§B¹� 74T>HaWXHÒh\K]bUO}K!�>{RHaWoK]bUH|^LHaQLYNSUH_^������[���2ORQ ��$�( �ORQ�x:TDK!SGZ�Y\{R{RY_x:Wm56TDK_h�Hmn@T>KNQ>jNH_^2SUT>HÒQLYNSuK]SUOzYNQ

SUYw�BH2naYNQ>WXORW8SUHaQ&S:x:OpSUT � $'& ²�

Page 19: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

��������)���:�A��� � � ��������G� �F��� ����� ��F�������F� �� ��� . �

®o¬!¤[¤BµJ¾ . ±G¨�§B¹²¼_¤â±o¨&¨i©o¼%£_¤ã¢o±-©G¨&¬!¼_£]§B±o©æ£]«G¨û¤B¬!°½³¦°²±o§B¹�®o¬!¤[¤Bµ~°²±æ¤B¬!©G¨&¬�£_¤ã³B¨&££]«G¨ù¶!«o§B±o³B¨i¼�¤Bµ"¯>§D¬N°²§D¸-¹½¨i¼�¬!°½³¦«[£�ê�«o¨i±âê�¬!°²£]°²±G³�£]«G¨Þ¶�¤v©G¨B¾ çJ£�°²¼�ÿt¢G¨i¼_£]°½¤¦±-§D¸-¹½¨ê�«o¨&£]«G¨&¬`£]«-°²¼s·v°²±o©�¤Bµ�¶�¤v©G¨�­U¸-§B¼_¨i©�§D¬]³¦¢o¥�¨i±6£d¬]¨i§B¹²¹²»�¬]¨&®o¬]¨i¼_¨i±[£]¼w®o¬]¤B³B¬]¨i¼!¼s£_¤Lêw§D¬!©§B¢G£_¤¦¥�§D£_¨i©ä£]«G¨&¤B¬]¨i¥~­U®o¬!¤g¯v°²±G³û¤B¬�¨&¯B¨i±ä®o¬!¤[¤Bµr­u¶!«G¨i¶!·t°f±G³G¾�Ï�«G¨¶�¤v©G¨Þ¶�¤¦¢o¹²©æ±G¤B£«o§g¯B¨Þ¸Ò¨&¨i±æ¶�¤¦±o¼_£_¬N¢o¶�£_¨i©ä°½µ�£]«G¨£]«o¨&¤B¬]¨i¥�«o§B©á±o¤B£�§B¹½¬!¨i§B©G»â¸4¨&¨i±ã®-¬]¤g¯B¨i±|´�§B±o©¶�¤B¬]¬!¨i¶�£]±G¨i¼]¼�¤Bµs£]«o¨�®-¬]¤[¤Bµ�¶&§B±-±G¤B£�¸4¨�¶N«G¨i¶]·B¨i©�¢-±o¹½¨i¼]¼�¤¦±G¨�§B¹½¬]¨i§B©G»¢o±o©G¨&¬!¼]£]§B±o©o¼§�·B¨&»�¥�§D£]«o¨i¥�§D£]°²¶&§B¹4¼_£_¨&®ûý�£]«G¨�¶�¤t©-°²¥�¨i±o¼]°²¤¦±v­!Ð�§D¬]³¦¢-¥�¨i±6£NþN¾sç@£d°²¼w±G¤B£`¨&¯B¨i±%¶&¹²¨i§D¬£]«o§D£�£]«G¨¬]¤¦¢G³¦«o¹½»Â£_¨i±æ®-§D³B¨i¼�¤Bµ�£_¨�åv£�§B±o©á®-¼_¨i¢-©G¤t¶�¤v©G¨�°f± �lÐiÍ���¶&§B±ä¼_¤¦¥�¨i«G¤Lê«G¨i¹²®æ¬!¨i§B©G¨&¬!¼%¶�¤¦±[¯t°²±-¶�¨(£]«G¨i¥�¼_¨i¹½¯B¨i¼�¤Bµ�£]«G¨�¶�¤B¬]¬!¨i¶�£]±G¨i¼]¼%¤Bµ�£]«G¨�¥�§D£]«G¨i¥�§D£]°f¶&§B¹®o¬!¤[¤Bµ�£]«o§D£�êd§B¼�ê�¬!°½£_£_¨i±º°f±º±o§D£]¢G¬!§B¹P¹²§B±o³¦¢o§D³B¨B¾ 9�§D£]«G¨&¬g´`£]«G¨%¬!¨&¯B¨&¬!¼_¨�°²¼�¥�¢o¶N«¥�¤B¬!¨�¹²°²·B¨i¹½»�ë £]«o§D£�°²¼&´|°½£�°²¼�¤¦±o¹½»�§Dµ�£_¨&¬�£]«G¤B¬]¤¦¢G³¦«-¹½»�¢o±o©o¨&¬!¼_£]§B±o©o°f±G³�§B±o©ù¸4¨i°²±G³¶�¤¦±[¯t°f±o¶�¨i©%¤Bµ/£]«G¨"¯D§B¹²°²©o°½£@»�¤Bµ/£]«G¨"¤B¬!°²³¦°²±o§B¹Ò®o¬]¤t¤Bµk£]«-§D£�¬]¨i§B©G¨&¬!¼�«o§i¯B¨�§B±6»�¶!«o§B±-¶�¨¤Bµ/¸4¨i°²±G³�§D¸-¹½¨�£_¤�¥�§D·B¨�¼_¨i±o¼_¨�¤Bµ/õ�§B¹½¨&¯v°XàR¼�¶�¤v©G¨�­U¸-§B¼_¨i©�¯B¨&¬!¼]°½¤¦±|¾õ�§B¹½¨&¯t°UàR¼�®-¼_¨i¢-©G¤t¶�¤v©G¨ºµ�¤B¬�£]«G¨æ©o°lè4¨&¬]¨i±6£(³¦§B¥�¨i¼ «G¨á¢o¼_¨i¼(£_¤ ¨i¼_£]§D¸-¹²°²¼!« £]«G¨

ßw¬N§B¥�¨&¬ vév«G¤¦¢o® ¬]¨i¼!¢o¹½£~³B¤[¨i¼�¤¦±Âµr¤B¬�¼!°½³¦±o°½í-¶&§B±[£]¹½»�¥�¤B¬!¨%®-§D³B¨i¼�£]«o§B±Â£]«G¨%¤B¬N°½³¦°l­±o§B¹�®o¬]¤t¤Bµ2°²±N�pÑ �+¤B¬�£]«o¨�¹²§D£_¨&¬�¯B¨&¬!¼]°½¤¦±°²±N�lÐ&É3�U¾�ç@£�°²¼�«-§D¬!©�£_¤�¼_¨&¨�ê�«o§D£�«o§B¼�¸4¨&¨i±§B¶N«o°½¨&¯B¨i©|´G¤B£]«G¨&¬P£]«-§B±�£_¤�¶�¤¦±6¯B¨&¬]£�§�¥�¤t©G¨&¬N§D£_¨i¹½»�©o° E�¶&¢o¹½£`®o¬]¤t¤Bµ�°²±[£_¤�¤¦±o¨�£]«o§D£P°²¼¯B¨&¬]»�©o°�E�¶&¢o¹½£d£_¤�µ�¤¦¹²¹½¤gê�¾

Ít¾���ÙkÖ�Ü �6ÛR�&Ý�ÙkÖç�©G¤�±G¤B£`ê�°²¼]«�£_¤~©o°²¼]¶�¤¦¢o¬!§D³B¨�§B±[»B¤¦±G¨�µr¬!¤¦¥À£]§D·v°²±G³�§�¶�¤v©G¨�­U¸-§B¼_¨i©�§D®o®o¬!¤¦§B¶!«�£_¤

ê�¬N°½£]°²±G³�¢G®¬]¨i©o¢o¶�£]°²¤¦±o°²¼_£�¼_¨i¶&¢o¬!°½£u»%®-¬]¤[¤Bµ8¼�¤B¬�µ�¬]¤¦¥ ¶�¤¦±o¶�¨&®-£]¢o§B¹²°½îi°²±o³�¼]¢o¶N«�®o¬!¤[¤Bµ8¼§B¼%§Â¼_¨&¬!°²¨i¼�¤Bµ�«G¤B®-¼�µr¬!¤¦¥�¤¦±G¨³¦§B¥�¨(£_¤â§B±G¤B£]«G¨&¬i¾ çJ£�ê`¤¦¢o¹f©á¸4¨Þ§D¬]¬]¤B³¦§B±[£�°²±£]«G¨�¨�åv£_¬]¨i¥�¨�µ�¤B¬�¥�¨�£_¤�®m§B¼]¼kð_¢-©G³¦¥�¨i±[£P¤¦±�§B±6»B¤¦±o¨BàR¼�®o¬]¨&µ�¨&¬]¬]¨i©�¼_£@»t¹²¨�¤Bµk®o¬!¤g¯v°²±G³£]«o°f±G³¦¼&¾~Ï�«o§D£�°²¼�§%¥�§D£_£_¨&¬�¤Bµw®Ò¨&¬N¼_¤¦±o§B¹+£]§B¼_£_¨B¾� �¼ >�¨i±G¨&î&¨i¼�§B±o©Þç�¶�¤¦¥�¥�¨i±6£_¨i©°²±N�lÐiÑ��U´Ò¶�¬!»[®o£_¤B³B¬N§D®-«6»%°²¼�§B¼�¥�¢o¶N«§B±§D¬]£�§B¼�§�¼]¶&°²¨i±o¶�¨B¾� �¼�°²±%£]«o¨�§D¬]£]¼&´m®4¨&¤B®-¹½¨¥�¢o¼_£�¸4¨�µ�¬]¨&¨�£_¤�¨�åv®4¨&¬!°²¥�¨i±[£�ê�°½£]«�±G¨&êáêd§i»v¼`¤Bµ|¨�åt®o¬!¨i¼]¼]°²±G³�£]«G¨i¥�¼_¨i¹½¯B¨i¼i¾� �±o©�°²±¶�¬]»t®o£_¤B³B¬!§D®m«6»�ð]¢o¼_£�§B¼�°²±�£]«o¨�§D¬]£]¼&´Òµ�§B¼!«o°½¤¦±o§D¸-¹²¨�£_¬]¨i±o©o¼Pµ�¬]¤¦¥ £]°²¥�¨"£_¤�£]°²¥�¨�¯B¨&¨&¬£_¤Lêw§D¬!©û£]«G¨�§D¸-¼]£_¬!¢o¼_¨�§B±o©û§D¬!¶&§B±G¨B¾�Ï�«G¨�®4¤B®-¢o¹²§D¬N°½£u»�¤BµP¶�¤v©G¨�­U¸-§B¼_¨i©û®o¬]¤t¤Bµ�¼�¶&§B±¸4¨�¼_¨&¨i±�§B¼�§B±�¨�åG§B¥�®-¹½¨�¤Bµ/£]«o°²¼&¾. ±G¨�¤Bµ2£]«G¨�³B¬]¨i§D£�°²±o¼!°½³¦«6£]¼�¤Bµ2®Ò¤¦¼]£a­u¥�¤t©o¨&¬!±o°²¼]¥ � � Î��/°²¼P£]«-§D£�£]«G¨&¬!¨�°²¼�±o¤�¼]¢o¶N«

£]«o°f±G³�§B¼d¼]¶&°½¨i±[£]°½í-¶P®-¬]¤B³B¬]¨i¼]¼&´v§B±o©�¤¦±G¨�¼]«G¤¦¢o¹²©�±G¤B£w¼]®Ò¨i§D·�¤Bµ|¤¦±o¨�§D®o®-¬]¤¦§B¶!«�¸4¨i°²±G³¸4¨&£_£_¨&¬�¤B¬�ê`¤B¬N¼_¨�£]«o§B±á§û©o°lè4¨&¬]¨i±[£�¤¦±G¨B¾�év¶&°½¨i±o¶�¨B´d¹²°½·B¨�¤B£]«G¨&¬�§D¬]¨i§B¼�¤Bµ�«[¢-¥�§B±¨i±o©o¨i§i¯B¤B¬i´2°²¼"¼!¢G¸vð_¨i¶�£]°½¯B¨�§B±o©�¶&¢-¹½£]¢G¬!§B¹²¹²»©G¨&£_¨&¬!¥�°²±G¨i©|´�§B¶&¶�¤B¬N©o°²±G³�£_¤£]«G¤¦¼_¨�ê�«G¤¯v°½¨&ê £]«G¨«o°²¼_£_¤B¬]»y¤Bµ�¼]¶&°½¨i±o¶�¨§B¼�§�¥�¤B¬!¨�¤B¬�¹½¨i¼!¼�§D¬]¸-°²£_¬!§D¬]» ¼]¨iÿ[¢G¨i±-¶�¨�¤Bµ�¼]«o°½µ�£]¼µ�¬]¤¦¥ ¤¦±G¨�®-§D¬!§B©o°½³¦¥ £_¤(§B±G¤B£]«G¨&¬i¾(Ï�«t¢o¼&´2°½µPêw¨�êw§B±[£~£_¤ù§B©-«G¨&¬]¨�£_¤ù£]«o¨�£_¨i±o¨&£]¼¤Bµd®4¤¦¼_£a­u¥�¤v©G¨&¬!± ¶�¬]»[®-£_¤B³B¬!§D®-«[»ãý8§�£_¨&¬!¥ £]«o§D£ . ©G¨i© B�¤¦¹f©G¬]¨i°²¶N« �lÐ�Ó3�w¤B¸-¹²°½³¦°²±o³¦¹½»°²±[£_¬]¤v©o¢o¶�¨i©�°f±6£_¤~¶�¤¦¥�¥�¤¦±�¢o¼_¨LþN´têw¨�¼]«o¤¦¢o¹²©�¨i¥�¸o¬!§B¶�¨ - Y�Y¦®4¤¦¼]¼]°½¸m¹½¨�§D®o®o¬]¤¦§B¶N«G¨i¼w£_¤úa®o¬!¤g¯v°²±G³¦ü�¼_¨i¶&¢G¬!°½£@»�¤Bµk¶�¬!»[®o£_¤B³B¬N§D®-«o°²¶�®o¬]¤B£_¤v¶�¤¦¹²¼d§B±o©�¼]«G¤¦¢o¹f©�¬]¨i¼]°f¼_£`£]«o¨�£_¨i¥�®-£]§>­£]°½¤¦±~£_¤�¶&§B¹²¹v³¦§B¥�¨�­u«G¤B®-®-°²±G³"§B±o©�§B¢G£_¤¦¥�§D£_¨i©�£]«o¨&¤B¬]¨i¥~­U®o¬]¤L¯t°f±G³�§�¼_£_¨&®�¸-§B¶]·têw§D¬N©|¾

�����

Ï�«G¨ ®-¬]¤B¸-¹½¨i¥ ê�°²£]« ¼!¢o¶!« £_¨&¬N¥�¼ §B¼ ú_§B¢o£_¤¦¥�§D£_¨i© £]«o¨&¤B¬]¨i¥~­U®o¬]¤L¯t°f±G³G´Rüú_¶�¤¦¥�®m¢G£_¨&¬_­u§B°²©G¨i©�£]«G¨&¤B¬]¨i¥~­U®o¬!¤g¯v°²±G³G´Rü�§B±o©ãú_§B¢G£_¤¦¥�§D£_¨i©®o¬]¤t¤Bµf­u¶N«G¨i¶]·v°²±G³¦ü�°f¼d£]«G¨

Page 20: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

� ! ����������� �������

¼]§B¥�¨�§B¼�£]«G¨�®o¬]¤B¸m¹½¨i¥ ê�°½£]«�£]«o¨�£_¨&¬N¥ úa®-¬]¤g¯D§D¸-¹½¨~¼_¨i¶&¢G¬!°²£u»vüÞý8¼]¨&¨ �lÐiÑ���þN¾�çJ±ù¸4¤B£]«¶&§B¼_¨i¼�£]«G¨&»�®o¬]¤¦¥�°²¼]¨"§�¹½¤B£�¥�¤B¬]¨�£]«-§B±%£]«G¨&»%©G¨i¹²°½¯B¨&¬g¾;ä°²¹²¹vêw¨�¨&¯B¨&¬`¼]¨&¨�§"¥�§B¶N«o°²±G¨�­u¶N«G¨i¶]·D§D¸-¹½¨�®o¬]¤t¤Bµm£]«-§D£�ê`¤¦¢-¹²©�±G¤B£s«-§i¯B¨�¸4¨&¨i±�¨i§B¼_­

°²¹²»�¶!«o¨i¶]·D§D¸-¹½¨�¸t»�«[¢o¥�§B±o¼2°½µ4°½£�«o§B©�¸4¨&¨i±~ê�¬!°²£_£_¨i±�¤¦¢G£s¶&¹½¨i§D¬N¹½»�§B±-©�¶&§D¬]¨&µ8¢o¹²¹½»�ê�°½£]«®o¬!¤B®Ò¨&¬~§D£_£_¨i±[£]°½¤¦±º£_¤�¹²¢o¶&°f©û¨�åv®4¤¦¼]°½£_¤B¬]»û¼]£u»v¹½¨ � ;æ°f¹²¹sêw¨�¨&¯B¨&¬�¼_¨&¨�§ù¬]¨i©o¢-¶�£]°½¤¦±v­°²¼]£w¼_¨i¶&¢o¬!°½£u»�§D¬]³¦¢o¥�¨i±[£�©G¨&¯v°²¼_¨i©�¸t»�¶�¤¦¥�®-¢o£_¨&¬�£]«o§D£Pêd§B¼P±G¤B£P¤B¸o£]§B°²±G¨i©�¸4¨&µ�¤B¬]¨�¸[»«o§B±-©�¤B¬+£]«o§D£2¶�¤¦¢o¹²©~±G¤B£+«o§g¯B¨P¸Ò¨&¨i±~¥�¤B¬!¨`¨i§B¼]°f¹½»�©G¨&¬!°²¯B¨i©�ê�°²£]«G¤¦¢G£/£]«G¨w¶�¤¦¥�®-¢G£_¨&¬ �ï ±6£]°f¹[£]«-°²¼+«o§D®o®4¨i±o¼&´>¬]¨i¼_¨i§D¬!¶N«G¨&¬!¼�°f±�£]«-°²¼+§D¬]¨i§�¼]«G¤¦¢o¹f©�¨�åv®4¨i¶�£2£_¤�¨i±o¶�¤¦¢o±[£_¨&¬�§�¶�¨&¬_­£]§B°²±§B¥�¤¦¢o±[£�¤Bµ�«o¨i§B¹½£]«6»%¼_·B¨&®-£]°²¶&°²¼]¥%¾�év¤�µ8§D¬�£]«G¨�®-§D®4¨&¬!¼�°f±%£]«o°²¼�ío¨i¹²©�¹²¨i§i¯B¨�£]«G¨¬]¨i§B©o¨&¬�§B¼_·v°²±G³G´/°²±(£]«G¨�ê`¤B¬!©-¼"¤BµP§B±û¤Bµ�£_¨i±v­uÿt¢G¤B£_¨i©y§B©G¯B¨&¬]£]°²¼_¨i¥�¨i±6£�µr¤B¬ ;(¨i±o©G»ÒàR¼µ8§B¼_£a­Uµ�¤[¤v©%¬]¨i¼_£]§B¢o¬!§B±6£]¼i´sú ;æ«o¨&¬]¨BàR¼�£]«G¨�¸Ò¨&¨&µ �gü

Ô[¾���Ü��/Ö�Ù��-���oÚ�� ���oÖ:×��ç�êw¤¦¢o¹²©�¹²°½·B¨w£_¤�£]«o§B±G·� �±o±~õ�°½¸-±G¨&¬+ö�¤B¸-¹²°²£_î`§B±o©~ �¹½µr¬!¨i©=>�¨i±G¨&î&¨i¼+µ�¤B¬2¯>§B¹f¢o§D¸-¹½¨

¶�¤¦¥�¥�¨i±6£]¼�¤¦±%¨i§D¬!¹²°½¨&¬�©o¬!§Dµr£]¼�¤Bµ/£]«-°²¼d®-§D®4¨&¬i¾

� ���oØ �oÖ�Ü ���� $ ��g�B,khiORj�KN^6�>0d�>�+YNQ>QLHa{R{Rq&�L�w� � buKaq&�BKNQ>^ � �� kK� G� ������� #��+� � ���)��� � � ������� �!� �"�#� � � �$��� ��# �

% !�#� ��� � ������� � #`�DSUYdK!e>eBH_K]bkORQ�SUTLH2,�� 7[buKNQLWUKNnJSUORY\QLWkYNQ"�ÒY\MPeLVLSuK]SUOzYNQDK!{t.6Y\j\ORn\�� & s*|�L34KNQLj\HJbXSUH@b_���L�>�4K!MPHaQ>ORWXnuT[�gKNQ>^ �s� �KNVgbUHJb_�('*),+"� � % �*�����!�#��-.� �$/ % ��0 � ���!1 �2� �.�)�3-�+4� � ���

�5�617��� ��� � #"-8� % �9� �:��� ��-�� % �;�)� �<� % - � % 1����)!=��-�0 � � � ���<�7� � % ��� � ���u� � V>�>{RORnÒ02H@q`�mbXqLegSUY\j!buKNe>T&q> � 0+�?&�@A@ABi�¦.6)2�|��C�C+*)(g�*&�@A@7B&�DeLe[� $=B=DNc $ � $\�

� C ��&3ÒHa{R{zK!bUH\�FEG���7+"� �H+ �4I:��� � � % �����9��� �����- �� ��-"�6+"!J� ���H�!� � bUY&naHJH_^LORQ>jNWÒY!Z6SUTLH:�vOpbUW8SÒ5rQiSUH@bUQDK!SUORYNQDKN{K�YNbU�iWXT>YNe�YNQ�5�QgZlY!bUM�K!SUORY\Q��gHanJVLbUOpS�q � 58�JK � &��+,@��.[)+�|� $�C+&)(g�k�gegbUORQ>j\H@bXc:L-HJbU{zKNjg� $�&+&+*i�eLe[��&A& $Jc#&�C�$\�

� D ��B3ÒHa{R{zK!bUH`KNQD^ � �� kYNj�Kax|Kaq&�*MN� % �7�)#O�����7+�� ��-P��� �$��� �7+"� �<+6�+�RQ2���S��� �7�)�R1)#T�����P� ��- �R1 % � % 1�3),+"� � % �������)�;�!+6�+� -U� � bUY&nJHaH_^LORQLj\W�Y!Z2SUT>H"�vOpbUW8S�,�Q>QiVDK!{/�ÒYNQLZ�HJbUHaQ>nJH�YNQ��ÒY\MPe>VgSUHJb�KNQ>^�ÒYNMPMwVLQ>ORn_K!SUORYNQ>Wk�gHanJVLbUOpS�q&�g,�� �� $�&+&�Cg�DeLe[� (7&_c ��Cg�

� B ��g3mHa{R{}K]bUH+K!QD^ � �- �Y\j\K_x4Kaq&�VUW�!� �4I 6��-"����17�)# �4I5� �5��� � % 19�(���!� ��-X� % � � ����-"��+"!S� ���H��� � �H� � � � �� % +4���Y� � �<� % �¦K_hNKNOR{zKN�>{RHsK!S�T&SXSUe[Z \�\!HaegbUOzQ&S_� OzKNnJb_� Y!bUj]\A&�@A@�D]\�C�C�$

� ( s3��B3Ò{zKNQLn@TLHJSkKNQ>^��w� � Y\ORQ&SUn@TLHahNKN{½� � !��;�)#��)�����^-"��+"!J� ���H����� �!� ��-90 ��� �_-"�6`"!�� % + ��-P� �$17�)#���-U�,k^LhNKNQLnaHaW|ORQ"�mbXqgeLSUYN{zYNjNq > �mbXqgeLSUYa&�@A@)(g�B.6)2�|�aD $+$��i�6�ieLbUORQ>jNHJbXc;LmH@bU{}K!jL��&�@�@+(g�>e>e6�bB�C �]cB�B�Dg�

� � ��`�G3ÒYNQ>HaT6�o3k�G.¦qgQ>Q[�vKNQ>^��`�v�gT>KNnuTDKNM���c��F��� �9- �R1 % �)� !J� ��-X��� �)# � ��� � � � �d�S�)�3� � % 1N�-,k^gchNKNQLnaHaW�ORQ��mbXqLegSUY\{RY\j!q > ,�WXO}K!nJbXqgeLS�&�@�@�$N�6.[)2�|�_&�C�D+*g�[�ieLbUORQ>jNHJbXc;LmHJbU{zK!jL�*&�@A@�$N�Be>e6�dB $�DNcB�C7&&�

� * ��g� c��B�m�ÒYNbUY\Q6�Pe % � ������f7�7+"�.-"��+"!J� � �H�g� ��� ! � �G�7�)#��)� % �F��- �i�Ò,/^gh\K!Q>naHaWsORQ��mbXqLegSUY\{RY\j!q >�mbXqgegSUYa&�@�@A@g�B.[)2�|� $'*)*A@g�B�gegbUOzQLj\HJbXc;L-HJbU{zKNjg�b&�@A@A@i�Be>e6�(&A&)&]c#&�C7B&�� & ��g�mbuK!MPHJb4K!QD^�Ls�i�gTLY\VLe[���,��� �7+"� �<+6�+�]� ! �� �<+8/-����+4���Y� �;��-6��- ��� #h���������+ �� �"-"��+"!S� �.�!17�)� % - �

�A�7��� � �3�)�.+ �F��-�� % +"� � ����� ����f)�G� � �;�7+Y/!�D,k^LhNKNQLnaHaWoORQ��mbXqgegSUY\{RY\j!q > �mbXqgeLSUY�� &+*g�g.6)2�|� $4D-(7&&��ieLbUORQ>jNHJbXc;LmH@bU{}K!jL�%$'&)&+*g�De>e[� $�C!c#&AB&�� $!@ ����mbuK!MPHJb"KNQ>^iL`���iT>Y\VLe[�9j ��- �R1 % � % ��� % �+� ��- �3-k� �a�����7+"� �H+Y�)�G� ! �� �<+�IH/-��� � % +4�Y����� �<� %

-�+ ��� #���-.-"�6+"!J� �"�!17�)� % - �N�7�7�Y� � �3�)�P+ �S��-"� % +"� � ����� ����f)�8�)� �;�7+Y/!�6�i58, O�\Y\VgbUQDK!{[Y!Z-�ÒY\MPeLVLSXcORQLj�CAC � &�@A@AC+,@�DeLe[� $'(��]c#&A& (g�

� $+$ ��g,s���+H �OR{R{zYg�� ��J�L�g.6OReLSUY\Q6�LKNQD^�,��J�L� � HJbU{RORWa�[c��!+"�<�+�7��� �!+ ��-Y-"��-�� % �������!�#��-9�#��� ������� � #P-� % �.�����61�� �)#"-U�6�ÒYNMPMwV>QLORn_K!SUORY\QLW|YNZGSUTLH2,�� l&�& � $'&��)&+,@�Be>e6��& ��$@c & *A@i�

Page 21: eprint.iacr.org · 5GHJILKNMPORQLH4SUT>H:V>WXH:YNZ[K!VLSUY\M K]SUH_^`SUTLHaYNbUHaMdcfegbUY!hiORQ>jkZlYNbmbUH_^LVLnJc SUORY\QLORW8SoWXHanaVLbUOpSrqsK!bUj\VLMPHaQ&SUWtORQsnJbXqgeLSUY\j!buKNeLTiq2KNQD^s^LORWXnaVLWXWvSUTLbUHaH-eDK!eBHJbUWvSUTDK]S

��������)���:�A��� � � ��������G� �F��� ����� ��F�������F� �� ��� �+.

� $=& s*|�L�+HaQ>QLHJq&�g3k�>�vORWXn@TLHJbkKNQD^��L�D�gnuTgVLM�KNQLQ[���*- � % 1^�)!��;�)#��)����� � ������� � # �������)����- �;�^+ ��� � � �Y�� !��;��I31 � % �����)�����_�-������-<�S�7+ �9-4�#� �H0���� �@� � bUY&naHaH_^gOzQLj\W4Y!ZG�iHanaYNQD^d5�Q&SUHJbUQ>K!SUORY\Q>KN{b�NY\ORQ&S:�ÒY\QgZlHJbXcHJQ>naHdYNQ�,�VLSUYNM�K!SUH_^ �H_KNWXYNQ>ORQ>jg�v.6HanJSUVgbUHw)/Y!SUHaW2ORQ�,:bXSUO �DnaOzKN{G5rQ&SUHa{R{zORjNHaQ>naH�CA@+&�� � &�@�@�D-,@�eLe[�%$'&)*!c#&�$!&i�

� $!C ��`�D�+YN{zHJh�KNQ>^�,s�B�k���ÒKNYL��e % � ���P-"��+"!S� ���H�_� �N� ! �� �<+�IH/-������� �)�;�!+6�+� -U�[5�*m*-*�7[buK!Q>WUK!nJSUORY\Q>WYNQ�5�QgZlY!bUM�K!SUORY\Q�74TLHaYNbXq&�g5�7Òc & & � &), � $�&+*AC+,@�DeLe[� $'&)*!c#&�@)*g�

� $�D `1`� � Y\{z^ibUHaORn@T6� e % �S��- �<I #��!� ��� % +4�Y��� �;�61�� ��� �J�!�LK_h\K!Oz{zK!�>{RH�K!S-T&SXSUe[Z \A\]HaeLbUORQ&S_� O}K!nJb_� YNbUj7\A&�@�@+(A\D+(�$N�

� $=B `�B� � Y\{z^gx4KNWXWXHJb/KNQ>^��B� �ORn_K!{RO²�bEN� �- 6�- "� � �3- � �<+ � % +4�Y����� �<� % ���\Y\VgbUQDK!{6Y!Z-�ÒY\MPeLVLSUHJb|KNQD^��iqgW8cSUHJMã�gnaORHaQLnaHaWX&)* � $�&+*�D-,@�DeLe[�(&���@!c#&)&)&g�

� $'( `�B�6�+KN{RHahiO½��h� �5� !S- �� �� �����A�����!�7+ � �;� +6�)#���!�������I:�)�<� ��� +4�Y�Y� �;�61����������<+��(���!� ��-U�vK]hNKNOR{zKN�L{RHPK!ST&SXSUe*Z \�\!HaegbUORQiS_� OzKNn@b_� Y!bUj]\�&�@A@ABA\ $'*�$N�

� $ � �)s�B02Y\�L{RORS �N� ����� ! % ����-6�_� �"�5�)� �<� % - ��� � � �H0 � � % #��)� � � #��)� �<+4-"� % � +4���Y� �;�61�� ��� �J�!�v)kYNSUORnaHaWY!Z|SUT>HP,�MPHJb_� �K!SUT6�G�iY&naORHJS�q B�D � &�@A@ �),@�Ge>e6�&��A&_c &��)&i�-K]hNKNOR{zKN�L{RH�K]S!ZsTiSXSUe*Z \A\]x|x|x2� K!MPWa�Y!bUj]\]Q>YNSUORnaHJWY\A&�@�@ ��@+*g�

� $'* �)s�>02YN�>{ROpS �\�bM8� % �7�)# U !J���)��-4Q��J�)!J� % ����-P� �2��� � � ��� #��)� �H+"�<� % �B�gegbUOzQLj\HJbXc;L-HJbU{zKNjg�b&�@A@ �&�� $'& �)s�>02YN�>{ROpS �2KNQ>^�,�� �HJQ>H��aHJWa�%� % � � ����� �5�!�=/^� ��5��� �����- �� ��-"��+"!J� � �H�N� �a�\YNVLbUQDK!{[Y!Zm�mbXqgeLSUY\{pc

YNjNq &�@ � &�@A@ �),@�DeLe[�FC!c:C � BK_hNKNOR{zKN�>{RHsK!S�T&SXSUe[Z \�\!HaegbUOzQ&S_� OzKNnJb_� Y!bUj]\A&�@A@�D]\�$!BA&&�� &�@ �)s�]02Y\�L{zOpS �mKNQ>^s,�� �HaQLH��aHaWa� � % �)� � ��� �5�!�=/9�)��5���������- �� �8-"��+"!J� ���H���� ����u�],k^LhNKNQ>nJHaW[ORQ`�mbXqgeLc

SUYN{RY\jNq > 5rQD^LY&n@bXqLegS�&�@�@+(i�-.[)2�|� D7CA&)&g�o�geLbUORQLj\HJbXc;L-HJbU{zKNjL�V&�@�@+(g�ve>e[� $4D-*!c $��AB mK_hNKNOR{zKN�>{RHK]S�TiSXSUe*Z \A\!HJeLbUORQ&S_� OzK!nJb_� YNbUj]\�&�@�@+(7\�&A& &g�

� &�$ ��s�>0+buKaxÒn��Jqg�B��������� Q%� ���R1 �SI5� ��� ����� #�� % + �P-"��+"!J� �2j�� ) �4I�� �"� � #�� % �(���)�;�!+6�+� �¦,k^LhNKNQLnaHaWORQ"�mbXqgegSUY\{RY\j!q > �mbXqgegSUYa&�@�@7Bi�D.[)+�|�_C+(A&�$\�b&�@�@7Bi�De>e[�(B=D-(!c#B (+(g�

� &A& `�B��02VLQ��Jc:��K!n_�&V>HaWa� � ���K!bXSUORQLHJS_� � � � YNV>e>K!bu^dK!QD^��L�&�iSUHJbUQ6� UV�Y�����;� % �+� ��- �3-�� �X� % �3),+"� � % ��(���!� � �#� / % ��0 � ���!1 � � � � �3-�+4� � ��� �5�617��� ��� ��#`� � V>�>{RORn�02HJq��mbXqgeLSUYNjNbuKNeLT&q > � 0+�O&�@A@+(i�.6)2�|�_C)&7B *g�d&�@A@)(g�BeLe[�(&��_c:DACg�

� &�C ��mV[�D5@���KNQLORQ[� � UW�)!J�Y-"��� % � �)� ��� #��)� �<+6�+��� �61)�<+J�6SXbuKNQLWX{zK!SUH_^"�&q�)`�B02YN�>{ROpS �\�v�geLbUORQLj\HJbXcL-HJbU{zKNjg� $�& ���&�

� &�D s,�� �HaQLH��aHaWa�%� % �)� ����� �5�!�=/�� ���������[�(�\YNVLbUQDK!{vYNZ �K]SUT>HaM�K]SUORn_KN{o�mbXqgegSUY\{RY\j!q $ � &�@�@ �),@�eLe[�FD �_c (�D DK]hNKNOR{zKN�L{RH`K]S:T&SXSUe[Z \A\]HaeLbUORQ&S_� O}K!nJb_� YNbUj7\A&�@�@7B�\A&�@ABi�

� &AB s,����HaQLH��aHaW|K!QD^�3k� �kW8SuKNYNj\{RV[�e % � ��� ��#��S��� �;� % + �.� �W� ! �� �<+�IH/-���P���+� �<�7� � �<� % � % � ���������� % ���������_/-���P�!1�� � � # � % �d��� �)�;�!+6�+� -U� � bUYNjNbUHaWXWmORQ��mbXqgeLSUY\{RYNjNq > 5�QD^gY&nJbXqgeLS�&�@A@+(i�g.[)+�|�DAC7& &g�*&�@A@+(i�DeLe[�%$!CAC]c $�D �&�

� &)( ��`�G)/Y_x|K!�B� � ��� �)# ��0�����/"�����"17�)#��4I 6��-"��� -"��+"!S� ���H�������!� �Y-u�ÒK_h\K!OR{}K!�>{RH�K]SwT&SXSUe*Z \�\!HaegbUORQiS_�OzK!nJb_� YNbUj]\�&�@�@ �A\ $'&)&g�

� &�� 2Ls�>�gT>YNV>e6�*c ��`"! � % + ��-�� �817�)# ��-4Q�� �;�!�+�A�������;�)# � % 1^+6�)#X� � ��f)���H��� % -���+"!J� ���H�2�����!� �Y-u�>K_h\K!OR{RcK!�>{RHsK!S:T&SXSUe[Z \�\!HaegbUOzQ&S_� OzKNnJb_� Y!bUj]\A&�@A@�D]\�C�C7&&�

� &)* s,��g�w�L�gYN�\K!{²� �(� � % -#1�� ��-6- � % 1 � ��� Y� ! % �7��� � ��-4Q �b��0���� ��� �H� � % - ����� #�� � �3�)� ����� # � % � !�� �H+4-�� �`"!F� % � !�# 1�� ���'���H�!�¦�gY&nJO}K!{v7tH@IgS_�FD-(A\�D � � �ieLbUORQ>j7\\�iV>MPMPHJb�$'&+&)(-,@�>e>e[�(& $ �]c#&�BA&i�

� &)& ��g�¦�iSUOR{R{px4Ha{R{½���k�)� ��� #�� � �<+4-�� % ��� �H-�� �3- �;���Y�N�b&!QD^�H_^6�R�D�geLbUORQLj\HJbXc;L-HJbU{zKNjL��&�@�@7&&�� CA@ � �¦�gVLSUnJ{zO ¦H\� � % ���)�����'����0?� �P� !��;� #��)����� � ������� � # ��� ���'� % 1N�¦^LY_x:Q>{RY\K\^LHa^ &�C �K!bUnuTk&�@�@+(

Z}bUY\MâT&SXSUe[Z \A\_x|x|x2� naWa� MPO}K!MPO½� Ha^LVb\! [SUeLSUe�\\1/h�HJbUhiORHJxk1kZl,m7 � � T&SUMP{"$#&% C6A�?(' #&) ?+*�,.-�Ci?(/ # ':Ci?(0}ED=�1�2�*�35476�8&476:9(1<; ) 0>= # AB=?0z?A@�*�,CB~C6=?/�0 )�D ?(* ) 1FE # Cg?AG

?(H # 1�B�;JILK(M!I76C;�F>EvFp;PF'NI #��)� �[�7�7��� ��-Y-�Z�N7OQP7R:SQTVU:WYX�Z!T![]\_^7Z:`Y[&Sba:c�T:OQa]\�dVe!f