159
v1v2 (latest)

Additional Constructions to Solve the Generalized Russian Cards Problem using Combinatorial Designs

Electronic Journal of Combinatorics (EJC), 2014
Abstract

In the generalized Russian cards problem, we have a card deck XX of nn cards and three participants, Alice, Bob, and Cathy, dealt aa, bb, and cc cards, respectively. Once the cards are dealt, Alice and Bob wish to privately communicate their hands to each other via public announcements, without the advantage of a shared secret or public key infrastructure. Cathy should remain ignorant of all but her own cards after Alice and Bob have made their announcements. Notions for Cathy's ignorance in the literature range from Cathy not learning the fate of any individual card with certainty (weak 11-security) to not gaining any probabilistic advantage in guessing the fate of some set of δ\delta cards (perfect δ\delta-security). As we demonstrate, the generalized Russian cards problem has close ties to the field of combinatorial designs, on which we rely heavily, particularly for perfect security notions. Our main result establishes an equivalence between perfectly δ\delta-secure strategies and (c+δ)(c+\delta)-designs on nn points with block size aa, when announcements are chosen uniformly at random from the set of possible announcements. We also provide construction methods and example solutions, including a construction that yields perfect 11-security against Cathy when c=2c=2. We leverage a known combinatorial design to construct a strategy with a=8a=8, b=13b=13, and c=3c=3 that is perfectly 22-secure. Finally, we consider a variant of the problem that yields solutions that are easy to construct and optimal with respect to both the number of announcements and level of security achieved. Moreover, this is the first method obtaining weak δ\delta-security that allows Alice to hold an arbitrary number of cards and Cathy to hold a set of c=aδ2c = \lfloor \frac{a-\delta}{2} \rfloor cards. Alternatively, the construction yields solutions for arbitrary δ\delta, cc and any aδ+2ca \geq \delta + 2c.

View on arXiv
Comments on this paper