
take advantage of
[Middle English avantage, from Old French, from avant, before, from Latin abante, from before. See advance.]
noun
verb
Definition: benefit, favored position or circumstance
Antonyms: disadvantage, drawback, handicap, hindrance, loss, obstacle, restriction
To every disadvantage there is a corresponding advantage.
— W. Clement Stone; American entrepreneur
LearnThatWord.com is a free vocabulary and spelling program where you only pay for results!
Quotes:
"In life, as in chess, forethought wins."
- Charles Buxton
"If we do what is necessary, all the odds are in our favor."
- Henry Kissinger
"If eighty percent of your sales come from twenty percent of all of your items, just carry those twenty percent."
- Stew Leonard
"He who is in love with himself has at least this advantage -- he won't encounter many rivals."
- Georg C. Lichtenberg
"The two big advantages I had at birth were to have been born wise and to have been born in poverty."
- Sophia Loren
"It is a great advantage for a system of philosophy to be substantially true."
- George Santayana
See more famous quotes about Advantage
|
|
This article may require cleanup to meet Wikipedia's quality standards. (Consider using more specific cleanup instructions.) Please help improve this article if you can. The talk page may contain suggestions. (March 2008) |
In cryptography, an adversary's advantage is a measure of how successfully it can attack a cryptographic algorithm, by distinguishing it from an idealized version of that type of algorithm. Note that in this context, the "adversary" is itself an algorithm and not a person. A cryptographic algorithm is considered secure if no adversary has a non-negligible advantage, subject to specified bounds on the adversary's computational resources (see concrete security). "Negligible" usually means "within O(2-p)" where p is a security parameter associated with the algorithm. For example, p might be the number of bits in a block cipher's key.
|
Contents
|
Let F be an oracle for the function being studied, and let G be an oracle for an idealized function of that type. The adversary A is a probabilistic algorithm given F or G as input and which outputs 1 or 0. A's job is to distinguish F from G based on making queries to the oracle that it's given. We say: ![Adv(A) = |\Pr[A(F)=1] - \Pr[A(G)=1]|](http://wpcontent.answcdn.com/wikipedia/en/math/2/3/2/2327a640881019c9a5b701b3d8b6b0d0.png)
Let F be a random instance of the DES block cipher. This cipher has 64-bit blocks and a 56-bit key. The key therefore selects one of a family of 256 permutations on the 264 possible 64-bit blocks. A "random DES instance" means our oracle F computes DES using some key K (which is unknown to the adversary) where K is selected from the 256 possible keys with equal probability.
We want to compare the DES instance with an idealized 64-bit block cipher, meaning a permutation selected at random from the (264)! possible permutations on 64-bit blocks. Call this randomly selected permutation G. Note from Stirling's approximation that (264)! is around
, so even specifying which permutation is selected requires writing down a number too large to represent exactly in any real computer. Viewed another way, G is an instance of a "cipher" whose "key length" is about 1021 bits, which again is too large to fit in a computer. (We can, however, implement G with storage space proportional to the number of queries, using a random oracle).
Note that because the oracles we're given encrypt plaintext of our choosing, we're modelling a chosen-plaintext attack or CPA, and the advantage we're calculating can be called the CPA-advantage of a given adversary. If we also had decryption oracles available, we'd be doing a chosen-ciphertext attack or CCA and finding the CCA-advantage of the adversary.
We'll look at several different adversaries and see how they perform.
We'll call this adversary A0. It simply flips a coin and returns 1 or 0 with equal probability and without making any oracle calls. Thus, Pr[A0(F)=1] and Pr[A0(G)=1] are both 0.5. The difference between these probabilities is zero, so Adv(A0) is zero. The same thing applies if we always return 0, or always return 1: the probability is the same for both F and G, so the advantage is zero. This adversary can't tell F and G apart. If we're cipher designers, our desire (maybe not achievable) is to make it so that it's computationally infeasible for any adversary to do significantly better than this. We will have succeeded if we can make a cipher for which there's no distinguisher faster than brute force search.
This adversary (call it A1) will attempt to cryptanalyze its input by brute force. It has its own DES implementation. It gives a single query to its oracle, asking for the 64-bit string of all zeroes to be encrypted. Call the resulting ciphertext E0. It then runs an exhaustive key search. The algorithm looks like this:
E0 = oracle_query(0)
for k in 0,1,...,256-1:
if DESk(0) == E0:
return 1
return 0
This searches the entire 56-bit DES keyspace and returns "1" if it probably finds a matching key. In practice, several plaintexts are required to confirm the key, as two different keys can result in one or more matching plaintext-ciphertext pairs. If no key is found, it returns 0.
If the input oracle is DES, this exhaustive search is certain to find the key, so Pr[A1(F)=1] = 1. If the input oracle is a random permutation, there are 264 possible values of E0, and at most 256 of them will get examined in the DES keysearch. So the probability of A1 returning 1 is at most 2-8. That is:
Pr[A1(G)=1] <= 2-8, so
Adv(A1) = |Pr[A1(F)=1] - Pr[A1(G)=1]| >= 1 - 2-8
so the advantage is at least about 0.996. This is a near-certain distinguisher, but it's not a security failure because it's no faster than brute force search, after all, it is the brute force search.
Phillip Rogaway and Mihir Bellare, Introduction to Modern Cryptography
Oded Goldreich, Foundations of Cryptography (Fragments of a Book)
This entry is from Wikipedia, the leading user-contributed encyclopedia. It may not have been reviewed by professional editors (see full disclaimer)
Dansk (Danish)
n. - fordel, gunstig, omstændighed
v. tr. - gavne, være til fordel for, være til nytte for
idioms:
Nederlands (Dutch)
voordeel, overwicht, advantage (tennis), bevoordelen, bevorderen het beste tonend ergens van profiteren
Français (French)
n. - avantage, bénéfice, (Sport) avantage (tennis, rugby)
v. tr. - avantager
idioms:
Deutsch (German)
n. - Vorteil
v. - nutzen, fördern, (einer Sache) dienen
idioms:
Ελληνική (Greek)
n. - πλεονέκτημα, αβαντάζ, όφελος, ωφέλεια, υπεροχή, κέρδος, προτέρημα
idioms:
idioms:
Português (Portuguese)
n. - vantagem (f), superioridade (f), circunstância (f) favorável, benefício (m)
idioms:
Русский (Russian)
преимущество
idioms:
Español (Spanish)
n. - ventaja, beneficio, provecho
v. tr. - adelantar, beneficiar, promover
idioms:
Svenska (Swedish)
n. - fördel, företräde, övertag
中文(简体)(Chinese (Simplified))
优势, 优点, 有利条件, 利益, 有利于, 使处于优势, 有助于
idioms:
中文(繁體)(Chinese (Traditional))
n. - 優勢, 優點, 有利條件, 利益
v. tr. - 有利於, 使處於優勢, 有助於
idioms:
한국어 (Korean)
n. - 유리, 이익, 강점, 듀스 후 1점의 득점
v. tr. - 이롭게 하다
idioms:
日本語 (Japanese)
n. - 有利な点, 利点, 優位, 利益, 便宜, 好都合, アドバンテージ, 優越
v. - 利する
idioms:
العربيه (Arabic)
(الاسم) أفضليه, فائده, مصلحه إنقلب لصالحه
עברית (Hebrew)
n. - יתרון, תועלת, רווח
v. tr. - הועיל ל-, עזר ל-, קידם
If you are unable to view some languages clearly, click here.