Super-Polynomial Simulation – The What? – The Why? – And the Why Not?

252 / BBB

2025-07-15

Robin Berger

15:45

Universal Composability has emerged as the gold standard for security of cryptographic protocols. While it has a strong composition theorem, it is proven that even simple primitives like commitments cannot be constructed in the plain model. While the standard approach for constructing commitments is to use setup assumptions like a common reference string, an alternative way is to exit the UC framework and instead use a different security notion, such as Super-Polynomial Simulation (SPS). In this talk, we will give a basic introduction into SPS security, how it can be used, as well as some of the advantages and disadvantages of using SPS security.