Balancing output length and query bound in hardness preserving constructions of pseudorandom functions

Abstract

We revisit hardness-preserving constructions of a pseudorandom function (PRF) from any length doubling pseudo-random generator (PRG) when there is a non-trivial upper bound q on the number of queries that the adversary can make to the PRF. Very recently, Jain, Pietrzak, and Tentes (TCC 2012) gave a hardness-preserving construction of a PRF that makes only O(log q) calls to the underlying PRG when (Formula presented.) and (Formula presented.). This dramatically improves upon the efficiency of the construction of Goldreich, Goldwasser, and Micali (FOCS 1984). However, they explicitly left open the question of whether such constructions exist when (Formula presented.). In this work, we give constructions of PRFs that make only O(log q) calls to the underlying PRG when (Formula presented.), for (Formula presented.); our PRF outputs (Formula presented.) bits (on every input), as opposed to the construction of Jain et al. that outputs n bits. That is, our PRF is not length preserving; however it outputs more bits than the PRF of Jain et al. when (Formula presented.). We obtain our construction through the use of information-theoretic tools such as almost α-wise independent hash functions coupled with a novel proof strategy.