Multi-source Non-malleable Extractors and Applications

We introduce a natural generalization of two-source non-malleable extractors (Cheragachi and Guruswami, TCC 2014) called as multi-source non-malleable extractors. Multi-source nonmalleable extractors are special independent source extractors which satisfy an additional nonmalleability property. This property requires that the output of the extractor remains close to uniform even conditioned on its output generated by tampering several sources together. We formally define this primitive, give a construction that is secure against a wide class of tampering functions, and provide applications. More specifically, we obtain the following results:

• For any s ≥ 2, we give an explicit construction of a s-source non-malleable extractor for min-entropy Ω(n) and error 2 -n Ω(1) in the overlapping joint tampering model. This means that each tampered source could depend on any strict subset of all the sources and the sets corresponding to each tampered source could be overlapping in a way that we define. Prior to our work, there were no known explicit constructions that were secure even against disjoint tampering (where the sets are required to be disjoint without any overlap).

• We adapt the techniques used in the above construction to give a t-out-of-n non-malleable secret sharing scheme (Goyal and Kumar, STOC 2018) for any t ≤ n in the disjoint tampering model. This is the first general construction of a threshold non-malleable secret sharing (NMSS) scheme in the disjoint tampering model. All prior constructions had a restriction that the size of the tampered subsets could not be equal.

• We further adapt the techniques used in the above construction to give a t-out-of-n nonmalleable secret sharing scheme (Goyal and Kumar, STOC 2018) for any t ≤ n in the overlapping joint tampering model. This is the first construction of a threshold NMSS in the overlapping joint tampering model.

• We show that a stronger notion of s-source non-malleable extractor that is multi-tamperable against disjoint tampering functions gives a single round network extractor protocol (Kalai