VLDB 2026 Research / reviewers in the wild / expert
Shimon Even
dblp:e/ShimonEven
· DBLP profile ↗
80ranked-venue papers
59as first author
0since 2021 · last 2002
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Theory of computation · 41 · 31 first-authorSystems, architecture and hardware · 18 · 11 first-authorSecurity and privacy · 11 · 10 first-authorApplied, interdisciplinary, general and emerging computing · 6 · 4 first-authorComputer networks · 4 · 3 first-author
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
17 papers |
Cryptographic primitives and cryptanalysis · 85% Cryptographic protocols and secure computation · 11% Network security · 4% | |
| Theoretical computer science
39 papers |
Graph algorithms and graph theory · 39% Distributed computing theory · 28% Computational complexity · 12% | |
| Computer architecture, parallel and distributed computing, and storage systems
3 papers |
Interconnection networks and networks-on-chip · 98% Integrated circuit design · 2% Electronic design automation · 1% |
Topics — the 30 heaviest of 98, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Interconnection networks and networks-on-chip
hypercube network |
0.0 | 1 | 2002 | Layout area of the hypercube (extended abstract) · SODA 2002 |
Graph algorithms and graph theory
graph layout |
0.0 | 1 | 2002 | Layout area of the hypercube (extended abstract) · SODA 2002 |
Cryptographic primitives and cryptanalysis › pseudorandomness
pseudorandom permutations |
0.0 | 2 | 1997 | A Construction of a Cipher from a Single Pseudorandom Permutation · J. Cryptol. 1997 A Construction of a Cioher From a Single Pseudorandom Permutation · ASIACRYPT 1991 |
Cryptographic primitives and cryptanalysis › public-key cryptography
digital signatures |
0.0 | 2 | 1996 | On-Line/Off-Line Digital Signatures · J. Cryptol. 1996 On-Line/Off-Line Digital Schemes · CRYPTO 1989 |
Cryptographic primitives and cryptanalysis › public-key cryptography › digital signatures › efficient digital signature
online/offline signatures |
0.0 | 2 | 1996 | On-Line/Off-Line Digital Signatures · J. Cryptol. 1996 On-Line/Off-Line Digital Schemes · CRYPTO 1989 |
Cryptographic primitives and cryptanalysis › symmetric cryptography
cipher design |
0.0 | 1 | 1997 | A Construction of a Cipher from a Single Pseudorandom Permutation · J. Cryptol. 1997 |
Cryptographic protocols and secure computation › security protocol analysis
ping-pong protocols |
0.0 | 4 | 1985 | On the Security of Ping-Pong Protocols when Implemented using the RSA · CRYPTO 1985 On the Security of Ping-Pong Protocols · Inf. Control. 1982 On the Security of Ping-Pong Protocols · CRYPTO 1982 |
Cryptographic primitives and cryptanalysis › block cipher
block cipher constructions |
0.0 | 1 | 1991 | A Construction of a Cioher From a Single Pseudorandom Permutation · ASIACRYPT 1991 |
Cryptographic primitives and cryptanalysis
symmetric cryptography |
0.0 | 1 | 1991 | A Construction of a Cioher From a Single Pseudorandom Permutation · ASIACRYPT 1991 |
Cryptographic primitives and cryptanalysis › public-key cryptography
modular multiplication |
0.0 | 1 | 1990 | Systolic Modular Multiplication · CRYPTO 1990 |
Graph algorithms and graph theory › graph traversal
breadth-first search |
0.0 | 1 | 1990 | Computing with Snakes in Directed Networks of Automata (Extended Abstract) · FOCS 1990 |
Distributed computing theory
distributed algorithms |
0.0 | 1 | 1990 | Computing with Snakes in Directed Networks of Automata (Extended Abstract) · FOCS 1990 |
Distributed computing theory › distributed synchronization
firing squad synchronization |
0.0 | 1 | 1990 | Computing with Snakes in Directed Networks of Automata (Extended Abstract) · FOCS 1990 |
Distributed computing theory › distributed graph algorithms
spanning tree construction |
0.0 | 1 | 1990 | Computing with Snakes in Directed Networks of Automata (Extended Abstract) · FOCS 1990 |
Distributed computing theory › distributed synchronization
synchronizers |
0.0 | 1 | 1990 | The Use of a Synchronizer Yields Maximum Computation Rate in Distributed Networks (Extended Abstract) · STOC 1990 |
Network security
protocol security |
0.0 | 3 | 1985 | On the Security of Ping-Pong Protocols when Implemented using the RSA · CRYPTO 1985 On the Security of Multi-Party Ping-Pong Protocols · FOCS 1983 On the Security of Ping-Pong Protocols · CRYPTO 1982 |
Cryptographic primitives and cryptanalysis › block cipher
cascade ciphers |
0.0 | 2 | 1985 | On the Power of Cascade Ciphers · ACM Trans. Comput. Syst. 1985 On the Power of Cascade Ciphers · CRYPTO 1983 |
Cryptographic primitives and cryptanalysis
block cipher |
0.0 | 2 | 1983 | DES-like functions can generate the alternating group · IEEE Trans. Inf. Theory 1983 On the Power of Cascade Ciphers · CRYPTO 1983 |
Cryptographic primitives and cryptanalysis
security analysis |
0.0 | 2 | 1982 | On the Security of Ping-Pong Protocols · Inf. Control. 1982 On the Security of Ping-Pong Protocols · CRYPTO 1982 |
Cryptographic primitives and cryptanalysis › generic attacks
exhaustive key search |
0.0 | 1 | 1985 | On the Power of Cascade Ciphers · ACM Trans. Comput. Syst. 1985 |
Cryptographic primitives and cryptanalysis › generic attacks
time-space tradeoffs |
0.0 | 1 | 1985 | On the Power of Cascade Ciphers · ACM Trans. Comput. Syst. 1985 |
Computational complexity › complexity classes
probabilistic complexity classes |
0.0 | 1 | 1985 | Hard-Core Theorems for Complexity Classes · J. ACM 1985 |
Cryptographic primitives and cryptanalysis
public-key cryptography |
0.0 | 1 | 1984 | The Complexity of Promise Problems with Applications to Public-Key Cryptography · Inf. Control. 1984 |
Distributed computing theory
broadcast |
0.0 | 1 | 1984 | Efficient and Reliable Broadcast is Achievable in an Eventually Connected Network · PODC 1984 |
Distributed computing theory
dynamic networks |
0.0 | 1 | 1984 | Efficient and Reliable Broadcast is Achievable in an Eventually Connected Network · PODC 1984 |
Computational complexity › structural complexity
promise problems |
0.0 | 1 | 1984 | The Complexity of Promise Problems with Applications to Public-Key Cryptography · Inf. Control. 1984 |
Distributed computing theory › broadcast
reliable broadcast |
0.0 | 1 | 1984 | Efficient and Reliable Broadcast is Achievable in an Eventually Connected Network · PODC 1984 |
Cryptographic protocols and secure computation
secure payment |
0.0 | 1 | 1983 | Electronic Wallet · CRYPTO 1983 |
Combinatorics and discrete mathematics › group theory
permutation groups |
0.0 | 1 | 1983 | DES-like functions can generate the alternating group · IEEE Trans. Inf. Theory 1983 |
Automated reasoning and model checking › formal methods for security
security protocol analysis |
0.0 | 1 | 1983 | On the Security of Multi-Party Ping-Pong Protocols · FOCS 1983 |
Methods — techniques the papers use, named apart from their topics
layout area · 0.1provable security · 0.0snake signals · 0.0parallel protocols · 0.0saboteur analysis · 0.0information theory · 0.0dolev-yao model · 0.0combinatorial analysis · 0.0reduction · 0.0recursion-theoretic construction · 0.0group theory · 0.0diagonalization · 0.0public-key cryptosystem · 0.0oblivious transfer · 0.0term-count lower bound · 0.0modulo 2 sum of products realization · 0.0iterative structure · 0.0
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2002 | Layout area of the hypercube (extended abstract)
Shimon Even, Roni Kupershtok |
SODA | 1 |
| 2002 | Laying Out the Interconnection Network of the Transpose Bijection
Shimon Even, Roni Kupershtok |
Theory Comput. Syst. | 1 |
| 2001 | Area efficient layouts of the Batcher sorting networksabstractAbstract In the early 1980s, the grid area required by the sorting nets of Batcher for input vectors of length N was investigated by Thompson. He showed that the Ω(N2) area was necessary and sufficient, but the hidden constant factors, both for the lower and upper bounds, were not discussed. In this paper, a lower bound of (N − 1)2/2 is proven, for the area required by any sorting network. Upper bounds of 4N2 and 3N2 are shown for the bitonic sorter and the odd—even sorter, respectively. In the layouts, which are presented to establish these upper bounds, slanted lines are used and there are no knock‐knees. © 2001 John Wiley & Sons, Inc. Shimon Even |
Networks | 1 |
| 2000 | Traversing Directed Eulerian Mazes
Sandeep N. Bhatt, Shimon Even, David S. Greenberg, Rafi Tayar |
WG | 2 |
| 2000 | Embedding interconnection networks in grids via the layered cross productabstractA technique for automatically producing a rectilinear planar drawings of interconnection networks is described. It is based on the layered cross product suggested by Even and Litman. The technique is demonstrated on the butterfly network, the binary tree, and the mesh-of-trees of Leighton. © 2000 John Wiley & Sons, Inc. Guy Even, Shimon Even |
Networks | 2 |
| 1999 | Some Compact Layouts of the ButterflyabstractFor the Butterfly of N input/output vertices we present a layout on the square grid of area k N2 + o(N').A lower bound of the same order is proved.The encompassing rectangle which defines the area is 45' slanted w.r.t. the grid axes and the input/output vertices are not on the boundary of this rectangle.For the Butterfly of A4 input/output edges we present a layout of area +M" + o(M').In this layout the input edges are on the 1.h.s. of the upright encompassing rectangle and the output edges are on its r.h.s.Again this is also a lower bound.Both layouts are scalable.i.e. if one allocates for each switch a square of Q x a area, the layouts remain of area f N2 + o( N2) and iA4' + o(M'), respectively, where the value of a affects only the o(N2) and o(A4') terms.Both layouts are free of knock-knees. Yefim Dinitz, Shimon Even, Roni Kupershtok, Maria Artishchev-Zapolotsky |
SPAA | 2 |
| 1998 | Layout of the Batcher Bitonic Sorter (Extended Abstract)abstractThe grid-area required by a sorting net for input vectors of length N is shown to be at least (N -1)"/2.Of 11 a sorting nets which use o(N2) comparators, the bitonic sorting net of Batcher has been known to have a layout of O(N"), but the hidden constant factor has not been investigated.A straightforward use of known techniques leads to a layout of grid-area 20.25N2.We present area-efficient layouts of the bitonic Shimon Even, S. Muthukrishnan 0001, Mike Paterson, Süleyman Cenk Sahinalp |
SPAA | 1 |
| 1998 | A Tight Layout of the Butterfly Network
Aythan Avior, Tiziana Calamoneri, Shimon Even, Ami Litman, Arnold L. Rosenberg |
Theory Comput. Syst. | 3 |
| 1998 | Monochromatic Paths and Triangulated GraphsabstractThis paper considers two properties of graphs, one geometrical and one topological, and shows that they are strongly related. Let G be a graph with four distinguished and distinct vertices, w 1 , w 2 , b 1 , b 2 . Consider the two properties, TRI + (G) and MONO(G), defined as follows. TRI + (G): There is a planar drawing of G such that all 3-cycles of G are faces; all faces of G are triangles except for the single face which is the 4-cycle (w 1 -b 1 -w 2 -b 2 -w 1 ). MONO(G): G contains the 4-cycle (w 1 -b 1 -w 2 -b 2 -w 1 ) and, for any labeling of the vertices of G by the colors {white, black} such that w 1 and w 2 are white, while b 1 and b 2 are black, precisely one of the following holds. There is a path of white vertices connecting w 1 and w 2 . There is a path of black vertices connecting b 1 and b 2 . Our main result is that a graph G enjoys property TRI + (G) if and only if it is minimal with respect to property MONO. Building on this, we show that one can decide in polynomial time whether or not a given graph G has property MONO(G). Shimon Even, Ami Litman, Arnold L. Rosenberg |
SIAM J. Discret. Math. | 1 |
| 1998 | On Mixed Connectivity Certificates
Shimon Even, Gene Itkis, Sergio Rajsbaum |
Theor. Comput. Sci. | 1 |
| 1997 | Embedding Interconnection Networks in Grids via the Layered Cross Product
Guy Even, Shimon Even |
CIAC | 2 |
| 1997 | A Construction of a Cipher from a Single Pseudorandom Permutation
Shimon Even, Yishay Mansour |
J. Cryptol. | 1 |
| 1997 | The Use of a Synchronizer Yields the Maximum Computation Rate in Distributed Networks
Shimon Even, Sergio Rajsbaum |
Theory Comput. Syst. | 1 |
| 1997 | Layered cross product - A technique to construct interconnection networksabstractThe Layered Cross Product (LCP) of layered graphs is introduced. It is shown that several well-known networks are LCPs of simple layered graphs, such as trees. We believe that this new tool will make the construction of new networks easier, and it will simplify the study of the properties of known and new networks. © 1997 John Wiley & Sons, Inc. Shimon Even, Ami Litman |
Networks | 1 |
| 1996 | A Tight Layout of the Butterfly NetworkabstractWe establish upper and lower bounds on the layout area of the butterfly network, which differ only in low-order terms. Specifically, the N-input, N-output butterfly network can be laid out in area (1 + o(1)) N^2, while no layout of the network can have area smaller than (1 - o(1)) N^2. These results improve both the known upper bound and the known lower bound on the area of butterfly network layouts. Aythan Avior, Tiziana Calamoneri, Shimon Even, Ami Litman, Arnold L. Rosenberg |
SPAA | 3 |
| 1996 | On-Line/Off-Line Digital Signatures
Shimon Even, Oded Goldreich 0001, Silvio Micali |
J. Cryptol. | 1 |
| 1995 | On Mixed Connectivity Certificates (Extended Abstract)
Shimon Even, Gene Itkis, Sergio Rajsbaum |
ESA | 1 |
| 1995 | Unison, Canon, and Sluggish Clocks in Networks Controlled by a Synchronizer
Shimon Even, Sergio Rajsbaum |
Math. Syst. Theory | 1 |
| 1994 | A Unified Scheme for Routing in Expander Based Networks
Shimon Even, Ami Litman |
CIAC | 1 |
| 1994 | On the Capabilities of Systolic Systems
Shimon Even, Ami Litman |
Math. Syst. Theory | 1 |
| 1992 | Layered Cross Product - A Technique to Construct Interconnection NetworksabstractArticle Layered cross product—a technique to construct interconnection networks Share on Authors: Shimon Even View Profile , Ami Litman View Profile Authors Info & Claims SPAA '92: Proceedings of the fourth annual ACM symposium on Parallel algorithms and architecturesJune 1992 Pages 60–69https://doi.org/10.1145/140901.140908Published:01 June 1992 10citation249DownloadsMetricsTotal Citations10Total Downloads249Last 12 Months0Last 6 weeks0 Get Citation AlertsNew Citation Alert added!This alert has been successfully added and will be sent to:You will be notified whenever a record that you have chosen has been cited.To manage your alert preferences, click on the button below.Manage my AlertsNew Citation Alert!Please log in to your account Save to BinderSave to BinderCreate a New BinderNameCancelCreateExport CitationPublisher SiteGet Access Shimon Even, Ami Litman |
SPAA | 1 |
| 1991 | A Construction of a Cioher From a Single Pseudorandom Permutation
Shimon Even, Yishay Mansour |
ASIACRYPT | 1 |
| 1991 | On the Capabilities of Systolic Systems (Extended Abstract)abstractThispaper investigates the capabilities of systolic systems.We show that arty synchronous system can be transformed into an equivalent systolic system via two opposite techniques, one syntactic and the other semantic. Shimon Even, Ami Litman |
SPAA | 1 |
| 1990 | Systolic Modular Multiplication
Shimon Even |
CRYPTO | 1 |
| 1990 | Computing with Snakes in Directed Networks of Automata (Extended Abstract)abstractDirected, strongly connected networks of finite-state automata, of bounded in- and outdegree but unknown topology and unbounded size n, are considered. Protocols that are quadratic or linear in n and accomplish the following tasks are provided: waking up and reporting when done, constructing smart spanning trees out from the root and in to the root, conducting breadth-first and depth-first searches, sending a message from the endpoint of a (directed) edge to its startpoint, running a slow clock, and solving the firing squad synchronization problem. The protocols are highly parallel and entail the use of sequences of signals called 'snakes''. All the tasks are accomplished in less time than is possible with any previously known techniques.> Shimon Even, Ami Litman, Peter Winkler 0001 |
FOCS | 1 |
| 1990 | The Use of a Synchronizer Yields Maximum Computation Rate in Distributed Networks (Extended Abstract)abstractIn a previous paper we analyzed the performance of networks with negligible transmission delay, who~ operation is controlled by a simple synchronizer.It was shown that full speed is achieved, for any wake-up pattern, by letting the netwonk run free, without the use of a "firing squad" mechanism or a scheduler.In this paper we investigate the effect of fixed delays in the communication channels on the performance of a netwo~ in which there is a global clock, but there is no global start-up signal.We show that here too, maximum rate of computation is always reached, just by using the synchronizer and letting the network run free.To a certain extent, the wake-up pattern may influence the length of the transitory stage and the periodicity of the steady state, but not the ultimate rate. Shimon Even, Sergio Rajsbaum |
STOC | 1 |
| 1989 | On-Line/Off-Line Digital Schemes
Shimon Even, Oded Goldreich 0001, Silvio Micali |
CRYPTO | 1 |
| 1989 | On the Number of Rounds Necessary to Disseminate InformationabstractAssume each processor in a network has some piece of information.We study how efficiently information can be spread in a communication network.Specifically, we investigate the number of rounds necessary to spread all the pieces of information to all processors.This problem is known as the "gossip" problem, and initially, the question was to determine the number of telephone calls necessary to achieve complete dissemination.In this paper we study the "telegraph comnmnication node", where in each round, each processor is active only via one of its links and the communication is one-way, i.e. each processor can either transmit or receive, but not both.For an even number of processors, we prove upper and lower bounds on the number of rounds needed for disseminating the information in this telegraph mode.The two bounds are related to Fibonacci numbers and differ by, at most, an additive constant of 1.Our lower bound technique uses elements from matrix theory, specifically matrix norms.These results show, for the first time, that in the two-way mode, information can be distributed faster than in the one-way mode.Similar techniques are applied to obtain upper and lower bounds on the number of rounds needed for gossip in other communication modes.We consider the (pR, qS)communication modes, where during each round each processor can receive information from at most p processors or can send information to at most q processors, but no processor can send and receive during the same round. ITechnion, Israel Institute Shimon Even, Burkhard Monien |
SPAA | 1 |
| 1985 | On the Security of Ping-Pong Protocols when Implemented using the RSA
Shimon Even, Oded Goldreich 0001, Adi Shamir |
CRYPTO | 1 |
| 1985 | Hard-Core Theorems for Complexity ClassesabstractNancy Lynch proved that if a decision problem A is not solvable in polynomial time, then there exists an infinite recursive subset X of its domain on which the decision is almost everywhere complex. In this paper, general theorems of this kind that can be applied to several well-known automata-based complexity classes, including a common class of randomized algorithms, are proved. Shimon Even, Alan L. Selman, Yacov Yacobi |
J. ACM | 1 |
| 1985 | On the Power of Cascade CiphersabstractThe unicity distance of a cascade of random ciphers, with respect to known plaintext attack, is shown to be the sum of the key lengths. A time-space trade-off for the exhaustive cracking of a cascade of ciphers is shown. The structure of the set of permutations realized by a cascade is studied; it is shown that only l .2 k exhaustive experiments are necessary to determine the behavior of a cascade of l stages, each having k key bits. It is concluded that the cascade of random ciphers is not a random cipher. Yet, it is shown that, with high probability, the number of permutations realizable by a cascade of l random ciphers, each having k key bits, is 2 lk . Next, it is shown that two stages are not worse than one, by a simple reduction of the cracking problem of any of the stages to the cracking problem of the cascade. Finally, it is shown that proving a nonpolynomial lower bound on the cracking problem of long cascades is a hard task, since such a bound implies that P ≉ NP . Shimon Even, Oded Goldreich 0001 |
ACM Trans. Comput. Syst. | 1 |
| 1984 | Efficient and Reliable Broadcast is Achievable in an Eventually Connected NetworkabstractWe deal with communication networks whose topology changes arbitrarily subject to the restriction that no edge-cut in the network persists forever. Up to now, no formal-ground rules have been proposed for such networks, and no protocol has been proved to possess any desirable property. We introduce a new proof methodology, in the sense that link-behavior in such networks is axiomatized. Baruch Awerbuch, Shimon Even |
PODC | 2 |
| 1984 | A note on cake cutting
Shimon Even, Azaria Paz |
Discret. Appl. Math. | 1 |
| 1984 | The Complexity of Promise Problems with Applications to Public-Key Cryptography
Shimon Even, Alan L. Selman, Yacov Yacobi |
Inf. Control. | 1 |
| 1984 | On the np-completeness of certain network testing problemsabstractAbstract Let G(V, E) be an undirected graph which describes the structure of a communication network. During the maintenance period every line must be tested in each of the two possible directions. A line is tested by assigning one of its endpoints to be a transmitter, the other to be a receiver, and sending a message from the transmitter to the receiver through the line. We define several different models for communication networks, all subject to the two following axioms: a vertex cannot act as a transmitter and as a receiver simultaneously and a vertex cannot receive through two lines simultaneously. In each of the models, two problems arise: What is the maximum number of lines one can test simultaneously? and What is the minimum number of phases necessary for testing the entire network?, where, by “phase” we mean a period in which some tests are conducted simultaneously. We show that in most models, including the “natural” model of radio communication, both problems are NP‐hard. In some models the problems can be solved by reducing them to either a maximum matching problem or an edge coloring problem for which polynomial algorithms are known. One model remains for which the complexity of the minimization problem is unknown. Shimon Even, Oded Goldreich 0001, Shlomo Moran, Po Tong |
Networks | 1 |
| 1984 | Correction to 'DES-like functions can generate the alternating group' (Nov 83 863-865)
Shimon Even, Oded Goldreich 0001 |
IEEE Trans. Inf. Theory | 1 |
| 1983 | On the Power of Cascade Ciphers
Shimon Even, Oded Goldreich 0001 |
CRYPTO | 1 |
| 1983 | Electronic Wallet
Shimon Even, Oded Goldreich 0001 |
CRYPTO | 1 |
| 1983 | On the Security of Multi-Party Ping-Pong ProtocolsabstractWe define a p-party ping-pong protocol and its security problem, along the lines of Dolev and Yao's definition for twoparty ping-pong protocol. In the case of two parties, it was assumed, with no loss of generality, that there exists a single saboteur in the net and the protocol was defined to be secure iff it was secure against the active interventions of one saboteur. We show that for more than 2 parties this assumption can no longer be made and that for p parties 3(p-2) + 1 is a lower bound on the number of saboteurs which should be considered for the security problem. On the other hand we establish a 3(p-2) + 2 upper bound on the number of saboteurs which should be considered. We conclude that for a fixed p, p-party ping-pong protocols can be tested for security in 0(n3) time and 0(n2) space, when n is the length of the protocol. We show that if p, the number of participants in the protocol, is part of the input then the security problem becomes NP-Hard. Relaxing the definition of a ping-pong protocol so that operators can operate on half words (thus introducing commutativity of the operators) causes the security problem to become undecidable. Shimon Even, Oded Goldreich 0001 |
FOCS | 1 |
| 1983 | A Local-Ratio Theorem for Approximating the Weighted Vertex Cover Problem
Reuven Bar-Yehuda, Shimon Even |
WG | 2 |
| 1983 | DES-like functions can generate the alternating groupabstractA set of transformations on binary vectors of lengthnis defined. These transformations are similar to those of the data encryption standard (DES) and therefore are called DES-like functions. It is proved that the group of permutations generated by the DES-like functions is exactly the alternating group of the set of binarynvectors. Shimon Even, Oded Goldreich 0001 |
IEEE Trans. Inf. Theory | 1 |
| 1982 | On the Security of Multi-Party Ping-Pong Protocols
Shimon Even, Oded Goldreich 0001 |
CRYPTO | 1 |
| 1982 | On the Security of Ping-Pong Protocols
Danny Dolev, Shimon Even, Richard M. Karp |
CRYPTO | 2 |
| 1982 | A Randomized Protocol for Signing ContractsabstractRandomized protocols for signing contracts, certified mail, and flipping a coin are presented. The protocols use a 1-out-of-2 oblivious transfer subprotocol which is axiomatically defined. The 1-out-of-2 oblivious transfer allows one party to transfer exactly one secret, out of two recognizable secrets, to his counterpart. The first (second) secret is received with probability one half, while the sender is ignorant of which secret has been received. An implementation of the 1-out-of-2 oblivious transfer, using any public key cryptosystem, is presented. Shimon Even, Oded Goldreich 0001, Abraham Lempel |
CRYPTO | 1 |
| 1982 | On Approximating a Vertex Cover for Planar GraphsabstractThe approximation problem for vertex cover of n-vertex planar graphs is treated. Two results are presented: Reuven Bar-Yehuda, Shimon Even |
STOC | 2 |
| 1982 | On the Security of Ping-Pong Protocols
Danny Dolev, Shimon Even, Richard M. Karp |
Inf. Control. | 2 |
| 1982 | A Note on Deterministic and Nondeterministic Time Complexity
Shimon Even, Timothy J. Long, Yacov Yacobi |
Inf. Control. | 1 |
| 1981 | On Protocols for Cake Cutting
Shimon Even |
WG | 1 |
| 1981 | An On-Line Edge-Deletion Problemabstractarticle Free Access Share on An On-Line Edge-Deletion Problem Authors: Yossi Shiloach IBM Israel Scientific Center, Technion City, Haifa, Israel and Stanford University, Stanford, California IBM Israel Scientific Center, Technion City, Haifa, Israel and Stanford University, Stanford, CaliforniaView Profile , Shimon Even Computer Science Department, Technion, Haifa, Israel and University of California, Berkeley, California Computer Science Department, Technion, Haifa, Israel and University of California, Berkeley, CaliforniaView Profile Authors Info & Claims Journal of the ACMVolume 28Issue 1Jan. 1981 pp 1–4https://doi.org/10.1145/322234.322235Published:01 January 1981Publication History 189citation1,844DownloadsMetricsTotal Citations189Total Downloads1,844Last 12 Months172Last 6 weeks27 Get Citation AlertsNew Citation Alert added!This alert has been successfully added and will be sent to:You will be notified whenever a record that you have chosen has been cited.To manage your alert preferences, click on the button below.Manage my Alerts New Citation Alert!Please log in to your account Save to BinderSave to BinderCreate a New BinderNameCancelCreateExport CitationPublisher SiteeReaderPDF Shimon Even, Yossi Shiloach |
J. ACM | 1 |
| 1981 | Linear Algorithm for Data Compression via String MatchingabstractA linear implementation of the optimal universal data compression methods of Lempel and Ziv is described.The main tool is McCreight's algorithm for constructing suffix trees.Both bounded and unbounded memory are considered. Michael Rodeh, Vaughan R. Pratt, Shimon Even |
J. ACM | 3 |
| 1980 | Cryptocomplexity and NP-Completeness
Shimon Even, Yacov Yacobi |
ICALP | 1 |
| 1980 | An Observation Concerning the Complexity of Problems with Few Solutions and its Application to Cryptography
Shimon Even, Yacov Yacobi |
WG | 1 |
| 1977 | Corrigendum: Computing an st-Numbering. TCS 2(1976):339-344
Shimon Even, Robert E. Tarjan |
Theor. Comput. Sci. | 1 |
| 1976 | A Combinatorial Problem Which Is Complete in Polynomial SpaceabstractThis paper considers a generalization, called the Shannon switching game on vertices, of a familiar board game called Hex. It is shown that determining who wins such a game if each player plays perfectly is very hard; in fact, if this game problem is solvable in polynomial time, then any problem solvable in polynomial space is solvable in polynomial time. This result suggests that the theory of combinational games is difficult. Shimon Even, Robert E. Tarjan |
J. ACM | 1 |
| 1976 | On the Complexity of Timetable and Multicommodity Flow ProblemsabstractA very primitive version of Gotlieb’s timetable problem is shown to be NP-complete, and therefore all the common timetable problems are NP-complete. A polynomial time algorithm, in case all teachers are binary, is shown. The theorem that a meeting function always exists if all teachers and classes have no time constraints is proved. The multicommodity integral flow problem is shown to be NP-complete even if the number of commodities is two. This is true both in the directed and undirected cases. Shimon Even, Alon Itai, Adi Shamir |
SIAM J. Comput. | 1 |
| 1976 | Computing an st -Numbering
Shimon Even, Robert E. Tarjan |
Theor. Comput. Sci. | 1 |
| 1975 | On the Complexity of Timetable and Multi-Commodity Flow ProblemsabstractA very primitive version of Gotlieb's timetable problem is shown to be NP-complete, and therefore all the common timetable problems are NP-complete. A polynomial time algorithm, in case all teachers are binary, is shown. The theorem that a meeting function always exists if all teachers and classes have no time constraints is proved. The multi-commodity integral flow problem is shown to be NP-complete even if the number of commodities is two. This is true both in the directed and undirected cases. Finally, the two commodity real flow problem in undirected graphs is shown to be solvable in polynomial time. The time bound is O(|v|2|E|). Shimon Even, Alon Itai, Adi Shamir |
FOCS | 1 |
| 1975 | An O(n^2.5) Algorithm for Maximum Matching in General GraphsabstractThis work presents a new efficient algorithm for finding a maximum matching in an arbitrary graph. Two implementations are suggested, the complexity of the first is O(n2.5) and the complexity of the second is O(m√n·log n) where n, m are the numbers of the vertices and the edges in the graph. Shimon Even, Oded Kariv |
FOCS | 1 |
| 1975 | a Combinatorial Problem which is Complete in Polynomial SpaceabstractWe consider a generalization, which we call the Shannon switching game on vertices, of a familiar board game called HEX. We show that determining who wins such a game if each player plays perfectly is very hard; in fact, it is as hard as carrying out any polynomial-space-bounded computation. This result suggests that the theory of combinatorial games is difficult. Shimon Even, Robert E. Tarjan |
STOC | 1 |
| 1975 | Efficient Generation of Optimal Prefix Code: Equiprobable Words Using Unequal Cost LettersabstractABSTRACrr.An algorithm for constructing an optimal prefix code of n eqmprobable words over r unequal cost coding letters is given.The discussion is in terms of rooted labeled trees.The algorithm consists of two parts.The first one is an extension algorithm which constructs a prefix code of n words.This code is either optimal or is a "good" approximation The second part is a mending algorithm which changes the code constructed by the extension algorithm into an optimal code in case it is not already optimal.The validity of the combined algorithm is proved and its structure is analyzed.The analysis leads to further improvement of the algorithm's efficiency.It is shown that the number of steps required is at mnst O(r.n.log n), if a heap data structure is used Alternatively, one can use a data structure of r queues, in which case the number of steps is bounded by O(r.n). Yehoshua Perl, M. R. Garey, Shimon Even |
J. ACM | 3 |
| 1975 | An Algorithm for Determining Whether the Connectivity of a Graph is at Least kabstractThe algorithm presented in this paper is for testing whether the connectivity of a large graph of n vertices is at least k. First the case of undirected graphs is discussed, and then it is shown that a variation of this algorithm works for directed graphs. The number of steps the algorithm requires, in case $k < \sqrt n $, is bounded by $O(kn^3 )$. Shimon Even |
SIAM J. Comput. | 1 |
| 1975 | Network Flow and Testing Graph ConnectivityabstractAn algorithm of Dinic for finding the maximum flow in a network is described. It is then shown that if the vertex capacities are all equal to one, the algorithm requires at most $O(|V|^{1/2} \cdot |E|)$ time, and if the edge capacities are all equal to one, the algorithm requires at most $O(|V|^{2/3} \cdot |E|)$ time. Also, these bounds are tight for Dinic’s algorithm. These results are used to test the vertex connectivity of a graph in $O(|V|^{1/2} \cdot |E|^2 )$ time and the edge connectivity in $O(|V|^{5/3} \cdot |E|)$ time. Shimon Even, Robert E. Tarjan |
SIAM J. Comput. | 1 |
| 1973 | An algorithm for optimal prefix parsing of a noiseless and memoryless channelabstractWe discuss the prefix encoding of aQ-ary source(Q \geq 2)into anL-symbol channel alphabet withL \geq Q. We present an optimal encoding scheme that minimizes the expected cost per symbol in the case of equally probable source symbols and arbitrary channel symbol costs. Abraham Lempel, Shimon Even, Martin Cohn |
IEEE Trans. Inf. Theory | 2 |
| 1972 | Generation and Enumeration of All Solutions of the Characteristic Sum Condition
Shimon Even, Abraham Lempel |
Inf. Control. | 1 |
| 1972 | Permutation Graphs and Transitive GraphsabstractA graph G with vertex set N = {1, 2, .-. , n} is called a permutation graph there exists a permutation P on N such that for i,j E N, (i -j)[P-'(i) -P-'(j)] < 0 if ar only if i and j are joined by an edge in G.A structural relationship is established between permutation graphs and transitive graph An algorithm for determining whether a given graph is a permutation graph is given.Efficie, algorithms for finding a maximum size clique and a minimum coloration of transitive grapl are presented.These algorithms are then shown to be applicable in solving problems in memo] allocation and circuit layout. Shimon Even, Amir Pnueli, Abraham Lempel |
J. ACM | 1 |
| 1971 | Marked Directed Graphs
Frederic G. Commoner, Anatol W. Holt, Shimon Even, Amir Pnueli |
J. Comput. Syst. Sci. | 3 |
| 1971 | Ambiguity in Graphs and ExpressionsabstractA regular expression is called unambiguous if every tape in the event can be generated from the expression in one way only. The flow-graph technique for constructing an expression is shown to preserve ambiguities of the graph, and thus, if the graph is that of a deterministic automaton, the expression is unambiguous. A procedure for generating a nondeterministic automaton which preserves the ambiguities of the given regular expression is described. Finally, a procedure for testing whether a given expression is ambiguous is given. Ronald V. Book, Shimon Even, Sheila A. Greibach, Gene Ott |
IEEE Trans. Computers | 2 |
| 1969 | The Design of Shift Register Generators for Finite SequencesabstractThe construction of a shortest feedback shift register which generates a given finite sequence is described for the cases of linear and nonlinear feedback logic. It is shown that the ratio of the number of delay elements required in the linear case to that of the nonlinear case grows without bound for proper choice of sequences. Martin Cohn, Shimon Even |
IEEE Trans. Computers | 2 |
| 1969 | A Gray Code CounterabstractA Gray code counter which has an iterative and relatively simple structure is described. The code is shown to be the reflected binary Gray code, implying simple conversion of the count into binary code. Martin Cohn, Shimon Even |
IEEE Trans. Computers | 2 |
| 1969 | Sequential Boolean EquationsabstractThe problem of solving sequential Boolean equations is shown to be equivalent to the problem of finding whether there exists a path on a labeled graph for every sequence of labels. Algorithms are given for testing whether a solution exists, and if a solution with a finite delay exists. In case of existence of solutions the algorithms provide them. Shimon Even, Albert R. Meyer |
IEEE Trans. Computers | 1 |
| 1967 | On Minimal Modulo 2 Sums of Products for Switching FunctionsabstractThe minimal number of terms required for representing any switching function as a modulo 2 sums of products is investigated, and an algorithm for obtaining economical realization is described. The main result is the following: every symmetric function of 2m+1 variables has a modulo 2 sum of products realization with at most 3mterms; but there are functions of n variables which require at least 2n/n log23 terms for sufficiently large n. Shimon Even, Igal Kohavi, Azaria Paz |
IEEE Trans. Electron. Comput. | 1 |
| 1966 | Test for Planarity of a Circuit Given by an ExpressionabstractIn this paper a relationship among distinct Pn+1, cycles, distinct stable maximum transient feedback shift registers of order n+1, and stable feedback shift registers of order n will be presented. In the course of the discussion, two algorithms will be introduced. The first will provide a one-to-one mapping between distinct stable feedback shift registers of order n and distinct stable maximum-transient feedback shift registers of order n+1. The second will provide a one-to-one mapping between distinct maximum transient feed-back shift registers of order n+1 and distinct Pn+1, cycles. As a corollary to these relationships, an enumeration of the stable feed-back shift registers is obtained. Shimon Even, Albert R. Meyer |
IEEE Trans. Electron. Comput. | 1 |
| 1966 | Some further results on synchronizable block codes (Corresp.)
Willard L. Eastman, Shimon Even |
IEEE Trans. Inf. Theory | 2 |
| 1965 | Identification and Minimization of Linear MachinesabstractThis paper is a study of linear machines and their submachines. Methods are presented for finding the reduced form of a given linear machine with or without fixed initial state. A technique is suggested for detecting whether a machine is linear or can be embedded as a submachine in a linear machine. In the latter case a state assignment is produced for the minimum linear realization. Encoded inputs and outputs are assumed, but given machines are not assumed reduced, nor are there any restrictions on the number of states in the given machine or in the linear realization. The method also detects machines that are linearly realizable when constants are available. The main results are that the reduced form of a linear machine is linear and that a linearly realizable machine with r-independent states has an r-dimensional realization. Martin Cohn, Shimon Even |
IEEE Trans. Electron. Comput. | 2 |
| 1965 | On Information Lossless Automata of Finite OrderabstractA coding graph is a model which contains all the types of finite automata and codes as special cases. A test for information losslessness and for information losslessness of finite order of a coding graph is described. Efficient methods of computation are given which make the calculation simple and mechanizable. The application of the tests to finite deterministic automata is discussed and a method of constructing a decoder for a given finite automaton that is information lossless of finite order, is described. Shimon Even |
IEEE Trans. Electron. Comput. | 1 |
| 1965 | Comments on the Minimization of Stochastic MachinesabstractIn a recent note by Bacon [1], a new result about the minimization of stochastic finite state machines has been proven. Extending the theory developed by Carlyle [2], he shows that all minimal-state forms of equivalent machines are state equivalent, and they all have the same number of states. He also describes a necessary and sufficient condition for a machine to be minimal. Shimon Even |
IEEE Trans. Electron. Comput. | 1 |
| 1964 | Rational Numbers and Regular EventsabstractIn this paper the relation between a sequential circuit and its regular expression is investigated. The circuits are without special starting units. One method of analysis of a circuit leads to a set of equations whose solutions are regular expressions related to the state diagram of the circuit. In another approach, a set of regular equations, identical in form to the next state equations, is obtained directly from the circuit. By reversing the regular equations and using derivatives, the regular equations are transformed to a form related to the reverse state diagram. The discussion clarifies the relationship among circuits, regular expressions and state diagrams. Moreover, further insight is obtained into the solution of equations with as unknowns. Shimon Even |
IEEE Trans. Electron. Comput. | 1 |
| 1964 | On synchronizable and PSK-synchronizable block codesabstractA (finite) code is called synchronizable ofMth order if, and only if, there exists a least positive integerMsuch that the knowledge of the lastMletters of any message suffices to determine a separation of code words. This condition is less constraining than the comma-free restriction. Sections I-IV is a description of a way of selecting a synchronizable block codeC_{\sigma , n}for a given alphabet with\deltaletters and a given code-word length n. It is proved thatC_{\sigma , n}is maximal in the sense that it contains as many words as possible; and an expression is given for the number of words inC_{\sigma , n}.^{1}Sections V-VIII is a description of a construction of phase-shift-keying synchronizable codes. In the PSK case the letters themselves cannot be identified by the receiver. Only the differences between successive letters can be detected. Thus, if the sequenceX_{1},X_{2}, \cdots , X_{l}is transmitted, then the observed sequence in the receiver isX_{2} - X_{1}, X_{3}- X_{2}, \cdots , X_{i+1}- X_{i}, \cdots , X_{l} - X_{l-1}. The letters are assumed to be the integers mod\delta; andX_{i+1} - X_{i}is taken mod\delta. This situation occurs in the reading of phase-modulated signals. The construction of these codes (calledK_{\sigma , n}) is based onC_{\sigma , n}. Willard L. Eastman, Shimon Even |
IEEE Trans. Inf. Theory | 2 |
| 1964 | Test for synchronizability of finite automata and variable length codesabstractA finite automation is called synchronizable ofNth order if the knowledge of the lastNoutputs suffices to determine the state of the automaton at one time during the lastNoutputs (including the initial and the final states). In an analogous manner synchronizability ofNth order is defined for variable length codes. The paper describes a test for synchronizability on a more general model, the coding graphs, and shows that finite automata and variable length codes are special cases of it. Shimon Even |
IEEE Trans. Inf. Theory | 1 |
| 1963 | Tests for unique decipherabilityabstractA test for unique decipherability of a given codeword set is described. The test also shows whether the set is decipherable with a finite delay, and in the latter case, determines the necessary delay. Finally, it is shown how the test of Sardinas and Patterson [1] can be used to get the same result,^{1}as was conjectured by Gilbert and Moore [2]. Shimon Even |
IEEE Trans. Inf. Theory | 1 |