@inproceedings{1214, abstract = {With the accelerated development of robot technologies, optimal control becomes one of the central themes of research. In traditional approaches, the controller, by its internal functionality, finds appropriate actions on the basis of the history of sensor values, guided by the goals, intentions, objectives, learning schemes, and so forth. While very successful with classical robots, these methods run into severe difficulties when applied to soft robots, a new field of robotics with large interest for human-robot interaction. We claim that a novel controller paradigm opens new perspective for this field. This paper applies a recently developed neuro controller with differential extrinsic synaptic plasticity to a muscle-tendon driven arm-shoulder system from the Myorobotics toolkit. In the experiments, we observe a vast variety of self-organized behavior patterns: when left alone, the arm realizes pseudo-random sequences of different poses. By applying physical forces, the system can be entrained into definite motion patterns like wiping a table. Most interestingly, after attaching an object, the controller gets in a functional resonance with the object's internal dynamics, starting to shake spontaneously bottles half-filled with water or sensitively driving an attached pendulum into a circular mode. When attached to the crank of a wheel the neural system independently develops to rotate it. In this way, the robot discovers affordances of objects its body is interacting with.}, author = {Martius, Georg S and Hostettler, Raphael and Knoll, Alois and Der, Ralf}, location = {Daejeon, Korea}, publisher = {IEEE}, title = {{Compliant control for soft robots: Emergent behavior of a tendon driven anthropomorphic arm}}, doi = {10.1109/IROS.2016.7759138}, volume = {2016-November}, year = {2016}, } @article{1216, abstract = {A framework fo r extracting features in 2D transient flows, based on the acceleration field to ensure Galilean invariance is proposed in this paper. The minima of the acceleration magnitude (a superset of acceleration zeros) are extracted and discriminated into vortices and saddle points, based on the spectral properties of the velocity Jacobian. The extraction of topological features is performed with purely combinatorial algorithms from discrete computational topology. The feature points are prioritized with persistence, as a physically meaningful importance measure. These feature points are tracked in time with a robust algorithm for tracking features. Thus, a space-time hierarchy of the minima is built and vortex merging events are detected. We apply the acceleration feature extraction strategy to three two-dimensional shear flows: (1) an incompressible periodic cylinder wake, (2) an incompressible planar mixing layer and (3) a weakly compressible planar jet. The vortex-like acceleration feature points are shown to be well aligned with acceleration zeros, maxima of the vorticity magnitude, minima of the pressure field and minima of λ2.}, author = {Kasten, Jens and Reininghaus, Jan and Hotz, Ingrid and Hege, Hans and Noack, Bernd and Daviller, Guillaume and Morzyński, Marek}, journal = {Archives of Mechanics}, number = {1}, pages = {55 -- 80}, publisher = {Polish Academy of Sciences Publishing House}, title = {{Acceleration feature points of unsteady shear flows}}, volume = {68}, year = {2016}, } @article{1217, abstract = {Understanding the regulation of T-cell responses during inflammation and auto-immunity is fundamental for designing efficient therapeutic strategies against immune diseases. In this regard, prostaglandin E 2 (PGE 2) is mostly considered a myeloid-derived immunosuppressive molecule. We describe for the first time that T cells secrete PGE 2 during T-cell receptor stimulation. In addition, we show that autocrine PGE 2 signaling through EP receptors is essential for optimal CD4 + T-cell activation in vitro and in vivo, and for T helper 1 (Th1) and regulatory T cell differentiation. PGE 2 was found to provide additive co-stimulatory signaling through AKT activation. Intravital multiphoton microscopy showed that triggering EP receptors in T cells is also essential for the stability of T cell-dendritic cell (DC) interactions and Th-cell accumulation in draining lymph nodes (LNs) during inflammation. We further demonstrated that blocking EP receptors in T cells during the initial phase of collagen-induced arthritis in mice resulted in a reduction of clinical arthritis. This could be attributable to defective T-cell activation, accompanied by a decline in activated and interferon-γ-producing CD4 + Th1 cells in draining LNs. In conclusion, we prove that T lymphocytes secret picomolar concentrations of PGE 2, which in turn provide additive co-stimulatory signaling, enabling T cells to attain a favorable activation threshold. PGE 2 signaling in T cells is also required for maintaining long and stable interactions with DCs within LNs. Blockade of EP receptors in vivo impairs T-cell activation and development of T cell-mediated inflammatory responses. This may have implications in various pathophysiological settings.}, author = {Sreeramkumar, Vinatha and Hons, Miroslav and Punzón, Carmen and Stein, Jens and Sancho, David and Fresno Forcelledo, Manuel and Cuesta, Natalia}, journal = {Immunology and Cell Biology}, number = {1}, pages = {39 -- 51}, publisher = {Nature Publishing Group}, title = {{Efficient T-cell priming and activation requires signaling through prostaglandin E2 (EP) receptors}}, doi = {10.1038/icb.2015.62}, volume = {94}, year = {2016}, } @article{1218, abstract = {Investigating the physiology of cyanobacteria cultured under a diel light regime is relevant for a better understanding of the resulting growth characteristics and for specific biotechnological applications that are foreseen for these photosynthetic organisms. Here, we present the results of a multiomics study of the model cyanobacterium Synechocystis sp. strain PCC 6803, cultured in a lab-scale photobioreactor in physiological conditions relevant for large-scale culturing. The culture was sparged withN2 andCO2, leading to an anoxic environment during the dark period. Growth followed the availability of light. Metabolite analysis performed with 1Hnuclear magnetic resonance analysis showed that amino acids involved in nitrogen and sulfur assimilation showed elevated levels in the light. Most protein levels, analyzed through mass spectrometry, remained rather stable. However, several high-light-response proteins and stress-response proteins showed distinct changes at the onset of the light period. Microarray-based transcript analysis found common patterns of~56% of the transcriptome following the diel regime. These oscillating transcripts could be grouped coarsely into genes that were upregulated and downregulated in the dark period. The accumulated glycogen was degraded in the anaerobic environment in the dark. A small part was degraded gradually, reflecting basic maintenance requirements of the cells in darkness. Surprisingly, the largest part was degraded rapidly in a short time span at the end of the dark period. This degradation could allow rapid formation of metabolic intermediates at the end of the dark period, preparing the cells for the resumption of growth at the start of the light period.}, author = {Angermayr, Andreas and Van Alphen, Pascal and Hasdemir, Dicle and Kramer, Gertjan and Iqbal, Muzamal and Van Grondelle, Wilmar and Hoefsloot, Huub and Choi, Younghae and Hellingwerf, Klaas}, journal = {Applied and Environmental Microbiology}, number = {14}, pages = {4180 -- 4189}, publisher = {American Society for Microbiology}, title = {{Culturing synechocystis sp. Strain pcc 6803 with N2 and CO2 in a diel regime reveals multiphase glycogen dynamics with low maintenance costs}}, doi = {10.1128/AEM.00256-16}, volume = {82}, year = {2016}, } @article{1219, abstract = {We consider N×N random matrices of the form H = W + V where W is a real symmetric or complex Hermitian Wigner matrix and V is a random or deterministic, real, diagonal matrix whose entries are independent of W. We assume subexponential decay for the matrix entries of W, and we choose V so that the eigenvalues ofW and V are typically of the same order. For a large class of diagonal matrices V , we show that the local statistics in the bulk of the spectrum are universal in the limit of large N.}, author = {Lee, Jioon and Schnelli, Kevin and Stetler, Ben and Yau, Horngtzer}, journal = {Annals of Probability}, number = {3}, pages = {2349 -- 2425}, publisher = {Institute of Mathematical Statistics}, title = {{Bulk universality for deformed wigner matrices}}, doi = {10.1214/15-AOP1023}, volume = {44}, year = {2016}, } @inproceedings{1220, abstract = {Theoretical and numerical aspects of aerodynamic efficiency of propulsion systems coupled to the boundary layer of a fuselage are studied. We discuss the effects of local flow fields, which are affected both by conservative flow acceleration as well as total pressure losses, on the efficiency of boundary layer immersed propulsion devices. We introduce the concept of a boundary layer retardation turbine that helps reduce skin friction over the fuselage. We numerically investigate efficiency gains offered by boundary layer and wake interacting devices. We discuss the results in terms of a total energy consumption framework and show that efficiency gains of any device depend on all the other elements of the propulsion system.}, author = {Mikić, Gregor and Stoll, Alex and Bevirt, Joe and Grah, Rok and Moore, Mark}, location = {Washington, D.C., USA}, pages = {1 -- 19}, publisher = {AIAA}, title = {{Fuselage boundary layer ingestion propulsion applied to a thin haul commuter aircraft for optimal efficiency}}, doi = {10.2514/6.2016-3764}, year = {2016}, } @article{1221, abstract = {The Auxin Binding Protein 1 (ABP1) is one of the most studied proteins in plants. Since decades ago, it has been the prime receptor candidate for the plant hormone auxin with a plethora of described functions in auxin signaling and development. The developmental importance of ABP1 has recently been questioned by identification of Arabidopsis thaliana abp1 knock-out alleles that show no obvious phenotypes under normal growth conditions. In this study, we examined the contradiction between the normal growth and development of the abp1 knock-outs and the strong morphological defects observed in three different ethanol-inducible abp1 knock-down mutants ( abp1-AS, SS12K, SS12S). By analyzing segregating populations of abp1 knock-out vs. abp1 knock-down crosses we show that the strong morphological defects that were believed to be the result of conditional down-regulation of ABP1 can be reproduced also in the absence of the functional ABP1 protein. This data suggests that the phenotypes in abp1 knock-down lines are due to the off-target effects and asks for further reflections on the biological function of ABP1 or alternative explanations for the missing phenotypic defects in the abp1 loss-of-function alleles.}, author = {Michalko, Jaroslav and Glanc, Matous and Perrot Rechenmann, Catherine and Friml, Jirí}, journal = {F1000 Research }, publisher = {F1000 Research}, title = {{Strong morphological defects in conditional Arabidopsis abp1 knock-down mutants generated in absence of functional ABP1 protein}}, doi = {10.12688/f1000research.7654.1}, volume = {5}, year = {2016}, } @article{1222, abstract = {We consider packings of congruent circles on a square flat torus, i.e., periodic (w.r.t. a square lattice) planar circle packings, with the maximal circle radius. This problem is interesting due to a practical reason—the problem of “super resolution of images.” We have found optimal arrangements for N=6, 7 and 8 circles. Surprisingly, for the case N=7 there are three different optimal arrangements. Our proof is based on a computer enumeration of toroidal irreducible contact graphs.}, author = {Musin, Oleg and Nikitenko, Anton}, journal = {Discrete & Computational Geometry}, number = {1}, pages = {1 -- 20}, publisher = {Springer}, title = {{Optimal packings of congruent circles on a square flat torus}}, doi = {10.1007/s00454-015-9742-6}, volume = {55}, year = {2016}, } @article{1223, abstract = {We consider a random Schrödinger operator on the binary tree with a random potential which is the sum of a random radially symmetric potential, Qr, and a random transversally periodic potential, κQt, with coupling constant κ. Using a new one-dimensional dynamical systems approach combined with Jensen's inequality in hyperbolic space (our key estimate) we obtain a fractional moment estimate proving localization for small and large κ. Together with a previous result we therefore obtain a model with two Anderson transitions, from localization to delocalization and back to localization, when increasing κ. As a by-product we also have a partially new proof of one-dimensional Anderson localization at any disorder.}, author = {Froese, Richard and Lee, Darrick and Sadel, Christian and Spitzer, Wolfgang and Stolz, Günter}, journal = {Journal of Spectral Theory}, number = {3}, pages = {557 -- 600}, publisher = {European Mathematical Society}, title = {{Localization for transversally periodic random potentials on binary trees}}, doi = {10.4171/JST/132}, volume = {6}, year = {2016}, } @article{1224, abstract = {Sexual dimorphism in resource allocation is expected to change during the life cycle of dioecious plants because of temporal differences between the sexes in reproductive investment. Given the potential for sex-specific differences in reproductive costs, resource availability may contribute to variation in reproductive allocation in females and males. Here, we used Rumex hastatulus, a dioecious, wind-pollinated annual plant, to investigate whether sexual dimorphism varies with life-history stage and nutrient availability, and determine whether allocation patterns differ depending on reproductive commitment. To examine if the costs of reproduction varied between the sexes, reproduction was either allowed or prevented through bud removal, and biomass allocation was measured at maturity. In a second experiment to assess variation in sexual dimorphism across the life cycle, and whether this varied with resource availability, plants were grown in high and low nutrients and allocation to roots, aboveground vegetative growth and reproduction were measured at three developmental stages. Males prevented from reproducing compensated with increased above- and belowground allocation to a much larger degree than females, suggesting that male reproductive costs reduce vegetative growth. The proportional allocation to roots, reproductive structures and aboveground vegetative growth varied between the sexes and among life-cycle stages, but not with nutrient treatment. Females allocated proportionally more resources to roots than males at peak flowering, but this pattern was reversed at reproductive maturity under low-nutrient conditions. Our study illustrates the importance of temporal dynamics in sex-specific resource allocation and provides support for high male reproductive costs in wind-pollinated plants.}, author = {Teitel, Zachary and Pickup, Melinda and Field, David and Barrett, Spencer}, journal = {Plant Biology}, number = {1}, pages = {98 -- 103}, publisher = {Wiley-Blackwell}, title = {{The dynamics of resource allocation and costs of reproduction in a sexually dimorphic, wind-pollinated dioecious plant}}, doi = {10.1111/plb.12336}, volume = {18}, year = {2016}, } @inproceedings{1225, abstract = {At Crypto 2015 Fuchsbauer, Hanser and Slamanig (FHS) presented the first standard-model construction of efficient roundoptimal blind signatures that does not require complexity leveraging. It is conceptually simple and builds on the primitive of structure-preserving signatures on equivalence classes (SPS-EQ). FHS prove the unforgeability of their scheme assuming EUF-CMA security of the SPS-EQ scheme and hardness of a version of the DH inversion problem. Blindness under adversarially chosen keys is proven under an interactive variant of the DDH assumption. We propose a variant of their scheme whose blindness can be proven under a non-interactive assumption, namely a variant of the bilinear DDH assumption. We moreover prove its unforgeability assuming only unforgeability of the underlying SPS-EQ but no additional assumptions as needed for the FHS scheme.}, author = {Fuchsbauer, Georg and Hanser, Christian and Kamath Hosdurg, Chethan and Slamanig, Daniel}, location = {Amalfi, Italy}, pages = {391 -- 408}, publisher = {Springer}, title = {{Practical round-optimal blind signatures in the standard model from weaker assumptions}}, doi = {10.1007/978-3-319-44618-9_21}, volume = {9841}, year = {2016}, } @article{1226, abstract = {Mitochondrial complex I (also known as NADH:ubiquinone oxidoreductase) contributes to cellular energy production by transferring electrons from NADH to ubiquinone coupled to proton translocation across the membrane. It is the largest protein assembly of the respiratory chain with a total mass of 970 kilodaltons. Here we present a nearly complete atomic structure of ovine (Ovis aries) mitochondrial complex I at 3.9 Å resolution, solved by cryo-electron microscopy with cross-linking and mass-spectrometry mapping experiments. All 14 conserved core subunits and 31 mitochondria-specific supernumerary subunits are resolved within the L-shaped molecule. The hydrophilic matrix arm comprises flavin mononucleotide and 8 iron-sulfur clusters involved in electron transfer, and the membrane arm contains 78 transmembrane helices, mostly contributed by antiporter-like subunits involved in proton translocation. Supernumerary subunits form an interlinked, stabilizing shell around the conserved core. Tightly bound lipids (including cardiolipins) further stabilize interactions between the hydrophobic subunits. Subunits with possible regulatory roles contain additional cofactors, NADPH and two phosphopantetheine molecules, which are shown to be involved in inter-subunit interactions. We observe two different conformations of the complex, which may be related to the conformationally driven coupling mechanism and to the active-deactive transition of the enzyme. Our structure provides insight into the mechanism, assembly, maturation and dysfunction of mitochondrial complex I, and allows detailed molecular analysis of disease-causing mutations.}, author = {Fiedorczuk, Karol and Letts, James A and Degliesposti, Gianluca and Kaszuba, Karol and Skehel, Mark and Sazanov, Leonid A}, journal = {Nature}, number = {7625}, pages = {406 -- 410}, publisher = {Nature Publishing Group}, title = {{Atomic structure of the entire mammalian mitochondrial complex i}}, doi = {10.1038/nature19794}, volume = {538}, year = {2016}, } @inproceedings{1227, abstract = {Many biological systems can be modeled as multiaffine hybrid systems. Due to the nonlinearity of multiaffine systems, it is difficult to verify their properties of interest directly. A common strategy to tackle this problem is to construct and analyze a discrete overapproximation of the original system. However, the conservativeness of a discrete abstraction significantly determines the level of confidence we can have in the properties of the original system. In this paper, in order to reduce the conservativeness of a discrete abstraction, we propose a new method based on a sufficient and necessary decision condition for computing discrete transitions between states in the abstract system. We assume the state space partition of a multiaffine system to be based on a set of multivariate polynomials. Hence, a rectangular partition defined in terms of polynomials of the form (xi − c) is just a simple case of multivariate polynomial partition, and the new decision condition applies naturally. We analyze and demonstrate the improvement of our method over the existing methods using some examples.}, author = {Kong, Hui and Bartocci, Ezio and Bogomolov, Sergiy and Grosu, Radu and Henzinger, Thomas A and Jiang, Yu and Schilling, Christian}, location = {Grenoble, France}, pages = {128 -- 144}, publisher = {Springer}, title = {{Discrete abstraction of multiaffine systems}}, doi = {10.1007/978-3-319-47151-8_9}, volume = {9957}, year = {2016}, } @inproceedings{1229, abstract = {Witness encryption (WE) was introduced by Garg et al. [GGSW13]. A WE scheme is defined for some NP language L and lets a sender encrypt messages relative to instances x. A ciphertext for x can be decrypted using w witnessing x ∈ L, but hides the message if x ∈ L. Garg et al. construct WE from multilinear maps and give another construction [GGH+13b] using indistinguishability obfuscation (iO) for circuits. Due to the reliance on such heavy tools, WE can cur- rently hardly be implemented on powerful hardware and will unlikely be realizable on constrained devices like smart cards any time soon. We construct a WE scheme where encryption is done by simply computing a Naor-Yung ciphertext (two CPA encryptions and a NIZK proof). To achieve this, our scheme has a setup phase, which outputs public parameters containing an obfuscated circuit (only required for decryption), two encryption keys and a common reference string (used for encryption). This setup need only be run once, and the parame- ters can be used for arbitrary many encryptions. Our scheme can also be turned into a functional WE scheme, where a message is encrypted w.r.t. a statement and a function f, and decryption with a witness w yields f (m, w). Our construction is inspired by the functional encryption scheme by Garg et al. and we prove (selective) security assuming iO and statistically simulation-sound NIZK. We give a construction of the latter in bilinear groups and combining it with ElGamal encryption, our ciphertexts are of size 1.3 kB at a 128-bit security level and can be computed on a smart card.}, author = {Abusalah, Hamza M and Fuchsbauer, Georg and Pietrzak, Krzysztof Z}, location = {Guildford, UK}, pages = {285 -- 303}, publisher = {Springer}, title = {{Offline witness encryption}}, doi = {10.1007/978-3-319-39555-5_16}, volume = {9696}, year = {2016}, } @inproceedings{1230, abstract = {Concolic testing is a promising method for generating test suites for large programs. However, it suffers from the path-explosion problem and often fails to find tests that cover difficult-to-reach parts of programs. In contrast, model checkers based on counterexample-guided abstraction refinement explore programs exhaustively, while failing to scale on large programs with precision. In this paper, we present a novel method that iteratively combines concolic testing and model checking to find a test suite for a given coverage criterion. If concolic testing fails to cover some test goals, then the model checker refines its program abstraction to prove more paths infeasible, which reduces the search space for concolic testing. We have implemented our method on top of the concolictesting tool Crest and the model checker CpaChecker. We evaluated our tool on a collection of programs and a category of SvComp benchmarks. In our experiments, we observed an improvement in branch coverage compared to Crest from 48% to 63% in the best case, and from 66% to 71% on average.}, author = {Daca, Przemyslaw and Gupta, Ashutosh and Henzinger, Thomas A}, location = {St. Petersburg, FL, USA}, pages = {328 -- 347}, publisher = {Springer}, title = {{Abstraction-driven concolic testing}}, doi = {10.1007/978-3-662-49122-5_16}, volume = {9583}, year = {2016}, } @inproceedings{1231, abstract = {We study the time-and memory-complexities of the problem of computing labels of (multiple) randomly selected challenge-nodes in a directed acyclic graph. The w-bit label of a node is the hash of the labels of its parents, and the hash function is modeled as a random oracle. Specific instances of this problem underlie both proofs of space [Dziembowski et al. CRYPTO’15] as well as popular memory-hard functions like scrypt. As our main tool, we introduce the new notion of a probabilistic parallel entangled pebbling game, a new type of combinatorial pebbling game on a graph, which is closely related to the labeling game on the same graph. As a first application of our framework, we prove that for scrypt, when the underlying hash function is invoked n times, the cumulative memory complexity (CMC) (a notion recently introduced by Alwen and Serbinenko (STOC’15) to capture amortized memory-hardness for parallel adversaries) is at least Ω(w · (n/ log(n))2). This bound holds for adversaries that can store many natural functions of the labels (e.g., linear combinations), but still not arbitrary functions thereof. We then introduce and study a combinatorial quantity, and show how a sufficiently small upper bound on it (which we conjecture) extends our CMC bound for scrypt to hold against arbitrary adversaries. We also show that such an upper bound solves the main open problem for proofs-of-space protocols: namely, establishing that the time complexity of computing the label of a random node in a graph on n nodes (given an initial kw-bit state) reduces tightly to the time complexity for black pebbling on the same graph (given an initial k-node pebbling).}, author = {Alwen, Joel F and Chen, Binyi and Kamath Hosdurg, Chethan and Kolmogorov, Vladimir and Pietrzak, Krzysztof Z and Tessaro, Stefano}, location = {Vienna, Austria}, pages = {358 -- 387}, publisher = {Springer}, title = {{On the complexity of scrypt and proofs of space in the parallel random oracle model}}, doi = {10.1007/978-3-662-49896-5_13}, volume = {9666}, year = {2016}, } @article{1232, abstract = {Mitochondrial electron transport chain complexes are organized into supercomplexes responsible for carrying out cellular respiration. Here we present three architectures of mammalian (ovine) supercomplexes determined by cryo-electron microscopy. We identify two distinct arrangements of supercomplex CICIII 2 CIV (the respirasome) - a major 'tight' form and a minor 'loose' form (resolved at the resolution of 5.8 Å and 6.7 Å, respectively), which may represent different stages in supercomplex assembly or disassembly. We have also determined an architecture of supercomplex CICIII 2 at 7.8 Å resolution. All observed density can be attributed to the known 80 subunits of the individual complexes, including 132 transmembrane helices. The individual complexes form tight interactions that vary between the architectures, with complex IV subunit COX7a switching contact from complex III to complex I. The arrangement of active sites within the supercomplex may help control reactive oxygen species production. To our knowledge, these are the first complete architectures of the dominant, physiologically relevant state of the electron transport chain.}, author = {Letts, James A and Fiedorczuk, Karol and Sazanov, Leonid A}, journal = {Nature}, number = {7622}, pages = {644 -- 648}, publisher = {Nature Publishing Group}, title = {{The architecture of respiratory supercomplexes}}, doi = {10.1038/nature19774}, volume = {537}, year = {2016}, } @inproceedings{1233, abstract = {About three decades ago it was realized that implementing private channels between parties which can be adaptively corrupted requires an encryption scheme that is secure against selective opening attacks. Whether standard (IND-CPA) security implies security against selective opening attacks has been a major open question since. The only known reduction from selective opening to IND-CPA security loses an exponential factor. A polynomial reduction is only known for the very special case where the distribution considered in the selective opening security experiment is a product distribution, i.e., the messages are sampled independently from each other. In this paper we give a reduction whose loss is quantified via the dependence graph (where message dependencies correspond to edges) of the underlying message distribution. In particular, for some concrete distributions including Markov distributions, our reduction is polynomial.}, author = {Fuchsbauer, Georg and Heuer, Felix and Kiltz, Eike and Pietrzak, Krzysztof Z}, location = {Tel Aviv, Israel}, pages = {282 -- 305}, publisher = {Springer}, title = {{Standard security does imply security against selective opening for markov distributions}}, doi = {10.1007/978-3-662-49096-9_12}, volume = {9562}, year = {2016}, } @inproceedings{1234, abstract = {We present a new algorithm for the statistical model checking of Markov chains with respect to unbounded temporal properties, including full linear temporal logic. The main idea is that we monitor each simulation run on the fly, in order to detect quickly if a bottom strongly connected component is entered with high probability, in which case the simulation run can be terminated early. As a result, our simulation runs are often much shorter than required by termination bounds that are computed a priori for a desired level of confidence on a large state space. In comparison to previous algorithms for statistical model checking our method is not only faster in many cases but also requires less information about the system, namely, only the minimum transition probability that occurs in the Markov chain. In addition, our method can be generalised to unbounded quantitative properties such as mean-payoff bounds.}, author = {Daca, Przemyslaw and Henzinger, Thomas A and Kretinsky, Jan and Petrov, Tatjana}, location = {Eindhoven, The Netherlands}, pages = {112 -- 129}, publisher = {Springer}, title = {{Faster statistical model checking for unbounded temporal properties}}, doi = {10.1007/978-3-662-49674-9_7}, volume = {9636}, year = {2016}, } @inproceedings{1235, abstract = {A constrained pseudorandom function (CPRF) F: K×X → Y for a family T of subsets of χ is a function where for any key k ∈ K and set S ∈ T one can efficiently compute a short constrained key kS, which allows to evaluate F(k, ·) on all inputs x ∈ S, while the outputs on all inputs x /∈ S look random even given kS. Abusalah et al. recently constructed the first constrained PRF for inputs of arbitrary length whose sets S are decided by Turing machines. They use their CPRF to build broadcast encryption and the first ID-based non-interactive key exchange for an unbounded number of users. Their constrained keys are obfuscated circuits and are therefore large. In this work we drastically reduce the key size and define a constrained key for a Turing machine M as a short signature on M. For this, we introduce a new signature primitive with constrained signing keys that let one only sign certain messages, while forging a signature on others is hard even when knowing the coins for key generation.}, author = {Abusalah, Hamza M and Fuchsbauer, Georg}, location = {Guildford, UK}, pages = {445 -- 463}, publisher = {Springer}, title = {{Constrained PRFs for unbounded inputs with short keys}}, doi = {10.1007/978-3-319-39555-5_24}, volume = {9696}, year = {2016}, }