A Survey on Homomorphic Encryption Schemes: Theory and Implementation
A Survey on Homomorphic Encryption Schemes: Theory and Implementation
复制标题
DOI：
10.1145/3214303
复制
发表时间：
2018-09-01
影响因子：
16.6
通讯作者：
Conti, Mauro
中科院分区：
文献类型：
--
作者：
Acar, Abbas;Aksu, Hidayet;Conti, Mauro
传统加密系统依赖于在交换加密消息时所涉及的对等体之间共享密钥（公共或私有）。然而，这种方法带来了隐私问题。拥有密钥的用户或服务提供商对数据拥有专有权。特别是在流行的云服务中，对敏感数据隐私的控制将丢失。即使不共享密钥，加密材料也会与不一定需要访问内容的第三方共享。此外，不受信任的服务器、提供商和云运营商可以在用户结束与服务的关系后很长一段时间内继续识别用户的元素。事实上，同态加密（HE）是一种特殊的加密方案，可以解决这些问题，因为它允许任何第三方在不事先解密的情况下对加密数据进行操作。虽然HE方案的这个非常有用的特征已经被知道超过30年，但第一个合理且可实现的全同态加密（FHE）方案，其允许任何可计算函数对加密数据执行，是由克雷格Gentry在2009年引入的。尽管这是一项重大成就，但到目前为止的不同实现表明，FHE仍然需要显着改进，才能在每个平台上实用。因此，本次调查的重点是HE和FHE计划。首先，我们介绍了HE的基础知识以及众所周知的部分同态加密（PHE）和部分同态加密（SWHE）的细节，这是实现FHE的重要支柱。在此基础上，介绍了FHE的主要族，为后续FHE方案的研究奠定了基础。此外，Gentry型FHE方案的实现和最近的改进也进行了调查。最后，对今后的研究方向进行了展望。本调查旨在为有兴趣了解，应用和扩展最先进的HE，PHE，SWHE和FHE系统的研究人员和从业人员提供清晰的知识和基础。
Legacy encryption systems depend on sharing a key (public or private) among the peers involved in exchanging an encrypted message. However, this approach poses privacy concerns. The users or service providers with the key have exclusive rights on the data. Especially with popular cloud services, control over the privacy of the sensitive data is lost. Even when the keys are not shared, the encrypted material is shared with a third party that does not necessarily need to access the content. Moreover, untrusted servers, providers, and cloud operators can keep identifying elements of users long after users end the relationship with the services. Indeed, Homomorphic Encryption (HE), a special kind of encryption scheme, can address these concerns as it allows any third party to operate on the encrypted data without decrypting it in advance. Although this extremely useful feature of the HE scheme has been known for over 30 years, the first plausible and achievable Fully Homomorphic Encryption (FHE) scheme, which allows any computable function to perform on the encrypted data, was introduced by Craig Gentry in 2009. Even though this was a major achievement, different implementations so far demonstrated that FHE still needs to be improved significantly to be practical on every platform. Therefore, this survey focuses on HE and FHE schemes. First, we present the basics of HE and the details of the well-known Partially Homomorphic Encryption (PHE) and Somewhat Homomorphic Encryption (SWHE), which are important pillars for achieving FHE. Then, the main FHE families, which have become the base for the other follow-up FHE schemes, are presented. Furthermore, the implementations and recent improvements in Gentry-type FHE schemes are also surveyed. Finally, further research directions are discussed. This survey is intended to give a clear knowledge and foundation to researchers and practitioners interested in knowing, applying, and extending the state-of-the-art HE, PHE, SWHE, and FHE systems.