Canon-MPC, a system for casual non-interactive secure multi-party computation using native client
Canon-MPC, a system for casual non-interactive secure multi-party computation using native client
复制标题
Canon-MPC，一种使用本机客户端进行休闲非交互式安全多方计算的系统
DOI：
--
复制
发表时间：
2013
期刊：
影响因子：
--
通讯作者：
Benny Pinkas
中科院分区：
文献类型：
--
作者：
Ayman Jarrous;Benny Pinkas
这项工作旨在通过设计和实现一个基于浏览器的系统，使非交互式安全计算，使安全的多方计算的群众。该系统被称为Canon-MPC，意思是“CASUAL NON-INTEGRATED SECURE MULTI-PARTY COMPUTER”，在某种意义上说，参与者不需要安装任何软件，也不需要商定一个时间，在这个时间里，他们都必须在线才能运行计算。相反，每个参与者可以使用web浏览器来参与安全计算。该协议在参与者之间的单次传递中执行。每个参与者连接到服务器一次，而不需要其他参与者同时连接到服务器。该系统适合外行人使用，因为除了网络浏览器之外，不需要安装或配置任何软件。该系统基于Halevi等人（Crypto 2011）的协议，用于对称二进制函数的安全计算，该协议对恶意对手是安全的。我们使用一种用于零知识证明的验证技术来优化该协议，从而大大降低了它们的开销。我们实现了一个网站和客户端软件来运行该协议，其中客户端是使用本地客户端技术实现的，用于从Web浏览器中在沙箱中运行本地代码。我们证明，这种技术是理想的加密应用程序。我们描述的实验测量系统的性能。最后，我们描述了一个变体的协议，可以处理缺席方，谁被邀请参加协议，但没有出现。
This work intends to bring secure multi-party computation to the masses by designing and implementing a browser-based system that enables non-interactive secure computation. The system, denoted Canon-MPC for "CAsual NON-interactive secure Multi-Party Computation", is casual in the sense that participants do not need to install any software and do not need to agree on a time in which they all have to be online in order to run the computation. Rather, each participant can use a web browser to participate in the secure computation. The protocol is executed in a single pass between the participants. Each participant connects to a server once, without requiring other participants to be connected to the server at the same time. The system is appropriate for use by laypersons, since there is no need to install or configure any software except for a web browser. The system is based on a protocol of Halevi et al. (Crypto 2011) for secure computation of symmetric binary functions, that is secure against malicious adversaries. We optimized the protocol using a batching technique for zero-knowledge proofs that greatly reduces their overhead. We implemented a web site and client software for running the protocol, where the client was implemented using Native Client technology for running native code in a sandbox from within a web browser. We demonstrate that this technology is ideal for cryptographic applications. We describe experiments measuring the performance of the system. Lastly, we describe a variant of the protocol that can handle absentee parties, who were invited to participate in the protocol but did not show up.