Enforcing Input Correctness via Certification in Garbled Circuit Evaluation
Enforcing Input Correctness via Certification in Garbled Circuit Evaluation
复制标题
通过乱码电路评估认证确保输入正确性
DOI：
10.1007/978-3-319-66399-9_30
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Fattaneh Bayatbabolghani
中科院分区：
文献类型：
--
作者：
Yihua Zhang;Marina Blanton;Fattaneh Bayatbabolghani
安全多方计算允许许多参与者根据他们的私人输入安全地评估函数，并且具有越来越多的应用程序。通常考虑两种标准的对抗模型，分别将参与者视为半诚实或恶意，以显示该框架中结构的安全性。在这项工作中，我们超越了存在恶意参与者的标准安全模型，并处理强制将正确的输入输入到计算中的问题。我们通过让认证机构认证用户的信息来实现这一点，从而将其用于基于乱码电路评估的安全两方计算。这项工作的重点是通过认证来加强加码器输入的正确性，因为之前的工作已经允许人们实现电路评估器输入的这一目标。因此，我们提出了一种新的方法来认证用户的输入，并将认证与基于乱码电路的安全功能评估中使用的加码者的输入绑定在一起。我们的构造实现了显著的性能，通过切割和选择，在恶意模型中仅向乱码电路评估的成本中添加一个（标准）签名验证和对称密钥/哈希操作，其中电路是乱码的，并且以位为单位表示乱码者的输入长度。我们的结构的安全性在标准模型中得到了严格证明。
Secure multi-party computation allows a number of participants to securely evaluate a function on their private inputs and has a growing number of applications. Two standard adversarial models that treat the participants as semi-honest or malicious, respectively, are normally considered for showing security of constructions in this framework. In this work, we go beyond the standard security model in the presence of malicious participants and treat the problem of enforcing correct inputs to be entered into the computation. We achieve this by having a certification authority certify user’s information, which is consequently used in secure two-party computation based on garbled circuit evaluation. The focus of this work on enforcing correctness of garbler’s inputs via certification, as prior work already allows one to achieve this goal for circuit evaluator’s input. Thus, in this work, we put forward a novel approach for certifying user’s input and tying certification to garbler’s input used during secure function evaluation based on garbled circuits. Our construction achieves notable performance of adding only one (standard) signature verification andsymmetric key/hash operations to the cost of garbled circuit evaluation in the malicious model via cut-and-choose, in whichcircuits are garbled andnis the length of the garbler’s input in bits. Security of our construction is rigorously proved in the standard model.