Multiparty Reusable Non-Interactive Secure Computation

Multiparty Reusable Non-Interactive Secure Computation
复制标题

多方可重用非交互式安全计算

DOI:
--
复制
发表时间:
2020
期刊:
IACR Cryptology ePrint Archive
影响因子:
--
通讯作者:
Huijia Lin
Huijia Lin
中科院分区:
--
文献类型:
--
作者:
Fabrice Benhamouda;Huijia Lin

文献摘要

参考文献

被引文献

相似文献

.减少多方计算(MPC)中的交互是密码学中非常期望的目标。众所周知,2轮MPC可以基于2轮不经意传输(OT)的最小假设[Benhamouda和Lin,Garg和Srinivasan,EC 2018],而1轮MPC通常是不可能的。在这项工作中,我们提出了一个自然的“混合”模型,称为多方可重用的非交互式安全计算(mrNISC)。在这个模型中,各方在公共公告板上发布他们的私人输入x i的编码,一劳永逸。之后,它们中的任何子集I都可以在其输入x I = { x i } i ∈ I上计算函数f,只需向无状态求值器发送一条消息,传递结果f(x I),而不传递其他任何东西。重要的是,输入编码可以在任何数量的在线计算中重用,并且实现了由多轮MPC保证的相同的经典模拟安全性。简而言之,mrNISC具有最小但“易于处理”的交互模式。我们在几个方面启动了对mrNISC的研究。首先,我们形式化了mrNISC协议的模型,并提出了UC安全定义和基于游戏的安全定义。其次,我们构造了mrNISC协议在平原模型的半诚实和半恶意的安全性的基础上配对组。第三,我们展示了两个应用程序的mrNISC的力量:非交互式MPC(NIMPC)与可重用的设置和分布式版本的程序混淆。我们构建mrNISC的核心是一种特殊语言的见证加密方案,用于验证非交互式零知识(NIZK)证明对承诺值的计算的有效性,这是独立的利益。
. Reducing interaction in Multiparty Computation (MPC) is a highly desirable goal in cryptography. It is known that 2-round MPC can be based on the minimal assumption of 2-round Oblivious Transfer (OT) [Benhamouda and Lin, Garg and Srinivasan, EC 2018], and 1-round MPC is impossible in general. In this work, we propose a natural “hybrid” model, called multiparty reusable Non-Interactive Secure Computation (mrNISC) . In this model, parties publish encodings of their private inputs x i on a public bulletin board, once and for all. Later, any subset I of them can compute on-the-fly a function f on their inputs x I = { x i } i ∈ I by just sending a single message to a stateless evaluator, conveying the result f ( x I ) and nothing else. Importantly, the input encodings can be reused in any number of on-the-fly computations, and the same classical simulation security guaranteed by multi-round MPC, is achieved. In short, mrNISC has a minimal yet “tractable” interaction pattern. We initiate the study of mrNISC on several fronts. First, we formalize the model of mrNISC protocols, and present both a UC security definition and a game-based security definition. Second, we construct mrNISC protocols in the plain model with semi-honest and semi-malicious security based on pairing groups. Third, we demonstrate the power of mrNISC by showing two applications: non-interactive MPC (NIMPC) with reusable setup and a distributed version of program obfuscation. At the core of our construction of mrNISC is a witness encryption scheme for a special language that verifies Non-Interactive Zero-Knowledge (NIZK) proofs of the validity of computations over committed values, which is of independent interest.
DOI: 10.1007/978-3-319-78375-8_17
发表时间: 2018-04
期刊: IACR Cryptol. ePrint Arch.
影响因子: --
作者:
Fabrice Benhamouda;Huijia Lin
通讯作者: Fabrice Benhamouda;Huijia Lin