Non-interactive Secure Computation from One-Way Functions
Non-interactive Secure Computation from One-Way Functions
复制标题
单向函数的非交互式安全计算
DOI：
10.1007/978-3-030-03332-3_5
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Visconti, Ivan
中科院分区：
文献类型：
--
作者：
Badrinarayanan, Saikrishna;Jain, Abhishek;Ostrovsky, Rafail;Visconti, Ivan
非交互式安全计算（NISC）的概念首先在Ishai等人的工作中提出。[EUROCRYPT 2011]研究了以下问题：假设接收方希望发布其秘密输入的加密，以便任何具有输入的发送方可以发送消息，该消息显示（x,y） toR（用于某些功能）。在这里，m可以被看作是一个可以被r解密的加密off（x,y）。NISC需要针对恶意发送方和接收方的安全性，并且还要求接收方的消息可以跨多个计算（即接收方的固定输入）重用。这个问题的所有以前的解决方案都必须依赖于OT（或特定的数字理论假设），即使在常见的参考字符串模型或随机oracle模型中也是如此，或者实现较弱的安全性概念，如超多项式时间模拟。在这项工作中，我们在无状态硬件令牌模型中基于单向函数的最小假设构建了NISC协议。我们的构造实现了UC安全性，并且需要接收方向发送方发送单个令牌。
The notion of non-interactive secure computation (NISC) first introduced in the work of Ishai et al. [EUROCRYPT 2011] studies the following problem: Suppose a receiverRwishes to publish an encryption of her secret inputyso that any senderSwith inputxcan then send a messagemthat revealsf(x,y) toR(for some functionf). Here,mcan be viewed as an encryption off(x,y) that can be decrypted byR. NISC requires security against both malicious senders and receivers, and also requires the receiver’s message to be reusable across multiple computations (w.r.t. a fixed input of the receiver).All previous solutions to this problem necessarily rely upon OT (or specific number-theoretic assumptions) even in the common reference string model or the random oracle model or to achieve weaker notions of security such as super-polynomial-time simulation.In this work, we construct a NISC protocol based on the minimal assumption of one way functions, in the stateless hardware token model. Our construction achieves UC security and requires a single token sent by the receiver to the sender.