Non–Interactive CryptoComputing for NC5

《Non–Interactive CryptoComputing for NC5》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、Non±InteractiveCryptoComputingforNC1TomasSanderAdamYoungInternationalComputerScienceInstituteDepartmentofComputerScienceBerkeley,CA,USAColumbiaUniversitysander@icsi.berkeley.eduNewYork,NY,USAayoung@cs.columbia.eduMotiYungCertCoInc.NewYork,NY,USAmoti@cs.columbia.eduAb

2、stractinfact,needprobabilisticencryptionschemeswhicharerandomself-reducible).HomomorphicencryptionschemesTheareaofªcomputingwithencrypteddataºhasbeenarecloselyrelatedtoandusefulinsecurecircuitevalua-studiedbynumerousauthorsinthepasttwentyyearssincetion.Theyhavebeenas

3、sociatedwithcomputationswithen-itisfundamentaltounderstandingpropertiesofencryptioncrypteddata(aswellaswithmanyothercryptographicap-andithasmanypracticalapplications.Therelatedfunda-plications).Surprisingly,theknownhomomorphicschemesmentalareaofªsecurefunctionevaluat

4、ionºhasbeenstudiedhavebeenlimitedtoasmallnumberofalgebraicstructures,sincethemid80's.Initsbasictwo-partycase,twopartiese.g.alltheschemesweareawareofarehomomorphicover(AliceandBob)evaluateaknowncircuitoverprivatein-groups.Wealsogiveanewprovablysecurepublickeyputs(orap

5、rivateinputandaprivatecircuit).MuchattentionschemethatallowsthecomputationofthelogicalANDop-hasbeenpaidtotheimportantissueofminimizingroundsoferationusingencrypteddata.Thisschemeishomomorphiccomputationinthismodel.Namely,thenumberofcommu-overasemigroup(insteadofagrou

6、p)andthusalsoexpandsnicationroundsinwhichAliceandBobneedtoengageintherangeofalgebraicstructureswhichcanbeencryptedtoevaluateacircuitonencrypteddatasecurely.Advance-ªhomomorphicallyº.mentsintheseareashavebeenrecognizedasopenprob-lemsandhaveremainedopenforanumberofyear

7、s.Inthis1Introductionpaperwegiveaoneround,andthusroundoptimal,proto-colforsecureevaluationofcircuitswhichisinpolynomial-Westudythefollowingclassicalproblem:timefor1NCcircuits.TheprotocolinvolvesaninputpartyAlicehasaninputsendingencryptedinputtoasecondparty,acryptocom

8、puter,xandBobhascircuitC.AliceshouldlearnthevalueC(x)butnothingelseªsub-whichevaluatesthecircuit(oraknowncircuitoveritsad-stantialº