On codes, matroids, and secure multiparty computation from linear secret-sharing schemes

被引:37
作者
Cramer, Ronald [1 ,2 ]
Daza, Vanesa [3 ]
Gracia, Ignacio [4 ]
Urroz, Jorge Jimenez [4 ]
Leander, Gregor [5 ]
Marti-Farre, Jaume [4 ]
Padro, Carles [4 ]
机构
[1] CWI, Amsterdam, Netherlands
[2] Leiden Univ, Inst Math, NL-2300 RA Leiden, Netherlands
[3] Univ Rovira & Virgili, Tarragona 43006, Spain
[4] Univ Politecn Cataluna, Barcelona 08034, Spain
[5] Ruhr Univ Bochum, Horst Gortz Inst IT Secur, D-44780 Bochum, Germany
关键词
efficient error correction; multiparty computation; multiplicative linear secret sharing schemes; self-dual codes; self-dual matroids;
D O I
10.1109/TIT.2008.921692
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Error-correcting codes and matroids have been widely used in the study of ordinary secret sharing schemes. In this paper, the connections between codes, matroids, and a special class of secret sharing schemes, namely, multiplicative linear secret sharing schemes (LSSSs), are studied. Such schemes are known to enable multiparty computation protocols secure against general (nonthreshold) adversaries. Two open problems related to the complexity of multiplicative LSSSs are considered in this paper. The first one deals with strongly multiplicative LSSSs. As opposed to the case of multiplicative LSSSs, it is not known whether there is an efficient method to transform an LSSS into a strongly multiplicative LSSS for the same access structure with a polynomial increase of the complexity. A property of strongly multiplicative LSSSs that could be useful in solving this problem is proved. Namely, using a suitable generalization of the well-known Berlekamp-Welch decoder, it is shown that all strongly multiplicative LSSSs enable efficient reconstruction of a shared secret in the presence of malicious faults. The second one is to characterize the access structures of ideal multiplicative LSSSs. Specifically, the considered open problem is to determine whether all self-dual vector space access structures are in this situation. By the aforementioned connection, this in fact constitutes an open problem about matroid theory, since it can be restated in terms of representability of identically self-dual matroids by self-dual codes. A new concept is introduced, the flat-partition, that provides a useful classification of identically self-dual matroids. Uniform identically self-dual matroids, which are known to be representable by self-dual codes, form one of the classes. It is proved that this property also holds for the family of matroids that, in a natural way, is the next class in the above classification: the identically self-dual bipartite matroids.
引用
收藏
页码:2644 / 2657
页数:14
相关论文
共 35 条
[1]  
[Anonymous], ELECT J COMBIN
[2]   On some polynomials related to weight enumerators of linear codes [J].
Barg, A .
SIAM JOURNAL ON DISCRETE MATHEMATICS, 2002, 15 (02) :155-164
[3]  
Beimel A, 2006, LECT NOTES COMPUT SC, V3876, P482
[4]  
Beimel A, 2005, LECT NOTES COMPUT SC, V3378, P600
[5]  
Ben-Or M., 1988, Proceedings of the Twentieth Annual ACM Symposium on Theory of Computing, P1, DOI 10.1145/62212.62213
[6]  
Brickell E. F., 1991, Journal of Cryptology, V4, P123, DOI 10.1007/BF00196772
[7]  
Brickell E.F., 1989, J COMBIN MATH COMBIN, V6, P105
[8]  
BRITZ T, 2002, ELECT J COMBIN, V9
[9]  
Canetti R., 1996, Proceedings of the Twenty-Eighth Annual ACM Symposium on the Theory of Computing, P639, DOI 10.1145/237814.238015
[10]  
Chaum D., 1988, Proceedings of the Twentieth Annual ACM Symposium on Theory of Computing, P11, DOI 10.1145/62212.62214