Round-Optimal and Communication-Efficient Multiparty Computation

被引:2
作者
Ciampi, Michele [1 ]
Ostrovsky, Rafail [2 ]
Waldner, Hendrik [1 ]
Zikas, Vassilis [3 ]
机构
[1] Univ Edinburgh, Edinburgh, Midlothian, Scotland
[2] Univ Calif Los Angeles, Los Angeles, CA USA
[3] Purdue Univ, W Lafayette, IN 47907 USA
来源
ADVANCES IN CRYPTOLOGY - EUROCRYPT 2022, PT I | 2022年 / 13275卷
基金
美国国家科学基金会; 欧盟地平线“2020”;
关键词
PROTOCOLS;
D O I
10.1007/978-3-031-06944-4_3
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Typical approaches for minimizing the round complexity of multiparty computation (MPC) come at the cost of increased communication complexity (CC) or the reliance on setup assumptions. A notable exception is the recent work of Ananth et al. [TCC 2019], which used Functional Encryption (FE) combiners to obtain a round optimal (tworound) semi-honest MPC in the plain model with a CC proportional to the depth and input-output length of the circuit being computed-we refer to such protocols as circuit scalable. This leaves open the question of obtaining communication efficient protocols that are secure against malicious adversaries in the plain model, which we present in this work. Concretely, our two main contributions are: 1) We provide a round-preserving black-box compiler that compiles a wide class of MPC protocols into circuit-scalable maliciously secure MPC protocols in the plain model, assuming (succinct) FE combiners. 2) We provide a round-preserving black-box compiler that compiles a wide class of MPC protocols into circuit-independent-i.e., with a CC that depends only on the input-output length of the circuit-maliciously secure MPC protocols in the plain model, assuming Multi-Key FullyHomomorphic Encryption (MFHE). Our constructions are based on a new compiler that turns a wide class of MPC protocols into k-delayedinput function MPC protocols (a notion we introduce), where the function that is being computed is specified only in the k-th round of the protocol. As immediate corollaries of our two compilers, we derive (1) the first round-optimal and circuit-scalable maliciously secure MPC, and (2) the first round-optimal and circuit-independent maliciously secure MPC in the plain model. The latter MPC achieves the best to-date CC for a round-optimal malicious MPC protocol. In fact, it is even communication-optimal when the output size of the function being evaluated is smaller than its input size (e.g., for boolean functions). All of our results are based on standard polynomial time assumptions.
引用
收藏
页码:65 / 95
页数:31
相关论文
共 41 条
  • [21] The Exact Round Complexity of Secure Computation
    Garg, Sanjam
    Mukherjee, Pratyay
    Pandey, Omkant
    Polychroniadou, Antigoni
    [J]. ADVANCES IN CRYPTOLOGY - EUROCRYPT 2016, PT II, 2016, 9666 : 448 - 476
  • [22] Garg S, 2012, LECT NOTES COMPUT SC, V7417, P105
  • [23] Goldreich O., 2004, FDN CRYPTOGRAPHY, V2
  • [24] Goyal V, 2011, ACM S THEORY COMPUT, P695
  • [25] Round-Optimal Secure Multi-Party Computation
    Halevi, Shai
    Hazay, Carmit
    Polychroniadou, Antigoni
    Venkitasubramaniam, Muthuramakrishnan
    [J]. ADVANCES IN CRYPTOLOGY - CRYPTO 2018, PT II, 2018, 10992 : 488 - 520
  • [26] Ishai Y, 2008, LECT NOTES COMPUT SC, V5157, P572, DOI 10.1007/978-3-540-85174-5_32
  • [27] Ishai Y, 2010, LECT NOTES COMPUT SC, V6223, P577, DOI 10.1007/978-3-642-14623-7_31
  • [28] Katz J, 2004, LECT NOTES COMPUT SC, V3152, P335
  • [29] Katz J, 2003, LECT NOTES COMPUT SC, V2656, P578
  • [30] Kilian J., 1988, Proceedings of the Twentieth Annual ACM Symposium on Theory of Computing, P20, DOI 10.1145/62212.62215