Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top
up vote 3 down vote accepted

Yes and no.

A threshold cryptosystem means the decryption key can be split into $n$ shares such that only $t\leq n$ are required to recover it. That property in isolation is not useful for multiparty computation.

However when you combine a threshold cryptosystem with one that is at least partially homomorphic (meaning you can do some operation, like addition or multiplication, under encryption), then the two properties combined can make a useful basis for multiparty computation.

The model is that each party encrypts their inputs, you use the homomorphic property to do some computation on the ciphertexts while they are still encrypted, and the threshold property enforces that only the final value is decrypted assuming less than $t$ dishonest key share holders. Without the threshold (or at least a distributed $n$-out-of-$n$ key), the keyholder could simply decrypt the inputs and learn everyone's value.

The most famous paper on this is "Multiparty Computation from Threshold Homomorphic Encryption." This approach is used in lots of papers. A different approach in the same model is "Mix and Match: Secure Function Evaluation via Ciphertexts." It is less used (I think maybe a bit overlooked) but you can do interesting things with it.

share|improve this answer

Yes. Threshold cryptosystems come under the secure multiparty computation branch of cryptography.

Essentially, threshold cryptosystems require multiple parties to cooperate in order to decrypt a ciphertext.

Secure multiparty computation is a field of study involving cryptosystems that require more than one party to compute an operation. As such, threshold cryptosystems fall into this field.

share|improve this answer
but any formal study of the relation is made ? any references? – sashank Jul 20 '12 at 14:56
There's no formal study of the relation, because that's like asking for a study on the relationship between basketball and sports. Threshold cryptosystems are a type of secure multiparty computation. – Polynomial Jul 20 '12 at 15:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.