Cryptosystems which support computation on encrypted data. They might be partially homomorphic (support for one operation such as + or *) or they might be fully homomorphic (any sequence of + and *).

learn more… | top users | synonyms (1)

-1
votes
0answers
9 views

Background study to understand homomorphic techniques [on hold]

I posted this question in academic stack but do not get answer so I am posting here as it is more relevant here. I am doing masters in information security. I am planning to do PHD. Homomorphic ...
-1
votes
1answer
52 views

Fully Homomorphic Encryption over the Integers with Shorter Public Keys [on hold]

I want to implement Homomorphic scheme from the paper Fully Homomorphic Encryption over the Integers with Shorter Public Keys. I successfully implemented key generation by taking $\lambda = 2, \beta ...
5
votes
1answer
57 views

Is ElGamal encryption still secure if the randomness is known to be even?

In ElGamal encryption $(g^r, g^mg^{kr})$, if the randomness $r$ is always chosen from even numbers, and the attacker knows about this, is it still provable secure?
0
votes
1answer
40 views

FHE Block ciphers' usage

There are currently FHE implementation for AES Simon Speck, and may be more. Except for speed testing, amortized or not, one meaningful usage is mitigating form side channel analysis. Intel, AMD, ...
6
votes
1answer
90 views

Noise in Homomorphic encryption

What is the noise in homomorphic encryption schemes? (or where does the noise come from, I see that its inbuilt in the scheme and is not a side channel or disturbance noise) Is it also due to the ...
1
vote
1answer
55 views

A question about fully homomorphic encryption (FHE)

Hypothesis: We define the messages on a field $\mathtt{F}_p$, where $p$ is a large prime number. I am considering a dynamic outsourced private data scenario. Assume we have 3 messages: $m_1=2, ...
0
votes
1answer
43 views

Homomorphic multiplication by a scalar

Few homomorphic encryption schemes like Paillier , Ring-LWE support homomorphic multiplication operation by a scalar apart from additive homomorphic property. Loosely they could be defined as below ...
1
vote
1answer
44 views

Can we do modulus switching for number theoretic encryption?

Can we do modulus switching for number theoretic encryption such as Paillier or ElGamal?
3
votes
0answers
29 views

About BGV Scheme Batching Technique

I am reading BGV12 about BGV homomorphic scheme right now.But I am being stuck to understand Batching technique in this paper. In Pack function (page 32),this paper feeds ciphertext $c_i$ and sk ...
1
vote
1answer
69 views

Analysis of DGHV Security

I want to know how security of DGHV can be breached using oracle and Binary GCD. As I study this paper : Fully Homomorphic Encryption over the Integers But I am not able to understand Section 4.1: ...
3
votes
0answers
44 views

Quantifying bit security for smart-vercauteren encryption scheme

I am working on project that requires to compare in terms of security between two encryption schemes, one of them is the SV scheme. However, I dont know what are the steps exactly towards quantifying ...
-3
votes
1answer
97 views

How to Perform Computation on AES Encrypted Data

I have this code that successfully performs symmetric encryption using AES algorithm. How can I go about performing computation on it to achieve somewhat homomorphic encryption? ...
3
votes
1answer
74 views

How to prove hardness of approximate-GCD problem?

I am trying to prove the security of my system using the hardness assumption of the approximate-GCD problem using contradiction, i.e. If the attacker is able to break in our scheme, then attacker ...
8
votes
1answer
111 views

How do voters verify a Helios (v3) election result?

So from my understanding of verification specification version 3, a Helios election proceeds as follows: A voter retrieves the system's public key to encrypt their vote & submit it. The voter ...
1
vote
1answer
84 views

Homomorphic Encryption or not

I am a beginner to homomorphic encryption scheme. As far as I think, it is just a kind of concealing real value without using standard encryption algorithms such as AES,DES or RSA. For example , for ...
4
votes
1answer
72 views

Beavers Triple Vs BGW Multiplication on MPC

Typically MPC protocols that are secure against semi-honest adversaries recommend the use of the revised GMW multiplication protocol by Gennaro et al. This is not the case against Active adversaries ...
6
votes
2answers
96 views

Confusion about definition of homomorphic encryption

I am trying to better understand homomorphic encryption, but I feel like I keep getting inconsistent information in the papers that I am reading. One of the papers I am reading says the following: ...
4
votes
1answer
49 views

How does order-preserving encryption work on string?

I have read “How does order-preserving encryption work?”. After that, I completed order-preserving encryption on integer data. Now, I have four questions in this subject: Is it possible to apply ...
1
vote
1answer
50 views

What would be a typical value for the security parameter of the Fully Homomorphic Encryption over the Integers scheme?

The parameters of the Fully Homomorphic Encryption scheme by Dijk et.al are chosen according to the value of the security parameter ${\lambda}$, section 3 of the aforementioned article. What is the ...
6
votes
1answer
44 views

Scalability of homomorphic tallying

Whenever I look at online voting schemes, the idea of homomorphic encryption being a key concept, specially in the form of homomorphic tallying, appears to be universally accepted. The accepted answer ...
2
votes
2answers
79 views

How to make the range of modulo $p$ to $[-\frac{p}{2};\frac{p}{2}]$?

I am using NTL (A Library for doing Number Theory) to implement a FHE (Fully Homomorphic Encryption) scheme. In general, the range of modulo p is $[-\frac{p}{2};\frac{p}{2}]$ in FHE scheme. However, ...
3
votes
1answer
106 views

Why doesn't this operation reveal the voter's message?

I am working my way through this paper. I am trying to figure out the OR zero knowledge proof in figure 2. The prover is verifying that she has correctly voted, and that her input satisfies ...
1
vote
0answers
48 views

Why need mapping to slots to embed bytes in AES-homomorphic encryption?

The encoding of each AES bytes $𝛼_𝑖$ is using CRT(Chinese remainder theorem). It means that there is an aggregate plaintext $H$ such that: $H \mod F_0 =𝛼_0(MappingData[0])$ $H \mod F_1 ...
1
vote
2answers
131 views

How to identify the difference between two cryptographic schemes in terms of security?

I am currently working on a project, that requires using encryption libraries namely (LibScarab and FHEW). I want to know how can I compare the two schemes in terms of security (I already compared ...
3
votes
0answers
91 views

Finding sum of two encrypted numbers

Let's consider such process: Two emitents emit two (integer) secret numbers independently They encrypt (encode) these number in such a way that no-one (except emitent) can decode these numbers. ...
0
votes
1answer
39 views

dealing with real numbers in Integer Vector Homomorphic Encryption lib

I am using Integer Vector Homomorphic Encryption for the encryption lib. I have to multiply a learning rate of 0.01 (i.e. between 0 and 1) by the encrypted data (vector) but it is not integer. I had ...
5
votes
0answers
103 views

Homomorphic system that allows Hamming distance computation?

How can I work out Hamming distance between two binary vectors securely? I would like to know how I can apply homomorphic techniques here.
0
votes
0answers
29 views

Recryption of ciphertext with a different key

Let's have $P$ some sensitive piece of data and $K_1$a secret value, both known to Alice, but not to Bob. $K_1(P)$ means $P$ encrypted using $K_1$. Alice sends $K_1(P)$ to Bob. Bob keeps the value of ...
1
vote
0answers
34 views

homomorpic encryption [closed]

I am doing project k-nearest neighbor classification over semantically secure encrypted relational data I have doubt for in smin algorithm in 1)Li ← Wi ∗ Φir′; ri′ ∈R ZN this line it the out put is ...
1
vote
0answers
68 views

DGHV Bootstrap - How can I recrypt my cipherbit [closed]

I'm implementing this homomorphic crypto-system : http://eprint.iacr.org/2011/440 I'm using SAGE math. I don't get how the bootstrap is done in this scheme, in the appendix A, they say ...
1
vote
0answers
57 views

A topic for my master thesis on post quantum cryptography [closed]

I am a master´s student. I am interested to work on post quantum cryptography. None of my professors are offering any topic this year related to post quantum cryptography. However I have the freedom ...
3
votes
1answer
75 views

Why is this homomorphic encryption correct?

In LTV-FHE, section 3.3.2 Formal description, a ciphertext looks like this $c=hs+2e+b = (2g/f)s+2e+b$, where $h = 2g/f$ is the public key, $f$ is the secret key, $g, s$ and $e$ are chosen randomly, ...
1
vote
0answers
17 views

For the LTV-FHE scheme, after how many additions should modulus switching be used?

From the LTV-FHE paper I find out that after every multiplication there must be a modulus switch to mitigate the noise in the resulting ciphertext, besides relinearization. But, assuming the ...
0
votes
0answers
32 views

Partially homomorphic addition - not all parties present

I often see homomorphic encryption as a solution to a problem where a server wants to know the sum of $n$ users' numbers but can not know each individual users' number plaintexts. My question is: if ...
1
vote
1answer
38 views

How to deal with different setup in Multikey FHE?

The scenario : using a Multikey FHE scheme, let's say LTV-FHE scheme, parties delegate the computation of some function to the mighty cloud. In LTV-FHE scheme the parties generate their keys and ...
-1
votes
1answer
52 views

Should we use modulus switching when dealing with ciphertexts encrypted in different rings?

Having a homomorphic encryption scheme like BGV or LTV-FHE at some point it is possible in the homomorphic evaluation to deal with ciphertexts that are encrypted with respect to different moduli. ...
0
votes
0answers
35 views

Encryption of both data and code [duplicate]

Suppose we have 3 parties: Alice possesses invaluable data $x_1, x_2, ...$; Bob can compute some extremely useful function $f$; Carol owns a world's largest data center which have enough resources to ...
0
votes
1answer
61 views

Is there an additive homomorphic encryption that supports exponentation

For example say we have two numbers a and b. Now is there any partial homomorphic encryption scheme that allows to compute (a-b)^2 over the ciphertexts of a and b without round trips.
3
votes
1answer
89 views

Convert ciphertexts of one encryption scheme to another without decryption

I want to convert ciphertexts of one encryption scheme to another without decrypting them under the first scheme and then encrypting with the second scheme. For example convert OPE encryption to ...
3
votes
2answers
98 views

How can we define division operation by using Fully homomorphic encryption

Last fews months, I'm working with homomorphic encryption. Now I am dealing with some computational problems with integers or real-numbers (like arithmetic mean, standard deviation) where division is ...
6
votes
1answer
105 views

Performing simple arithmetic operations on compressed, and both compressed and encrypted data

We all know it is possible to perform addition and multiplication operations on encrypted data by means of homomorphic encryption methods. My questions are: Is there any cryptosystem that is able to ...
2
votes
1answer
106 views

Elliptic curve ElGamal with homomorphic mapping

I am interested in ElGamal due to the fact that you can achieve some degree of homomorphic properties. I became interested in applying ElGamal to elliptic curves, and found this other question with an ...
1
vote
2answers
121 views

How can comparision like (>=,==) be done using homomorphic encryption?

Since we know that Homomorphic encryption allow computation on encrypted data. Let two n-bit integers $(x,y)$ are encrypted using some LWE public key cryptography. For example - if $x'= HEnc(x,pk)$ ...
5
votes
0answers
40 views

An MPC protocol from Elgamal is a good solution a homomorphic multiplication?

I want to compute a multiplication between many secret values and then distribute the result to everyone involved. For this, I thought about an MPC protocol built from Threshold Homomorphic Elgamal. ...
4
votes
0answers
186 views

Zero-knowledge proof for the product of additive Paillier ciphers

Suppose that Alice received the cipher values: $E(x_1), E(x_2), ..., E(x_n)$ that are encrypted using Paillier cryptosystem by $n$ entities with Bob's public key. Alice computes $E(\sum x_i)$ from ...
4
votes
0answers
84 views

How can I implement decryption for NTRU homomorphic encryption scheme?

I have come across this paper On-the-fly multiparty computation via on-the-cloud Multikey from Fully Homomorphic Encryption by Lopez-Alt et al., where authors describe a NTRU-based homomorphic ...
3
votes
1answer
109 views

Why gcd(r,(p-1)/r) needs to be 1 in benaloh cryptosystem

I recently discovered the benaloh cryptosystem. I am working with the system as it is discribed in the following link: https://en.wikipedia.org/wiki/Benaloh_cryptosystem However I need some help in ...
1
vote
0answers
113 views

Example of FHEI scheme?

I am reading this paper Toward Secure Multikeyword Top-k Retrieval over Encrypted Cloud Data. I am trying to work out an example of the FHEI (Fully homomorphic Encryption over Integers) scheme ...
4
votes
0answers
47 views

Security parameter p =O(n)

In many homomorphic encryption scheme, a security parameter is calculated as p =O(n). How to use the complexity order as values? Is there any specific method with an appropriate example?
1
vote
2answers
87 views

Homomorphic encryption diagram and trouble about a paper

I'm reading a paper based on Homomorphic Encryption: “Fully Homomorphic Encryption over the Integers: From Theory to Practice” (PDF). Now, I need a diagram of this algorithm if possible with all the ...