Tag Info

New answers tagged

0

You are correct, if you do things the way you describe, A would be able to decrypt B's private data. So don't do it that way. Instead, since B is to know the answer, let B encrypt his private input with his own public key. He sends that to A. A encrypts her private input with B's public key, then runs the computation. A then returns the encrypted answer to ...


5

Yes, your understanding is correct. It is well-known that homomorphic encryption schemes are vulnerable to cipher text attacks if they are deterministic. See, for example, the section 2.4 of the paper A Survey of Homomorphic Encryption for Nonspecialists Consider that the attacker has a value $c_1$ that is known by him to be a encryption of some clear text ...


2

In short, homomorphic encryption regards to cryptography schemes, secure multi-party computation and secure circuit evaluation are protocols to calculate functions in a distributed way without disclose the data owned by each part and blind computation regards to ways of transform the data in a manner that a third-part can calculate a specific function $f$ ...


1

A practical solution is CryptonorDB which allows you to run queries without decrypting the data. Is somehow similar with CryptDB which is designed as a plug-in for MySQL(and possible other SQL servers), but CryptonorDB is a NoSQL db system and works with JSON documents. Edit: as suggested by community, I'll detail more about encryption algorithms used in ...


-1

Here is a new comer: CryptonorDB, it encrypts data before it's stored and decrypted just before it's used on client side. It applies different encryption schemes(AES and Camellia in CBC mode for JSON documents and ECB and OPE for tags to allow searching without decrypting the data). (Disclaimer: I'm involved in project)


1

Since you referring to the LWE variant of Stehlé and Steinfeld, I will try to give you an answer to your question in that context. Note that these results are a mere extension of the correctness condition in Lemma 3.7 from the revised version of the paper [SS13]. As I said in the comments, at the end it all depends on the choice of parameters ($n, \alpha, ...



Top 50 recent answers are included