# Tag Info

## New answers tagged multiparty-computation

2

Is there an encryption algorithm/protocol where any of a pre-defined set of keys/passwords will succeed in decrypting a document? Not exactly a protocol, but there are formats out there that will allow this sort of thing. An example system using a similar appraoch would be LUKS which offers "key-slots" doing exactly what you want - but targeted at ...

1

Try reading this paper https://www.math.ucla.edu/~tdokos/notes_files/garbledCircuits.pdf. It will answer your question.

-1

We have two kind of search while outsourcing: keyword search and text search. In the keyword search you choose some keywords in your text and preprocess them before outsourcing. In the server(s), there is just one instance of each keyword so there is no duplication problem. There is the literature of searchable encryption that mostly covers this kind of ...

4

Realizes vs Implements Given the context of the cited papers, they mean the same thing. That said, I would prefer realizes. Implements has a connotation of a source code implementation. There could be implementation flaws (buffer overflow, etc) that impact security. The protocol design is secure, but the implementation is not. That, to me, is the primary ...

3

This is very strange, and somewhat suspect. The abort here is one that prevents the client from getting output. However, the real-world adversary may behave in a way that the client does get output. I suggest writing to the authors to ask and/or going through this very carefully. Without having gone through the details at all, my initial guess is that this ...

3

Detection of malicious behavior can happen anywhere. However, it is not true that you can run semi-honest protocols and then check later. This is because such protocols can reveal the honest party's input when interacting with a malicious adversary. In such as case, even if you detect the cheating, security is not achieved. Thus, you need to make sure that ...

2

More generally, is it necessary to force the malicious party to act honestly is each intermediate step or it is sufficient to force him to output correctly? Detection of malicious behavior can occur at the end. It does not have to happen at each intermediate step. Is it possible for A to choose $x_i$s in a way that this protocol is also secure ...

2

A simulator is a thought experiment whose purpose is to: show that the adversary learns no more about the honest party's inputs than he's supposed to, show that the adversary's effect on the honest party's output is consistent with a legitimate input. If the functionality takes no input from the corrupt party, #2 is moot but we still have #1. A canonical ...

Top 50 recent answers are included