239 reputation
7
bio website
location
age
visits member for 11 months
seen Mar 27 at 0:57

Jul
2
awarded  Curious
Dec
30
comment How do you distribute secret shares without knowing who to first distribute them to?
@mikeazo - i think what i am asking is if it is possible to compute secret shares and distribute them at a later stage. I think in the paper authors figure out who the committees are first and then immediately distribute secret shares after they are computed. I'm wondering if the election could be done at a later (leaky) stage. In general doing it in a leaky environment is favorable because it makes a better protocol.
Dec
29
asked How do you distribute secret shares without knowing who to first distribute them to?
Dec
8
accepted Why is it that researchers prefer finding secure software solutions over secure hardware solutions?
Dec
7
asked Why is it that researchers prefer finding secure software solutions over secure hardware solutions?
Nov
30
comment Can you clarify the proof that secure LR-two party protocols do not exist?
@AndrewPoelstra - If you know the internal state of all parties including secrets $s_i$ then you could simulate the computation. But in this particular proof the adversary doesn't fully know $s_2$ of $P_2$. There is only leakage on $s_2$. Is that why they conclude by saying "Clearly such leakage cannot be simulated in the ideal world" ? I feel like you have answered my other questions, so if you post an answer I'll go ahead and mark it correct. Thanks.
Nov
30
revised Can you clarify the proof that secure LR-two party protocols do not exist?
added 10 characters in body
Nov
30
revised Can you clarify the proof that secure LR-two party protocols do not exist?
edited title
Nov
30
revised Can you clarify the proof that secure LR-two party protocols do not exist?
added 224 characters in body
Nov
30
asked Can you clarify the proof that secure LR-two party protocols do not exist?
Nov
30
accepted How do you prevent the risk of damage to the security of Fully Homomorphic Encryption?
Nov
30
comment How do you prevent the risk of damage to the security of Fully Homomorphic Encryption?
I understand what you are saying - but I guess they are not clear about how exactly FHE would be damaged.
Nov
27
asked Why does a joint leakage MPC protocol not directly apply to a disjoint leakage requirement?
Nov
27
asked How do you prevent the risk of damage to the security of Fully Homomorphic Encryption?
Nov
24
accepted What is adaptive zero-knowledge?
Nov
24
comment What is adaptive zero-knowledge?
Extremely helpful
Nov
24
revised What is adaptive zero-knowledge?
added 170 characters in body
Nov
24
asked What is adaptive zero-knowledge?
Nov
24
awarded  Tumbleweed
Nov
17
asked What is the difference between a one-shot MPC protocol and a unbounded invocation of multiple MPC protocols?