1
$\begingroup$

It seems like garbled circuits should not be input dependent, and hence should always run in constant time. Just wanted to clarify if this is true.

$\endgroup$
  • $\begingroup$ Are we talking about a single fixed GC (for which the answer should be no) out the expected Evaluation time over a freshly garbled circuit (for which the answer should be yes). $\endgroup$ – Maeher Nov 19 '19 at 11:00
2
$\begingroup$

No, this is not needed in general, for Garbled circuits are not meant to be reused (notice that while most are not, there is some research looking into reusable GC, but not much).

Furthermore, if you are using shuffled garbled truth tables, as you should, then timing discrepancies do not leak any useful information, as long as you do not reuse the circuit.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.