I'm curious about the honest minority case and what cryptographers have and are currently using to get around this. My motivation is primarily the MPC space, but I'm sure there are other subfields that encounter it.
Some thoughts of mine include:
- It seems that a high threshold Shamir Secret Sharing Scheme or just a vanilla additive sharing scheme would be required to operate on inputs while protecting privacy in a dishonest majority setting, however this does nothing to mitigate the fact that the adversary could easily compromise correctness.
- I know SPDZ technically handles the dishonest majority case, my limited understanding of SPDZ is that they basically MAC everything and anything to accomplish this, but their approach also only provides safety from prying eyes and not any kind of probabilistic or computational guarantee of correctness.
I'm curious, is there some impossibility result in this area that I am just not aware of? It feels like there ought to be, because an adversary with that kind of control should be able to change the inputs of her puppets to compromise the output. Maybe if we limit the adversary to corrupting parties until after their inputs are initially submitted/distribute/broadcast we can say something of value?