Questions tagged [data-privacy]
Data privacy refers to (cryptographic) methods to prevent the disclosure of sensitive (identifying) information of persons.
134
questions
0
votes
0
answers
22
views
I'm wondering if using the same one public key does not guarantee privacy in the computation of multiple data owners
Participating entity: multiple data owners, computing clouds
Protocol: The multiple data owners send their data to the computing clouds, which perform the computation of the data.
Privacy protection:...
- 161
1
vote
2
answers
35
views
How to avoid sender modify the final output in private set intersection under malicious setting?
I'm relatively new to this topic, and I have a question that might seem basic. I appreciate your patience.
In most PSI schemes(2 party or multi party),the intersection result is always output by only ...
- 11
1
vote
1
answer
49
views
Ensuring Data Security During Decryption and Re-encryption Process
Scenario:
Consider a scenario where Server 1 stores a 600-800 KB ebook encrypted with a certain private key. Server 2, a computation-purpose server, holds this private decryption key and get access to ...
- 51
1
vote
0
answers
32
views
Answering boolean question without knowing "Who" answer [closed]
Can cryptography solve this problem?
Two people are chatting, Mr. X and Ms Y. They give each other a CRC16 hash of someone's name initials and salt a random number at the end (suffix).
Ms Y: "I ...
0
votes
0
answers
12
views
Partition/Range wise privacy
Consider two data streams $a_1,\cdots, a_n \in [a_{min}, a_{max}]$ and $b_1,\cdots, b_n \in [b_{min}, b_{max}]$, Such that $[a_{min}, a_{max}]$ and $[b_{min}, b_{max}]$ do not overlap.
A Differential ...
0
votes
1
answer
92
views
who creates the passkey (and how many will be created)? [closed]
Passkey is nice. The math is nice. The tech is nice. https://security.googleblog.com/2023/05/so-long-passwords-thanks-for-all-phish.html
What I still dont see after sooo many hours: what software ...
- 101
0
votes
1
answer
111
views
Verification in Bulletproof commitment scheme
I am reviewing the ZKP course, represented by the university of Berkley (https://zk-learning.org/). In pages 44 of lecture 6 that is attached below (https://zk-learning.org/assets/lecture6.pdf), the ...
- 181
0
votes
1
answer
38
views
Utility Guarantee of Small Data Base Mechanism in Differential Privacy
I am reading Section 4.1 (An offline algorithm: SmallDB) of The Algorithmic Foundations of Differential Privacy by Dwork and Roth. I am stuck at the proof of Proposition 4.4, which is about the ...
- 101
2
votes
0
answers
63
views
Poly-commitment based on Bulletproofs
I am reviewing the ZKP course, represented by the university of Berkley (https://zk-learning.org/). In pages 41 and 42 of lecture 6 that is attached below (https://zk-learning.org/assets/lecture6.pdf),...
- 181
2
votes
0
answers
113
views
Protecting value decomposition risk in microdata release
Consider a scenario where a company wants to release a microdata of their employees total annual compensation for the following year to an analyst in a recruiting firm in order to provide an ...
- 71
1
vote
0
answers
115
views
How to solve the problem of FHE ciphertext expansion?
FHE typically has large ciphertext expansion factor, meaning that the ratio
$$\frac{|\mathsf{Enc}_{pk}(m)|}{|m|}$$
is typically quite large --- in standard schemes it is $\omega(1)$. Even getting $\...
- 31
1
vote
1
answer
63
views
General Questions on Big Data and AI privacy [closed]
All,
Recently, I came across a question on privacy for big data and AI.
IMO, big data privacy focuses on "anonymization" aspect where sensitive informatino such as Personal Identitfiable ...
- 149
0
votes
1
answer
45
views
SMCQL practical examples
I am looking for some practical examples on how to use SMCQL on some typical SQL queries. The paper seems to be oriented more towards theory. Can somebody point me to some examples to understand it ...
- 181
0
votes
1
answer
75
views
IKEv2 with EAP and use of anonymous identity
IKEv2 RFC7296 Section 2.16, provides overview of how IKEv2 is used with EAP. That section states the following when a different identity (IDi) is used in message 2 IKE_AUTH from initiator to responder,...
- 23
1
vote
0
answers
41
views
Zero-knowledge data storage with peace of mind. MAC/Encryption with two keys?
Background
Bob's goal: Receive data E = E(D) (encryption of D) from Alice that he knows for sure is encrypted and that he can't possibly decrypt (without brute force). This gives his data backup ...
- 233
2
votes
1
answer
86
views
Approximate differential privacy: avoiding composition in vector-queries
Assume we have an $n$-dimensional real-valued function $f$ whose $\ell_1$ sensitivity is equal to $GS(f) = 1$. We can also assume the sensitivity of each dimension is also $\Delta f = 1$.
For pure ...
2
votes
1
answer
187
views
Differential privacy with strong composition under k-mechanisms with different (ε, δ)-DP bounds
The overall DP under the strong composition theorem for k-mechanisms is ($\epsilon \sqrt{k log(1/\delta)}$, k$\delta$) such that each individual mechanism has ($\epsilon, \delta$)-DP.
But what if say, ...
- 23
0
votes
0
answers
64
views
Constraining the output of a hashing function to a specific group
I looked into this paper on privacy-preserving aggregation by Marc Joye and Benoit Libert (https://www.ifca.ai/fc13/proc/3-3.pdf). A key element in their scheme is a hash function defined as $$H: \...
- 45
1
vote
1
answer
53
views
OTP like Identity
I am a developer with very little experience on the crypto part,
and I'm looking for a secure solution (OTP Like) for identifying between client (browser) and server.
this is what i need:
Web Page at ...
1
vote
1
answer
94
views
What do you think of my plan to secure on-chain sensitive data using asymetric encryption?
I’m new to development using web3 technologies and I have a use case where I want to store private data about the user in the public blockchain Polygon.
This data should be recorded to be tamper proof ...
- 11
1
vote
1
answer
44
views
Privacy that a scheme offers
I encountered the following scenario in development of a system.
A user wants to perform an operation on one of $n$ days. An adversary can observe a sequence of integers $X_1, \cdots, X_n$. If the ...
- 113
3
votes
3
answers
337
views
Public-key/asymmetric encryption where you can only leak the decrypted message by leaking your password
A bunch of friends are using public-key encryption to send encrypted messages to each other using an open public forum. I.e. each friend has a public key (which you can use to encrypt messages for ...
- 335
1
vote
1
answer
345
views
Best way to encrypt sensitive data on server with HSM and symmetric keys
I need to store sensitive data (like customer photos) in a SQL database in the most secure way in case of security breaches. The data won't be accessed by the clients, only by internal processes that ...
- 11
0
votes
1
answer
61
views
When can composition be viewed as a vector-valued query with differential privacy?
Page 33 of The Algorithmic Foundations of Differential Privacy gives two examples where a composition of mechanisms can be viewed as a vector-values output, histograms, and fixed counting queries, ...
- 103
2
votes
1
answer
228
views
If the symmetric key is stolen; can I key revoke without reencrypted data?
I have a question about database security. This is a scenario I have.
The data is encrypted using symmetric (i.e., AES) and stored in a database, while the secret key is stored on the client side, so ...
- 21
1
vote
1
answer
65
views
Securely sort lists of numbers from two parties
I am looking for ways to securely sort two lists of numbers. Yao's millionaire's problem considers each party with one secrete number and compare them securely. Are there papers on extension to this ...
2
votes
1
answer
157
views
Advanced Composition in DP is worse than Basic Composition
I have problems with understanding the advanced composition theorem in DP.
Let I have two approximate-DP mechanisms ($k = 2)$ where each satisfies $(\epsilon = 0.5, \delta = 0.1)$-DP. By basic ...
3
votes
1
answer
254
views
How do we select values for parameters when using Differential Privacy?
I'm aware we can quantify privacy with ε-differential privacy (ε-DP). But when we apply DP, how do we actually select the value for ε ? Are there some rule-of-thumbs? Is it decided case-by-case basis? ...
- 441
5
votes
1
answer
270
views
What is the best way to pseudonymise IP addresses while retaining the ability to identify those that share a subnet?
Background: I'm developing an app that is based around registered users voting on stuff, and I want to create a heuristic that involves IP addresses as one way to flag accounts for further ...
- 161
2
votes
0
answers
69
views
What is the link between anonymous credentials and transactional pseudonyms?
Anonymous credentials are used to prove certain properties of a specific user without revealing any other information, and transactional pseudonyms are used to authenticate a user as the rightful ...
3
votes
2
answers
143
views
Prove that $x$ is the sum of digitally signed numbers without revealing the summands
Imagine this:
Charlie chooses two integers $x_1$ and $x_2$ and signs each of these integers with the same private key.
Charlie sends the following to Alice:
$x_1$ and $x_2$,
the two signatures, and
...
- 135
1
vote
0
answers
33
views
Looking for a (partly) anonymous signature
I am looking a way to sign a document, so that everyone could verify that one person out of a group did, but only a special person and/or the group could know who signed it.
Let's say, X chooses a ...
- 469
1
vote
1
answer
617
views
Differential Privacy: Gaussian Mechanism when $\epsilon >1$, Laplace Mechanism when $\epsilon = 0$
In Differential Privacy resources, the limiting cases of $\epsilon, \delta$ are not justified well enough.
For example, on Wikipedia, it is said that Gaussian mechanism only works when $\epsilon < ...
0
votes
0
answers
49
views
Revealing percentiles of an ordered dataset without revealing its size
Given an ordered set $S$ of positive integers (eg. $S=\{503, 503, 520, 551...N\}$) I want to be able to reveal the percentile rank (eg. 503 is in the top 10th percentile) for each element of a ...
- 101
0
votes
0
answers
42
views
Is it possible to allow a user to log in if logged out without identifying them?
I have to verify that the user has registered and is currently logged out without identifying the user. Essentially, I am looking for privacy-oriented authorization mechanisms which prevent ...
- 101
2
votes
1
answer
48
views
Sensitivy Maximization RAPPOR (Local Differential Privacy)
Hi I have a doubt at the end of the proof of the RAPPOR Algorithm, when they say the sensitivity is maximized when $b'_{h+1}=b'_{h+2}=...=b'_{2h}=1$ and $b'_{1}=b'_{2}=...=b'_{h}=0$. I don't ...
- 152
2
votes
1
answer
92
views
Data Security and Encryption
I have a research paper on data security using proxy re-encryption, and I need to provide an answer to a reviewer's comment. However, I have no idea on what to do or how to answer it.
The security ...
- 21
2
votes
2
answers
54
views
What is $z_b$ in this introduction to Private Information Retrieval?
I was trying to read this introduction to private information retrieval. On page 12 of the document, a scheme for 1-DB private information retrieval is discussed. I was unable to understand one of the ...
- 187
2
votes
1
answer
102
views
How to adapt the equation of Gaussian mechanism noise based on number of executions
I'm trying to build a differentially private machine learning model. I'm using the Gaussian mechanism to calculate the required noise amount based on pre-defined privacy budget value 𝜖
The equation ...
- 23
0
votes
0
answers
59
views
Mechanisms for masking identifying unique IDs with non-identifying unique IDs to protect privacy?
I need to suggest mechanisms for masking unique codes in a database with different unique codes that are not derived from the original unique codes, but are equivalently unique in that they could ...
1
vote
1
answer
195
views
Differential privacy what does "where the probability is taken over the randomness used by the algorithm" mean?
The definition of differential privacy is as follows:
A randomized mechanism $\mathcal{M}$ is $(\epsilon, \delta)$-differentially private, where $\epsilon \leq 0$ and $\delta \leq 0$, if for any ...
- 235
1
vote
2
answers
256
views
Differential privacy noise that scales with $L_p$-sensitivity with $p>2$?
It is well-known that to make the result of a $\mathbb{R}^d$-valued query $(\varepsilon,\delta)$-differentially private, you can add noise to it. If you add Laplace noise, you need to scale the noise ...
- 1,008
0
votes
0
answers
23
views
Check correctness of data using only publicly known variables and a server response
A smart contract (a publicly known program) needs to check if the data D is correct (belongs to some fixed set). It is by definition correct if our trusted server checks it and decides it's correct.
...
- 111
2
votes
1
answer
107
views
The sensitivity in differential privacy with deep learning
In differentially private deep learning, the sensitivity is determined by clipping gradient norm (see Abadi et al.'s paper). In this paper, when the clipping gradient norm is $C$, the sensitivity is $...
- 21
3
votes
1
answer
103
views
Laplace Inequality
I am trying to prove that if $r_i \sim Lap(0,1/\varepsilon)$ where $\varepsilon >0$ then:
$$Pr[r_i \geq 1+r^*] \geq e^{-\varepsilon}Pr[r_i \geq r^{*}]$$.
I know that for $r*>0$ it satisfies ...
- 152
2
votes
1
answer
737
views
$(\epsilon, \delta)$-differential privacy: main motivation of $\delta$
I am wondering why (not how) we relax $\epsilon$-differential privacy to $(\epsilon, \delta)$-differential privacy. Is the main motivation to reduce the variance of the noise added to the query with a ...
2
votes
1
answer
417
views
Advanced Composition (Differential Privacy)
I have a problem understanding the proof of the corollary of Advanced Composition
Theorem Advanced Composition:
For all $\varepsilon,\delta,\delta' \geq 0$ the class of $(\varepsilon,\delta)$-...
- 152
2
votes
0
answers
116
views
Content Key Encryption for Multi-User data access
I recently worked out a concept for a use-case, but I'm not sure if my approach is good enough.
So I would appreciate feedback and things to look out for, as I'm fairly new to this field.
A User can ...
3
votes
1
answer
185
views
Lemma KL-Divergence (Differential Privacy)
I am studying differential privacy and I got stuck again in proof of a lemma. Which is:
$D_{\infty}^\delta(Y||Z) \leq \epsilon$ if and only if there exists a random variable $Y'$ such that $\Delta(Y,...
- 152
1
vote
0
answers
71
views
Is using Fiat-shamir Heuristic safe?
What I'd like to do is to have the Prover store a value x where x remains hidden.
From x, I'...
- 43