Skip to main content

All Questions

Filter by
Sorted by
Tagged with
2 votes
1 answer
341 views

Shamir's secret sharing homomorphism for different degree polynomials

The $(t,n)$ Shamir’s polynomial based secret sharing scheme is $(+,+)$-homomorphic in which the addition of two polynomials secrets equals the Lagrange’s interpolation of the sum-of-shares for the ...
Mona's user avatar
  • 327
1 vote
0 answers
65 views

Threshold Encryption Scheme for Multiple Messages

In a threshold encryption scheme, a dealer generates $(PK,SK1,…,SKn)$ and distributes the secret keys to users indexed by $1,…,n$, and if a combiner obtains $t+1$ partially-decrypted ciphertexts, it ...
hello world's user avatar
0 votes
0 answers
75 views

Privacy preserving aggregation of encrypted data

I have the following problem: I have $t$ servers $S_1, S_2, S_3, \ldots, S_t$, each of them storing some $key : value$ list. They have to upload this data into a big dropbox server $D$, but in such a ...
Ziva's user avatar
  • 235
3 votes
1 answer
893 views

Threshold decryption in multi-key homomorphic encryption

I have a problem understanding the security of threshold decryption in multi-key homomorphic encryption (MKHE) with so called "noise flooding". In particular I think that it is not secure, so probably ...
Tilen Marc's user avatar
0 votes
1 answer
131 views

Is there any implementation of threshold BGN homomorphic encryption? [closed]

The BGN paper (Evaluating 2-DNF Formulas on Ciphertexts) used a threshold variant of BGN. I also want to use this cryptosystem, however, I cannot find any open-source implementation. Is there any such ...
WYC's user avatar
  • 41
5 votes
0 answers
78 views

Threshold homomorphic

Quite a specific question, but are there any threshold signatures that are also homomorphic? Preferably ones that work in the discrete log setting and don't require any pairings.
Max Chamberlin's user avatar
2 votes
0 answers
189 views

NTRU-based threshold encryption system?

I want to implement threshold homomorphic encryption for my project. (encrypt a message using one public key, and decrypt a ciphertext using distributed secret keys) I read a paper "Multiparty ...
takita's user avatar
  • 509
0 votes
1 answer
486 views

Secure Multiparty Sum in malicious model using threshold encryption

Suppose $n$ actors each hold a plaintext $p_i$. We wish to find $\sum p_i$, without leaking any information about individual $p_i$. Any actor (or any link in the network) could be controlled by an ...
zacheusz's user avatar