Questions tagged [simulation]
The simulation tag has no usage guidance.
14
questions
2
votes
1
answer
166
views
Resources for simple MPC proofs
Could anyone direct me to literature regarding privacy proofs in the MPC setting.
For example, how can one prove the following simple problem:
Suppose a setting with $n$ parties $S_1, \ldots, S_n$ ...
- 133
3
votes
0
answers
64
views
"Simulator Based" vs "Game Based" security proof for a two-party computation protocol
I am trying to find out how to write a security proof for a two-party computation problem.
I have read some examples to write simulators like $x_1 ∧ x_2$ problem and the example in Goldreich's book. I ...
- 283
1
vote
0
answers
18
views
Rewinding and information oracle
I am working on a proof for a secure aggregation protocol in which the server aggregates values from several clients. A challenge in the proof is that the server may lie about which clients have ...
- 111
2
votes
0
answers
53
views
Why does joint distribution of simulation output and functionality output is required?
I was going through this simulation tutorial.
For example, let x and y be lists of data elements, and
let f be a functionality that outputs an independent random sample of x ∪ y of some predetermined
...
- 41
2
votes
1
answer
143
views
Expanding stand-alone simulation-based proofs to UC proofs
This is a follow-up question to Mikero’s answer to Simulation-based proofs and universal composability proofs.
Let there be some protocol $\pi$ running between two parties $A$ and $B$.
Furthermore, ...
- 23
0
votes
2
answers
214
views
Security against malicious adversaries in MPC
I have a question in the context of two-party computation and the proof of the security of an MPC. I have looked at some of the beginning parts of this, this chapter 7, and
this But I couldn't achieve ...
- 283
2
votes
1
answer
84
views
Why we need to consider a probability ensemble and not just a probability distribution in the definition of Security under Simulation?
I'm currently reading this classic paper "How To Simulate It" and on most of the definitions it is using the term probability ensemble to represent the message space. From my understanding a ...
- 878
2
votes
0
answers
22
views
How to prove the security of the MT-based multiplication protocol via the simulation paradigm
It is known that Multiplicaiton Triple (MT) can be used for secure online multiplication, which is defined by $\mathsf{Mul}(x, y)=(z_0, z_1)$, where $x\cdot y = z_0 + z_1$
$P_0$ sample random $a$, ...
- 21
4
votes
0
answers
100
views
How to get started with Simulation and UC proofs?
I've been in my PhD program for a few months, and every time I try to understand the simulation and UC proof-paradigms I get so confused.
I feel like what I really need is an easy set of (guided) ...
- 41
1
vote
1
answer
94
views
Question on Simulation based security proof for Oblivious Transfer (OT) against semi-honest adversaries
I'm currently reading this How To Simulate It – A Tutorial on the Simulation Proof Technique.
On p. 10, there is a proof using simulation for 1/2-OT, against semi-honest adversaries. Briefly, the ...
- 878
2
votes
1
answer
158
views
Simulation based proof for Beaver's multiplication protocol
Setup
Recently, I became interested in simulation based proofs in the context of secure two party computation. I read some book chapters (from Secure MPC and Secret Sharing and Foundations on ...
- 43
2
votes
0
answers
26
views
How to prove the security if a circuit is obscured by an IO，where the key generattion algorithm of a functional encryption is used in the circuit?
I want to design a scheme, where there is a circuit C0 which is obscured by an indistinguishability obfuscation (IO). In C0, a master key of a functional encryption (FE) is hardwired. Given an input z ...
- 51
3
votes
1
answer
56
views
About simulating abort in multiple party computation
I am new to the simulated proof and am a little bit confused about the abort in the simulation.
When the real-time protocol abort, I assume that the ideal process should also abort? Does this mean ...
- 327
3
votes
1
answer
98
views
Is it common/valid to hardcode an element of a language into a simulator?
Short version: Is it a common practice (and a valid practice) to hardcode an element $d \in \mathcal{L}$ of a language into a simulator? (making the simulator non-uniform and non-constructive)
Long ...
- 1,136