Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Multi-party computation (MPC) allows a set of parties, each with a private input, to securely and jointly perform any computation over their inputs.
4
votes
1
answer
455
views
Proof By Reduction
My question is about this paper:
Privacy-preserving set operations: http://www.cs.cmu.edu/~leak/papers/set-tech.pdf
Let all polynomials be defined over a ring $\mathbb{Z}_p$, where $p$ is a prime …
1
vote
0
answers
307
views
Whcih one is computationally more expensive: Zero knowledge proof or cut-and-choose
As we know, in order to have multi-party protocol secure against the malicious parties, researchers usually utilise the standard techniques such as zero-knowledge proofs or cut-and-choose technique.
…
0
votes
1
answer
301
views
Secure multi-party private set intersection: Protocols supporting MULTI-party VS supporting ...
Let assume party $B$ wants to receive secure multi-party computation (MPC) output.
The are many private set intersection (PSI) protocols that support only two parties but they cannot support multi-par …
2
votes
0
answers
96
views
Can we use a pseudorandom function in both models of a simulation based proof?
Assume in the real model a party blinds a fixed element $b$ as: $v_i=r_i\cdot b$, where $r_i$ is a output of pseudorandom function. So we give $v_i$ to a semi-honest adversary.
Now we want to sketch …
1
vote
0
answers
100
views
Forward pseudorandom permutation [closed]
Please consider the following scenario:
The user A and B use their keys, K1 and K2 respectively. Each client have a vector of elements. Each client separately permutes his vector using his key and out …
2
votes
2
answers
570
views
Collision-resistant Pseudorandom function
Assume we have a pseudorandom function: PRF(.)
We want the following property holds with a high probability:
$\forall i, 0\leq i \leq n: PRF(k_1, i)\neq PRF(k_2,i)$
where $k_1$ and $k_2$ are two r …
6
votes
2
answers
7k
views
The main differences between Sketch of Proof and Full proof
My question in general is:
Question 1: What are the differences between sketch of proof and full proof?
In simulation-based proof, in semi-honest model, we construct a view that is computationally …
3
votes
1
answer
105
views
Homomorphic $\bmod p$ operation
Let $E(m)$ a be the encryption operation using Paillier encryption scheme. Let $N$ be the public key and $p$ be a large prime number, such that $p<N$.
Question: Is there any protocol, that given $E( …
4
votes
1
answer
1k
views
Paillier encryption: Many private keys for a public key
Assume $N$ is a public key for paillier encryption, generated by a third party.
Question: Given $N$ can each client generate its own private key, such that its public key is $N$? So all parties separ …