Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options questions only not deleted user 13740

Multi-party computation (MPC) allows a set of parties, each with a private input, to securely and jointly perform any computation over their inputs.

4 votes
1 answer
455 views

Proof By Reduction

My question is about this paper: Privacy-preserving set operations: http://www.cs.cmu.edu/~leak/papers/set-tech.pdf Let all polynomials be defined over a ring $\mathbb{Z}_p$, where $p$ is a prime …
user153465's user avatar
  • 1,583
1 vote
0 answers
307 views

Whcih one is computationally more expensive: Zero knowledge proof or cut-and-choose

As we know, in order to have multi-party protocol secure against the malicious parties, researchers usually utilise the standard techniques such as zero-knowledge proofs or cut-and-choose technique. …
user153465's user avatar
  • 1,583
0 votes
1 answer
301 views

Secure multi-party private set intersection: Protocols supporting MULTI-party VS supporting ...

Let assume party $B$ wants to receive secure multi-party computation (MPC) output. The are many private set intersection (PSI) protocols that support only two parties but they cannot support multi-par …
user153465's user avatar
  • 1,583
2 votes
0 answers
96 views

Can we use a pseudorandom function in both models of a simulation based proof?

Assume in the real model a party blinds a fixed element $b$ as: $v_i=r_i\cdot b$, where $r_i$ is a output of pseudorandom function. So we give $v_i$ to a semi-honest adversary. Now we want to sketch …
user153465's user avatar
  • 1,583
1 vote
0 answers
100 views

Forward pseudorandom permutation [closed]

Please consider the following scenario: The user A and B use their keys, K1 and K2 respectively. Each client have a vector of elements. Each client separately permutes his vector using his key and out …
user153465's user avatar
  • 1,583
2 votes
2 answers
570 views

Collision-resistant Pseudorandom function

Assume we have a pseudorandom function: PRF(.) We want the following property holds with a high probability: $\forall i, 0\leq i \leq n: PRF(k_1, i)\neq PRF(k_2,i)$ where $k_1$ and $k_2$ are two r …
user153465's user avatar
  • 1,583
6 votes
2 answers
7k views

The main differences between Sketch of Proof and Full proof

My question in general is: Question 1: What are the differences between sketch of proof and full proof? In simulation-based proof, in semi-honest model, we construct a view that is computationally …
user153465's user avatar
  • 1,583
3 votes
1 answer
105 views

Homomorphic $\bmod p$ operation

Let $E(m)$ a be the encryption operation using Paillier encryption scheme. Let $N$ be the public key and $p$ be a large prime number, such that $p<N$. Question: Is there any protocol, that given $E( …
user153465's user avatar
  • 1,583
4 votes
1 answer
1k views

Paillier encryption: Many private keys for a public key

Assume $N$ is a public key for paillier encryption, generated by a third party. Question: Given $N$ can each client generate its own private key, such that its public key is $N$? So all parties separ …
user153465's user avatar
  • 1,583