Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with multiparty-computation
Search options questions only
not deleted
user 8291
Multi-party computation (MPC) allows a set of parties, each with a private input, to securely and jointly perform any computation over their inputs.
1
vote
1
answer
76
views
Why do authors say conflicting things regarding leak-free stages in their paper?
In this paper the last sentence of the first paragraph in the abstract states:
We assume a (necessary) “leak-free” preprocessing stage.
But then later on in section 1.4 they say
Another int …
- 439
1
vote
0
answers
43
views
Why does a joint leakage MPC protocol not directly apply to a disjoint leakage requirement?
In the paper "Multiparty Computation Secure Against Continual Memory Leakage" on pg. 1239 the footnote at the bottom points out the difference between $joint$ leakage and $disjoint$ leakage. The auth …
- 439
4
votes
2
answers
298
views
Why do the outputs of parties in an MPC protocol have to be indistinguishable from the ideal...
In this paper at the bottom of pg. 1235 and beginning of pg. 1236 it says:
An MPC protocol is said to be secure, if for every real world leakage
adversary A there exists an ideal world simulato …
- 439
1
vote
1
answer
119
views
How do you prevent the risk of damage to the security of Fully Homomorphic Encryption?
In this paper on pg. 1248 in the "preprocessing phase" section the authors say:
In the preprocessing phase, the parties run a (standard) MPC to
collectively generate a key pair (pk,sk) for the …
- 439
2
votes
0
answers
77
views
Can you clarify the proof that secure LR-two party protocols do not exist?
In the paper “Multiparty Computation Secure Against Continual Memory Leakage” on pg. 1237, the footnote #1 discuss why it is not possible to construct a leakage resilient two-party protocol. But I'm …
- 439
1
vote
1
answer
250
views
What is the difference between a one-shot MPC protocol and a unbounded invocation of multipl...
In this paper on pg. 1236, under the section "Security Against Continual Leakage", the authors say:
"We further remark that the weaker security notion previously
achieved cannot be extended mea …
- 439
5
votes
1
answer
142
views
How do you distribute secret shares without knowing who to first distribute them to?
Figure 1 on page 1249 of the “Multiparty Computation Secure Against
Continual Memory Leakage” paper shows $m$ committees are elected in step 1 and then later in step 3 are each given a secret share. …
- 439
3
votes
1
answer
660
views
What is adaptive zero-knowledge?
In this paper on pg. 1241 the authors discuss bullet point on Adaptive Zero-Knowledge :
I am new to Zero-Knowledge and I am having trouble understanding what they are saying.
I think they are s …
- 439