Anzeige
Erschienen in:
2018 | OriginalPaper | Buchkapitel
Optimal Linear Multiparty Conditional Disclosure of Secrets Protocols
verfasst von : Amos Beimel, Naty Peter
Erschienen in: Advances in Cryptology – ASIACRYPT 2018
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Abstract
In a k-party CDS protocol, each party sends one message to a referee (without seeing the other messages) such that the referee will learn a secret held by the parties if and only if the inputs of the parties satisfy some condition (e.g., if the inputs are all equal). This simple primitive is used to construct attribute based encryption, symmetrically-private information retrieval, priced oblivious transfer, and secret-sharing schemes for any access structure. Motivated by these applications, CDS protocols have been recently studied in many papers.
In this work, we study linear CDS protocols, where each of the messages of the parties is a linear function of the secret and random elements taken from some finite field. Linearity is an important property of CDS protocols as many applications of CDS protocols required it.
Our main result is a construction of linear k-party CDS protocols for an arbitrary function \(f:[N]^{k}\rightarrow \left\{ 0,1 \right\} \) with messages of size \(O(N^{(k-1)/2})\) (a similar result was independently and in parallel proven by Liu et al. [27]). By a lower bound of Beimel et al. [TCC 2017], this message size is optimal. We also consider functions with few inputs that return 1, and design more efficient CDS protocols for them.
CDS protocols can be used to construct secret-sharing schemes for uniform access structures, where for some k all sets of size less than k are unauthorized, all sets of size greater than k are authorized, and each set of size k can be either authorized or unauthorized. We show that our results imply that every k-uniform access structure with n parties can be realized by a linear secret-sharing scheme with share size \(\min \left\{ (O(n/k))^{(k-1)/2},O(n \cdot 2^{n/2}) \right\} \). Furthermore, the linear k-party CDS protocol with messages of size \(O(N^{(k-1)/2})\) was recently used by Liu and Vaikuntanathan [STOC 2018] to construct a linear secret-sharing scheme with share size \(O(2^{0.999n})\) for any n-party access structure.