Linear, constant-rounds bit-decomposition

  • Authors:
  • Tord Reistad;Tomas Toft

  • Affiliations:
  • NTNU, Trondheim, Norway;Dept. of CS Aarhus University, Aarhus N, Denmark

  • Venue:
  • ICISC'09 Proceedings of the 12th international conference on Information security and cryptology
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

When performing secure multiparty computation, tasks may often be simple or difficult depending on the representation chosen. Hence, being able to switch representation efficiently may allow more efficient protocols. We present a new protocol for bit-decomposition: converting a ring element x ∈ ZM to its binary representation, x(logM)-1, ..., x0. The protocol can be based on arbitrary secure arithmetic in ZM; this is achievable for Shamir shared values as well as (threshold) Paillier encrypted ones, implying solutions for both these popular MPC primitives. For additively homomorphic primitives (which is typical, and the case for both examples) the solution is constant-rounds and requires only O(log M) secure ring multiplications. The solution is secure against active adversaries assuming the existence of additional primitives. These exist for both the Shamir sharing based approach as well as the Paillier based one.