TY - JOUR
T1 - Private simultaneous messages based on quadratic residues
AU - Shinagawa, Kazumasa
AU - Eriguchi, Reo
AU - Satake, Shohei
AU - Nuida, Koji
N1 - Publisher Copyright:
© 2023, The Author(s).
PY - 2023/12
Y1 - 2023/12
N2 - Private Simultaneous Messages (PSM) model is a minimal model for secure multiparty computation. Feige, Kilian, and Naor (STOC 1994) and Ishai (Cryptology and Information Security Series 2013) constructed PSM protocols based on quadratic residues. In this paper, we define QR-PSM protocols as a generalization of these protocols. A QR-PSM protocol is a PSM protocol whose decoding function outputs the quadratic residuosity modulo p of what is computed from messages. We design a QR-PSM protocol for any symmetric function f: { 0 , 1 } n→ { 0 , 1 } of communication complexity O(n2) . As far as we know, it is the most efficient PSM protocol for symmetric functions since the previously known best PSM protocol was of O(n2log n) (Beimel et al., CRYPTO 2014). We also study the sizes of the underlying finite fields Fp in the protocols since the communication complexity of a QR-PSM protocol is proportional to the bit length of the prime p. We show that there is a prime p≤ (1 + o(1)) N22 2N-2 such that any length-N pattern of quadratic (non)residues appears modulo p (and hence it can be used for general QR-PSM protocols), which improves the Peralta’s known result (Mathematics of Computation 1992) by a constant factor (1+2)2 .
AB - Private Simultaneous Messages (PSM) model is a minimal model for secure multiparty computation. Feige, Kilian, and Naor (STOC 1994) and Ishai (Cryptology and Information Security Series 2013) constructed PSM protocols based on quadratic residues. In this paper, we define QR-PSM protocols as a generalization of these protocols. A QR-PSM protocol is a PSM protocol whose decoding function outputs the quadratic residuosity modulo p of what is computed from messages. We design a QR-PSM protocol for any symmetric function f: { 0 , 1 } n→ { 0 , 1 } of communication complexity O(n2) . As far as we know, it is the most efficient PSM protocol for symmetric functions since the previously known best PSM protocol was of O(n2log n) (Beimel et al., CRYPTO 2014). We also study the sizes of the underlying finite fields Fp in the protocols since the communication complexity of a QR-PSM protocol is proportional to the bit length of the prime p. We show that there is a prime p≤ (1 + o(1)) N22 2N-2 such that any length-N pattern of quadratic (non)residues appears modulo p (and hence it can be used for general QR-PSM protocols), which improves the Peralta’s known result (Mathematics of Computation 1992) by a constant factor (1+2)2 .
KW - Paley graphs
KW - Private simultaneous messages
KW - Quadratic residues
KW - Secure multiparty computation
KW - Symmetric functions
UR - http://www.scopus.com/inward/record.url?scp=85168098508&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85168098508&partnerID=8YFLogxK
U2 - 10.1007/s10623-023-01279-5
DO - 10.1007/s10623-023-01279-5
M3 - Article
AN - SCOPUS:85168098508
SN - 0925-1022
VL - 91
SP - 3915
EP - 3932
JO - Designs, Codes, and Cryptography
JF - Designs, Codes, and Cryptography
IS - 12
ER -