2002 · 259 citations · 18 references
ComputingComputer ScienceMathematicsCryptographySecurity ProtocolsTheory Of ComputationCryptographic Protocol DesignRandomized ComputationSecure Multi-party ComputationBoolean Circuit EvaluationBoolean FunctionsComplexity Of Boolean FunctionsComputational SecurityFinite Field ComputationRandomizationSecure Function EvaluationSecure Multiparty Computation
Motivated by questions about secure multi-party computation, we introduce and study a new natural representation of functions by polynomials, which we term randomizing polynomials. "Standard" low-degree polynomials over a finite field are easy to compute with a small number of communication rounds in virtually any setting for secure computation. However, most Boolean functions cannot be evaluated by a polynomial whose degree is smaller than their input size. We get around this barrier by relaxing the requirement of evaluatingf into a weaker requirement of randomizing f: mapping the inputs of f along with independent random inputs into a vector of outputs, whose distribution depends only on the value of f . We show that degree-3 polynomials are sufficient to randomize any function f , relating the efficiency of such a randomization to the branching program size of f . On the other hand, by characterizing the exact class of Boolean functio...
18
Adi Shamir · Communications of the ACM · 1979 · 13.5K citations · Full text
How to generate and exchange secrets
Andrew Chi-Chih Yao · 1986 · 3.7K citations
Security and Composition of Multiparty Cryptographic Protocols
Ran Canetti · Journal of Cryptology · 2000 · 1.4K citations · Full text
Founding crytpography on oblivious transfer
Joe Kilian · 1988 · 1K citations