Download presentation
Presentation is loading. Please wait.
1
Fastest 2PC in all the land
Batch Dual Execution Fastest 2PC in all the land Peter Rindal Mike Rosulek
2
Yaoβs Protocol π¦ π₯ π₯ π¦ Yao π(π₯,π¦)
3
Yaoβs Protocol π¦ π₯ π₯ π¦ Yao π(π₯,π¦) β
Secure against Alice
4
Dual Execution π₯ π¦ π¦ π₯ π π₯,π¦ π΅ π¦ π₯ π π₯,π¦ π΄ [MohasselFranklin06] Yao
π π₯,π¦ π΅ Yao π₯ π¦ π π₯,π¦ π΄
![Dual Execution π₯ π¦ π¦ π₯ π π₯,π¦ π΅ π¦ π₯ π π₯,π¦ π΄ [MohasselFranklin06] Yao](http://slideplayer.com./slide/14657433/90/images/4/Dual+Execution+%F0%9D%91%A5+%F0%9D%91%A6+%F0%9D%91%A6+%F0%9D%91%A5+%F0%9D%91%93+%F0%9D%91%A5%2C%F0%9D%91%A6+%F0%9D%90%B5+%F0%9D%91%A6+%F0%9D%91%A5+%F0%9D%91%93+%F0%9D%91%A5%2C%F0%9D%91%A6+%F0%9D%90%B4+%5BMohasselFranklin06%5D+Yao.jpg "π π₯,π¦ π΅. Yao. π₯. π¦. π π₯,π¦ π΄.")
5
Dual Execution π₯ π¦ π¦ π₯ π π₯,π¦ π΅ π¦ π₯ π π₯,π¦ π΄ π π₯,π¦ π΅ π π₯,π¦ π΅
[MohasselFranklin06] π₯ π¦ Yao π¦ π₯ π π₯,π¦ π΅ π¦ π₯ Yao π π₯,π¦ π΄ π π₯,π¦ π΅ π π₯,π¦ π΅ Eq? First Yao secure against Alice. Second Yao secure against Bob
6
Malicious secure. Leaks only a single bit!
Dual Execution [MohasselFranklin06] π₯ π¦ Yao π β
,π¦ π¦ π₯ π π₯,π¦ π΅ π¦ π₯ Yao π π₯,π¦ π΄ π π₯,π¦ π΅ π π₯,π¦ π΅ Eq? First Yao secure against Alice. Second Yao secure against Bob Equality leaks π π₯,π¦ =π(π₯,π¦) Malicious secure. Leaks only a single bit!
7
Dual Execution π₯ π¦ π¦ π₯ π¦ π₯ π§ 1 π΅ ,β¦, π§ π π΅ π§ 1 π΄ ,β¦, π§ π π΄
[KolesnikovMohasselRivaRosulek15] π₯ π¦ Yao Yao Yao Yao π¦ π₯ π¦ Yao π₯ Yao Yao Yao π§ 1 π΅ ,β¦, π§ π π΅ π§ 1 π΄ ,β¦, π§ π π΄ PSI
8
Dual Execution π₯ π¦ π¦ π₯ π¦ π₯ π§ 1 π΅ ,β¦, π§ π π΅ π§ 1 π΄ ,β¦, π§ π π΄
[KolesnikovMohasselRivaRosulek15] π₯ π¦ Yao Yao Yao Yao π¦ π₯ π¦ Yao π₯ Yao Yao Yao π§ 1 π΅ ,β¦, π§ π π΅ π§ 1 π΄ ,β¦, π§ π π΄ PSI ππ« ππππ π πππ = π βπ Equality leaks β π : π π π₯,π¦ β π(π₯,π¦)
9
Online β Offline [LindellRiva14,NeilsenOrlandi08]
Want to execute π many times Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao
![Online β Offline [LindellRiva14,NeilsenOrlandi08]](http://slideplayer.com./slide/14657433/90/images/9/Online+%E2%80%93+Offline+%5BLindellRiva14%2CNeilsenOrlandi08%5D.jpg "Want to execute π many times. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao.")
10
Online β Offline [LindellRiva14,NeilsenOrlandi08]
Want to execute π many times Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao
![Online β Offline [LindellRiva14,NeilsenOrlandi08]](http://slideplayer.com./slide/14657433/90/images/10/Online+%E2%80%93+Offline+%5BLindellRiva14%2CNeilsenOrlandi08%5D.jpg "Want to execute π many times. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao.")
11
Online β Offline [LindellRiva14,NeilsenOrlandi08]
Want to execute π many times Later we get inputs and evaluate Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao Yao PSI
![Online β Offline [LindellRiva14,NeilsenOrlandi08]](http://slideplayer.com./slide/14657433/90/images/11/Online+%E2%80%93+Offline+%5BLindellRiva14%2CNeilsenOrlandi08%5D.jpg "Want to execute π many times. Later we get inputs and evaluate. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. Yao. PSI.")
12
Technical Challenges Input Consistency PSI reconciliation π§ 1 π΅
Only π π decommits and communication PSI reconciliation Very light weight malicious PSI Only weak security required Yao Yao Yao Yao π§ 1 π΅ { π§ 1 π΄ } PSI
13
Fastest in all the land *
Running times for 1,024 evaluations To appear in Usenix β16 Eprint coming soon Function Amortized Offline Online AES 5.1 ππ 1.3 ππ SHA-256 48.0 ππ 8.1 ππ βFaster Malicious 2-party Secure Computation with Online/Offline Dual Executionβ * Online + Offline
14
The End Thanks Peter Rindal Mike Rosulek
Similar presentations
