On the download rate of homomorphic secret sharing
summary
Proves optimal linear HSS for low-degree polynomials with exact rate 1 - d t / k, gives a PIR instantiation with upload cost n^{1/d} and that download rate, and supplies three amplification routes: a black-box rate amplification turning small-server additive HSS into t-private k-server schemes with rate 1 - t/k, a variant achieving rate 1 - 1/Θ(√k) for many evaluations, and a non-linear Slepian-Wolf style compressor that beats 1/3 for 1-out-of-3; constructions use Shamir vs CNF secret shares, regenerating-code ideas and distributed source-coding techniques.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:14Homomorphic Secret Sharing
- 2:44Computation on secret shared data
- 4:37Example
- 6:02Can we do better for multiple products
- 8:58Our results III
- 15:23HSS for l-concatenation
- 16:00t-private k-server CNF secret sharing
- 17:03Universality of CNF secret sharing
- 20:10HSS for degree d polynomials
related talks
44mObfuscation III
01h 00mSecure Computation 3
35mA Unified Framework for Succinct Garbling from Homomorphic Secret Sharing
01h 08mSecure Computation 1
01h 01mCommunication Complexity, Streaming and Computational Assumptions
59mDoubly Efficient Private Information Retrieval and Fully Homomorphic RAM Computation from Ring LWE
01h 01mCircularity Based IO, Part 1
40mCryptography in Distributed Systems
