Date: Friday, March 18, 2016
Location: 3725 BBB (10:30 AM to 11:30 AM)
Title: MultiKey FHE from LWE, Revisited
Abstract: Traditional fully homomorphic encryption (FHE) schemes only allow computation on data encrypted under a single key. LopezAlt, Tromer, and Vaikuntanathan (STOC 2012) proposed the notion of a multikey FHE, which allows homomorphic computation on ciphertexts encrypted under different keys, and also gave a construction based on a (somewhat nonstandard) assumption related to NTRU. More recently, Clear and McGoldrick (CRYPTO 2015), followed by Mukherjee and Wichs (EUROCRYPT 2016), proposed a multikey FHE based on learning with errors (LWE). However, unlike the original construction of LopezAlt et al., these later LWEbased schemes have the somewhat undesirable property of being "singlehop" with respect to keys, i.e., all relevant keys must be known at the start of the homomorphic computation, and the output cannot be usefully combined with ciphertexts encrypted under other keys (unless an expensive "bootstrapping" step is performed). In this work we construct two multikey FHE schemes, based on LWE assumptions, which are multihop with respect to keys: the output of a homomorphic computation on ciphertexts encrypted under a set of keys can be used in further homomorphic computation involving additional keys, and so on. Our systems also have smaller ciphertexts than the previous LWEbased ones; indeed, ciphertexts in our second construction are simply GSW ciphertexts with no auxiliary data.
The paper can be accessed at: https://eprint.iacr.org/2016/196.pdf
Files:
Speaker: Sina Shiehian
Institution: UM
Event Organizer: schoeneb
