<p>An <i>n</i>-server information-theoretic <i>Distributed Point Function</i> (DPF) allows a client to secret-share a point function <InlineEquation ID="IEq1"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="10623_2024_1562_Article_IEq1.gif" Format="GIF" Height="20" Rendition="HTML" Resolution="72" Type="Linedraw" Width="51" /> </InlineMediaObject> <EquationSource Format="TEX">\(f_{\alpha ,\beta }(x)\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <msub> <mi>f</mi> <mrow> <mi>α</mi> <mo>,</mo> <mi>β</mi> </mrow> </msub> <mrow> <mo stretchy="false">(</mo> <mi>x</mi> <mo stretchy="false">)</mo> </mrow> </mrow> </math></EquationSource> </InlineEquation> with domain [<i>N</i>] and output group <InlineEquation ID="IEq2"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="10623_2024_1562_Article_IEq2.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {G}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">G</mi> </math></EquationSource> </InlineEquation> among <i>n</i> servers such that each server learns no information about the function from its share (called a <i>key</i>) but can compute an additive share of <InlineEquation ID="IEq3"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="10623_2024_1562_Article_IEq3.gif" Format="GIF" Height="20" Rendition="HTML" Resolution="72" Type="Linedraw" Width="51" /> </InlineMediaObject> <EquationSource Format="TEX">\(f_{\alpha ,\beta }(x)\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <msub> <mi>f</mi> <mrow> <mi>α</mi> <mo>,</mo> <mi>β</mi> </mrow> </msub> <mrow> <mo stretchy="false">(</mo> <mi>x</mi> <mo stretchy="false">)</mo> </mrow> </mrow> </math></EquationSource> </InlineEquation> for any <i>x</i>. DPFs with small key sizes and general output groups are preferred. In this paper, we propose a new transformation from share conversions to information-theoretic DPFs. By applying it to the share conversions from Efremenko’s PIR and Dvir–Gopi PIR, we obtain both an 8-server DPF with key size <InlineEquation ID="IEq4"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="10623_2024_1562_Article_IEq4.gif" Format="GIF" Height="22" Rendition="HTML" Resolution="72" Type="Linedraw" Width="184" /> </InlineMediaObject> <EquationSource Format="TEX">\( O(2^{10\sqrt{\log N\log \log N}}+\log p)\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>O</mi> <mo stretchy="false">(</mo> <msup> <mn>2</mn> <mrow> <mn>10</mn> <msqrt> <mrow> <mo>log</mo> <mi>N</mi> <mo>log</mo> <mo>log</mo> <mi>N</mi> </mrow> </msqrt> </mrow> </msup> <mo>+</mo> <mo>log</mo> <mi>p</mi> <mo stretchy="false">)</mo> </mrow> </math></EquationSource> </InlineEquation> and output group <InlineEquation ID="IEq5"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="10623_2024_1562_Article_IEq5.gif" Format="GIF" Height="19" Rendition="HTML" Resolution="72" Type="Linedraw" Width="20" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}_p\)</EquationSource> <EquationSource Format="MATHML"><math> <msub> <mi mathvariant="double-struck">Z</mi> <mi>p</mi> </msub> </math></EquationSource> </InlineEquation> and a 4-server DPF with key size <InlineEquation ID="IEq6"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="10623_2024_1562_Article_IEq6.gif" Format="GIF" Height="22" Rendition="HTML" Resolution="72" Type="Linedraw" Width="148" /> </InlineMediaObject> <EquationSource Format="TEX">\(O(\tau \cdot 2^{6\sqrt{\log N\log \log N}})\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>O</mi> <mo stretchy="false">(</mo> <mi>τ</mi> <mo>·</mo> <msup> <mn>2</mn> <mrow> <mn>6</mn> <msqrt> <mrow> <mo>log</mo> <mi>N</mi> <mo>log</mo> <mo>log</mo> <mi>N</mi> </mrow> </msqrt> </mrow> </msup> <mo stretchy="false">)</mo> </mrow> </math></EquationSource> </InlineEquation> and output group <InlineEquation ID="IEq7"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="10623_2024_1562_Article_IEq7.gif" Format="GIF" Height="16" Rendition="HTML" Resolution="72" Type="Linedraw" Width="24" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}_{2^\tau }\)</EquationSource> <EquationSource Format="MATHML"><math> <msub> <mi mathvariant="double-struck">Z</mi> <msup> <mn>2</mn> <mi>τ</mi> </msup> </msub> </math></EquationSource> </InlineEquation>. The former allows us to partially answer an open question by Boyle, Gilboa, Ishai, and Kolobov (ITC 2022) and the latter allows us to build the first DPFs that may take any finite Abelian groups as output groups. We also discuss how to further reduce the key sizes by using different PIRs, how to reduce the number of servers by resorting to statistical security or using nice integers, and how to obtain DPFs with <i>t</i>-security. We show the applications of the new DPFs by constructing new efficient PIR protocols with result verification.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Efficient information-theoretic distributed point functions with general output groups

  • Junru Li,
  • Pengzhen Ke,
  • Liang Feng Zhang

摘要

An n-server information-theoretic Distributed Point Function (DPF) allows a client to secret-share a point function \(f_{\alpha ,\beta }(x)\) f α , β ( x ) with domain [N] and output group \(\mathbb {G}\) G among n servers such that each server learns no information about the function from its share (called a key) but can compute an additive share of \(f_{\alpha ,\beta }(x)\) f α , β ( x ) for any x. DPFs with small key sizes and general output groups are preferred. In this paper, we propose a new transformation from share conversions to information-theoretic DPFs. By applying it to the share conversions from Efremenko’s PIR and Dvir–Gopi PIR, we obtain both an 8-server DPF with key size \( O(2^{10\sqrt{\log N\log \log N}}+\log p)\) O ( 2 10 log N log log N + log p ) and output group \(\mathbb {Z}_p\) Z p and a 4-server DPF with key size \(O(\tau \cdot 2^{6\sqrt{\log N\log \log N}})\) O ( τ · 2 6 log N log log N ) and output group \(\mathbb {Z}_{2^\tau }\) Z 2 τ . The former allows us to partially answer an open question by Boyle, Gilboa, Ishai, and Kolobov (ITC 2022) and the latter allows us to build the first DPFs that may take any finite Abelian groups as output groups. We also discuss how to further reduce the key sizes by using different PIRs, how to reduce the number of servers by resorting to statistical security or using nice integers, and how to obtain DPFs with t-security. We show the applications of the new DPFs by constructing new efficient PIR protocols with result verification.