Cryptography Stack Exchange
Cryptography Stack Exchange

Questions tagged [garbled-circuits]

Garbled Circuits are used in Secure Multiparty Computation

Yao's garbled circuit is a method Proposed by Andy Yao in 1986 for Secure multiparty computation. This is a two party protocol. This protocol is only secure against an adversary from the Honest-but-curious adversary model.

More here at cryptotutor (might be offline; 2016-07-04 archive).

88 questions
36
votes
1 answer

What exactly is a "garbled circuit"?

There are plenty of questions here about the details and how-to's of "garbled circuits", but I have not seen anything that defines what garbled circuits are. What exactly is a garbled circuit? What are they intended to be used for? What are their…
Ella Rose
  • 19,971
  • 6
  • 56
  • 103
15
votes
1 answer

What is complexity leveraging

Complexity leveraging is a technique that is generally used to prove adaptive security of a selectively secure scheme. Eg: We can prove adaptive security of Yao's garbling scheme using complexity leveraging. Many papers mention about complexity…
satya
  • 1,484
  • 10
  • 32
11
votes
0 answers

Share Conversion between Different Finite Fields

Let us have any linear secret sharing scheme (LSSS) that works on some field $Z_{p}$, where p is some prime or a power of a prime e.g., Shamir Secret Sharing, Additive secret Sharing. The problem at hand is simple, for any secret shared value in…
DaWNFoRCe
  • 892
  • 7
  • 17
7
votes
1 answer

Constructing Garbled Circuits

I have been recently working on garbled circuits for a course and I think I don't have the the proper background for understanding them. I don't know how to approach such problems. Here is an example of what I'm looking for. Other examples include…
Spock
  • 173
  • 1
  • 5
7
votes
1 answer

Why XOR and NOT is free in garbled circuit

I am having trouble understanding the term "free" in V.Kolesnikov et al's paper. 1. Why NOT is free In page 4, section 3.1, they said that NOT gate is free by simply eliminating them and inverting the correspondence of the wires’ values and…
xtt
  • 369
  • 2
  • 12
6
votes
2 answers

Garbling in the wild (soft question)

I am curious to know whether (Yao's) garbled circuits are actually deployed in practice. There has a lot of works on optimising garbled circuits (e.g., here and here) and I am interested in whether these simply of theoretical interest or with…
ckamath
  • 5,488
  • 2
  • 25
  • 42
6
votes
1 answer

What is Universal Circuit $U_{e}$

I was reading research Paper. In which writer talks about universal circuit. I want to know how is universal circuit $U_{e}$ different from simple circuit. What properties they have. Is they hide structure of simple circuit
Infinity
  • 585
  • 3
  • 15
6
votes
2 answers

Homomorphic Encryption vs. Garbled circuits

I'm currently trying to understand all the differences between homomorphic encryption and garbeled circuits. As I understood the use of homomorphic encryption hides either the data or the computation from the computational party, but what about the…
M. Reif
  • 163
  • 5
5
votes
1 answer

How to know when decryption fails in Yao's Garbled Circuits

I'm reading A Gentle Introduction to Yao's Garbled Circuits, and I came across this passage: Note that in order for this to work, Evan needs to know when decryption succeeds, and when it doesn’t. Otherwise, there’s no way for him to know which…
michaelsnowden
  • 155
  • 5
5
votes
1 answer

How OR gates are garbled in recent optimizations techniques like free XOR, Half Gates?

I am a research student and I have been studying garbled circuits, specifically its optimization techniques. However, in every research paper i have encountered, the researchers have only shown how to garble an AND gate and XOR gates. The circuits…
RAMEEZ IFTIKHAR
  • 53
  • 2
5
votes
1 answer

Difference between secure function evaluation and private function evaluation?

Yao's garbled circuit is used to compute multiparty computation. I know that secure function evaluation is used to hide users input and circuit from each other. Can any body tell me what is private function evaluation? and how is it different from…
Infinity
  • 585
  • 3
  • 15
5
votes
2 answers

What's the definition of the width of a circuit

We consider the size and depth of a circuit under most situations, but recently I read some papers which consider the “width” of a circuit, so I wonder what's the definition of the width of a circuit? I have searched some definitions but they…
CryptoLover
  • 932
  • 1
  • 6
  • 19
5
votes
2 answers

Yao's Garbled Circuit- Why does Alice need to rearrange the circuit?

My understanding of Yao's Garbled Circuit (based mostly on this summary) is as follows: Alice creates a garbled circuit based on the function f to be computed. She then hard-codes her input into the circuit and rearranges the gates in such a way…
danxinnoble
  • 693
  • 3
  • 14
5
votes
1 answer

Why can't garbled circuits be reused?

There are a bunch of papers do research on resizable garbled circuits. But I wonder why garbled circuits cannot be reused? For example, the constructor constructs a garbled circuit of "AND" like…
Jan Leo
  • 925
  • 6
  • 14
4
votes
1 answer

Induction is problematic in computational cryptography - Why?

In Dr. Lindell's lecture The Yao Construction and its Proof Of Security, in briefly explaining the hybrid argument, he makes the statement that mathematical induction is a problem in computational cryptography. He is explaining that a hybrid…
andy
  • 85
  • 3
1
2 3 4 5 6