Abstract:
Joint work with Claudio Orlandi and Peter Scholl.
In this talk, I will describe a simple method for solving the distributed discrete logarithm problem in Paillier groups, allowing two parties to locally convert multiplicative shares of a secret (in the exponent) into additive shares. Our algorithm is perfectly correct, unlike previous methods with an inverse polynomial error probability. I will discuss applications of this to homomorphic secret sharing and generating correlated pseudorandomness, including the following main results:
– Homomorphic secret sharing:
We construct homomorphic secret sharing for branching programs with negligible correctness error and supporting exponentially large plaintexts, with security based on the decisional composite residuosity (DCR) assumption.