New Primitives for Actively-Secure MPC over Rings with Applications to Private Machine Learning
Authors:
- 1 May 2019
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- p. 1102-1120
Abstract
At CRYPTO 2018 Cramer et al. presented SPDZ2k , a new secret-sharing based protocol for actively secure multi-party computation against a dishonest majority, that works over rings instead of fields. Their protocol uses slightly more communication than competitive schemes working over fields. However, implementation-wise, their approach allows for arithmetic to be carried out using native 32 or 64-bit CPU operations rather than modulo a large prime. The authors thus conjectured that the increased communication would be more than made up for by the increased efficiency of implementations. In this work we answer their conjecture in the affirmative. We do so by implementing their scheme, and designing and implementing new efficient protocols for equality test, comparison, and truncation over rings. We further show that these operations find application in the machine learning domain, and indeed significantly outperform their field-based competitors. In particular, we implement and benchmark oblivious algorithms for decision tree and support vector machine (SVM) evaluation.Keywords
This publication has 26 references indexed in Scilit:
- High-Throughput Semi-Honest Secure Three-Party Computation with an Honest Majority2016
- Privately Evaluating Decision Trees and Random ForestsProceedings on Privacy Enhancing Technologies, 2016
- Fast Oblivious AES A Dedicated Application of the MiniMac ProtocolLecture Notes in Computer Science, 2016
- ABY - A Framework for Efficient Mixed-Protocol Secure Two-Party Computation2015
- A New Approach to Practical Active-Secure Two-Party Computation2012
- Multiparty Computation from Somewhat Homomorphic Encryption2012
- Secure Multiparty AES2010
- Sharemind: A Framework for Fast Privacy-Preserving Computations2008
- Multiparty Computation for Interval, Equality, and Comparison Without Bit-Decomposition Protocol2007
- Universally composable security: a new paradigm for cryptographic protocols2001