2020.11.17 / Publications
Anonymous attestation for secure hardware platforms leverages tailored group signature schemes and assumes the hardware to be trusted. Yet, there is an ever increasing concern on the trustworthiness of hardware components and embedded systems.
2020.7.1 / Talks
Vector commitments with subvector openings (SVC) allow one to open a committed vector at a set of positions with an opening of size independent of both the vector's length and the number of opened positions. We continue the study of SVC with two goals in mind: improving their efficiency and making them more suitable to decentralized settings. We address both problems by proposing a new notion for VC that we call incremental aggregation and that allows one to merge openings in a succinct way an unbounded number of times. This property leads to faster generation of openings via preprocessing and a method to generate openings in a distributed way. We then proceed to realize SVC with incremental aggregation. We provide two constructions in groups of unknown order. The first one, similarly to that of Boneh et al. (which supports only one-hop aggregation), has constant-size public parameters, commitments and openings. As an additional feature for this construction we propose efficient arguments of knowledge of subvector openings which immediately yields a keyless proof of storage with compact proofs. For our second construction, we propose an incremental aggregation method for the SVC of Lai-Malavolta; this has linear-size parameters but faster openings. Finally, we address a problem closely related to that of SVC: storing a file efficiently in completely decentralized networks. We introduce and construct verifiable decentralized storage (VDS), a cryptographic primitive that allows to check the integrity of a file stored by a network of nodes in a distributed and decentralized way. Our VDS constructions rely on our new vector commitment techniques.
2020.4.8 / Publications
In this paper we present a new 2-party protocol for secure computation over rings of the form Z2k. As many recent efficient MPC protocols supporting dishonest majority, our protocol consists of a heavier (input-independent) pre-processing phase and a very efficient online stage.
2020.2.17 / Publications
Vector commitments with subvector openings (SVC) [Lai-Malavolta and Boneh-Bunz-Fisch, CRYPTO'19] allow one to open a committed vector at a set of positions with an opening of size independent of both the vector’s length and the number of opened positions.