{"title":"用半诚实 TEE 将 paillier 加密增强为完全同态加密","authors":"Yunyi Fang, Xiaopeng Yang, Hui Zhu, Wei Xu, Yandong Zheng, Xingdong Liu, Dong Zhang","doi":"10.1007/s12083-024-01752-5","DOIUrl":null,"url":null,"abstract":"<p>Homomorphic encryption (HE) is an innovative privacy protection technique supporting homomorphic addition and multiplication. It has been widely applied in the applications of peer-to-peer networks, such as secure data sharing and privacy-preserving search. Existing HE schemes can be roughly categorized into partially HE and fully HE (FHE). The former is computationally efficient but only supports either additive or multiplicative homomorphic operations. The latter can simultaneously support both additive and multiplicative operations, but the corresponding computational costs are intensive. Recently, some works leverage trusted execution environment (TEE) to optimize the efficiency of FHE. However, they suffer from the limitations of ciphertext expansion and the strong trust assumption for TEE. To address these limitations, we present a new fully homomorphic encryption scheme named Paillier FHE (PFHE) by employing TEE to extend the additive Paillier HE to support multiplicative operations and further optimizing the computational efficiency, where TEE is assumed to be semi-honest to avoid the strong trust assumption. Specifically, we first design a Paillier multiplication protocol (PMUL) to achieve the ciphertext multiplication without bootstrapping. Based on the protocol, we utilize the packing technique to design a Paillier inner product protocol (PVMUL) and a Paillier matrix multiplication protocol (PMMUL) to support the inner product and matrix multiplication operations efficiently. Moreover, we provide the detailed security analysis for our protocols. We compare our PFHE with typical fully homomorphic encryption libraries by experiments, and at the same security level, our scheme demonstrates significant advantages.</p>","PeriodicalId":49313,"journal":{"name":"Peer-To-Peer Networking and Applications","volume":"37 1","pages":""},"PeriodicalIF":3.3000,"publicationDate":"2024-07-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Enhancing paillier to fully homomorphic encryption with semi-honest TEE\",\"authors\":\"Yunyi Fang, Xiaopeng Yang, Hui Zhu, Wei Xu, Yandong Zheng, Xingdong Liu, Dong Zhang\",\"doi\":\"10.1007/s12083-024-01752-5\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<p>Homomorphic encryption (HE) is an innovative privacy protection technique supporting homomorphic addition and multiplication. It has been widely applied in the applications of peer-to-peer networks, such as secure data sharing and privacy-preserving search. Existing HE schemes can be roughly categorized into partially HE and fully HE (FHE). The former is computationally efficient but only supports either additive or multiplicative homomorphic operations. The latter can simultaneously support both additive and multiplicative operations, but the corresponding computational costs are intensive. Recently, some works leverage trusted execution environment (TEE) to optimize the efficiency of FHE. However, they suffer from the limitations of ciphertext expansion and the strong trust assumption for TEE. To address these limitations, we present a new fully homomorphic encryption scheme named Paillier FHE (PFHE) by employing TEE to extend the additive Paillier HE to support multiplicative operations and further optimizing the computational efficiency, where TEE is assumed to be semi-honest to avoid the strong trust assumption. Specifically, we first design a Paillier multiplication protocol (PMUL) to achieve the ciphertext multiplication without bootstrapping. Based on the protocol, we utilize the packing technique to design a Paillier inner product protocol (PVMUL) and a Paillier matrix multiplication protocol (PMMUL) to support the inner product and matrix multiplication operations efficiently. Moreover, we provide the detailed security analysis for our protocols. We compare our PFHE with typical fully homomorphic encryption libraries by experiments, and at the same security level, our scheme demonstrates significant advantages.</p>\",\"PeriodicalId\":49313,\"journal\":{\"name\":\"Peer-To-Peer Networking and Applications\",\"volume\":\"37 1\",\"pages\":\"\"},\"PeriodicalIF\":3.3000,\"publicationDate\":\"2024-07-25\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Peer-To-Peer Networking and Applications\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://doi.org/10.1007/s12083-024-01752-5\",\"RegionNum\":4,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q2\",\"JCRName\":\"COMPUTER SCIENCE, INFORMATION SYSTEMS\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Peer-To-Peer Networking and Applications","FirstCategoryId":"94","ListUrlMain":"https://doi.org/10.1007/s12083-024-01752-5","RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q2","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
引用次数: 0
摘要
同态加密(HE)是一种创新的隐私保护技术,支持同态加法和乘法。它已广泛应用于点对点网络,如安全数据共享和隐私保护搜索。现有的 HE 方案可大致分为部分 HE 和完全 HE(FHE)。前者计算效率高,但只支持加法或乘法同态操作。后者可以同时支持加法和乘法运算,但相应的计算成本很高。最近,一些研究利用可信执行环境(TEE)来优化 FHE 的效率。然而,它们受到密文扩展和 TEE 强信任假设的限制。为了解决这些局限性,我们提出了一种名为 Paillier FHE(PFHE)的新型全同态加密方案,利用 TEE 将加法 Paillier HE 扩展为支持乘法运算,并进一步优化计算效率,同时假定 TEE 为半诚信,以避免强信任假设。具体来说,我们首先设计了一个 Paillier 乘法协议(PMUL),以实现无需引导的密文乘法。在该协议的基础上,我们利用打包技术设计了 Paillier 内积协议(PVMUL)和 Paillier 矩阵乘法协议(PMMUL),以高效支持内积和矩阵乘法操作。此外,我们还对协议进行了详细的安全性分析。我们通过实验将我们的 PFHE 与典型的全同态加密库进行了比较,在相同的安全等级下,我们的方案具有显著的优势。
Enhancing paillier to fully homomorphic encryption with semi-honest TEE
Homomorphic encryption (HE) is an innovative privacy protection technique supporting homomorphic addition and multiplication. It has been widely applied in the applications of peer-to-peer networks, such as secure data sharing and privacy-preserving search. Existing HE schemes can be roughly categorized into partially HE and fully HE (FHE). The former is computationally efficient but only supports either additive or multiplicative homomorphic operations. The latter can simultaneously support both additive and multiplicative operations, but the corresponding computational costs are intensive. Recently, some works leverage trusted execution environment (TEE) to optimize the efficiency of FHE. However, they suffer from the limitations of ciphertext expansion and the strong trust assumption for TEE. To address these limitations, we present a new fully homomorphic encryption scheme named Paillier FHE (PFHE) by employing TEE to extend the additive Paillier HE to support multiplicative operations and further optimizing the computational efficiency, where TEE is assumed to be semi-honest to avoid the strong trust assumption. Specifically, we first design a Paillier multiplication protocol (PMUL) to achieve the ciphertext multiplication without bootstrapping. Based on the protocol, we utilize the packing technique to design a Paillier inner product protocol (PVMUL) and a Paillier matrix multiplication protocol (PMMUL) to support the inner product and matrix multiplication operations efficiently. Moreover, we provide the detailed security analysis for our protocols. We compare our PFHE with typical fully homomorphic encryption libraries by experiments, and at the same security level, our scheme demonstrates significant advantages.
期刊介绍:
The aim of the Peer-to-Peer Networking and Applications journal is to disseminate state-of-the-art research and development results in this rapidly growing research area, to facilitate the deployment of P2P networking and applications, and to bring together the academic and industry communities, with the goal of fostering interaction to promote further research interests and activities, thus enabling new P2P applications and services. The journal not only addresses research topics related to networking and communications theory, but also considers the standardization, economic, and engineering aspects of P2P technologies, and their impacts on software engineering, computer engineering, networked communication, and security.
The journal serves as a forum for tackling the technical problems arising from both file sharing and media streaming applications. It also includes state-of-the-art technologies in the P2P security domain.
Peer-to-Peer Networking and Applications publishes regular papers, tutorials and review papers, case studies, and correspondence from the research, development, and standardization communities. Papers addressing system, application, and service issues are encouraged.