Secure multi-party computation (MPC) is a fundamental problem in secure distributed computing. An MPC protocol allows a set of $n$ mutually distrusting parties to carry out any joint computation of their private inputs, without disclosing any additional information about their inputs. MPC with information-theoretic security provides the strongest security guarantees and remains secure even against computationally unbounded adversaries. Perfectly-secure MPC protocols is a class of information-theoretically secure MPC protocols, which provides all the security guarantees in an error-free fashion. The focus of this work is perfectly-secure MPC. Known protocols are designed assuming either a synchronous or asynchronous communication network. It is well known that perfectly-secure synchronous MPC protocol is possible as long as adversary can corrupt any $t_s < n/3$ parties. On the other hand, perfectly-secure asynchronous MPC protocol can tolerate up to $t_a < n/4$ corrupt parties. A natural question is does there exist a single MPC protocol for the setting where the parties are not aware of the exact network type and which can tolerate up to $t_s < n/3$ corruptions in a synchronous network and up to $t_a < n/4$ corruptions in an asynchronous network. We design such a best-of-both-worlds perfectly-secure MPC protocol, provided $3t_s + t_a < n$ holds. For designing our protocol, we design two important building blocks, which are of independent interest. The first building block is a best-of-both-worlds Byzantine agreement (BA) protocol tolerating $t < n/3$ corruptions and which remains secure, both in a synchronous as well as asynchronous network. The second building block is a polynomial-based best-of-both-worlds verifiable secret-sharing (VSS) protocol, which can tolerate up to $t_s$ and $t_a$ corruptions in a synchronous and in an asynchronous network respectively.
翻译:安全的多党计算( MPC) 是安全分配计算中的一个基本问题。 MPC协议允许一组互不信任的一方使用美元来联合计算他们的私人投入, 而不透露任何关于它们投入的补充信息。 信息理论安全的MPC提供了最强的安全保障, 并且仍然对没有计算限制的对手来说是安全的。 完全安全的MPC协议是一种信息- 理论安全协议的类别, 它以无误分配的方式提供所有安全保障。 这项工作的重点是完全安全的 MPC。 已知协议的设计假设要么是同步的, 要么是联合计算他们的私人投入, 而不是透露任何关于它们投入的任何补充信息。 众所周知, 只要敌人能够腐蚀任何美元 < n/3 协议的一方, 并且保持安全。 绝对安全的 MPC协议可以容忍美元- a t < n- blickal- blocketal- blockeral- commal- settility- commissional- suptional- settlemental- lax- set the commettil is a setty commetal- builal- bettilate rutional- ruil- rutional- ty rutional- ty- ty ty and drevental- drevent- ruildal- drevent- rutional- rutional- rutional- rutions) rutional- rutional- rutional- rubal- rubal- rutional- rubal- lits, rubal- sal- sal- sal- lits- sets- sal- suts- sets- suts- sal- sal- sal- sal- sets- sets- set- nets- sal- nets)