One major drawback of a purely asynchronous network is that the inputs of up to $t$ honest parties cannot be considered for the evaluation of the circuit. Waiting for all inputs could take infinitely long when the missing inputs belong to corrupted parties. Our protocol can easily be extended to a hybrid model, in which we have one round of synchronicity at the end of the input stage, but are fully asynchronous afterwards. In this model, our protocol allows to evaluate the circuit on the inputs of every honest party.
Category / Keywords: cryptographic protocols / Publication Info: An extended abstract of this paper appeared in Eurocrypt 2005, pp. 322--340 Date: received 21 Dec 2004, last revised 3 Jun 2005 Contact author: przydatek at inf ethz ch Available formats: Postscript (PS) | Compressed Postscript (PS.GZ) | PDF | BibTeX Citation Version: 20050603:104606 (All versions of this report) Discussion forum: Show discussion | Start new discussion