Cryptology ePrint Archive: Report 2014/896

Efficiently Making Secure Two-Party Computation Fair

Handan Kılınç and Alptekin Küpçü

Abstract: Secure two-party computation cannot be fair in general against malicious adversaries, unless a trusted third party (TTP) or a gradual-release type super-constant round protocol is employed. Existing optimistic fair two-party computation protocols with constant rounds are either too costly to arbitrate (e.g., the TTP may need to re-do almost the whole computation), or require the use of electronic payments. Furthermore, most of the existing solutions were proven secure and fair separately, which, we show, may lead to insecurity overall. We propose a new framework for fair and secure two-party computation that can be applied on top of any secure two party computation protocol based on Yao’s garbled circuits and zero-knowledge proofs. We show that our fairness overhead is minimal, compared to all known existing work. Furthermore, our protocol is fair even in terms of the work performed by Alice and Bob. We also prove our protocol is fair and secure simultaneously, through one simulator, which guarantees that our fairness extensions do not leak any private information. Lastly, we ensure that the TTP never learns the inputs or outputs of the computation. Therefore, even if the TTP becomes malicious and causes unfairness, the security of the underlying protocol is still preserved.

Category / Keywords: wo party computation, garbled circuit, Yao’s protocol, fair computation, optimistic model

Date: received 30 Oct 2014, last revised 12 Jul 2015

Contact author: handan kilinc at epfl ch,akupcu@ku edu tr

Available format(s): PDF | BibTeX Citation

Version: 20150712:232227 (All versions of this report)

Short URL: ia.cr/2014/896

Discussion forum: Show discussion | Start new discussion