### Function-Revealing Encryption

Marc Joye and Alain Passelègue

##### Abstract

Multi-input functional encryption is a paradigm that allows an authorized user to compute a certain function---and nothing more---over multiple plaintexts given only their encryption. The particular case of two-input functional encryption has very exciting applications, including comparing the relative order of two plaintexts from their encrypted form (order-revealing encryption). While being extensively studied, multi-input functional encryption is not ready for a practical deployment, mainly for two reasons. First, known constructions rely on heavy cryptographic tools such as multilinear maps. Second, their security is still very uncertain, as revealed by recent devastating attacks. In this work, we investigate a simpler approach towards obtaining practical schemes for functions of particular interest. We introduce the notion of function-revealing encryption, a generalization of order-revealing encryption to any multi-input function as well as a relaxation of multi-input functional encryption. We then propose a simple construction of order-revealing encryption based on function-revealing encryption for simple functions, namely orthogonality testing and intersection cardinality. Our main result is an efficient order-revealing encryption scheme with limited leakage based on the standard DLIN assumption.

Available format(s)
Publication info
Preprint. MINOR revision.
Keywords
Order-revealing encryptionproperty-preserving encryptionmulti-input functional encryptionfunction-revealing encryption
Contact author(s)
alapasse @ gmail com
History
2018-04-16: last of 2 revisions
See all versions
Short URL
https://ia.cr/2016/622

CC BY

BibTeX

@misc{cryptoeprint:2016/622,
author = {Marc Joye and Alain Passelègue},
title = {Function-Revealing Encryption},
howpublished = {Cryptology ePrint Archive, Paper 2016/622},
year = {2016},
note = {\url{https://eprint.iacr.org/2016/622}},
url = {https://eprint.iacr.org/2016/622}
}

Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.