Cryptology ePrint Archive: Report 2019/1094

Is Information-Theoretic Topology-Hiding Computation Possible?

Marshall Ball and Elette Boyle and Ran Cohen and Tal Malkin and Tal Moran

Abstract: Topology-hiding computation (THC) is a form of multi-party computation over an incomplete communication graph that maintains the privacy of the underlying graph topology. Existing THC protocols consider an adversary that may corrupt an arbitrary number of parties, and rely on cryptographic assumptions such as DDH.

In this paper we address the question of whether information-theoretic THC can be achieved by taking advantage of an honest majority. In contrast to the standard MPC setting, this problem has remained open in the topology-hiding realm, even for simple "privacy-free" functions like broadcast, and even when considering only semi-honest corruptions.

We uncover a rich landscape of both positive and negative answers to the above question, showing that what types of graphs are used and how they are selected is an important factor in determining the feasibility of hiding topology information-theoretically. In particular, our results include the following.

* We show that topology-hiding broadcast (THB) on a line with four nodes, secure against a single semi-honest corruption, implies key agreement. This result extends to broader classes of graphs, e.g., THB on a cycle with two semi-honest corruptions.

* On the other hand, we provide the first feasibility result for information-theoretic THC: for the class of cycle graphs, with a single semi-honest corruption.

Given the strong impossibilities, we put forth a weaker definition of distributional-THC, where the graph is selected from some distribution (as opposed to worst-case).

* We present a formal separation between the definitions, by showing a distribution for which information theoretic distributional-THC is possible, but even topology-hiding broadcast is not possible information-theoretically with the standard definition.

* We demonstrate the power of our new definition via a new connection to adaptively secure low-locality MPC, where distributional-THC enables parties to "reuse" a secret low-degree communication graph even in the face of adaptive corruptions.

Category / Keywords: cryptographic protocols / secure multiparty computation, topology-hiding computation, broadcast, foundations

Original Publication (with major differences): IACR-TCC-2019

Date: received 24 Sep 2019, last revised 8 Nov 2019

Contact author: marshall at cs columbia edu,elette boyle@idc ac il,rancohen@ccs neu edu,tal@cs columbia edu,talm@idc ac il

Available format(s): PDF | BibTeX Citation

Version: 20191108:152744 (All versions of this report)

Short URL: ia.cr/2019/1094


[ Cryptology ePrint archive ]