Paper 2022/1390

Multiplicative and Verifiably Multiplicative Secret Sharing for Multipartite Adversary Structures

Reo Eriguchi, The University of Tokyo, National Institute of Advanced Industrial Science and Technology
Noboru Kunihiro, University of Tsukuba
Koji Nuida, Kyushu University, National Institute of Advanced Industrial Science and Technology

$d$-Multiplicative secret sharing enables $n$ players to locally compute additive shares of the product of $d$ secrets from their shares. Barkol et al. (Journal of Cryptology, 2010) show that it is possible to construct a $d$-multiplicative scheme for any adversary structure satisfying the $Q_d$ property, in which no $d$ sets cover the whole set of players. In this paper, we focus on multipartite adversary structures and propose efficient multiplicative and verifiably multiplicative secret sharing schemes tailored to them. First, our multiplicative scheme is applicable to any multipartite $Q_d$-adversary structure. If the number of parts is constant, our scheme achieves a share size polynomial in the number $n$ of players while the general construction by Barkol et al. results in exponentially large share size in the worst case. We also propose its variant defined over smaller fields. As a result, for a special class of bipartite adversary structures with two maximal points, it achieves a constant share size for arbitrary $n$ while the share size of the first scheme necessarily incurs a logarithmic factor of $n$. Secondly, we devise a more efficient scheme for a special class of multipartite ones such that players in each part have the same weight and a set of players belongs to the adversary structure if and only if the sum of their weights is at most a threshold. Thirdly, if the adversary structure is $Q_{d+1}$, our first scheme is shown to be a verifiably multiplicative scheme that detects incorrect outputs with probability $1$. For multipartite adversary structures with a constant number of parts, it improves the worst-case share and proof sizes of the only known general construction by Yoshida and Obana (IEEE Transactions on Information Theory, 2019). Finally, we propose a more efficient verifiably multiplicative scheme by allowing small error probability $\delta$ and focusing on a more restricted class of multipartite adversary structures. Our scheme verifies computation of polynomials and can achieve a share size independent of $\delta$ while the previous construction only works for monomials and results in a share size involving a factor of $\log\delta^{-1}$.

Available format(s)
Cryptographic protocols
Publication info
secure multiparty computation multiplicative secret sharing multipartite adversary structure
Contact author(s)
reo-eriguchi @ g ecc u-tokyo ac jp
kunihiro @ cs tsukuba ac jp
nuida @ imi kyushu-u ac jp
2022-10-14: approved
2022-10-14: received
See all versions
Short URL
Creative Commons Attribution


      author = {Reo Eriguchi and Noboru Kunihiro and Koji Nuida},
      title = {Multiplicative and Verifiably Multiplicative Secret Sharing for Multipartite Adversary Structures},
      howpublished = {Cryptology ePrint Archive, Paper 2022/1390},
      year = {2022},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.