Score:2

Are all parties for an MPC protocol needed?

tl flag

For a lot of cryptographic applications, multi-party protocols are used. The idea is to create shares of a key/secret and give them to multiple parties. My question is: Do all parties have to participate in the multi-party protocol or do protocols exist, that only need e.g. >51% of the shares to compute correctly?

Score:4
ru flag

Generally, MPC protocols have two main parameters: the number of participants $n$, and the amount of corrupt parties you wish to tolerate, $t$. It is typically the case that, as you mention, protocols work by secret-sharing data in a way that at most $t$ participants cannot recover it, but $t+1$ parties can. As a minimum, you will need $t+1$ parties for your computation, since otherwise a set of $t$ corrupted parties could finish the computation on their own and learn the results/secrets.

Some protocols (known as dishonest majority protocols) are designed with $t=n-1$ in mind, which means that you cannot do any better than having all parties at all times. However, some other protocols (in the honest majority setting) consider lower thresholds such as $t<n/2$ or $t<n/3$. This is useful since this can lead to more efficient protocols and stronger notions of indistinguishability (e.g. information-theoretic vs computational security), at the expense of tolerating less corruptions. In these cases you can consider optimizations where, for example, all $n$ parties actively participate in the protocol for some time (for instance, in a preprocessing phase, generating multiplication triples—in case you're familiar with the concept), and then only $t+1$ can remain for the rest of the execution.

Score:3
in flag

Sure, if for example, we use $k$ of $n$ Shamir secret sharing then only k participants are needed to reconstruct the secret or do something with the secret(even without revealing it).

If a missing participant has crucial information then you may need that information regardless if you are doing Secure Multi-party computation or if everyone is honest and all information is shared.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.