Secure multiparty computation (hereafter, SMC) refers to cryptographic protocols that allow multiple parties to jointly compute a function over their inputs while keeping them private. The main security property of SMC protocols is information leakage freedom, whose proofs can be found in the scientific literature for idealized models. But how does one guarantee that information leakage freedom still holds once SMC is implemented as a concrete piece of software? As a step toward solving this problem, we use the proof assistant Rocq to formalize the security claims of an SMC stack. We develop a method based on an interpreter for a subset of the \(\pi \) -calculus in which protocols can be modeled as programs and then input traces verified for correctness and information leakage freedom. Thanks to this approach, the properties of SMC can be established in a clearly defined trusted base that can be reused to verify other SMC stacks.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

An Approach to Formalize Information-Theoretic Security of Multiparty Computation Protocols

  • Cheng-Hui Weng,
  • Reynald Affeldt,
  • Jacques Garrigue,
  • Takafumi Saikawa

摘要

Secure multiparty computation (hereafter, SMC) refers to cryptographic protocols that allow multiple parties to jointly compute a function over their inputs while keeping them private. The main security property of SMC protocols is information leakage freedom, whose proofs can be found in the scientific literature for idealized models. But how does one guarantee that information leakage freedom still holds once SMC is implemented as a concrete piece of software? As a step toward solving this problem, we use the proof assistant Rocq to formalize the security claims of an SMC stack. We develop a method based on an interpreter for a subset of the \(\pi \) -calculus in which protocols can be modeled as programs and then input traces verified for correctness and information leakage freedom. Thanks to this approach, the properties of SMC can be established in a clearly defined trusted base that can be reused to verify other SMC stacks.