On Definitions for Semi-Honest Secure Multiparty Computation

Secure multiparty computation (MPC) is a cryptographic technology to perform some computation on multiple parties' input data while concealing the individual inputs from other parties. For the case of semi-honest adversaries, the security definition in Goldreich's famous book is widely used as a standard definition. In this paper, however, we point out that there is an MPC protocol where a semi-honest adversary receives only a ciphertext of one-time pad with unknown key but the protocol is not secure under the standard security definition, which may look inconsistent with the perfect secrecy of one-time pad that its ciphertext leaks no information at all. We propose a variant of the security definition that resolves this issue. We also show that a somewhat restrictive version of the Composition Theorem holds for our modified security definition.

Authors

Institutions

Publication Details

Journal
IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences
Published
2025-06-24
DOI
https://doi.org/10.1587/transfun.2025eap1084
Primary Topic
Cryptography and Data Security
Type
article
Field-Weighted Citation Impact
0.00

Funders

Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

On Definitions for Semi-Honest Secure Multiparty Computation

Koji Nuida
IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences
Cryptography and Data Security
article

On Definitions for Semi-Honest Secure Multiparty Computation

Koji Nuida
article en

Abstract

Secure multiparty computation (MPC) is a cryptographic technology to perform some computation on multiple parties' input data while concealing the individual inputs from other parties. For the case of semi-honest adversaries, the security definition in Goldreich's famous book is widely used as a standard definition. In this paper, however, we point out that there is an MPC protocol where a semi-honest adversary receives only a ciphertext of one-time pad with unknown key but the protocol is not secure under the standard security definition, which may look inconsistent with the perfect secrecy of one-time pad that its ciphertext leaks no information at all. We propose a variant of the security definition that resolves this issue. We also show that a somewhat restrictive version of the Composition Theorem holds for our modified security definition.

IEICE Transactions on Fundamentals of Electronics Communications and Computer SciencesVol. E109.A(1)
Kyushu University (JP), Institute of Mathematics and Informatics (BG), Czech Academy of Sciences, Institute of Mathematics (CZ), National Institute of Advanced Industrial Science and Technology (JP)
Japan Society for the Promotion of Science
Openalex Percentile: Top 93%
Cryptography and Data Security
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.