基于编码的单服务器私密查询方案,抗完全合谋攻击
CB-cPIR: Code-Based Computational Private Information Retrieval
- 用随机线性码解码难题保护查询隐私
- 修复原方案中子矩阵秩差异导致的安全漏洞
- 适合关注后量子安全私密查询的密码学研究者
私密信息检索(PIR)协议使用户可在不泄露所查文件身份的前提下从数据库中获取数据。在分布式存储系统中,高效PIR依赖于对存储服务器合谋能力的假设;若假设错误,隐私将被破坏。本文针对最坏情况——完全合谋(即视整个系统为一个诚实但好奇的服务器),提出CB-cPIR:一种基于编码的单服务器计算私密信息检索方案,其安全性源于编码密码学。具体而言,查询通过随机线性码解码难题进行保护。该方案受启发于Holzbaur等人2020年提出的开创性编码基cPIR方案,并修复了原方案中因用户查询子矩阵秩差异高度可能而引发的安全缺陷。近期,[Lage, Bartz]指出新漏洞,本文通过简单修改予以解决。为验证方案有效性,我们与最先进的格基cPIR方案进行了对比。
原文摘要 · Abstract (English)
A private information retrieval (PIR) scheme is a protocol that allows a user to retrieve a file from a database without revealing the identity of the desired file to a curious database. Given a distributed data storage system, efficient PIR can be achieved by making assumptions about the colluding capabilities of the storage servers holding the database. If these assumptions turn out to be incorrect, privacy is lost. In this work, we focus on the worst-case assumption: full collusion or, equivalently, viewing the storage system virtually as a single honest-but-curious server. We present CB-cPIR, a single-server code-based computational private information retrieval (cPIR) scheme that derives security from code-based cryptography. Specifically, the queries are protected by the hardness of decoding a random linear code. The scheme is heavily inspired by the pioneering code-based cPIR scheme proposed by Holzbaur, Hollanti, and Wachter-Zeh in [Holzbaur et al., "Computational Code-Based Single-Server Private Information Retrieval", 2020 IEEE ISIT] and fixes the vulnerabilities of the original scheme arising from highly probable rank differences in submatrices of the user's query. Recently, a new vulnerability was observed in [Lage, Bartz, "On the Security of a Code-Based PIR Scheme"], a simple modification to the scheme now fixes this vulnerability. For further validation of our scheme, we draw comparisons to the state-of-the-art lattice-based cPIR schemes.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。