Information-Theoretic Distributed Point Functions with Shorter Keys
Pith reviewed 2026-05-08 03:00 UTC · model grok-4.3
The pith
A new share conversion from PIR yields perfectly secure 1-private ITDPFs with asymptotically shorter keys over any prime field.
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
Core claim
The paper proposes a perfectly secure 1-private ITDPF for output group Z_p (p any prime) by introducing a novel share conversion based on the PIR of Ghasemi, Kopparty, and Sudan; the resulting scheme is asymptotically more efficient than prior perfectly secure ITDPFs for the same output group because its secret keys are shorter.
What carries the argument
The share conversion technique derived from the Ghasemi-Kopparty-Sudan PIR, which maps input shares into output shares while preserving perfect security and correctness and delivering the claimed key-size reduction.
If this is right
- The construction works for any prime p as the output group, allowing flexible choices of value range.
- Each of the n servers receives a key that lets it compute an additive share of the point-function output.
- Security holds perfectly against any single colluding server.
- Key material is shorter than in earlier perfectly secure schemes for the same parameters.
Where Pith is reading between the lines
- The same conversion step might be reusable in other multi-server primitives that already employ share conversion.
- Practical systems that currently avoid ITDPFs because of key size could become feasible once the new lengths are implemented.
- If stronger PIR constructions appear, the same template could yield still shorter keys or higher privacy thresholds.
Load-bearing premise
The share conversion taken from the cited PIR construction preserves perfect security and correctness while delivering the stated asymptotic improvement in key size for the one-private multi-server setting.
What would settle it
Measuring the bit length of the generated keys as a function of domain size N for the new scheme and comparing it directly to the key lengths of prior perfectly secure ITDPFs for Z_p would falsify the claim if the new keys fail to be asymptotically smaller, or if an explicit attack extracts the point from one server.
Figures
read the original abstract
A t-private n-server Information-Theoretic Distributed Point Function ((t,n)-ITDPF) allows one to convert any point function f_{alpha,beta}(x): [N] -> G into n shares (secret keys), such that each server can compute an additive share of f_{alpha,beta}(x) with a key while any <= t servers learn absolutely no information about the function. This paper constructs a novel share conversion based on the private information retrieval (PIR) of Ghasemi, Kopparty, and Sudan (STOC 2025) and proposes a perfectly secure 1-private ITDPF with output group G = Z_p, where p can be any prime. Compared with the existing perfectly secure ITDPFs for the same output group, the proposed ITDPF is more efficient with asymptotically shorter secret keys.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper constructs a novel share conversion technique based on the private information retrieval (PIR) scheme of Ghasemi, Kopparty, and Sudan (STOC 2025). It proposes a perfectly secure 1-private (1,n)-ITDPF with output group G = Z_p for any prime p, claiming that this yields asymptotically shorter secret keys than prior perfectly secure ITDPFs for the same output group while preserving perfect security and correctness.
Significance. If the construction and proofs hold, the result improves efficiency for information-theoretic distributed point functions, a core primitive in secure multiparty computation and PIR protocols. The asymptotic key-size reduction relative to existing perfectly secure constructions for Z_p is a concrete advance, and the adaptation of the recent PIR result while maintaining perfect security is a strength of the work.
minor comments (1)
- [Introduction, Section 3] The introduction and Section 3 could include a brief explicit comparison of the new key-size asymptotics against the leading prior constructions for Z_p to make the efficiency claim easier to verify at a glance.
Simulated Author's Rebuttal
We thank the referee for the positive assessment of our work and the recommendation for minor revision. The summary correctly identifies our use of the Ghasemi-Kopparty-Sudan PIR construction to obtain a perfectly secure 1-private ITDPF over Z_p with asymptotically shorter keys than prior perfectly secure schemes.
Circularity Check
No significant circularity
full rationale
The paper grounds its novel share conversion in an external STOC 2025 PIR construction by Ghasemi, Kopparty, and Sudan (distinct authors), then builds a 1-private ITDPF for output group Z_p that preserves perfect security and correctness while achieving asymptotic key-size improvement over prior work. No derivation step reduces by construction to a fitted parameter, self-referential definition, or load-bearing self-citation chain; the central claims rest on the cited external result plus standard information-theoretic arguments. The manuscript is therefore self-contained against external benchmarks.
Axiom & Free-Parameter Ledger
axioms (1)
- domain assumption The PIR construction of Ghasemi, Kopparty, and Sudan (STOC 2025) can be used as a black-box share conversion primitive for ITDPF while maintaining perfect security.
Reference graph
Works this paper leans on
-
[1]
Share conversion and private information retrieval,
A. Beimel, Y . Ishai, E. Kushilevitz, I. Orlov, “Share conversion and private information retrieval,” in Proc. IEEE Conference on Computa- tional Complexity (CCC), 2012, pp. 258–268
work page 2012
-
[2]
Information-theoretic distributed point functions,
E. Boyle, N. Gilboa, Y . Ishai, V . I. Kolobov, “Information-theoretic distributed point functions,” in Proc. 3rd Conference on Information- Theoretic Cryptography (ITC), ser. Leibniz International Proceedings in Informatics (LIPIcs), vol. 230, 2022, pp. 1–14
work page 2022
-
[3]
Query-efficient locally decodable codes of subexponential length,
Y . M. Chee, T. Feng, S. Ling, H. Wang, L. F. Zhang, “Query-efficient locally decodable codes of subexponential length,” Computational Complexity, vol. 22, no. 1, pp. 159–189, 2013
work page 2013
-
[4]
Private information retrieval,
B. Chor, O. Goldreich, E. Kushilevitz, M. Sudan, “Private information retrieval,” in Proc. IEEE Symposium on Foundations of Computer Science (FOCS), 1995, pp. 41–50
work page 1995
-
[5]
2-server PIR with sub-polynomial communication,
Z. Dvir, S. Gopi, “2-server PIR with sub-polynomial communication,” in Proc. ACM Symposium on Theory of Computing (STOC), 2015, pp. 577–584
work page 2015
-
[6]
3-query locally decodable codes of subexponential length,
K. Efremenko, “3-query locally decodable codes of subexponential length,” in Proc. ACM Symposium on Theory of Computing (STOC), 2009, pp. 39–44
work page 2009
-
[7]
Improved PIR Schemes using Matching Vectors and Derivatives,
F. Ghasemi, S. Kopparty, M. Sudan, “Improved PIR Schemes using Matching Vectors and Derivatives,” in Proc. ACM Symposium on Theory of Computing (STOC), 2025, pp. 1648–1656
work page 2025
-
[8]
Distributed point functions and their applications,
N. Gilboa, Y . Ishai, “Distributed point functions and their applications,” in Proc. International Conference on the Theory and Applications of Cryptographic Techniques (EUROCRYPT), 2014, LNCS, vol. 8441, pp. 640–658
work page 2014
-
[9]
Superpolynomial size set-systems with restricted inter- sections mod 6 and explicit Ramsey graphs,
V . Grolmusz, “Superpolynomial size set-systems with restricted inter- sections mod 6 and explicit Ramsey graphs,” Combinatorica, vol. 20, no. 1, pp. 71–86, 2000
work page 2000
-
[10]
Efficient information-theoretic distributed point functions with general output groups,
J. Li, P. Ke, L.F. Zhang, “Efficient information-theoretic distributed point functions with general output groups,” Designs, Codes, and Cryptography, vol. 93, no. 5, pp. 1501–1530, 2025
work page 2025
-
[11]
A unified framework for constructing information- theoretic private information retrieval,
L.F. Zhang, “A unified framework for constructing information- theoretic private information retrieval,” Pragmatic Cybersecurity, 1(1):3, 2026
work page 2026
-
[12]
Efficient DPF-based error- detecting information-theoretic private information retrieval over rings,
P. Ke, L.F. Zhang, H. Wang, et al., “Efficient DPF-based error- detecting information-theoretic private information retrieval over rings,” Cybersecurity, 9:149, 2026
work page 2026
-
[13]
On locally decodable codes, self- correctable codes, and t-private PIR,
O. Barkol, Y . Ishai, E. Weinreb, “On locally decodable codes, self- correctable codes, and t-private PIR,” Algorithmica, vol. 58, no. 4, pp. 831–859, 2010
work page 2010
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.