pith. sign in

arxiv: 1901.03379 · v3 · pith:CQWTVFA2new · submitted 2019-01-10 · 💻 cs.CR · cs.IT· math.IT

INTERPOL: Information Theoretically Verifiable Polynomial Evaluation

classification 💻 cs.CR cs.ITmath.IT
keywords interpolpolynomialevaluationverifiablecomplexitycomputationalmulti-partynode
0
0 comments X
read the original abstract

We study the problem of verifiable polynomial evaluation in the user-server and multi-party setups. We propose {INTERPOL}, an information-theoretically verifiable algorithm that allows a user to delegate the evaluation of a polynomial to a server, and verify the correctness of the results with high probability and in sublinear complexity. Compared to the existing approaches which typically rely on cryptographic assumptions, {INTERPOL} stands out in that it does not assume any computational limitation on the server. {INTERPOL} relies on decomposition of polynomial evaluation into two matrix multiplications, and injection of computation redundancy in the form of locally computed parities with secret coefficients for verification. We show that {INTERPOL} has several desirable properties such as adaptivity and public verifiability. Furthermore, by generalizing {INTERPOL} to a multi-party setting consisting of a network of $n$ untrusted nodes, where each node is interested in evaluating the same polynomial, we demonstrate that we can achieve an overall computational complexity comparable to a trusted setup, while guaranteeing information-theoretic verification at each node.

This paper has not been read by Pith yet.

discussion (0)

Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.

Forward citations

Cited by 1 Pith paper

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score.

  1. Interactive Verifiable Polynomial Evaluation

    cs.CC 2019-07 unverdicted novelty 5.0

    An interactive protocol for verifiable polynomial evaluation with information-theoretic soundness, O(log d) rounds, sublinear user verification, and polynomial server time for degree-d polynomials.