Ring-LWE ⇒ DE-RAM-MPC

Standard model · LMW24

Statement

If Ring-LWE is hard, there is a maliciously secure doubly efficient RAM-MPC in the plain model: each party preprocesses its input once offline, then runs arbitrarily many executions with arbitrary other parties in online time proportional to the program’s RAM running time, which may be sublinear in the input size — LMW24.

Notes

• LMW24 build the protocol from DEPIR, and the Ring-LWE instantiation is the DEPIR of LMW23. On the way, LMW24 construct doubly efficient commitments, whose sender commits and opens individual bits in sublinear online time after preprocessing, and doubly succinct arguments, whose prover runs each proof in sublinear online time after preprocessing — LMW24.