Abstract:SIAM Journal on Computing, Volume 53, Issue 5, Page 1381-1408, October 2024. Fairness is a desirable property in secure computation; informally it means that if one party gets the output of the function, then all parties get the output. Alas, an implication of Cleve's result [18th ACM Symposium on the Theory of Computing, 1986] is that when there is no honest majority, in particular in the important case of the two-party setting, there exist functions that cannot be computed with fairness. In a surprising result, Gordon et al. [18th ACM Symposium on the Theory of Computing, 2008; J. ACM, 58 (2011), 24] showed that some interesting functions can be computed with fairness in the two-party setting and reopened the question of understanding which Boolean functions can be computed with fairness, and which cannot. Our main result in this work is a complete characterization of the (symmetric) Boolean functions that can be computed with fairness in the two-party setting; this settles an open problem of Gordon et al. The statement of the characterization is quite simple: A function can be computed with fairness if and only if the all-one vector or the all-zero vector are in the affine span of either the rows or the columns of the matrix describing the function. This is true for both deterministic and randomized functions. To prove the possibility result, we modify the protocol of Gordon et al.; the resulting protocol computes with full security (and in particular with fairness) all functions that are computable with fairness. Complementing this result, we also show that any function that does not satisfy the aforementioned condition can be reduced to a fair sampling protocol, which, by Agrawal and Prabhakaran [Advances in Cryptology – CRYPTO 2013, 2013], cannot be computed with fairness.

Verifiable Threshold Secret Sharing and Full Fair Secure Two-Party Computation

A quantum secret sharing scheme with verifiable function

Non-Interactive and Information-Theoretic Secure Publicly Verifiable Secret Sharing

Verifiable Quantum Secret Sharing Scheme Based on LDPC Codes

Achieving Fairness by Sequential Equilibrium in Rational Two-Party Computation under Incomplete Information

Secure multi-level threshold multi-secret sharing

A Joint Random Secret Sharing Scheme with Public Verifiability.

Computing on quantum shared secrets

Subset Sum-Based Verifiable Secret Sharing Scheme for Secure Multiparty Computation

New (k,l,m)-verifiable multi-secret sharing schemes based on XTR public key system

From Fairness to Full Security in Multiparty Computation

Complete Characterization of Fairness in Secure Two-Party Computation of Boolean Functions

A Secure Threshold Multi-Secret Sharing Scheme

Fast Two-Output Secure Computation with Optimal Error Probability

Fair Computation with Tit-for-Tat Strategy

Secure multi-party computation with legally-enforceable fairness

A rational and reliable model for outsourcing polynomial two-party computation

Experimental Demonstration of Sequential Multiparty Quantum Secret Sharing and Quantum Conference Key Agreement

Secure "ratio" Computation and Efficient Protocol for General Secure Two-Party Comparison

A (k, T, N) Verifiable Multi-secret Sharing Scheme Based on Adversary Structure.

Unconditional Security of Entanglement-Based Continuous-Variable Quantum Secret Sharing