Abstract:SIAM Journal on Computing, Volume 53, Issue 5, Page 1381-1408, October 2024. Fairness is a desirable property in secure computation; informally it means that if one party gets the output of the function, then all parties get the output. Alas, an implication of Cleve's result [18th ACM Symposium on the Theory of Computing, 1986] is that when there is no honest majority, in particular in the important case of the two-party setting, there exist functions that cannot be computed with fairness. In a surprising result, Gordon et al. [18th ACM Symposium on the Theory of Computing, 2008; J. ACM, 58 (2011), 24] showed that some interesting functions can be computed with fairness in the two-party setting and reopened the question of understanding which Boolean functions can be computed with fairness, and which cannot. Our main result in this work is a complete characterization of the (symmetric) Boolean functions that can be computed with fairness in the two-party setting; this settles an open problem of Gordon et al. The statement of the characterization is quite simple: A function can be computed with fairness if and only if the all-one vector or the all-zero vector are in the affine span of either the rows or the columns of the matrix describing the function. This is true for both deterministic and randomized functions. To prove the possibility result, we modify the protocol of Gordon et al.; the resulting protocol computes with full security (and in particular with fairness) all functions that are computable with fairness. Complementing this result, we also show that any function that does not satisfy the aforementioned condition can be reduced to a fair sampling protocol, which, by Agrawal and Prabhakaran [Advances in Cryptology – CRYPTO 2013, 2013], cannot be computed with fairness.

Achieving Fairness by Sequential Equilibrium in Rational Two-Party Computation under Incomplete Information

Fair Two-Party Computation with Rational Parties Holding Private Types

Fair Computation with Tit-for-Tat Strategy

Complete Characterization of Fairness in Secure Two-Party Computation of Boolean Functions

Fairness in Secure Computing Protocols Based on Incentives

Secure multi-party computation with legally-enforceable fairness

A rational and reliable model for outsourcing polynomial two-party computation

DE-RSTC: A rational secure two-party computation protocol based on direction entropy

Fairness with Semi-rational Players in Standard Communication Networks

Rational Adversary with Flexible Utility in Secure Two-Party Computation

From Fairness to Full Security in Multiparty Computation

Multi-party Computation with Social Rational Parties

Secure Multiparty Computation with Partial Fairness

Pessimism of the Will, Optimism of the Intellect: Fair Protocols with Malicious but Rational Agents

A new entropic criterion model in rational secure two-party computation

Computing Most Equitable Voting Rules

Rational Secret Sharing with Semi-Rational Players

Fast Two-Output Secure Computation with Optimal Error Probability

Secure "ratio" Computation and Efficient Protocol for General Secure Two-Party Comparison

Optimal Fair Computation

Information-theoretically secure equality-testing protocol with dispute resolution