Abstract:The prospect of outsourcing an increasing amount of data storage and management to cloud services raises many new privacy concerns for individuals and businesses alike. The privacy concerns can be satisfactorily addressed if users encrypt the data they send to the cloud. If the encryption scheme is homomorphic, the cloud can still perform meaningful computations on the data, even though it is encrypted. In fact, we now know a number of constructions of fully homomorphic encryption schemes that allow arbitrary computation on encrypted data. In the last two years, solutions for fully homomorphic encryption have been proposed and improved upon, but it is hard to ignore the elephant in the room, namely efficiency -- can homomorphic encryption ever be efficient enough to be practical? Certainly, it seems that all known fully homomorphic encryption schemes have a long way to go before they can be used in practice. Given this state of affairs, our contribution is two-fold. First, we exhibit a number of real-world applications, in the medical, financial, and the advertising domains, which require only that the encryption scheme is "somewhat" homomorphic. Somewhat homomorphic encryption schemes, which support a limited number of homomorphic operations, can be much faster, and more compact than fully homomorphic encryption schemes. Secondly, we show a proof-of-concept implementation of the recent somewhat homomorphic encryption scheme of Brakerski and Vaikuntanathan, whose security relies on the "ring learning with errors" (Ring LWE) problem. The scheme is very efficient, and has reasonably short ciphertexts. Our unoptimized implementation in magma enjoys comparable efficiency to even optimized pairing-based schemes with the same level of security and homomorphic capacity. We also show a number of application-specific optimizations to the encryption scheme, most notably the ability to convert between different message encodings in a ciphertext.

Privacy-Preserving Homomorphic MACs with Efficient Verification

Verifiable Encodings for Secure Homomorphic Analytics

SHAPER: A General Architecture for Privacy-Preserving Primitives in Secure Machine Learning.

Efficient Secure Multiparty Computation Based on Homomorphic Encryption

Feature Homomorphism -- A Cryptographic Scheme For Data Verification Under Ciphertext-Only Conditions

Verifiable computation over encrypted data via MPC-in-the-head zero-knowledge proofs

Can homomorphic encryption be practical?

Multikey Verifiable Homomorphic Encryption

Comprehensive Performance Analysis of Homomorphic Cryptosystems for Practical Data Processing

Homomorphic linear authentication schemes from ε-ASU 2 functions for proofs of retrievability

Homomorphic Linear Authentication Schemes for Proofs of Retrievability

Secure outsourced calculations with homomorphic encryption

Efficient computation outsourcing for inverting a class of homomorphic functions

Secure Multiparty Computation of Set Membership and Its Applications

Verifiable Fully Homomorphic Encryption

Publicly Verifiable Secure Multi-Party Computation Framework Based on Bulletin Board

Lighter is Better: A Lighter Multi-client Verifiable Outsourced Computation with Hybrid Homomorphic Encryption

Improved multiparty quantum private comparison based on quantum homomorphic encryption

A Pervasive, Efficient and Private Future: Realizing Privacy-Preserving Machine Learning Through Hybrid Homomorphic Encryption

Publicly Verifiable Homomorphic Secret Sharing for Polynomial Evaluation