Abstract:Motivated by new applications such as secure Multi-Party Computation (MPC), Fully Homomorphic Encryption (FHE), and Zero-Knowledge proofs (ZK), many MPC-, FHE- and ZK-friendly symmetric-key primitives that minimize the< number of multiplications over Fp for a large prime p have been recently proposed in the literature. These symmetric primitives are usually defined via invertible functions, including (i) Feistel and Lai-Massey schemes and (ii) SPN constructions instantiated with invertible non-linear S-Boxes. However, the “invertibility” property is actually never required in any of the mentioned applications.In this paper, we discuss the possibility to set up MPC-/FHE-/ZK-friendly symmetric primitives instantiated with non-invertible bounded surjective functions. In contrast to one-to-one functions, each output of a l-bounded surjective function admits at most l pre-images. The simplest example is the square map x → x2 over Fp for a prime p ≥ 3, which is (obviously) 2-bounded surjective. When working over Fnp for n ≥ 2, we set up bounded surjective functions by re-considering the recent results proposed by Grassi, Onofri, Pedicini and Sozzi at FSE/ToSC 2022 as starting points. Given a quadratic local map F : Fmp → Fp for m ∈ {1, 2, 3}, they proved that the shift-invariant non-linear function over Fnp defined as SF (x0, x1, . . . , xn−1) = y0∥y1∥ . . . ∥yn−1 where yi := F(xi, xi+1) is never invertible for any n ≥ 2 · m − 1. Here, we prove that • the quadratic function F : Fmp → Fp for m ∈ {1, 2} that minimizes the probability of having a collision for SF over Fnp is of the form F(x0, x1) = x20 + x1 (or equivalent);• the function SF over Fnp defined as before via F(x0, x1) = x20 +x1 (or equivalent) is 2n-bounded surjective.As concrete applications, we propose modified versions of the MPC-friendly schemes MiMC, HadesMiMC, and (partially of) Hydra, and of the FHE-friendly schemes Masta, Pasta, and Rubato. By instantiating them with the bounded surjective quadratic functions proposed in this paper, we are able to improve the security and/or the performances in the target applications/protocols.

Identity-Based Functional Encryption for Quadratic Functions from Lattices

Functional Encryption with Application to Machine Learning: Simple Conversions from Generic Functions to Quadratic Functions

Identity-Based Signcryption from Lattices

New Lattice Based Cryptographic Constructions

Improved Construction for Inner Product Functional Encryption

Identity-Based Encryption with Disjunctive, Conjunctive and Range Keyword Search from Lattices

Distributed Identity Authentication with Lenstra–Lenstra–Lovász Algorithm–Ciphertext Policy Attribute-Based Encryption from Lattices: An Efficient Approach Based on Ring Learning with Errors Problem

Functional Encryption in the Bounded Storage Models

On the Closest Vector Problem for Lattices Constructed from Polynomials and Their Cryptographic Applications

Deterministic Identity-Based Encryption from Lattices with More Compact Public Parameters.

Generic Construction of Forward-Secure Revocable Identity-Based Signature and Lattice-Based Instantiations

Practical CCA-Secure Functional Encryptions for Deterministic Functions

An Attack on $p$-adic Lattice Public-key Cryptosystems and Signature Schemes

Lattice-Based Programmable Hash Functions and Applications

A New Symmetric Homomorphic Functional Encryption over a Hidden Ring for Polynomial Public Key Encapsulations

Bounded Surjective Quadratic Functions over Fnp for MPC-/ZK-/FHE-Friendly Symmetric Primitives

Integral Springer Theorem for Quadratic Lattices under Base Change of Odd Degree

Leakage-resilient / with optimal leakage rates from lattices

Almost tight security in lattices with polynomial moduli—PRF, IBE, all-but-many LTF, and more

Compact Lossy and All-but-One Trapdoor Functions from Lattice

Homomorphic Properties Within Lattice-Based Encryption Systems