## Efficient General-Adversary Multi-Party Computation

### Martin Hirt and Daniel Tschudi

Secure multi-party computation (MPC) allows a set P of n players to evaluate a function f in presence of an adversary who corrupts a subset of the players. In this paper we consider active, general adversaries, characterized by a so-called adversary structure Z which enumerates all possible subsets of corrupted players. In particular for small sets of players general adversaries better capture real-world requirements than classical threshold adversaries.

Protocols for general adversaries are “efficient” in the sense that they require |Z|^O(1) bits of communication. However, as |Z| is usually very large (even exponential in n), the exact exponent is very relevant. In the setting with perfect security, the most efficient protocol known to date communicates |Z|^3 bits; we present a protocol for this setting which communicates |Z|^2 bits. In the setting with statistical security, |Z|^3 bits of communication is needed in general (whereas for a very restricted subclass of adversary structures, a protocol with communication |Z|^2 bits is known); we present a protocol for this setting (without limitations) which communicates |Z|^1 bits.

## BibTeX Citation

@inproceedings{HirTsc13, author = {Martin Hirt and Daniel Tschudi}, title = {Efficient General-Adversary Multi-Party Computation}, editor = {Kazue Sako and Palash Sarkar}, booktitle = {Advances in Cryptology---ASIACRYPT 2013}, pages = 181-200, series = {Lecture Notes in Computer Science}, volume = 8270, year = 2013, month = 12, publisher = {Springer-Verlag}, }