Open mhluongo opened 6 years ago
After discussing in-depth with our advisors, it's difficult to imagine not implementing at least two protocols- one for arithmetic and one for boolean circuits- or more based on specialized functions. For example, we could use a modified version of MASCOT by default, and provide Xiao's work as an option. Or MASCOT for RSA, Xiao's work for AES, and another general purpose protocol.
MASCOT has a publicly available implementation, which certainly helps.
We'll likely use https://eprint.iacr.org/2017/189.pdf, but MASCOT is also on the table