Closed vitorenesduarte closed 9 years ago
Initial commit eb8ff56fdca0dbddb8a861d80bd717fd3d7c1c35. Missing:
This describes what was to be done.
Not as easy as it sounded.
Ideas stolen from here.
POC of this protocol.
Questions: 1 - each players has a share of the Fixed MAC Key α. But in the extended representation (ER) is created βi's for all players. Can these be the α shares of each player? Why? 2 - if not, can these βi's be the same for all ER? 3 - the [[u]] used as ei, can be the same for all Batch-MAC-Check?
3 - No, if that was a possibility, we might as well have this value opened before evaluating the circuit.
To protect the parties against malicious parties the shared MACs of all opened values need to be checked for correctness, and this must be done in a way so that neither the MAC key nor the MAC value itself is revealed. This is done using the protocol described in here.