{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,7]],"date-time":"2026-05-07T04:28:29Z","timestamp":1778128109682,"version":"3.51.4"},"reference-count":64,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2023,6,8]],"date-time":"2023-06-08T00:00:00Z","timestamp":1686182400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2023,6,8]],"date-time":"2023-06-08T00:00:00Z","timestamp":1686182400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"Max-Planck-Institut f\u00fcr Cybersicherheit und Schutz der Privatsph\u00e4re"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Cryptol"],"published-print":{"date-parts":[[2023,7]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>We propose a new approach to construct general-purpose indistinguishability obfuscation (iO). Our construction is obtained via a new intermediate primitive that we call <jats:italic>split fully homomorphic encryption<\/jats:italic> (split FHE), which we show to be sufficient for constructing iO. Specifically, split FHE is FHE where decryption takes the following two-step syntactic form: (i) a <jats:italic>secret<\/jats:italic> decryption step that uses the secret key and produces a <jats:italic>hint<\/jats:italic> which is (asymptotically) shorter than the length of the encrypted message, and (ii) a <jats:italic>public<\/jats:italic> decryption step that only requires the ciphertext and the previously generated hint (and not the entire secret key) and recovers the encrypted message. In terms of security, the hints for a set of ciphertexts should not allow one to violate semantic security for any other ciphertexts. Next, we show a <jats:italic>generic candidate<\/jats:italic> construction of split FHE based on three building blocks: (i) A standard FHE scheme with linear decrypt-and-multiply (which can be instantiated with essentially all LWE-based constructions), (ii) a linearly homomorphic encryption scheme with short decryption hints (such as the Damg\u00e5rd-Jurik encryption scheme, based on the DCR problem), and (iii) a cryptographic hash function (which can be based on a variety of standard assumptions). Our approach is <jats:italic>heuristic<\/jats:italic> in the sense that our construction is not provably secure and makes implicit assumptions about the interplay between these underlying primitives. We show evidence that this construction is secure by providing an argument in an appropriately defined oracle model. We view our construction as a big departure from the state-of-the-art constructions, and it is in fact quite simple.<\/jats:p>","DOI":"10.1007\/s00145-023-09471-5","type":"journal-article","created":{"date-parts":[[2023,6,8]],"date-time":"2023-06-08T20:35:25Z","timestamp":1686256525000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Candidate iO from Homomorphic Encryption Schemes"],"prefix":"10.1007","volume":"36","author":[{"given":"Zvika","family":"Brakerski","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nico","family":"D\u00f6ttling","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sanjam","family":"Garg","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Giulio","family":"Malavolta","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,6,8]]},"reference":[{"key":"9471_CR1","doi-asserted-by":"crossref","unstructured":"S. Agrawal, Indistinguishability obfuscation without multilinear maps: new methods for bootstrapping and instantiation, in Y. Ishai, V. Rijmen (eds.) Advances in Cryptology \u2013 EUROCRYPT\u00a02019, Part\u00a0I, volume 11476 of Lecture Notes in Computer Science ( Springer, Heidelberg, 2019), pp. 191\u2013225","DOI":"10.1007\/978-3-030-17653-2_7"},{"key":"9471_CR2","doi-asserted-by":"crossref","unstructured":"J. Alperin-Sheriff, C. Peikert, Faster bootstrapping with polynomial error, in J.A. Garay, R.G. (eds.) Advances in Cryptology \u2013 CRYPTO\u00a02014, Part\u00a0I, volume 8616 of Lecture Notes in Computer Science (Springer, Heidelberg, 2014) pp. 297\u2013314","DOI":"10.1007\/978-3-662-44371-2_17"},{"key":"9471_CR3","doi-asserted-by":"crossref","unstructured":"P. Ananth, A. Jain, H. Lin, C. Matt, A. Sahai, Indistinguishability obfuscation without multilinear maps: nw paradigms via low degree weak pseudorandomness and security amplification, in A. Boldyreva, D. Micciancio (eds.) Advances in Cryptology \u2013 CRYPTO\u00a02019, Part\u00a0III, volume 11694 of Lecture Notes in Computer Science (Springer, Heidelberg, 2019), pp. 284\u2013332","DOI":"10.1007\/978-3-030-26954-8_10"},{"key":"9471_CR4","doi-asserted-by":"crossref","unstructured":"P. Ananth, A. Jain, Indistinguishability obfuscation from compact functional encryption, in R. Gennaro, M.J.B. Robshaw (eds.) Advances in Cryptology\u2014CRYPTO\u00a02015, Part\u00a0I, volume 9215 of Lecture Notes in Computer Science (Springer, Heidelberg, 2015), pp. 308\u2013326","DOI":"10.1007\/978-3-662-47989-6_15"},{"key":"9471_CR5","doi-asserted-by":"crossref","unstructured":"P. Ananth, A. Sahai, Projective arithmetic functional encryption and indistinguishability obfuscation from degree-5 multilinear maps, in J.-S. Coron, J.B. Nielsen (eds.) Advances in Cryptology\u2014EUROCRYPT\u00a02017, Part\u00a0I, volume 10210 of Lecture Notes in Computer Science (Springer, Heidelberg, 017), pp. 152\u2013181","DOI":"10.1007\/978-3-319-56620-7_6"},{"key":"9471_CR6","doi-asserted-by":"crossref","unstructured":"B. Applebaum, Y. Ishai, E. Kushilevitz, How to garble arithmetic circuits. in R. Ostrovsky (ed.) 52nd Annual Symposium on Foundations of Computer Science (IEEE Computer Society Press, 2011), pp. 120\u2013129","DOI":"10.1109\/FOCS.2011.40"},{"key":"9471_CR7","doi-asserted-by":"crossref","unstructured":"G. Asharov, A. Jain, A. L\u00f3pez-Alt, E. Tromer, V. Vaikuntanathan, D. Wichs, Multiparty computation with low communication, computation and interaction via threshold FHE, in D. Pointcheval, T. Johansson (eds.) Advances in Cryptology\u2014EUROCRYPT\u00a02012, volume 7237 of Lecture Notes in Computer Science (Springer, Heidelberg, 2012) , pp. 483\u2013501","DOI":"10.1007\/978-3-642-29011-4_29"},{"key":"9471_CR8","unstructured":"B. Barak, Z. Brakerski, I. Komargodski, P.K. Kothari, Limits on low-degree pseudorandom generators (or: Sum-of-squares meets program obfuscation). Cryptology ePrint Archive, Report 2017\/312, (2017). http:\/\/eprint.iacr.org\/2017\/312."},{"key":"9471_CR9","doi-asserted-by":"crossref","unstructured":"B. Barak, S. Garg, Y. Tauman Kalai, O. Paneth, A. Sahai, Protecting obfuscation against algebraic attacks. in P.Q. Nguyen, E. Oswald (eds.) Advances in Cryptology\u2014EUROCRYPT\u00a02014, volume 8441 of Lecture Notes in Computer Science (Springer, Heidelberg, 2014), pp. 221\u2013238","DOI":"10.1007\/978-3-642-55220-5_13"},{"key":"9471_CR10","doi-asserted-by":"crossref","unstructured":"B. Barak, O. Goldreich, R. Impagliazzo, S. Rudich, A. Sahai, S.P. Vadhan, K. Yang, On the (im)possibility of obfuscating programs, in J. Kilian (ed.) Advances in Cryptology\u2014CRYPTO\u00a02001, volume 2139 of Lecture Notes in Computer Science (Springer, Heidelberg, 2001), pp. 1\u201318","DOI":"10.1007\/3-540-44647-8_1"},{"key":"9471_CR11","doi-asserted-by":"crossref","unstructured":"B. Barak, I. Haitner, D. Hofheinz, Y. Ishai, Bounded key-dependent message security. in H. Gilbert (ed) Advances in Cryptology\u2014EUROCRYPT\u00a02010, volume 6110 of Lecture Notes in Computer Science, (Springer, Heidelberg, 2010), pp. 423\u2013444","DOI":"10.1007\/978-3-642-13190-5_22"},{"key":"9471_CR12","doi-asserted-by":"crossref","unstructured":"B. Barak, S.B. Hopkins, A. Jain, P. Kothari, A. Sahai, Sum-of-squares meets program obfuscation, revisited, in Y. Ishai, V. Rijmen (eds.) Advances in Cryptology\u2013EUROCRYPT\u00a02019, Part\u00a0I, volume 11476 of Lecture Notes in Computer Science (Springer, Heidelberg, 2019), pp. 226\u2013250","DOI":"10.1007\/978-3-030-17653-2_8"},{"key":"9471_CR13","doi-asserted-by":"crossref","unstructured":"M. Bellare, P. Rogaway, Random oracles are practical: a paradigm for designing efficient protocols, in D.E. Denning, R. Pyle, R. Ganesan, R.S. Sandhu, V. Ashby (eds.) ACM CCS 93: 1st Conference on Computer and Communications Security (ACM Press, 1993), pp. 62\u201373","DOI":"10.1145\/168588.168596"},{"key":"9471_CR14","doi-asserted-by":"crossref","unstructured":"N. Bitansky, R. Nishimaki, A. Passel\u00e8gue, D. Wichs, From cryptomania to obfustopia through secret-key functional encryption, in M. Hirt, A.D. Smith (eds.) TCC\u00a02016-B: 14th Theory of Cryptography Conference, Part\u00a0II, volume 9986 of Lecture Notes in Computer Science (Springer, Heidelberg, 2016), pp. 391\u2013418","DOI":"10.1007\/978-3-662-53644-5_15"},{"key":"9471_CR15","doi-asserted-by":"crossref","unstructured":"N. Bitansky, V. Vaikuntanathan, Indistinguishability obfuscation from functional encryption. in V. Guruswami (ed) 56th Annual Symposium on Foundations of Computer Science (IEEE Computer Society Press, 2015), pp. 171\u2013190.","DOI":"10.1109\/FOCS.2015.20"},{"key":"9471_CR16","doi-asserted-by":"crossref","unstructured":"D. Boneh, M. Zhandry, Multiparty key exchange, efficient traitor tracing, and more from indistinguishability obfuscation, in J.A. Garay, R. Gennaro (eds.) Advances in Cryptology\u2014CRYPTO\u00a02014, Part\u00a0I, volume 8616 of Lecture Notes in Computer Science (Springer, Heidelberg, 2014), pp. 480\u2013499","DOI":"10.1007\/978-3-662-44371-2_27"},{"key":"9471_CR17","doi-asserted-by":"crossref","unstructured":"Z. Brakerski, N. D\u00f6ttling, S. Garg, G. Malavolta, Leveraging linear decryption: rate-1 fully-homomorphic encryption and time-lock puzzles, in Theory of Cryptography Conference (Springer, 2019), , pp. 407\u2013437","DOI":"10.1007\/978-3-030-36033-7_16"},{"key":"9471_CR18","unstructured":"Z. Brakerski, N. D\u00f6ttling, S. Garg, G. Malavolta, Factoring and pairings are not necessary for io: Circular-secure lwe suffices. Cryptology ePrint Archive, Report 2020\/1024, (2020). https:\/\/eprint.iacr.org\/2020\/1024."},{"key":"9471_CR19","doi-asserted-by":"crossref","unstructured":"Z. Brakerski, G.N. Rothblum, Virtual black-box obfuscation for all circuits via generic graded encoding, in Y. Lindell (ed.) TCC\u00a02014: 11th Theory of Cryptography Conference, volume 8349 of Lecture Notes in Computer Science (Springer, Heidelberg, 2014), pp. 1\u201325","DOI":"10.1007\/978-3-642-54242-8_1"},{"key":"9471_CR20","doi-asserted-by":"crossref","unstructured":"Z. Brakerski, V. Vaikuntanathan, Lattice-based FHE as secure as PKE, in M. Naor (ed) ITCS 2014: 5th Conference on Innovations in Theoretical Computer Science (Association for Computing Machinery, 2014), pp. 1\u201312","DOI":"10.1145\/2554797.2554799"},{"key":"9471_CR21","doi-asserted-by":"crossref","unstructured":"Y. Chen, C. Gentry, S. Halevi, Cryptanalyses of candidate branching program obfuscators, in J.-S. Coron, J.B. Nielsen (eds.) Advances in Cryptology\u2014EUROCRYPT\u00a02017, Part\u00a0III, volume 10212 of Lecture Notes in Computer Science (Springer, Heidelberg, 2017), pp. 278\u2013307","DOI":"10.1007\/978-3-319-56617-7_10"},{"key":"9471_CR22","doi-asserted-by":"crossref","unstructured":"J.H. Cheon, K. Han, C. Lee, H. Ryu, D. Stehl\u00e9, Cryptanalysis of the multilinear map over the integers, in E. Oswald, M. Fischlin (eds.) Advances in Cryptology\u2014EUROCRYPT\u00a02015, Part\u00a0I, volume 9056 of Lecture Notes in Computer Science (Springer, Heidelberg, 2015), pp. 3\u201312","DOI":"10.1007\/978-3-662-46800-5_1"},{"key":"9471_CR23","doi-asserted-by":"crossref","unstructured":"J.-S. Coron, T. Lepoint, M. Tibouchi, Practical multilinear maps over the integers, in R. Canetti, J.A. Garay (eds.) Advances in Cryptology\u2014CRYPTO\u00a02013, Part\u00a0I, volume 8042 of Lecture Notes in Computer Science (Springer, Heidelberg, 2013), pp. 476\u2013493","DOI":"10.1007\/978-3-642-40041-4_26"},{"key":"9471_CR24","doi-asserted-by":"crossref","unstructured":"I. Damg\u00e5rd, M. Jurik, A generalisation, a simplification and some applications of Paillier\u2019s probabilistic public-key system, in K. Kim (ed) PKC\u00a02001: 4th International Workshop on Theory and Practice in Public Key Cryptography, volume 1992 of Lecture Notes in Computer Science (Springer, Heidelberg, 2001), pp. 119\u2013136","DOI":"10.1007\/3-540-44586-2_9"},{"key":"9471_CR25","doi-asserted-by":"crossref","unstructured":"L. Devadas, W. Quach, V. Vaikuntanathan, H. Wee, D. Wichs, Succinct lwe sampling, random polynomials, and obfuscation, in Theory of Cryptography Conference (Springer, 2021), pp. 256\u2013287","DOI":"10.1007\/978-3-030-90453-1_9"},{"key":"9471_CR26","doi-asserted-by":"crossref","unstructured":"L. Ducas, D. Stehl\u00e9, Sanitization of FHE ciphertexts, in M. Fischlin, J.-S. Coron (eds.) Advances in Cryptology\u2014EUROCRYPT\u00a02016, Part\u00a0I, volume 9665 of Lecture Notes in Computer Science (Springer, Heidelberg, 2016), pp. 294\u2013310","DOI":"10.1007\/978-3-662-49890-3_12"},{"key":"9471_CR27","doi-asserted-by":"crossref","unstructured":"A. Fiat, A. Shamir, How to prove yourself: practical solutions to identification and signature problems, in A.M. Odlyzko (ed). Advances in Cryptology\u2014CRYPTO\u201986, volume 263 of Lecture Notes in Computer Science (Springer, Heidelberg, 1987), pp. 186\u2013194","DOI":"10.1007\/3-540-47721-7_12"},{"key":"9471_CR28","doi-asserted-by":"crossref","unstructured":"S. Garg, C. Gentry, S. Halevi, Candidate multilinear maps from ideal lattices, in T. Johansson, P.Q. Nguyen (eds.) Advances in Cryptology\u2014EUROCRYPT\u00a02013, volume 7881 of Lecture Notes in Computer Science (Springer, Heidelberg, 2013), pp. 1\u201317","DOI":"10.1007\/978-3-642-38348-9_1"},{"key":"9471_CR29","doi-asserted-by":"crossref","unstructured":"S. Garg, C. Gentry, S. Halevi, M. Raykova, Two-round secure MPC from indistinguishability obfuscation, in Y. Lindell (ed) TCC\u00a02014: 11th Theory of Cryptography Conference, volume 8349 of Lecture Notes in Computer Science (Springer, Heidelberg, 2014), pp. 74\u201394","DOI":"10.1007\/978-3-642-54242-8_4"},{"key":"9471_CR30","doi-asserted-by":"crossref","unstructured":"S. Garg, C. Gentry, S. Halevi, M. Raykova, A. Sahai, B. Waters, Candidate indistinguishability obfuscation and functional encryption for all circuits, in 54th Annual Symposium on Foundations of Computer Science (IEEE Computer Society Press, 2013), pp. 40\u201349","DOI":"10.1109\/FOCS.2013.13"},{"key":"9471_CR31","doi-asserted-by":"crossref","unstructured":"S. Garg, E. Miles, P. Mukherjee, A. Sahai, A. Srinivasan, M. Zhandry, Secure obfuscation in a weak multilinear map model, in M. Hirt, A.D. Smith (eds.) TCC\u00a02016-B: 14th Theory of Cryptography Conference, Part\u00a0II, volume 9986 of Lecture Notes in Computer Science (Springer, Heidelberg, 2016), pp. 241\u2013268","DOI":"10.1007\/978-3-662-53644-5_10"},{"key":"9471_CR32","doi-asserted-by":"crossref","unstructured":"R. Gay, A. Jain, H. Lin, A. Sahai, Indistinguishability obfuscation from simple-to-state hard problems: new assumptions, new techniques, and simplification, in Annual International Conference on the Theory and Applications of Cryptographic Techniques (Springer, 2021), pp. 97\u2013126","DOI":"10.1007\/978-3-030-77883-5_4"},{"key":"9471_CR33","doi-asserted-by":"crossref","unstructured":"R. Gay, R. Pass, Indistinguishability obfuscation from circular security, in Proceedings of the 53rd Annual ACM SIGACT Symposium on Theory of Computing (2021), pp. 736\u2013749","DOI":"10.1145\/3406325.3451070"},{"key":"9471_CR34","doi-asserted-by":"crossref","unstructured":"C. Gentry, Fully homomorphic encryption using ideal lattices, in M. Mitzenmacher (ed.) 41st Annual ACM Symposium on Theory of Computing (ACM Press,2009), pp. 169\u2013178","DOI":"10.1145\/1536414.1536440"},{"key":"9471_CR35","doi-asserted-by":"crossref","unstructured":"C. Gentry, S. Gorbunov, S. Halevi, Graph-induced multilinear maps from lattices, in Y. Dodis, J.B. Nielsen (eds.) TCC\u00a02015: 12th Theory of Cryptography Conference, Part\u00a0II, volume 9015 of Lecture Notes in Computer Science (Springer, Heidelberg, 2015), pp. 498\u2013527","DOI":"10.1007\/978-3-662-46497-7_20"},{"key":"9471_CR36","doi-asserted-by":"crossref","unstructured":"C. Gentry, S. Halevi, V. Vaikuntanathan, i-Hop homomorphic encryption and rerandomizable Yao circuits, in T. Rabin (ed) Advances in Cryptology\u2014CRYPTO\u00a02010, volume 6223 of Lecture Notes in Computer Science (Springer, Heidelberg, 2010), pp. 155\u2013172","DOI":"10.1007\/978-3-642-14623-7_9"},{"key":"9471_CR37","unstructured":"C. Gentry, C.S. Jutla, D. Kane, Obfuscation using tensor products. Cryptology ePrint Archive, Report 2018\/756, (2018)"},{"key":"9471_CR38","doi-asserted-by":"crossref","unstructured":"C. Gentry, A. Sahai, B. Waters, Homomorphic encryption from learning with errors: conceptually-simpler, asymptotically-faster, attribute-based, in R. Canetti, J.A. Garay (ed.) Advances in Cryptology\u2014CRYPTO\u00a02013, Part\u00a0I, volume 8042 of Lecture Notes in Computer Science (Springer, Heidelberg, 2013), pp. 75\u201392","DOI":"10.1007\/978-3-642-40041-4_5"},{"key":"9471_CR39","doi-asserted-by":"crossref","unstructured":"S. Goldwasser, Y.T. Kalai, R.A. Popa, V. Vaikuntanathan, N. Zeldovich, Reusable garbled circuits and succinct functional encryption, in D. Boneh, T. Roughgarden, J. Feigenbaum (eds.) 45th Annual ACM Symposium on Theory of Computing (ACM Press, 2013), pp. 555\u2013564","DOI":"10.1145\/2488608.2488678"},{"key":"9471_CR40","doi-asserted-by":"crossref","unstructured":"S. Goldwasser, S. Micali, Probabilistic encryption and how to play mental poker keeping secret all partial information, in 14th Annual ACM Symposium on Theory of Computing (ACM Press, 1982), pp. 365\u2013377","DOI":"10.1145\/800070.802212"},{"key":"9471_CR41","doi-asserted-by":"crossref","unstructured":"S. Hada, Zero-knowledge and code obfuscation, in T. Okamoto (ed) Advances in Cryptology\u2014ASIACRYPT\u00a02000, volume 1976 of Lecture Notes in Computer Science (Springer, Heidelberg, 2000), pp. 443\u2013457","DOI":"10.1007\/3-540-44448-3_34"},{"key":"9471_CR42","doi-asserted-by":"crossref","unstructured":"S. Hopkins, A. Jain, H. Lin, Counterexamples to new circular security assumptions underlying io, in Annual International Cryptology Conference (Springer, 2021), pp. 673\u2013700","DOI":"10.1007\/978-3-030-84245-1_23"},{"key":"9471_CR43","doi-asserted-by":"crossref","unstructured":"Y. Hu, H. Jia, Cryptanalysis of GGH map, in M. Fischlin, J.-S. Coron (eds.) Advances in Cryptology \u2013 EUROCRYPT\u00a02016, Part\u00a0I, volume 9665 of Lecture Notes in Computer Science (Springer, Heidelberg, 2016), pp. 537\u2013565","DOI":"10.1007\/978-3-662-49890-3_21"},{"key":"9471_CR44","doi-asserted-by":"crossref","unstructured":"A. Jain, A. Korb, N. Manohar, A. Sahai, Amplifying the security of functional encryption, unconditionally, in Annual International Cryptology Conference (Springer, 2020), pp. 717\u2013746","DOI":"10.1007\/978-3-030-56784-2_24"},{"key":"9471_CR45","doi-asserted-by":"crossref","unstructured":"A. Jain, H. Lin, C. Matt, A. Sahai, How to leverage hardness of constant-degree expanding polynomials overa $$\\mathbb{R}$$ to build $$i\\cal{O} $$, in Y. Ishai, V. Rijmen (eds.) Advances in Cryptology \u2013 EUROCRYPT\u00a02019, Part\u00a0I, volume 11476 of Lecture Notes in Computer Science (Springer, Heidelberg, 2019), pp. 251\u2013281","DOI":"10.1007\/978-3-030-17653-2_9"},{"key":"9471_CR46","doi-asserted-by":"crossref","unstructured":"A. Jain, H. Lin, A. Sahai, Indistinguishability obfuscation from lpn over f_p, dlin, and prgs in n\u0109 0. Cryptology ePrint Archive, (2021)","DOI":"10.1145\/3406325.3451093"},{"key":"9471_CR47","doi-asserted-by":"crossref","unstructured":"A. Jain, H. Lin, A. Sahai, Indistinguishability obfuscation from well-founded assumptions, in Proceedings of the 53rd Annual ACM SIGACT Symposium on Theory of Computing (2021), pp. 60\u201373","DOI":"10.1145\/3406325.3451093"},{"key":"9471_CR48","doi-asserted-by":"crossref","unstructured":"H. Lin, Indistinguishability obfuscation from constant-degree graded encoding schemes, in M. Fischlin, J.-S. Coron (eds.) Advances in Cryptology\u2014EUROCRYPT\u00a02016, Part\u00a0I, volume 9665 of Lecture Notes in Computer Science (Springer, Heidelberg, 2016), pp. 28\u201357","DOI":"10.1007\/978-3-662-49890-3_2"},{"key":"9471_CR49","doi-asserted-by":"crossref","unstructured":"H. Lin, Indistinguishability obfuscation from SXDH on 5-linear maps and locality-5 PRGs, in J. Katz, H. Shacham (eds.) Advances in Cryptology\u2014CRYPTO\u00a02017, Part\u00a0I, volume 10401 of Lecture Notes in Computer Science (Springer, Heidelberg, 2017), pp. 599\u2013629","DOI":"10.1007\/978-3-319-63688-7_20"},{"key":"9471_CR50","doi-asserted-by":"crossref","unstructured":"H. Lin, R. Pass, K. Seth, S. Telang, Indistinguishability obfuscation with non-trivial efficiency, in C.-M. Cheng, K.-M. Chung, G. Persiano, B.-Y. Yang (eds.) PKC\u00a02016: 19th International Conference on Theory and Practice of Public Key Cryptography, Part\u00a0II, volume 9615 of Lecture Notes in Computer Science (Springer, Heidelberg, 2016), pp. 447\u2013462","DOI":"10.1007\/978-3-662-49387-8_17"},{"key":"9471_CR51","doi-asserted-by":"crossref","unstructured":"H. Lin, S. Tessaro, Indistinguishability obfuscation from bilinear maps and block-wise local prgs. Cryptology ePrint Archive, Report 2017\/250, Version 20170320:142653 (2017)","DOI":"10.1007\/978-3-319-63688-7_21"},{"key":"9471_CR52","doi-asserted-by":"crossref","unstructured":"H. Lin, S. Tessaro, Indistinguishability obfuscation from trilinear maps and block-wise local PRGs, in J. Katz, H. Shacham (eds.) Advances in Cryptology\u2014CRYPTO\u00a02017, Part\u00a0I, volume 10401 of Lecture Notes in Computer Science (Springer, Heidelberg, 2017), pp. 630\u2013660","DOI":"10.1007\/978-3-319-63688-7_21"},{"key":"9471_CR53","doi-asserted-by":"crossref","unstructured":"H. Lin, V. Vaikuntanathan, Indistinguishability obfuscation from DDH-like assumptions on constant-degree graded encodings, in I. Dinur (ed.) 57th Annual Symposium on Foundations of Computer Science (IEEE Computer Society Press, 2016), pp. 11\u201320","DOI":"10.1109\/FOCS.2016.11"},{"key":"9471_CR54","doi-asserted-by":"crossref","unstructured":"A. Lombardi, V. Vaikuntanathan, Limits on the locality of pseudorandom generators and applications to indistinguishability obfuscation, in Y. Kalai, L. Reyzin (eds.) TCC\u00a02017: 15th Theory of Cryptography Conference, Part\u00a0I, volume 10677 of Lecture Notes in Computer Science (Springer, Heidelberg, 2017), pp. 119\u2013137","DOI":"10.1007\/978-3-319-70500-2_5"},{"key":"9471_CR55","doi-asserted-by":"crossref","unstructured":"A. L\u00f3pez-Alt, E. Tromer, V. Vaikuntanathan, On-the-fly multiparty computation on the cloud via multikey fully homomorphic encryption, in H.J. Karloff, T. Pitassi (eds.), 44th Annual ACM Symposium on Theory of Computing (ACM Press, 2012) pp. 1219\u20131234","DOI":"10.1145\/2213977.2214086"},{"key":"9471_CR56","doi-asserted-by":"crossref","unstructured":"G. Malavolta, S.A.\u00a0Krishnan Thyagarajan, Homomorphic time-lock puzzles and applications, in A. Boldyreva, D. Micciancio (eds.) Advances in Cryptology\u2014CRYPTO\u00a02019, Part\u00a0I, volume 11692 of Lecture Notes in Computer Science (Springer, Heidelberg, 2019), pp. 620\u2013649","DOI":"10.1007\/978-3-030-26948-7_22"},{"key":"9471_CR57","unstructured":"D. Micciancio. From linear functions to fully homomorphic encryption. Technical report, (2019). https:\/\/bacrypto.github.io\/presentations\/2018.11.30-Micciancio-FHE.pdf."},{"key":"9471_CR58","doi-asserted-by":"crossref","unstructured":"E. Miles, A. Sahai, M. Zhandry, Annihilation attacks for multilinear maps: cryptanalysis of indistinguishability obfuscation over GGH13, in M. Robshaw, J. Katz (eds.) Advances in Cryptology \u2013 CRYPTO\u00a02016, Part\u00a0II, volume 9815 of Lecture Notes in Computer Science (Springer, Heidelberg, 2016), pp. 629\u2013658","DOI":"10.1007\/978-3-662-53008-5_22"},{"key":"9471_CR59","doi-asserted-by":"crossref","unstructured":"P. Paillier, Public-key cryptosystems based on composite degree residuosity classes, in J. Stern (ed.) Advances in Cryptology \u2013 EUROCRYPT\u201999, volume 1592 of Lecture Notes in Computer Science (Springer, Heidelberg, 1999), pp. 223\u2013238","DOI":"10.1007\/3-540-48910-X_16"},{"key":"9471_CR60","doi-asserted-by":"crossref","unstructured":"C. Peikert, O. Regev, N. Stephens-Davidowitz, Pseudorandomness of ring-LWE for any ring and modulus, in H. Hatami, P. McKenzie, V. King (eds.) 49th Annual ACM Symposium on Theory of Computing (ACM Press, 2017), pp. 461\u2013473","DOI":"10.1145\/3055399.3055489"},{"key":"9471_CR61","doi-asserted-by":"crossref","unstructured":"O. Regev, On lattices, learning with errors, random linear codes, and cryptography, in H.N. Gabow, R. Fagin (eds.) 37th Annual ACM Symposium on Theory of Computing (ACM Press, 2005), pp. 84\u201393","DOI":"10.1145\/1060590.1060603"},{"key":"9471_CR62","doi-asserted-by":"crossref","unstructured":"A. Sahai, B. Waters,How to use indistinguishability obfuscation: deniable encryption, and more, in D.B. Shmoys (ed.) 46th Annual ACM Symposium on Theory of Computing (ACM Press, 2014), pp. 475\u2013484","DOI":"10.1145\/2591796.2591825"},{"key":"9471_CR63","doi-asserted-by":"crossref","unstructured":"H. Wee, D. Wichs, Candidate obfuscation via oblivious lwe sampling, in Annual International Conference on the Theory and Applications of Cryptographic Techniques (Springer, 2021), pp. 127\u2013156","DOI":"10.1007\/978-3-030-77883-5_5"},{"key":"9471_CR64","unstructured":"A.C.-C. Yao, How to generate and exchange secrets (extended abstract), in 27th Annual Symposium on Foundations of Computer Science (IEEE Computer Society Press, 1986), pp. 162\u2013167"}],"container-title":["Journal of Cryptology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00145-023-09471-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00145-023-09471-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00145-023-09471-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,9]],"date-time":"2023-08-09T16:12:07Z","timestamp":1691597527000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00145-023-09471-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,8]]},"references-count":64,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2023,7]]}},"alternative-id":["9471"],"URL":"https:\/\/doi.org\/10.1007\/s00145-023-09471-5","relation":{},"ISSN":["0933-2790","1432-1378"],"issn-type":[{"value":"0933-2790","type":"print"},{"value":"1432-1378","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,6,8]]},"assertion":[{"value":"4 January 2021","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 May 2023","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 May 2023","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 June 2023","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"27"}}