iO via Functional Encryption: Techniques and Challenges from LWE
summary
Attempts to get functional encryption from LWE alone produce concrete partial results and clear roadblocks: constructions use homomorphic LWE encodings and dual‑Regev style keys to build noisy linear FE, but security holds only in restricted games or for one ciphertext because of leaky LWE keys that combine into SIS trapdoors. Overcoming noise requires degree flattening and structured LWE labels to generate compressed smudging noise; this yields plausibility under new interactive assumptions and non‑interactive security only in the single‑ciphertext case.
AI-written summary · about
chapters (16)
- 0:00Start
- 2:47MC Escher
- 3:31Hans Hoffman
- 4:23Functional Encryption Encryption with Partial Decryption Keys
- 7:01LWE...Leakage on Partial Decryption (FE)
- 9:45Decryption works
- 10:08We need: Partial Decryption Capability
- 19:59Doing Without Pairings?
- 27:27Degree Flattening
- 30:17Symmetric key FHE for Quadratic Polynomials BV11a
- 31:09FHE Evaluation
- 34:53Compactness Vs Leakage
- 41:55RLWE with Structured Noise
- 45:33Security
- 46:44Connection with Functional Encodings ww! • Functional encodings are akin to functional encryption with single ciphertext
- 49:35Open Problems
related talks
01h 05mObfuscation from Noisy Linear FE
38mRecent Advances on Foundations of Program Obfuscation
01h 07mLattices and Encrypted Computation
44mObfuscation III
58mObfuscation 2
36mDiamond iO: Lattice-Based Obfuscation without Bootstrapping from Functional Encryption, toward...
46mIndistinguishability Obfuscation from Bilinear Maps and LPN Variants
31mHow to Construct Indistinguishability Obfuscation from Compact Functional Encryption
