Column-wise Garbling, and How to Go Beyond the Linear Model

ePrint Report: Column-wise Garbling, and How to Go Beyond the Linear Model

Lei Fan, Zhenghao Lu, Hong-Sheng Zhou

In the linear garbling model introduced by Zahur, Rosulek, and Evans (Eurocrypt 2015), garbling an AND gate requires at least \(2\kappa\) bits of ciphertext, where $\kappa$ is the security parameter. Though subsequent works, including those by Rosulek and Roy (Crypto 2021) and Acharya et al. (ACNS 2023), have advanced beyond these linear constraints, a more comprehensive design framework is yet to be …

beyond bits ciphertext column eprint report eurocrypt fan linear parameter report security