Re: [viff-devel] [PATCH 0 of 4] Insecure ElGamal based two player runtime

2008-06-29 Thread Martin Geisler
"Claudio Orlandi" <[EMAIL PROTECTED]> writes:

Hi Claudio

> if you are interested just in passive security for the 2 party case
> you can implement the following protocol for multiplication.

You never commented on my implementation of your multiplication
protocol -- is there anything I should know security-wise before
including it in VIFF proper?

I did a simple benchmark with 10 multiplications and a multiplication
takes about *3 seconds* when I run both playes on the same laptop. I
have not yet tested on the DAIMI machines we normally compare with.

The updated code is here:

  http://thread.gmane.org/gmane.comp.cryptography.viff.patches/14

-- 
Martin Geisler
___
viff-devel mailing list (http://viff.dk/)
viff-devel@viff.dk
http://lists.viff.dk/listinfo.cgi/viff-devel-viff.dk


Re: [viff-devel] Elliptic curves

2008-06-29 Thread Martin Geisler
Ivan Bjerre Damgaard <[EMAIL PROTECTED]> writes:

> Quoting Martin Geisler <[EMAIL PROTECTED]>:
>
>> "Claudio Orlandi" <[EMAIL PROTECTED]> writes:
>>
>> >> From reading the Wikipedia page linked below it seems very
>> >> simple to implement. But if it should be fast, then a library is
>> >> of course much better than a home-grown Python version.
>
> A general remark about all this: if we see it in a bigger CACE etc.
> context it seems to me we should not use lots of energy on
> integrating some library. WP2 in CACE is supposed to provide this
> kind of stuff for us, and even with an interface we can influence
> and with security against side channels.

Right. I talked with Thomas Schneider (who I guess is in CACE WP2) at
the Berlin ECRYPT meeting and he expressed a wish to know what kind of
commitment schemes we will need in our work package.

I've put him on Cc (Hi Thomas!) since he might be interested in what
we do here...

> If you find something that's easy to integrate it may be fine to
> have something to play with, but the next half year, I think time is
> better spent on integration with WP2.

I agree -- in my quick look at the available libraries yesterday I
didn't find anything which already had Python wrappers.

So unless Claudio comes with a cool actively secure protocol which
absolutely must use commitments over elliptic curves, I wont begin
spending a lot of time writing such a wrapper...

-- 
Martin Geisler
___
viff-devel mailing list (http://viff.dk/)
viff-devel@viff.dk
http://lists.viff.dk/listinfo.cgi/viff-devel-viff.dk


Re: [viff-devel] Elliptic curves

2008-06-29 Thread Ivan Bjerre Damgaard
Quoting Martin Geisler <[EMAIL PROTECTED]>:

> "Claudio Orlandi" <[EMAIL PROTECTED]> writes:
>
> >> From reading the Wikipedia page linked below it seems very simple
> >> to implement. But if it should be fast, then a library is of course
> >> much better than a home-grown Python version.

A general remark about all this: if we see it in a bigger CACE etc. context
it seems to me we should not use lots of energy on integrating some library.
WP2 in CACE is supposed to provide this kind of stuff for us, and even with an
interface we can influence and with security against side channels. If you find
something that's easy to integrate it may be fine to have something to play
with, but the next half year, I think time is better spent on integration with
WP2.

regards, Ivan
___
viff-devel mailing list (http://viff.dk/)
viff-devel@viff.dk
http://lists.viff.dk/listinfo.cgi/viff-devel-viff.dk