Practical Multilinear Maps over the Integers

  • Jean-Sébastien Coron
  • Tancrède Lepoint
  • Mehdi Tibouchi
Conference paper

DOI: 10.1007/978-3-642-40041-4_26

Part of the Lecture Notes in Computer Science book series (LNCS, volume 8042)
Cite this paper as:
Coron JS., Lepoint T., Tibouchi M. (2013) Practical Multilinear Maps over the Integers. In: Canetti R., Garay J.A. (eds) Advances in Cryptology – CRYPTO 2013. Lecture Notes in Computer Science, vol 8042. Springer, Berlin, Heidelberg


Extending bilinear elliptic curve pairings to multilinear maps is a long-standing open problem. The first plausible construction of such multilinear maps has recently been described by Garg, Gentry and Halevi, based on ideal lattices. In this paper we describe a different construction that works over the integers instead of ideal lattices, similar to the DGHV fully homomorphic encryption scheme. We also describe a different technique for proving the full randomization of encodings: instead of Gaussian linear sums, we apply the classical leftover hash lemma over a quotient lattice. We show that our construction is relatively practical: for reasonable security parameters a one-round 7-party Diffie-Hellman key exchange requires less than 40 seconds per party. Moreover, in contrast with previous work, multilinear analogues of useful, base group assumptions like DLIN appear to hold in our setting.

Download to read the full conference paper text

Copyright information

© International Association for Cryptologic Research 2013

Authors and Affiliations

  • Jean-Sébastien Coron
    • 1
  • Tancrède Lepoint
    • 2
    • 3
  • Mehdi Tibouchi
    • 4
  1. 1.University of LuxembourgLuxembourg
  2. 2.CryptoExpertsFrance
  3. 3.École Normale SupérieureFrance
  4. 4.NTT Secure Platform LaboratoriesJapan

Personalised recommendations