The Torsion-Limit for Algebraic Function Fields and Its Application to Arithmetic Secret Sharing

  • Ignacio Cascudo
  • Ronald Cramer
  • Chaoping Xing
Conference paper

DOI: 10.1007/978-3-642-22792-9_39

Part of the Lecture Notes in Computer Science book series (LNCS, volume 6841)
Cite this paper as:
Cascudo I., Cramer R., Xing C. (2011) The Torsion-Limit for Algebraic Function Fields and Its Application to Arithmetic Secret Sharing. In: Rogaway P. (eds) Advances in Cryptology – CRYPTO 2011. CRYPTO 2011. Lecture Notes in Computer Science, vol 6841. Springer, Berlin, Heidelberg


An (n,t,d,n − t)-arithmetic secret sharing scheme (with uniformity) for \(\mathbb F_{q}^k\) over \(\mathbb F_{q}\) is an \(\mathbb F_{q}\)-linear secret sharing scheme where the secret is selected from \(\mathbb F_{q}^k\) and each of the n shares is an element of \(\mathbb F_{q}\). Moreover, there is t-privacy (in addition, any t shares are uniformly random in \(\mathbb F_{q}^t\)) and, if one considers the d-fold “component-wise” product of any d sharings, then the d-fold component-wise product of the d respective secrets is (n − t)-wise uniquely determined by it. Such schemes are a fundamental primitive in information-theoretically secure multi-party computation. Perhaps counter-intuitively, secure multi-party computation is a very powerful primitive for communication-efficient two-party cryptography, as shown recently in a series of surprising results from 2007 on. Moreover, the existence of asymptotically good arithmetic secret sharing schemes plays a crucial role in their communication-efficiency: for each d ≥ 2, if A(q) > 2d, where A(q) is Ihara’s constant, then there exists an infinite family of such schemes over \(\mathbb F_{q}\) such that n is unbounded, k = Ω(n) and t = Ω(n), as follows from a result at CRYPTO’06. Our main contribution is a novel paradigm for constructing asymptotically good arithmetic secret sharing schemes from towers of algebraic function fields. It is based on a new limit that, for a tower with a given Ihara limit and given positive integer ℓ, gives information on the cardinality of the ℓ-torsion sub-groups of the associated degree-zero divisor class groups and that we believe is of independent interest. As an application of the bounds we obtain, we relax the condition A(q) > 2d from the CRYPTO’06 result substantially in terms of our torsion-limit. As a consequence, this result now holds over nearly all finite fields\(\mathbb F_{q}\). For example, if d = 2, it is sufficient that q = 8,9 or q ≥ 16.

Download to read the full conference paper text

Copyright information

© International Association for Cryptologic Research 2011

Authors and Affiliations

  • Ignacio Cascudo
    • 1
  • Ronald Cramer
    • 2
  • Chaoping Xing
    • 3
  1. 1.CWI AmsterdamThe Netherlands
  2. 2.CWI Amsterdam & Mathematical InstituteLeiden UniversityThe Netherlands
  3. 3.Division of Mathematical SciencesNanyang Technological UniversitySingapore

Personalised recommendations