… in an MPC … of ciphers in the context of MPC, ZK, or FHE schemes where linear parts are
much cheaper than non-linear parts. This cost metric suggests a new way of designing a cipher …

… RKA-security in transciphering and Margrethe The core of our proposal is simply to employ
a stream cipher that is resistant against RKA for the specific MPC setting we consider (two-…

… to be efficient in ZK and MPC applications. Although numerous … ciphers were proposed for
ZK and MPC applications, there are not many algebraic ciphers proposed in the context of FHE…

… This is because these MPC/FHE/ZK systems can be … attention for these MPC/FHE/ZK-friendly
ciphers, only several of … [16] for lightweight block ciphers. Besides linear cryptanalysis …

… Thus the protocol in this paper may provide a practical tradeoff between existing MPC
protocols (which consume high bandwidth) and FHE based protocols (which require huge …

… Examples include MPC protocols based on Yao’s garbled … construction for a secure block
cipher or a secure cryptographic … LowMC is a block cipher designed for MPC/FHE applications …

… FHE (thereby MPC schemes) through tailoring generic MPC protocols to the base FHE scheme
while requiring no effort in FHE … representative Ring-LWE-based FHE schemes: CKKS [37…

… This is to enable a comparison with our Fp based block ciphers against not only a
standard in-use block cipher (AES), but also a block cipher designed for use in MPC/FHE …

… cipher, for which we provide a preliminary security analysis. We finally highlight the good
properties of our stream cipher … delegation (for 2nd-generation FHE schemes). We conclude the …

… , one of the most successful FHE libraries available today. … MPC protocols, commonly referred
to as two-round MPC: In … is homomorphically evaluated over the ciphertexts, either by the …