Secure multiparty computation (MPC) techniques enable multiple parties to compute joint functions over their private data without sharing that data with other parties, typically by employing powerful cryptographic protocols to protect individual's data. One challenge when writing such functions is that most MPC languages force users to intermix programmatic and privacy concerns in a single application, making it difficult to change or audit a program's underlying privacy policy. Prior policy-agnostic MPC languages relied on dynamic enforcement to decouple privacy requirements from program logic. Unfortunately, the resulting overhead makes it difficult to scale MPC applications that manipulate structured data. This work proposes to eliminate this overhead by instead transforming programs into semantically equivalent versions that statically enforce user-provided privacy policies. We have implemented this approach in a new MPC language, called Taypsi; our experimental evaluation demonstrates that the resulting system features considerable performance improvements on a variety of MPC applications involving structured data and complex privacy policies.
翻译:安全多方计算(MPC)技术使多方能够在不向其他方共享私有数据的情况下,联合计算其私有数据上的函数,通常通过采用强大的密码学协议来保护个体数据。编写此类函数时面临的一个挑战是,大多数MPC语言迫使用户在单个应用程序中混合编程逻辑与隐私关注点,这使得更改或审计程序底层的隐私策略变得困难。先前策略无关的MPC语言依赖动态强制来解耦隐私需求与程序逻辑。遗憾的是,由此产生的开销使得处理结构化数据的MPC应用难以扩展。本工作提出通过将程序转换为语义等价的版本,以静态强制用户提供的隐私策略,从而消除这一开销。我们已在一种名为Taypsi的新型MPC语言中实现了该方法;实验评估表明,在涉及结构化数据和复杂隐私策略的多种MPC应用中,所提系统展现出显著的性能提升。