Matthew Green on Nostr: In the real protocol, the garbled circuit just takes in a message M, and outputs the ...
In the real protocol, the garbled circuit just takes in a message M, and outputs the message M. In the security proof *only* it gets modified to contain hardcoded encryptions of each secret key, which it decrypts and uses to compute the message M = f(sk1, … skN).
Published at
2023-11-12 18:38:33Event JSON
{
"id": "4b7d1df0013a89c2aadae4fff48680e71430af7d19337a798a817a563c6311ce",
"pubkey": "5c06f588380197da5dfbe2e32928b9b6d82c62dac0c602535a09ee1cad5a8221",
"created_at": 1699814313,
"kind": 1,
"tags": [
[
"e",
"aa6cff9b081d10d22ec42ed206ecc12673376d609ef92344f9d141318f1744b1",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://ioc.exchange/users/matthew_d_green/statuses/111399030873754496",
"activitypub"
]
],
"content": "In the real protocol, the garbled circuit just takes in a message M, and outputs the message M. In the security proof *only* it gets modified to contain hardcoded encryptions of each secret key, which it decrypts and uses to compute the message M = f(sk1, … skN).",
"sig": "aade956b963db6eac8e2b54628238189f4bf38088d4e358331b8051fdb66708d0d971e5507213e355c1dc24b23ccb7897987b907e73f8fe42ee078de7c2b69b7"
}
