Public-Key Locally-Decodable Codes

In this paper we introduce the notion of a Public-Key Encryption Scheme that is also a Locally-Decodable Error-Correcting Code (PKLDC). In particular, we allow any polynomialtime adversary to read the entire ciphertext, and corrupt a constant fraction of the bits of the entire ciphertext. Nevertheless, the decoding algorithm can recover any bit of the plaintext with all but negligible probability by reading only a sublinear number of bits of the (corrupted) ciphertext. We give a general construction of a PKLDC from any Semantically-Secure Public Key Encryption (SS-PKE) and any Private Information Retrieval (PIR) protocol. Since Homomorphic encryption implies PIR, we also show a reduction from any Homomorphic encryption protocol to PKLDC. Applying our construction to the best known PIR protocol (that of Gentry and Ramzan), we obtain a PKLDC, which for messages of size n and security parameter k achieves ciphertexts of size O(n), public key of size O(n + k), and locality of size O(k2 )....

• Type: Conference
• Year: 2008
• Where: CRYPTO
• Authors: Brett Hemenway, Rafail Ostrovsky
• Keywords: CRYPTO 2008, Cryptology, Encryption, Entire Ciphertext, Public-key Encryption Scheme