66

A Multiparty Commutative Hashing Protocol based on the Discrete Logarithm Problem

IACR Cryptology ePrint Archive (IACR ePrint), 2023
Abstract

Let X\mathcal{X} and Y\mathcal{Y} be two sets and suppose that a set of participants P={P1,P2,,Pn}P=\{P_1,P_2,\dots,P_n\} would like to calculate the keyed hash value of some message mXm\in\mathcal{X} known to a single participant in PP called the data owner. Also, suppose that each participant PiP_i knows a secret value xiXx_i\in\mathcal{X}. In this paper, we will propose a protocol that enables the participants in this setup to calculate the value y=H(m,x1,x2,,xn)y=H(m,x_1,x_2,\dots ,x_n) of a hash function H:Xn+1YH:\mathcal{X}^{n+1}\rightarrow\mathcal{Y} such that the function HH is a one-way function, participants in P\{Pi}P\backslash\{P_i\} cannot obtain xix_i, participants other than the data owner cannot obtain mm, and the hash value y=H(m,x1,x2,,xn)y=H(m,x_1,x_2,\dots ,x_n) remains the same regardless the order of the secret xix_i values.

View on arXiv
Comments on this paper