MPC with Synchronous Security and Asynchronous Responsiveness

Abstract

Two paradigms for secure MPC are synchronous and asynchronous protocols. While synchronous protocols tolerate more corruptions and allow every party to give its input, they are very slow because the speed depends on the conservatively assumed worst-case delay Δ of the network. In contrast, asynchronous protocols allow parties to obtain output as fast as the actual network allows, a property called responsiveness, but unavoidably have lower resilience and parties with slow network connections cannot give input. It is natural to wonder whether it is possible to leverage synchronous MPC protocols to achieve responsiveness, hence obtaining the advantages of both paradigms: full security with responsiveness up to t corruptions, and extended security (full security or security with unanimous abort) with no responsiveness up to T≥ t corruptions. We settle the question by providing matching feasibility and impossibility results:For the case of unanimous abort as extended security, there is an MPC protocol if and only if T+ 2 t< n.For the case of full security as extended security, there is an MPC protocol if and only if T<n2 and T+ 2 t< n. In particular, setting t=n4 allows to achieve a fully secure MPC for honest majority, which in addition benefits from having substantial responsiveness. © 2020, International Association for Cryptologic Research.