Information-Theoretic Distributed Point Functions

Elette Boyle, Niv Gilboa, Yuval Ishai, Victor I. Kolobov

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review


A distributed point function (DPF) (Gilboa-Ishai, Eurocrypt 2014) is a cryptographic primitive that enables compressed additive secret-sharing of a secret weight-1 vector across two or more servers. DPFs support a wide range of cryptographic applications, including efficient private information retrieval, secure aggregation, and more. Up to now, the study of DPFs was restricted to the computational security setting, relying on one-way functions. This assumption is necessary in the case of a dishonest majority. We present the first statistically private 3-server DPF for domain size N with subpolynomial key size No(1). We also present a similar perfectly private 4-server DPF. Our constructions offer benefits over their computationally secure counterparts, beyond the superior security guarantee, including better computational complexity and better protocols for distributed key generation, all while having comparable communication complexity for moderate-sized parameters.

Original languageEnglish
Title of host publication3rd Conference on Information-Theoretic Cryptography, ITC 2022
EditorsDana Dachman-Soled
PublisherSchloss Dagstuhl- Leibniz-Zentrum fur Informatik GmbH, Dagstuhl Publishing
ISBN (Electronic)9783959772389
StatePublished - 1 Jul 2022
Event3rd Conference on Information-Theoretic Cryptography, ITC 2022 - Cambridge, United States
Duration: 5 Jul 20227 Jul 2022

Publication series

NameLeibniz International Proceedings in Informatics, LIPIcs
ISSN (Print)1868-8969


Conference3rd Conference on Information-Theoretic Cryptography, ITC 2022
Country/TerritoryUnited States


  • Information-theoretic cryptography
  • homomorphic secret sharing
  • private information retrieval
  • secure multiparty computation

ASJC Scopus subject areas

  • Software


Dive into the research topics of 'Information-Theoretic Distributed Point Functions'. Together they form a unique fingerprint.

Cite this