Share conversion and private information retrieval

Amos Beimel, Yuval Ishai, Eyal Kushilevitz, Ilan Orlov

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

33 Scopus citations


An information-theoretic {\em private information retrieval} (PIR) protocol allows a client to retrieve the i-th bit of a database, held by two or more servers, without revealing information about i to any individual server. Information-theoretic PIR protocols are closely related to {\em locally decodable codes} (LDCs), which are error correcting codes that can simultaneously offer a high level of robustness and sub linear-time decoding of each bit of the encoded message. Recent breakthrough results of Yekhanin (STOC 2007) and Efremenko (STOC 2009) have led to a dramatic improvement in the asymptotic complexity of PIR and LDC. We suggest a new "cryptographic" perspective on these recent constructions, which is based on a general notion of {\em share conversion} in secret-sharing schemes that may be of independent interest. Our new perspective gives rise to a clean framework which unifies previous constructions and generalizes them in several directions. In a nutshell, we use the following two-step approach: (1) apply {\em share conversion} to get a low-communication secure multiparty computation protocol \cal P for a nontrivial class \cal F of low-depth circuits, (2) use a lower bound on the {\em VC dimension} of \cal F to get a good PIR protocol from \cal P. Our framework reduces the task of designing good PIR protocols to that of finding powerful forms of share conversion which support circuit classes of a high VC dimension. Motivated by this framework, we study the general power of share conversion and obtain both positive and negative results. Our positive results improve the concrete complexity of PIR even for very feasible real-life parameters. They also lead to some improvements in the asymptotic complexity of the best previous PIR and LDC constructions. For 3-server PIR, we improve the asymptotic communication complexity from O(2 {146\sqrt{\log n\log\log n}}) to O(2 {6\sqrt{\log n\log\log n}}) bits, where n is the database size. Our negative results on share conversion establish some limitations on the power of our approach.

Original languageEnglish
Title of host publicationProceedings - 2012 IEEE 27th Conference on Computational Complexity, CCC 2012
Number of pages11
StatePublished - 26 Sep 2012
EventIEEE Computer Society Technical Committee on Mathematical Foundations of Computing - Porto, Portugal
Duration: 26 Jun 201229 Jun 2012

Publication series

NameProceedings of the Annual IEEE Conference on Computational Complexity
ISSN (Print)1093-0159


ConferenceIEEE Computer Society Technical Committee on Mathematical Foundations of Computing


  • VC dimension
  • constant-depth circuits
  • locally decodable codes
  • matching vectors
  • private information retrieval
  • secret-sharing
  • secure multiparty computation


Dive into the research topics of 'Share conversion and private information retrieval'. Together they form a unique fingerprint.

Cite this