secure function evaluation

Definition (secure function evaluation)

Suppose $u$ users, $i$-th user possesses $x_i \in \{0,1\}^n$, function $F_i \{0,1\}^{nu} \to \{0,1\}^m$. Then, we wish to construct a protocol such that upon completion, $i$-th user knows $F_i(x_1,...,x_u)$ but knows nothing more about $x_j$ where $j \neq i$.

Security models

Honest-but-curious:

#incomplete

References

1. https://crypto.stanford.edu/pbc/notes/crypto/sfe.html