News for hackers. Stuff that matters.
Re:Launch HN: Blyss (YC W23) – Homomorphic encryption as a s... by ngneer on Tuesday March 14, 2023 @06:01PM (#35159566)
This capability is not exactly Fully Homomorphic Encryption (FHE). In the cryptographic literature this is typically referred to as PIR, or Private Information Retrieval [https://en.wikipedia.org/wiki/Private_information_retrieval]. Counterintuitive indeed. The idea is not totally new, though...
Re:Launch HN: Blyss (YC W23) – Homomorphic encryption as a s... by blintz on Tuesday March 14, 2023 @06:24PM (#35159946)
True! We are using FHE to perform PIR. The underlying scheme we use is a real homomorphic encryption scheme (Regev + GSW), but yeah, we explicitly do not support performing arbitrary computation on encrypted data. As it turns out, that's still quite slow - the Google FHE C++ transpiler still takes seconds to do 32-bit arithmetic operations. Our PIR system is able to achieve much more practical speed + communication overheads.
Re:Launch HN: Blyss (YC W23) – Homomorphic encryption as a s... by ngneer on Tuesday March 14, 2023 @07:05PM (#35160586)
I vaguely recall basic PIR schemes turn a database from O(n) to O(n^2). While this would be transparent to users of the service, could you comment on space overhead?
Re:Launch HN: Blyss (YC W23) – Homomorphic encryption as a s... by blintz on Tuesday March 14, 2023 @07:43PM (#35161230)
The space overhead is roughly constant (or at most logarithmic in n), and varies by the scheme. In practice, it’s something like 1.5-8x overhead. This is no big deal for storage, but does make it a pain on the memory side for processing (since the full database, including the overhead factor, needs to be resident in memory).
Re:Launch HN: Blyss (YC W23) – Homomorphic encryption as a s... by ngneer on Wednesday March 15, 2023 @01:40AM (#35164344)
Awesome, thanks for taking the time to elucidate!
Re:Launch HN: Blyss (YC W23) – Homomorphic encryption as a s... by Oreko on Tuesday March 14, 2023 @06:35PM (#35160100)
I haven't read their protocol, but you can easily implement PIR using FHE through polynomial evaluation.