March 23, 2023
Luís T. A. N. Brandão - NIST/Strativia
Abstract. This talk, presented at the 6th HomomorphicEncryption.org Standards meeting, discusses the ``NIST First Call for Multi-Party Threshold Schemes'' (NISTIR 8214C ipd), currently in the phase of initial public draft open to public comments. The call is organized in two categories of primitives for which threshold schemes are sought. The second category is open to primitives not standardized by NIST. The talk focuses on the subcategory that allows for submission of fully-homomorphic encryption (FHE) schemes and their threshold versions. Submissions should include security characterization, technical description, open-source implementation, and performance evaluation. Other submission subcategories consider complementary techniques, such as zero-knowledge proofs (ZKP) that prove correct behavior in an FHE computation, or prove knowledge of a (possibly secret-shared) private key corresponding to an FHE public key.