Conference paper
Implementing BP-Obfuscation Using graph-induced encoding
Shai Halevi, Tzipora Halevi, et al.
CCS 2017
We show that there is a set of points p1, p2, . . . , pn such that any arithmetic circuit of depth d for polynomial evaluation (or interpolation) at these points has size Ω (n log n/log(2 + d/log n)). Moreover, for circuits of sub-logarithmic depth d, we obtain a lower bound of Ω(dn1+1/d) on its size.
Shai Halevi, Tzipora Halevi, et al.
CCS 2017
Victor Shoup, Rosario Gennaro
Journal of Cryptology
Ronald Cramer, Victor Shoup
ACM TISSEC
Patrik Bichsel, Jan Camenisch, et al.
CCS 2009