Skip to Main content Skip to Navigation
Conference papers

Stream Ciphers: A Practical Solution for Efficient Homomorphic-Ciphertext Compression

Abstract : In typical applications of homomorphic encryption, the rst step consists for Alice to encrypt some plaintext m under Bob's public key pk and to send the ciphertext c = HEpk(m) to some third-party evaluator Charlie. This paper speci cally considers that rst step, i.e. the problem of transmitting c as eciently as possible from Alice to Charlie. As previously noted, a form of compression is achieved using hybrid encryption. Given a symmetric encryption scheme E, Alice picks a random key k and sends a much smaller ciphertext c0 = (HEpk(k); Ek(m)) that Charlie decompresses homomorphically into the original c using a decryption circuit C(E^{-1}). In this paper, we revisit that paradigm in light of its concrete implementation constraints; in particular E is chosen to be an additive IV-based stream cipher. We investigate the performances o ered in this context by Trivium, which belongs to the eSTREAM portfolio, and we also propose a variant with 128-bit security: Kreyvium. We show that Trivium, whose security has been rmly established for over a decade, and the new variant Kreyvium have an excellent performance.
Document type :
Conference papers
Complete list of metadatas
Contributor : Anne Canteaut <>
Submitted on : Wednesday, November 23, 2016 - 10:47:31 AM
Last modification on : Wednesday, June 24, 2020 - 4:19:29 PM
Long-term archiving on: : Tuesday, March 21, 2017 - 8:33:49 AM


Files produced by the author(s)


  • HAL Id : hal-01401328, version 1


Anne Canteaut, Sergiu Carpov, Caroline Fontaine, Tancrède Lepoint, María Naya-Plasencia, et al.. Stream Ciphers: A Practical Solution for Efficient Homomorphic-Ciphertext Compression. CryptoAction Symposium 2016, Apr 2016, Budapest, Hungary. ⟨hal-01401328⟩



Record views


Files downloads