Hacker News new | ask | show | jobs
by ReidZB 4696 days ago
Honestly, I think the potential advent of efficient fully-homomorphic encryption is potentially one of the largest effects we could ever see on privacy-related computing. The possibilities are absolutely staggering. Imagine, for example, a search engine that returns useful results but does not know what the user is searching for. And so on; the possibilities are well-covered in the literature.

As of right now, the current-day state-of-the-art fully-homomorphic schemes impose roughly a billion-factor overhead on operations, but this is quickly decreasing (in the past 4 years, we've already knocked off three orders of magnitude). But I am personally convinced that an efficient scheme would likely revolutionize privacy in computing. Exciting stuff, especially with recent events.

Unfortunately, I don't expect an efficient scheme to be widely-used for at least 15-25 years. For one, even if a super-efficient FHE scheme was published tomorrow, it'd probably take at least 6-10 years of powerful, sustained cryptanalysis for the community to trust it. Add the time to discover such a scheme (if even possible...) and you have quite a while. But still, the potential is amazing.

3 comments

> For one, even if a super-efficient FHE scheme was published tomorrow, it'd probably take at least 6-10 years of powerful, sustained cryptanalysis for the community to trust it.

Even so, for the use cases suggested (e.g. search engines), it'd still be a vast improvement on what we currently have – even if it later turns out to be flawed.

Not to mention cloud computing platforms that have no idea what computation their clients are performing.
By fully-homomorphic do you mean Turing-complete?
No, by fully homomorphic he means the usual meaning of this phrase: http://en.wikipedia.org/wiki/Homomorphic_encryption#Fully_ho...
I suppose it depends on which you consider more fundamental to the definition. The reason this particular ring and set of operations is interesting is because it implies being able to compute any Turing-computable function of the data. Hence Gentry's high-level overview paper was entitled "Computing arbitrary functions of encrypted data" [1].

[1] http://ece.gmu.edu/coursewebpages/ECE/ECE646/F10/project/F10...

It means reading and writing into an encrypted storage without decrypting it. Is that right?