On the Efficiency of FHE-Based Private Queries
Private query processing is a very attractive problem in the fields of both cryptography and databases. In this work, we restrict our attention to the efficiency aspect of the problem, particularly for basic queries with conditions on various combinations of <italic>equality</italic>. Without loss of generality, these conditions can be regarded as a Boolean function, and this Boolean function can then be evaluated at ciphertexts produced by a fully homomorphic encryption (FHE) scheme <italic>without decryption</italic>. From the efficiency perspective, the remaining concern is to efficiently test the equality function without severely downgrading the performance of FHE-based querying solutions. To this end, we first analyze the multiplicative depth required for an equality test algorithm with respect to the plaintext space inhabited by general FHE schemes. The primary reason for this approach is that given an equality test algorithm, its efficiency is measured in terms of the multiplicative depth required to construct its arithmetic circuit expression. Indeed, the implemented equality test algorithm dominates the entire performance of FHE-based query solutions, apart from the performance of the underlying FHE scheme. Then, we measure the multiplicative depth considering an FHE scheme that takes an extension field as its plaintext space and that supports the depth-free evaluation of Frobenius maps. According to our analysis, when the plaintext space of an FHE scheme is a field of characteristic <inline-formula><tex-math notation="LaTeX">$2$</tex-math><alternatives> <inline-graphic xlink:href="lee-ieq1-2568182.gif"/></alternatives></inline-formula>, the equality test algorithm for <inline-formula><tex-math notation="LaTeX">$\ell$</tex-math><alternatives> <inline-graphic xlink:href="lee-ieq2-2568182.gif"/></alternatives></inline-formula>-bit messages requires the lowest multiplicative depth <inline-formula><tex-math notation="LaTeX">$\lceil \log {\ell}\rceil$</tex-math><alternatives> <inline-graphic xlink:href="lee-ieq3-2568182.gif"/></alternatives></inline-formula>. Furthermore, we design a set of private query protocols for conjunctive, disjunctive, and threshold queries based on the equality test algorithm. Similarly, applying the equality test algorithm over <inline-formula><tex-math notation="LaTeX">$\mathbb {F}_{2^{\ell}}$</tex-math><alternatives><inline-graphic xlink:href="lee-ieq4-2568182.gif"/></alternatives> </inline-formula>, our querying protocols require the minimum depths. More specifically, a multiplicative depth of <inline-formula><tex-math notation="LaTeX">$\lceil \log {\ell}\rceil +\lceil \log {(1+\rho)}\rceil$</tex-math> <alternatives><inline-graphic xlink:href="lee-ieq5-2568182.gif"/></alternatives></inline-formula> is required for conjunctive and disjunctive queries, and a depth of <inline-formula><tex-math notation="LaTeX">$\lceil \log {\ell}\rceil +2\lceil \log {(1+\rho)}\rceil$</tex-math><alternatives> <inline-graphic xlink:href="lee-ieq6-2568182.gif"/></alternatives></inline-formula> is required for threshold conjunctive queries, when their query conditions have <inline-formula><tex-math notation="LaTeX">$\rho$</tex-math> <alternatives><inline-graphic xlink:href="lee-ieq7-2568182.gif"/></alternatives></inline-formula> attributes to be compared. Finally, we provide a communication-efficient version of our solutions, though with additional computational costs, when an upper bound <inline-formula><tex-math notation="LaTeX">$\delta$</tex-math><alternatives> <inline-graphic xlink:href="lee-ieq8-2568182.gif"/></alternatives></inline-formula> (<inline-formula> <tex-math notation="LaTeX">$0\leq \delta \leq 1$</tex-math><alternatives> <inline-graphic xlink:href="lee-ieq9-2568182.gif"/></alternatives></inline-formula>) on the selectivity of a database is given. Consequently, we reduce the communication cost from <inline-formula><tex-math notation="LaTeX">$n$</tex-math> <alternatives><inline-graphic xlink:href="lee-ieq10-2568182.gif"/></alternatives></inline-formula> to approximately <inline-formula><tex-math notation="LaTeX">$\lfloor \delta n\rfloor$</tex-math><alternatives> <inline-graphic xlink:href="lee-ieq11-2568182.gif"/></alternatives></inline-formula> ciphertexts with <inline-formula> <tex-math notation="LaTeX">$\lceil \log {n}\rceil$</tex-math><alternatives> <inline-graphic xlink:href="lee-ieq12-2568182.gif"/></alternatives></inline-formula> additional depth when the database consists of <inline-formula><tex-math notation="LaTeX">$n$</tex-math><alternatives> <inline-graphic xlink:href="lee-ieq13-2568182.gif"/></alternatives></inline-formula> tuples.