Multinode computation

• Functionality for multiple nodes per party
• Functionality to use disk space for high-level data structures
• True division is always fixed-point division (similar to Python 3)
• Compiler option to optimize for specific protocol
• Cleartext permutation
• Faster compilation and lower bytecode size
• Functionality to output secret shares from high-level code
• Run-time command-line arguments accessible from high-level code
• Client connection setup specifies cleartext domain
• Compile-time parameter for connection timeout
• Prevent connections from timing out (@ParallelogramPal)
• More ECDSA examples
• More flexible multiplication instruction
• Dot product instruction supports several operations at once
• Example-based virtual machine explanation

Maintenance

• Path Oblivious Heap (@tskovlund)
• Adjust batch and bucket size to program
• Direct communication available in more protocols
• Option for seed in fake preprocessing (@strieflin)
• Lower memory usage due to improved register allocation
• New instructions to speed up CISC compilation
• Protocol implementation example
• Fixed security bug: missing MAC checks in multi-threaded programs
• Fixed security bug: race condition in MAC check
• Fixed security bug: missing shuffling check in PS mod 2^k and Brain
• Fixed security bug: insufficient drowning in pairwise protocols

Maintenance

• More extensive benchmarking outputs
• Replace MPIR by GMP
• Secure reading of edaBits from files
• Semi-honest client communication
• Back-propagation for average pooling
• Parallelized convolution
• Probabilistic truncation as in ABY3
• More balanced communication in Shamir secret sharing
• Avoid unnecessary communication in Dealer protocol
• Linear solver using Cholesky decomposition
• Accept .py files for compilation
• Fixed security bug: proper accounting for random elements

More accessible machine learning functionality

• Easier-to-use machine learning interface
• Integrated compilation-execution facility
• Import/export sequential models and parameters from/to PyTorch
• Binary-format input files
• Less aggressive round optimization for faster compilation by default
• Multithreading with client interface
• Functionality to protect order of specific memory accesses
• Oblivious transfer works again on older (pre-2011) x86 CPUs
• clang is used by default

Decision tree training

• Decision tree training
• Optimized oblivious shuffle in Rep3
• Optimized daBit generation in Rep3 and semi-honest HE-based 2PC
• Optimized element-vector AND in SemiBin
• Optimized input protocol in Shamir-based protocols
• Square-root ORAM (@Quitlox)
• Improved ORAM in binary circuits
• UTF-8 outputs

SoftSpokenOT

• Use SoftSpokenOT to avoid unclear security of KOS OT extension candidate
• Fix security bug in MAC check when using multithreading
• Fix security bug to prevent selective failure attack by checking earlier
• Fix security bug in Mama: insufficient sacrifice.
• Inverse permutation (@Quitlox)
• Easier direct compilation (@eriktaubeneck)
• Generally allow element-vector operations
• Increase maximum register size to 2^54
• Client example in Python
• Uniform base OTs across platforms
• Multithreaded base OT computation
• Faster random bit generation in two-player Semi(2k)

Secure shuffling

• Secure shuffling
• O(n log n) radix sorting
• Documented BGV encryption interface
• Optimized matrix multiplication in dealer protocol
• Fixed security bug in homomorphic encryption parameter generation
• Fixed security bug in Temi matrix multiplication

Protocol in dealer model

• Protocol in dealer model
• Command-line option for security parameter
• Fixed security bug in SPDZ2k (see Section 3.4 of the updated paper)
• Ability to run high-level (Python) code from C++
• More memory capacity due to 64-bit addressing
• Homomorphic encryption for more fields of characteristic two
• Docker container

Semi-honest computation based on threshold semi-homomorphic encryption

• Semi-honest computation based on threshold semi-homomorphic encryption
• Batch normalization backward propagation
• AlexNet for CIFAR-10
• Specific private output protocols
• Semi-honest additive secret sharing without communication
• Sending of personal values
• Allow overwriting of persistence files
• Protocol signature in persistence files

Maintenance

• Disassembler
• Run-time parameter for probabilistic truncation error
• Probabilistic truncation for some protocols computing modulo a prime
• Simplified C++ interface
• Comparison as in ACCO
• More general scalar-vector multiplication
• Complete memory support for clear bits
• Extended clear bit functionality with Yao's garbled circuits
• Allow preprocessing information to be supplied via named pipes
• In-place operations for containers