Secret Sharing for Secure and Private Information Retrieval: A Construction Using Algebraic Geometry Codes
Okko Makkonen, David Karpuk, Camilla Hollanti
TL;DR
This work reframes secure and private information retrieval as a problem solvable via homomorphic secret sharing built from algebraic-geometry codes. By recasting CSA codes on the projective line as AG codes and extending to hyperelliptic curves, the authors unlock higher PIR rates for fixed field sizes through genus-based increases in rational points. The construction provides flexible tradeoffs among field size, subpacketization, and server counts while maintaining $X$-security and $T$-privacy, and it highlights potential advantages over genus-zero schemes in certain parameter regimes. The results open avenues to apply AG codes to PIR and related distributed computations, with implications for broader interference alignment and secure computation tasks.
Abstract
Private information retrieval (PIR) considers the problem of retrieving a data item from a database or distributed storage system without disclosing any information about which data item was retrieved. Secure PIR complements this problem by further requiring the contents of the data to be kept secure. Privacy and security can be achieved by adding suitable noise to the queries and data using methods from secret sharing. In this paper, a new framework for homomorphic secret sharing in secure and private information retrieval from colluding servers is proposed, generalizing the original cross-subspace alignment (CSA) codes proposed by Jia, Sun, and Jafar. We utilize this framework to give a secure PIR construction using algebraic geometry codes over hyperelliptic curves of arbitrary genus. It is shown that the proposed scheme offers interesting tradeoffs between the field size, file size, number of colluding servers, and the total number of servers. When the field size is fixed, this translates in some cases to higher retrieval rates than those of the original scheme. In addition, the new schemes exist also for some parameters where the original ones do not.
