Table of Contents
Fetching ...

SMT-Boosted Security Types for Low-Level MPC

Christian Skalka, Joseph P. Near

TL;DR

This work addresses automated verification of correctness and security for low-level MPC protocols by marrying SMT-based constraint solving over finite fields with a robust type-theoretic framework. It introduces confidentiality and integrity type systems, augmented by a dependent Hoare-logic layer in Prelude/Overture, to enable compositional and scalable verification across arbitrary prime fields $\mathbb{F}_p$. The approach provides soundness guarantees for both passive and malicious security (with hyperproperties such as noninterference modulo output and integrity under adversarial behavior) and supports constraint-based reasoning via Satisfiability Modulo Finite Fields (SMFF). Extended examples (GMW, BD OZ, YGC) demonstrate practical applicability, and performance results show SMT-based verification remains efficient (e.g., milliseconds for 3-party addition in large fields on typical hardware). Overall, the framework offers automated, scalable, field-general verification for low-level MPC protocols, enabling safer composition and deployment of privacy-preserving computations.

Abstract

Secure Multi-Party Computation (MPC) is an important enabling technology for data privacy in modern distributed applications. We develop a new type theory to automatically enforce correctness,confidentiality, and integrity properties of protocols written in the \emph{Prelude/Overture} language framework. Judgements in the type theory are predicated on SMT verifications in a theory of finite fields, which supports precise and efficient analysis. Our approach is automated, compositional, scalable, and generalizes to arbitrary prime fields for data and key sizes.

SMT-Boosted Security Types for Low-Level MPC

TL;DR

This work addresses automated verification of correctness and security for low-level MPC protocols by marrying SMT-based constraint solving over finite fields with a robust type-theoretic framework. It introduces confidentiality and integrity type systems, augmented by a dependent Hoare-logic layer in Prelude/Overture, to enable compositional and scalable verification across arbitrary prime fields . The approach provides soundness guarantees for both passive and malicious security (with hyperproperties such as noninterference modulo output and integrity under adversarial behavior) and supports constraint-based reasoning via Satisfiability Modulo Finite Fields (SMFF). Extended examples (GMW, BD OZ, YGC) demonstrate practical applicability, and performance results show SMT-based verification remains efficient (e.g., milliseconds for 3-party addition in large fields on typical hardware). Overall, the framework offers automated, scalable, field-general verification for low-level MPC protocols, enabling safer composition and deployment of privacy-preserving computations.

Abstract

Secure Multi-Party Computation (MPC) is an important enabling technology for data privacy in modern distributed applications. We develop a new type theory to automatically enforce correctness,confidentiality, and integrity properties of protocols written in the \emph{Prelude/Overture} language framework. Judgements in the type theory are predicated on SMT verifications in a theory of finite fields, which supports precise and efficient analysis. Our approach is automated, compositional, scalable, and generalizes to arbitrary prime fields for data and key sizes.

Paper Structure

This paper contains 38 sections, 13 theorems, 45 equations, 19 figures.

Key Result

theorem thmcountertheorem

$\mathit{E}_1 \models \mathit{E}_2$ iff $\mathit{E}_1 \wedge \neg\mathit{E}_2$ is not satisfiable.

Figures (19)

  • Figure 1: Comparison of systems for verification of MPC security in PLs. * indicates limited support for automation.
  • Figure 2: Syntax of $\mathit{Overture}$
  • Figure 3: Semantics of $\mathit{Overture}$ expressions (T) and programs (B).
  • Figure 4: Adversarial semantics of $\mathit{Overture}$.
  • Figure 5: Interpretation of $\mathit{Overture}$ expressions (T) and programs (B) as constraints
  • ...and 14 more figures

Theorems & Definitions (43)

  • definition thmcounterdefinition
  • definition thmcounterdefinition
  • definition thmcounterdefinition
  • definition thmcounterdefinition
  • definition thmcounterdefinition
  • definition thmcounterdefinition
  • definition thmcounterdefinition
  • definition thmcounterdefinition
  • definition thmcounterdefinition
  • definition thmcounterdefinition
  • ...and 33 more