microsoft/SEAL
SEAL
SEAL ist eine Bibliothek für homomorphe Verschlüsselung und ein C++-Kryptografie-Framework, das mathematische Operationen auf verschlüsselten Daten ermöglicht, ohne eine Entschlüsselung zu erfordern. Es bietet ein Toolset zur Durchführung von Additionen und Multiplikationen auf verschlüsselten Ganzzahlen und komplexen Zahlen, um privatsphärenschonende Berechnungen zu unterstützen.
Das Framework implementiert die BFV- und CKKS-Schemata, was sowohl modulare Arithmetik auf verschlüsselten Ganzzahlen als auch approximative Arithmetik auf Fließkommazahlen mit fester Präzision ermöglicht. Es enthält spezialisierte Wrapper zur Integration dieser kryptografischen Workflows in .NET-Umgebungen und unterstützt plattformübergreifendes Deployment für Android, iOS und WebAssembly.
Die Bibliothek verwaltet Rechenpräzision und Sicherheit durch Ciphertext-Moduli-Switching, Rauschkontrolle und die Validierung kryptografischer Parameter gegen Sicherheitsstandards. Sie bietet zudem Dienstprogramme für Ciphertext-Kompression und die Erstellung verschlüsselter Speicherarchitekturen, bei denen der Dienstanbieter nicht auf die Entschlüsselungsschlüssel zugreifen kann.
Features
- Homomorphic Encryption - Implements homomorphic encryption schemes (BFV, CKKS) to allow computation on encrypted data.
- Privacy-Preserving Computation Frameworks - Provides a framework where data stays encrypted throughout its lifecycle and service providers never access keys.
- Encrypted - Implements the CKKS scheme to enable fixed-precision floating-point operations on ciphertexts.
- Secure - Performs calculations on encrypted floating-point numbers with controlled precision for sensitive data.
- C++ Cryptography Frameworks - Provides a high-performance C++ codebase for secure computation and ciphertext manipulation.
- Ciphertext Noise Management - Uses modulus-switching to reduce the scale of ciphertext coefficients and maintain computational precision.
- Homomorphic Ciphertext Execution - Performs mathematical operations directly on ciphertexts to maintain privacy during processing.
- Moduli Switching - Implements ciphertext moduli switching to reduce noise growth and maintain precision during complex homomorphic computations.
- Encrypted Arithmetic - Executes additions and multiplications on encrypted integers and complex numbers without decryption.
- Approximate - Supports calculations on floating-point numbers with controlled precision via the CKKS scheme.
- Encrypted Integer Computation - Implements modular arithmetic specifically for encrypted integers using the BFV scheme.
- Homomorphic Scheme Implementations - Provides a specialized toolkit for computing on encrypted data using the BFV and CKKS schemes.
- End-to-End Encryption - Provides a framework where data remains encrypted throughout its entire computational lifecycle.
- C-API Wrappers - Provides object-oriented wrappers to expose C++ cryptographic primitives to .NET environments.
- Cross-Platform Compilers - Supports compiling the library for Android, iOS, WebAssembly, and .NET Standard.
- Cryptographic Wrappers - Provides specialized .NET language wrappers to integrate homomorphic encryption workflows into managed environments.
- Residue Number System Implementations - Implements RNS-based polynomial arithmetic to perform modular operations using standard machine-word integers.
- Cross-Platform Encryption Utilities - Provides a consistent encryption toolset deployable across multiple operating systems and runtimes.
- Cryptographic Parameter Validations - Ensures encryption keys and ciphertexts are compatible by matching them against shared security parameters.
- Parameter Validation - Provides mechanisms to check the correctness of plaintexts and keys against a specific context to ensure compatibility.
- Encrypted Storage - Enables the creation of storage architectures where the service provider cannot access data content due to user-held keys.
- Encrypted Storage Solutions - Enables the creation of storage systems where the provider cannot access the content.
- Strength Validations - Includes mechanisms to validate encryption parameters against industry security standards to ensure minimum strength requirements.
