microsoft/SEAL
3,985 stele·772 fork-uri·C++·MIT·1 vizualizarewww.microsoft.com/en-us/research/group/cryptography-research↗
SEAL
SEAL este o bibliotecă de criptare homomorfă și un framework de criptografie C++ care permite operațiuni matematice pe date criptate fără a necesita decriptare. Acesta oferă un set de instrumente pentru efectuarea adunărilor și înmulțirilor pe numere întregi și complexe criptate, pentru a susține calculul care păstrează confidențialitatea.
Framework-ul implementează schemele BFV și CKKS, permițând atât aritmetica modulară pe numere întregi criptate, cât și aritmetica aproximativă pe numere în virgulă mobilă cu precizie fixă. Include wrappere specializate pentru a integra aceste fluxuri de lucru criptografice în medii .NET și suportă implementarea multi-platformă pentru Android, iOS și WebAssembly.
Biblioteca gestionează precizia computațională și securitatea prin comutarea moduli-ului ciphertext, controlul zgomotului și validarea parametrilor criptografici conform standardelor de securitate. De asemenea, oferă utilitare pentru compresia ciphertext-ului și crearea de arhitecturi de stocare criptată unde furnizorul de servicii nu poate accesa cheile de decriptare.
Features
- Homomorphic Encryption - Implements homomorphic encryption schemes (BFV, CKKS) to allow computation on encrypted data.
- Privacy-Preserving Computation Frameworks - Provides a framework where data stays encrypted throughout its lifecycle and service providers never access keys.
- Encrypted - Implements the CKKS scheme to enable fixed-precision floating-point operations on ciphertexts.
- Secure - Performs calculations on encrypted floating-point numbers with controlled precision for sensitive data.
- C++ Cryptography Frameworks - Provides a high-performance C++ codebase for secure computation and ciphertext manipulation.
- Ciphertext Noise Management - Uses modulus-switching to reduce the scale of ciphertext coefficients and maintain computational precision.
- Homomorphic Ciphertext Execution - Performs mathematical operations directly on ciphertexts to maintain privacy during processing.
- Moduli Switching - Implements ciphertext moduli switching to reduce noise growth and maintain precision during complex homomorphic computations.
- Encrypted Arithmetic - Executes additions and multiplications on encrypted integers and complex numbers without decryption.
- Approximate - Supports calculations on floating-point numbers with controlled precision via the CKKS scheme.
- Encrypted Integer Computation - Implements modular arithmetic specifically for encrypted integers using the BFV scheme.
- Homomorphic Scheme Implementations - Provides a specialized toolkit for computing on encrypted data using the BFV and CKKS schemes.
- End-to-End Encryption - Provides a framework where data remains encrypted throughout its entire computational lifecycle.
- C-API Wrappers - Provides object-oriented wrappers to expose C++ cryptographic primitives to .NET environments.
- Cross-Platform Compilers - Supports compiling the library for Android, iOS, WebAssembly, and .NET Standard.
- Cryptographic Wrappers - Provides specialized .NET language wrappers to integrate homomorphic encryption workflows into managed environments.
- Residue Number System Implementations - Implements RNS-based polynomial arithmetic to perform modular operations using standard machine-word integers.
- Cross-Platform Encryption Utilities - Provides a consistent encryption toolset deployable across multiple operating systems and runtimes.
- Cryptographic Parameter Validations - Ensures encryption keys and ciphertexts are compatible by matching them against shared security parameters.
- Parameter Validation - Provides mechanisms to check the correctness of plaintexts and keys against a specific context to ensure compatibility.
- Encrypted Storage - Enables the creation of storage architectures where the service provider cannot access data content due to user-held keys.
- Encrypted Storage Solutions - Enables the creation of storage systems where the provider cannot access the content.
- Strength Validations - Includes mechanisms to validate encryption parameters against industry security standards to ensure minimum strength requirements.
