What are all the vulnerabilities in homomorphic encryption ?
Best insight from top research papers
Homomorphic encryption has several vulnerabilities that have been identified in the literature. Two schemes based on the Approximate GCD problem were found to be vulnerable to the Orthogonal Lattice attack . Fully homomorphic encryption, despite its promise, has well-known problems such as CCA security and circuit privacy . The security problems of fully homomorphic encryption in real applications are more severe than imagined . The homomorphic encryption scheme proposed by Zhou and Wornell was found to be susceptible to three attacks, including secret plaintext message recovery and chosen ciphertext key recovery . While homomorphic encryption addresses the vulnerability of decrypted data during processing, it still has security concerns that need to be addressed . Overall, the vulnerabilities in homomorphic encryption highlight the need for further research and development to ensure its practical and secure implementation.
Answers from top 4 papers
More filters
| Papers (4) | Insight |
|---|---|
17 Citations | The paper mentions three vulnerabilities in the homomorphic encryption scheme proposed by Zhou and Wornell (20): 1. Recovery of a secret plaintext message broadcasted to multiple users. 2. Chosen ciphertext key recovery attack. 3. Related chosen plaintext decryption attack. |
Open access•Posted Content | The paper discusses the security pitfalls of fully homomorphic encryption from the perspective of implementation and practical application, but it does not explicitly list all the vulnerabilities of homomorphic encryption. |
26 Jul 2019 | The paper does not explicitly mention all the vulnerabilities in homomorphic encryption. It only discusses the vulnerability of two specific schemes to the Orthogonal Lattice attack. |
100 Citations | The paper does not explicitly mention the vulnerabilities in homomorphic encryption. |
Related Questions
What are the vulnerabilities of websites?4 answersWebsites have vulnerabilities that can be exploited by hackers, leading to security breaches and unauthorized access to sensitive data. These vulnerabilities include broken access control, injection flaws, security misconfiguration, and software and data integrity failures. The failure to validate or sanitize form inputs, improperly configured web servers, and application design flaws are common causes of these vulnerabilities. Research shows that nearly half of all websites have high-risk security vulnerabilities, many of which are simple to fix. Inadequate IT security can result in compromised integrity, confidentiality, and the release of sensitive data to unauthorized individuals. Webmasters and heads of IT sections need to be knowledgeable about these vulnerabilities in order to anticipate and mitigate risks. Vulnerability testing and penetration testing tools like OWASP ZAP and Armitage can be used to identify and address these vulnerabilities.
What are the non-technical causes of security vulnerabilities?5 answersNon-technical causes of security vulnerabilities include human and organizational factors, communication failures, and software vulnerabilities. Human and organizational factors play a significant role in the development of computer and information security vulnerabilities, with factors such as external influences, human error, management, organization, performance and resource management, policy issues, technology, and training all contributing to vulnerabilities. Communication failures, including issues with situation awareness, decision-making, communication and teamwork, and leadership, are also identified as non-technical causes of vulnerabilities in surgical training. Additionally, software vulnerabilities are a common cause of security incidents, often resulting from repeated mistakes made by software developers. Overall, these non-technical causes highlight the importance of considering human and organizational factors, communication skills, and software development practices in addressing security vulnerabilities.
What are the most common types of vulnerabilities?5 answersThe most common types of vulnerabilities in web applications are cross-site scripting (XSS), brute force, SQL injection, and cross-site request forgery (CSRF) attacks. These vulnerabilities can be used by cybercriminals to access private data without authorization. In addition to web applications, vulnerabilities in control and automation systems used in critical infrastructures are also prevalent. These vulnerabilities include failures to define security sensitivity, inadequate security perimeter, lack of comprehensive security, and unrestricted access to data and services. Another common vulnerability is injection vulnerabilities, which are a serious security issue for web applications. Existing static analysis approaches can detect potential vulnerabilities but generate many false warnings. To address this, security slicing techniques have been proposed to reduce the amount of irrelevant information in program slices, resulting in significant reduction in auditing costs.
What are the potential risks and vulnerabilities in the supply chain ?5 answersSupply chain risks and vulnerabilities can arise from various factors. Environmental risks, such as chemical spills, inefficient resource consumption, and greenhouse gas emissions, are significant concerns for companies in their supply chains. Business risks, customer risks, supplier risks, transportation risks, environmental risks, and security risks are identified as potential risk groups in supply chains. Globalization and the complexity of supply chain networks have introduced vulnerabilities and uncertainties, posing challenges to the logistics industry. In crisis-prone regions, companies face additional challenges in managing supply chain logistics and mitigating constraints. Supply chain integration, while enhancing competitiveness, also increases vulnerability to disruptions caused by disease outbreaks, natural disasters, and other factors. These risks and vulnerabilities highlight the need for effective supply chain risk management strategies to minimize the impact and ensure the smooth flow of goods and services.
What are the vulnerabilities of Malware?3 answersMalware vulnerabilities include the ability to exploit system vulnerabilities, cause damage to the system, perform illegitimate actions, and violate the confidentiality and integrity of network resources. The diversity of malware is continuously increasing, posing a challenge for effective detection. Traditional approaches to malware detection are not robust in detecting previously unseen malware, making them susceptible to circumvention. Malware can also exploit vulnerabilities in the detection system itself. Malware tarpits, a defense mechanism, aim to slow down or stop malware by exploiting vulnerabilities in network operations used by malware. These tarpits can block malware forever or for a significant amount of time, hindering its spreading and infiltrating monetization techniques.
What are some open research problems in the area of homomorphic encryption for federated learning?5 answersOpen research problems in the area of homomorphic encryption for federated learning include addressing the performance loss caused by encryption methods and exploring the use of multi-party computations (MPC) as an alternative encryption technique. Pejic et al.and Zeng et al.both discuss the performance loss associated with different types of homomorphic encryption, such as Partial Homomorphic Encryption (PHE), Somewhat Homomorphic Encryption (SHE), and Fully Homomorphic Encryption (FHE). They find that more complex encryption methods, such as FHE, result in longer training times compared to the base case of federated learning without encryption. Additionally, Pejic et al.mention the need to investigate the performance loss of MPC, which has homomorphic properties. These research problems highlight the trade-off between privacy preservation and computational efficiency in federated learning with homomorphic encryption.