Security check in malicious security protocol about spu

[rivertalk]

Hi @DuanYuFi , thanks for the question

Putting them into the end of kernels like MulAA is proper? Or setting a batch size to check them in batches?

I think it depends.

The MulAA operator only responsible for multiply two arithmetic shares, it does not have any security related semantic, the security semantic is guaranteed by the protocol itself.

My suggestion is, first ignore the perf problem, implement a correct malicious MulAA first, then when tuning performance, the protocol can decide to record some batch information as a State and use it do multi-batch verification.

[DuanYuFi]

I see, you mean now I first focus on the semi-honest operations and later decide where to verify?

[rivertalk]

Yes, and of course you can also do verification at each MulAA. :P

[DuanYuFi]

I think verifying at each MulAA will increase the communication costs. I'll just store the multiplication triples in State and verify in somewhere else. Thanks for your help :)