Overview
ISO/IEC 4922-2:2024 - Information security - Secure multiparty computation - Part 2: Mechanisms based on secret sharing - defines standardized processes and mechanisms for implementing secure multiparty computation (MPC) using secret sharing techniques. The document builds on the secret sharing foundations in ISO/IEC 19592-2 and specifies practical building blocks (with parameters and properties) to enable confidential distributed computation and secure function evaluation.
Key topics and technical requirements
- Secret sharing schemes: Uses schemes referenced in ISO/IEC 19592-2, including Shamir secret sharing and replicated additive secret sharing as primary primitives.
- Arithmetic building blocks: Formalized procedures for addition, subtraction, and multiplication by a constant, with variants for each secret sharing scheme.
- Shared random number generation: Both information-theoretically secure and computationally secure shared randomness are specified, including seed-sharing phases and scheme-specific generation methods.
- Multiplication protocols: Standardized multiplication mechanisms are included, e.g. GRR-multiplication, DN-multiplication (for Shamir), CHIKP-multiplication (for replicated additive schemes), and Beaver-multiplication - each described with parameters, protocols, dot-product variants, and security properties.
- Secure function evaluation (SFE): Guidance on composing the above mechanisms to perform secure function evaluation over shared inputs and produce shared outputs that can be reconstructed per policy.
- Normative artifacts: Parameters, protocol steps, object identifiers, numerical examples and security considerations are provided to support interoperability and implementation.
Practical applications
ISO/IEC 4922-2:2024 is targeted at real-world privacy-preserving scenarios where confidential data processing is required:
- Collaborative data analytics and privacy-preserving machine learning where parties compute models or statistics without revealing raw data.
- Secure auctions and bidding where each bid remains secret while winners are determined.
- Distributed cryptographic operations and key-holding schemes that maintain secrecy of private keys during computation.
- Outsourced computation and multi-stakeholder workflows that require verifiable confidentiality and interoperable protocols.
Who should use this standard
- Security architects, cryptographic protocol designers, and MPC implementers.
- Software vendors and cloud providers offering privacy-preserving services.
- Researchers, auditors, and compliance teams needing interoperable, standards-based MPC components.
- Standardization bodies and integrators building secure distributed applications.
Related standards
ISO/IEC 4922-2:2024 provides the concrete, interoperable building blocks for implementing secure multiparty computation based on secret sharing, enabling confidential data processing across industries.