Pular para o conteúdo
Volume 1

The Privacy Primitives

Mastering the Mathematical Logic of Hidden Computation

In a world of total surveillance, the math of invisibility is your only true shield.

Strategic Objectives

• Master the logic behind zero-knowledge proofs and secure data validation.

• Understand how to process sensitive information without ever seeing the raw data.

• Learn the mechanics of secret sharing and distributed digital trust.

• Explore the future of privacy-preserving technologies in blockchain and AI.

The Core Challenge

General encryption protects data in transit, but it fails to protect privacy during active computation and collaborative processing.

01

The Essence of Privacy Primitives

Distinguishing Hiding from Encryption
You will begin by establishing a clear distinction between general security and specific privacy-enhancing technologies. This chapter helps you understand the shift from securing a perimeter to securing the data's logic itself, setting the stage for your technical journey.
Beyond the Fortress: Security Versus Privacy
Reframing protection as data logic rather than perimeter defense

This section introduces the conceptual gap between traditional security models and privacy-centric computation. It explores why locking systems and encrypting channels do not inherently guarantee informational privacy and sets the intellectual foundation for viewing privacy as a property of data operations.

Privacy-Enhancing Technologies as a Paradigm
Technologies that reshape data utility while concealing identity

Here the narrative shifts to the technological ecosystem that enables privacy without forfeiting computation. The section frames privacy-enhancing technologies as systems that allow data to remain useful while stripping or transforming identifiers and sensitive linkages.

Hiding Is Not Encryption
Separating cryptographic secrecy from informational invisibility

This section draws a precise conceptual boundary: encryption protects data in transit or storage but does not guarantee that the data's structure or correlations are concealed once decrypted. Hiding, by contrast, modifies or abstracts data so that sensitive attributes remain computationally inaccessible even during processing.

02

Information-Theoretic Security

The Mathematical Limits of Secrecy
You need to understand the gold standard of privacy: systems that cannot be broken even with infinite computing power. This chapter introduces you to the fundamental bounds of what can truly be hidden from an adversary.
Beyond Computation: Defining Absolute Secrecy
Security That Survives Infinite Adversaries

This section establishes the conceptual leap from computational security to information-theoretic security. It clarifies what it means for a system to remain secure even against an adversary with unlimited computational resources. The reader is introduced to secrecy as a probabilistic invariant: a guarantee that observing ciphertext does not change the adversary’s knowledge about the plaintext. This reframes privacy not as hardness, but as impossibility.

Entropy as the Currency of Uncertainty
Measuring Ignorance with Mathematical Precision

This section introduces entropy as the foundational metric of secrecy. It explains Shannon entropy as a measure of uncertainty and connects it to the intuitive notion of hidden information. The reader learns how conditional entropy captures what remains unknown after observation, forming the quantitative backbone of secrecy guarantees.

Perfect Secrecy and the One-Time Pad
When Ciphertext Reveals Nothing

Here the chapter explores perfect secrecy through the canonical example of the one-time pad. The section derives the formal condition for perfect secrecy and explains why key length must match message length. Rather than presenting this as historical trivia, it is framed as a proof of a boundary: absolute secrecy demands absolute randomness and equal key entropy.

03

Commitment Schemes

Digital Envelopes and Hidden Pledges
You will learn how to 'commit' to a value without revealing it until later. This is the cornerstone of privacy-preserving protocols, allowing you to prove you have a specific piece of information without disclosing its content immediately.
The Problem of Trust Without Disclosure
Why Privacy Needs Delayed Revelation

This section frames the central dilemma: how can one party convince another that a decision, value, or secret has been fixed without revealing it prematurely? Using intuitive metaphors such as sealed envelopes and locked boxes, it introduces commitment as a primitive that separates the act of choosing from the act of revealing. The discussion emphasizes why delayed disclosure is essential in adversarial environments and interactive protocols.

The Two Pillars: Hiding and Binding
The Mathematical Contract Between Secrecy and Integrity

This section rigorously develops the dual security properties that define commitment schemes. Hiding ensures that the committed value remains secret prior to opening, while binding ensures that the committer cannot later change that value. The section explores the tension between these properties and explains how security is defined in adversarial terms, forming a precise logical contract between participants.

How Commitments Are Constructed
Randomness, Hashing, and Structured Hardness

Here the reader is introduced to the constructive logic behind commitments. The section explains how randomness prevents brute-force recovery, how cryptographic hash functions create computational binding, and how number-theoretic assumptions underpin stronger constructions. Rather than cataloging implementations, the focus is on the shared mathematical strategy: combine unpredictability with irreversible structure.

04

Oblivious Transfer

The Foundation of Private Exchange
You will explore the counterintuitive logic where a sender provides multiple pieces of information, but only learns nothing about which piece the receiver actually chose. This is the 'atomic' unit of many complex privacy protocols you will encounter later.
The Paradox of Asymmetric Knowledge
When Giving Reveals Nothing

This section introduces the core intellectual tension of oblivious transfer: a sender prepares multiple secrets, a receiver obtains exactly one, and yet the sender remains perfectly ignorant of which was chosen. The reader is guided through the logical asymmetry that makes this possible, reframing communication not as message delivery but as controlled uncertainty. The emphasis is on why this primitive feels counterintuitive and why that counterintuition is precisely what enables privacy-preserving computation.

From Rabin to 1-out-of-2
The Evolution of Controlled Disclosure

This section traces the conceptual evolution from the earliest probabilistic formulation of oblivious transfer to the structured 1-out-of-2 variant that became foundational in cryptography. Rather than recounting history mechanically, it explains how each formulation sharpened the abstraction: separating correctness from privacy, and randomness from choice. The reader learns why the 1-out-of-2 form became the canonical building block for secure protocols.

Formal Security: Hiding the Choice, Limiting the Access
Two Directions of Privacy

Oblivious transfer enforces dual guarantees: the receiver learns only one secret, and the sender learns nothing about the receiver’s selection. This section formalizes those guarantees in intuitive cryptographic language—privacy against the sender, privacy against the receiver, and the distinction between semi-honest and malicious models. The goal is not technical proof, but conceptual precision about what must remain hidden and why.

05

Shamir's Secret Sharing

Splitting the Burden of Trust
You will discover how to divide a secret into 'shares' so that no single person holds the key, but a quorum can reconstruct it. This chapter teaches you how to eliminate single points of failure in privacy systems.
The Single Point of Failure Problem
Why Concentrated Trust Undermines Privacy

This section frames the core vulnerability that secret sharing solves: the danger of entrusting a single entity with complete knowledge of a secret. It explores how centralized custody creates risks of coercion, compromise, loss, and corruption. The discussion connects this structural weakness to broader privacy systems, showing why distributing trust is a mathematical necessity rather than an organizational preference.

Threshold Logic
From All-or-Nothing to Quorum-Based Access

This section introduces the conceptual leap behind (k, n)-threshold schemes: any k participants can reconstruct the secret, while fewer than k learn nothing. It explains how quorum logic formalizes trust distribution and allows systems to tolerate failure, absence, or betrayal. The emphasis is on the structural guarantees of partial knowledge without partial disclosure.

Polynomials as Vaults
How Interpolation Hides Information in Plain Sight

This section develops the mathematical core of Shamir's construction: representing a secret as the constant term of a polynomial over a finite field and distributing points on that polynomial as shares. It explains why fewer than k points reveal no information and how Lagrange interpolation allows exact reconstruction. The focus is on intuition—why randomness in higher-degree coefficients guarantees secrecy.

06

Zero-Knowledge Proofs

Proving Truth Without Revealing Data
You will dive into one of the most powerful concepts in modern privacy: the ability to convince someone that a statement is true without sharing any supporting evidence other than the fact of its validity.
The Logic of Invisible Evidence
How truth can be demonstrated without disclosure

An exploration of the intellectual shift that zero-knowledge proofs introduced: separating the act of persuasion from the exposure of underlying data. This section frames the idea as a philosophical and computational breakthrough, showing why traditional notions of proof are not the only path to trust.

Mechanisms That Conceal While Convincing
Commitments, challenges, and responses

A conceptual breakdown of the structural components that make zero-knowledge protocols possible. Rather than detailing every formal construction, the focus is on the choreography of information: how commitments act as sealed promises and how challenge-response patterns enable verification without revelation.

Applications in Privacy and Authentication
Where zero-knowledge changes real systems

This section moves from theory to practice, illustrating how zero-knowledge principles underpin modern privacy tools and authentication systems. Examples emphasize what is gained—stronger security and reduced data exposure—rather than technical implementation details.

07

The Fiat-Shamir Heuristic

Removing Interaction from Privacy
You will learn how to transform interactive proofs into non-interactive ones. This is critical for you to understand how privacy primitives are scaled for use in blockchains and asynchronous digital communications.
From Dialogue to Determinism
Why interaction once defined proof—and why it no longer must

Explore the intellectual shift from interactive proof systems to non-interactive constructions. This section frames the problem of verification without conversation, highlighting the historical dependence on exchanges between prover and verifier and the modern demand for autonomous validation.

Hash Functions as Surrogate Interlocutors
Replacing questions with computational unpredictability

Examine how cryptographic hash functions simulate the role of a verifier’s random challenges. By treating hash outputs as unpredictable commitments, proofs can be generated without real-time interaction while preserving security properties.

Soundness Without Conversation
Guaranteeing trust when no verifier is present

Analyze the soundness guarantees that underpin non-interactive proofs. This section explains how transforming interaction into deterministic computation maintains resistance to forgery and preserves confidence in the proof’s validity.

08

Secure Multi-Party Computation

Computing on Private Inputs
You will advance to the logic of collaborative computing, where multiple parties compute a function over their inputs while keeping those inputs private from each other. This enables you to envision a future of private data analysis.
The Problem of Joint Computation Without Exposure
Why collaboration threatens privacy

An exploration of scenarios in which multiple parties wish to compute a shared result but cannot reveal their raw inputs. The section frames the tension between utility and confidentiality and introduces the conceptual stakes of collaborative computation.

Mathematical Foundations of Hidden Inputs
Logic that enables computation on secrets

A focused treatment of the algebra and logical constructs that allow functions to be evaluated without exposing underlying data. This section highlights how abstractions in mathematics create possibilities for privacy-aware algorithms.

Protocols of Collaboration
How parties compute together while staying separate

A narrative examination of protocol design in secure collaborative computing. Readers learn how structured interaction between parties produces results without revealing individual inputs, reshaping assumptions about cooperation.

09

Garbled Circuits

Yao’s Protocol for Private Logic
You will examine the specific mechanics of encrypting a logical circuit so it can be evaluated blindly. This chapter provides you with a concrete implementation strategy for the secure multi-party computation theories you learned previously.
Conceptual model of garbled circuits
Why encryption can hide computation while preserving logic

Introduce the idea that a logical circuit can be transformed into an encrypted structure that reveals only the final output. Explore the mental model of gates as black boxes whose truth tables are obscured, yet still evaluable.

Encryption of gates and wire labels
Assigning secret labels to logical states

Describe how each wire in the circuit receives randomized labels representing logical values. Explain gate garbling as encrypting truth tables so that only holders of valid labels can progress through computation.

Oblivious transfer and key distribution
Sharing secrets without revealing choices

Explain the role of oblivious transfer in delivering the correct wire labels to an evaluator without exposing which labels were chosen. Discuss how this preserves privacy while enabling computation.

10

Homomorphic Encryption

Calculating in the Dark
You will study how to perform mathematical operations directly on encrypted data. This allows you to outsource computation to the cloud without ever handing over the keys to your most sensitive information.
Computation Without Exposure
Why encrypted arithmetic matters

Introduce the conceptual breakthrough that computation need not reveal inputs or outputs. Frame the problem of outsourcing data processing in a world where privacy and correctness must coexist.

Mathematical Mechanics of Hidden Operations
Algebra under encryption

Explore how algebraic structures allow operations on ciphertexts that mirror operations on plaintexts. Discuss the logical requirements for preserving results without decryption.

Variants of Homomorphic Encryption
From partial to fully homomorphic systems

Differentiate partially homomorphic schemes, somewhat homomorphic systems, and fully homomorphic encryption. Explain trade-offs in expressiveness, efficiency, and security.

11

Blind Signatures

Anonymous Digital Cash and Voting
You will learn how an authority can sign a message without seeing its contents. This is vital for you to understand how to build systems that require official validation without sacrificing the user's anonymity.
The Paradox of Trusted Approval Without Disclosure
Why Privacy and Authority Seem Mutually Exclusive

This section frames the core tension: many systems require an official signature to grant legitimacy, yet revealing the underlying message compromises privacy. We examine why conventional digital signatures inherently bind identity and content visibility, and why privacy-preserving infrastructures demand a new primitive that separates validation from inspection.

Blinding as a Mathematical Veil
How Hidden Messages Can Still Be Signed

This section explains the core mechanism of blinding: a user transforms a message using a random factor before submitting it for signature. The authority signs the transformed version without access to the original content. After unblinding, the resulting signature is valid for the original message. The logical structure of this process is unpacked step by step, emphasizing modular arithmetic and trapdoor functions as enabling tools.

From Algebra to Anonymity
Why the Signer Cannot Trace the Message

Here we examine the anonymity guarantees that emerge from the blinding process. Because the signer never sees the unblinded message, and because the blinding factor is random and secret, the final signed artifact cannot be cryptographically linked to the signing session. We analyze unlinkability, resistance to tracing, and the conditions under which anonymity can fail.

12

Pedersen Commitments

Algebraic Hiding and Additive Properties
You will explore a specific type of commitment that allows for 'homomorphic' properties. This chapter is essential for you to grasp how modern 'Confidential Transactions' hide amounts while still proving no money was created out of thin air.
From Sealed Envelopes to Algebraic Locks
Why Commitments Matter in Hidden Computation

This section reframes commitment schemes as mathematical analogues of sealed envelopes: values are fixed yet concealed. It introduces the dual requirements of hiding and binding, and explains why privacy-preserving systems require commitments that do more than merely conceal—they must support later verification without disclosure. The narrative situates Pedersen commitments within the broader logic of cryptographic commitments as foundational privacy primitives.

The Algebra Beneath the Curtain
Discrete Logarithms and Group Structure

This section explores the mathematical environment that makes Pedersen commitments possible: cyclic groups of prime order and the hardness of the discrete logarithm problem. It explains the role of independent generators and why unknown relationships between them are critical. Rather than delving into abstract formalism, the discussion emphasizes how algebraic structure becomes the engine of privacy.

Constructing a Pedersen Commitment
Blinding Factors and Perfect Hiding

This section walks through the construction of a Pedersen commitment: combining a value with a random blinding factor inside a group exponentiation. It explains why the randomness guarantees perfect hiding and how computational binding arises from discrete logarithm hardness. The section clarifies the subtle but crucial distinction between information-theoretic hiding and computational assumptions.

13

Discrete Logarithm Equality

Validating Values Across Bases
You will focus on the mathematical hardness assumption that powers many privacy primitives. Understanding the discrete log problem allows you to appreciate why these privacy barriers are so difficult for adversaries to breach.
From Exponentiation to Hidden Structure
Why Inversion Becomes Hard

Introduce exponentiation in modular arithmetic and finite cyclic groups as a one-way transformation: easy to compute forward, difficult to reverse. Frame the discrete logarithm problem as the challenge of recovering an exponent from a public group element. Emphasize asymmetry as the foundation of privacy primitives and clarify why this asymmetry persists in carefully chosen algebraic structures.

Algebraic Landscapes Where Logs Hide
Finite Fields and Group Structure

Explore the environments in which discrete logarithms live: multiplicative groups of finite fields and related cyclic groups. Explain how group order, generators, and structure determine security. Connect the abstract algebra to practical parameter choices in privacy systems.

Equality of Discrete Logarithms
Proving Same Secret, Different Bases

Define the discrete logarithm equality setting: demonstrating that two public group elements, expressed in different bases, share the same hidden exponent. Show how this enables validation of consistency without revealing the exponent itself. Frame the idea as a bridge between secrecy and verifiability.

14

Ring Signatures

Hiding the Signer in a Crowd
You will learn how to prove that a member of a group signed a message without revealing exactly which member it was. This provides you with the tools for leak-proof whistleblowing and anonymous group authentication.
The Paradox of Accountable Anonymity
Proving Authorship Without Identity

This section frames the central problem: how to produce a verifiable signature that proves someone within a defined group authorized a message, while cryptographically erasing evidence of which individual it was. It contrasts traditional digital signatures, which bind identity to message, with the need for controlled anonymity in adversarial environments such as whistleblowing and internal audits.

From Public Keys to Anonymous Sets
Constructing the Ring

This section explains how a ring is formed from a collection of public keys without coordination or setup by a central authority. It explores how the signer can assemble a spontaneous group and how the absence of group managers distinguishes ring signatures from other collective authentication schemes.

The Mathematical Core
How the Signature Hides Its Origin

A conceptual walkthrough of the cryptographic mechanics that allow one secret key holder to produce a signature indistinguishable from those of other listed public keys. The section introduces the intuition behind cyclic challenge–response constructions and explains how unforgeability and signer ambiguity coexist within the same proof structure.

15

Accumulators

Private Membership Proofs
You will study how to represent a large set of data with a single short value, and how to prove something belongs to that set without revealing the entire list. This is key for your understanding of efficient, private blacklisting or whitelisting.
Set Compression as a Primitive Idea
Representing Many Facts with One Digest

Explores the conceptual leap from storing explicit collections to encoding membership information in a compact mathematical artifact, emphasizing why this transformation matters for privacy and efficiency.

Mathematical Foundations of Accumulation
Properties That Enable Trust Without Exposure

Examines the logical and algebraic properties that allow an accumulator to act as a secure summary of data, focusing on the guarantees required for sound proofs and resistance to manipulation.

Private Membership Proofs
Demonstrating Inclusion Without Disclosure

Details how an accumulator supports proofs that an element belongs to a set while preserving the confidentiality of other elements, and why this capability underpins privacy-preserving systems.

16

Differential Privacy

Statistical Noise as a Privacy Shield
You will pivot slightly to explore how adding mathematical noise can protect individual identities in large datasets. This chapter teaches you how to balance the utility of big data with the rights of the individual.
The Privacy Problem in the Age of Big Data
Why Aggregation Still Reveals Individuals

Introduce the paradox of modern data analytics: datasets may appear anonymous in aggregate yet still leak information about specific participants. The section frames the need for formal privacy guarantees rather than intuitive assumptions.

Noise as a Mathematical Shield
Understanding Perturbation and Uncertainty

Explain how carefully calibrated randomness obscures individual contributions while preserving overall trends. Emphasize that noise is not mere corruption but a design feature enabling privacy-preserving computation.

Balancing Utility and Confidentiality
The Privacy–Accuracy Tradeoff

Explore the tension between useful analytics and strict privacy protection. Present the idea of a privacy budget and how repeated queries can erode guarantees if not managed.

17

Threshold Cryptography

Decentralizing the Cryptographic Key
You will learn how to perform cryptographic operations like decryption or signing only when a minimum number of parties agree. This prevents any single entity from acting as a 'Big Brother' over your private data.
Foundations of distributed trust
Why cryptographic power must be shared

This section introduces the philosophical and mathematical motivation for distributing cryptographic authority. Instead of a single keyholder, trust is divided so that operations require collective agreement, reducing the risk of centralized abuse or coercion.

Mathematical logic of key splitting
How secrets become shares

Here we explore the combinatorial and algebraic principles that allow a private key to be decomposed into shares. The logic ensures that no subset below a defined threshold reveals meaningful information, preserving confidentiality even when some parties are compromised.

Protocols for collaborative cryptographic operations
Decryption and signing without central control

This section explains operational protocols that enable cryptographic actions only when a sufficient number of participants contribute their shares. The emphasis is on practical workflow and protocol design that maintains security while enabling functionality.

18

Verifiable Random Functions

Publicly Verifiable Private Luck
You will discover how to generate random numbers that are private until revealed, yet can be proven to have been generated fairly. This is crucial for your understanding of private leader election in decentralized networks.
Introduction to Verifiable Random Functions
The Role of Randomness in Cryptography

This section introduces the concept of verifiable random functions (VRFs), explaining their importance in cryptography, privacy, and fairness. It highlights how VRFs ensure that randomness is both private and verifiable, setting the stage for their application in decentralized networks.

The Mathematical Foundations of VRFs
The Underlying Algebraic Structures

A deep dive into the mathematical logic behind VRFs, including hash functions, elliptic curve cryptography, and modular arithmetic. This section explains the core mathematical principles that make VRFs secure and efficient.

How VRFs Work
Generating Randomness with Hidden Computation

This section walks through the process of generating a VRF: from input values to the computation of the proof. It covers the mechanics of how randomness is concealed, and how the result is later verified without revealing any internal computation.

19

Range Proofs

Proving Bounds Without Values
You will look at a specific application of zero-knowledge: proving a number falls within a certain range (like proving you are over 21) without revealing the number itself. This chapter grounds abstract math in practical privacy use cases.
Introduction to Range Proofs
Understanding the Concept of Proving Boundaries

This section introduces the idea of range proofs and their role in cryptography. It explains why proving a number falls within a certain range, without revealing the number itself, is crucial for privacy-focused systems like cryptocurrencies and online authentication.

Mathematical Foundations of Range Proofs
The Role of Algebra and Group Theory

A dive into the mathematical principles behind range proofs. This section focuses on the algebraic structures that make it possible to prove bounds without revealing values, including the importance of group theory and elliptic curves.

Bulletproofs: A Practical Implementation
Efficient and Scalable Range Proofs

This section covers Bulletproofs, a specific type of range proof that reduces the computational and communication overhead of traditional methods. It explains how Bulletproofs improve scalability and privacy in blockchain systems and other real-world applications.

20

Post-Quantum Privacy

Future-Proofing the Hidden Logic
You must prepare for the era of quantum computing. This chapter introduces you to the primitives that will remain secure even against quantum adversaries, ensuring the privacy you build today lasts for decades.
The Quantum Challenge to Privacy
Understanding the Impact of Quantum Computing

This section introduces the quantum computing paradigm and its potential to undermine current cryptographic methods, emphasizing the need for post-quantum privacy solutions.

What Makes Post-Quantum Cryptography Essential?
Rationale for Future-Proofing Privacy

This section discusses the importance of developing cryptographic primitives that can withstand quantum-based attacks, and why these are crucial for long-term privacy.

Key Post-Quantum Primitives and Their Mechanisms
Exploring Quantum-Resistant Cryptographic Approaches

This section explores the key cryptographic primitives designed to withstand quantum threats, including lattice-based, hash-based, and multivariate cryptography.

21

The Ethical Architecture

Synthesizing Primitives into Society
In this final chapter, you will synthesize everything you've learned. You will see how these mathematical building blocks form the foundation of a society that values individual autonomy, moving from technical mastery to ethical application.
The Intersection of Privacy and Ethics
From Algorithms to Autonomy

This section explores the ethical dilemmas that arise when mathematical privacy techniques are applied to real-world scenarios. It ties technical concepts to societal values such as personal freedom and data sovereignty, offering a deep dive into the role of privacy in maintaining autonomy in a digital age.

Building Trust Through Privacy
Trust as a Pillar of Ethical Societies

An exploration of how trust is cultivated through the application of privacy primitives. This section will discuss the importance of transparency, consent, and accountability in building trust between individuals and institutions, forming the basis of an ethical society.

Practical Frameworks for Privacy Integration
Embedding Privacy in Social Systems

This section presents methodologies for integrating privacy principles into the design of social and technological systems. It will cover frameworks such as data protection laws, ethical AI systems, and how mathematical privacy tools can be used to safeguard individual rights in various societal sectors.

Available eBook Editions

Arabic
English
French
German
Italian
Japanese
Korean
Portuguese
Spanish
Turkish