Anzeige
Erschienen in:
2009 | OriginalPaper | Buchkapitel
Essentially Optimal Universally Composable Oblivious Transfer
verfasst von : Ivan Damgård, Jesper Buus Nielsen, Claudio Orlandi
Erschienen in: Information Security and Cryptology – ICISC 2008
Verlag: Springer Berlin Heidelberg
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Oblivious transfer is one of the most important cryptographic primitives, both for theoretical and practical reasons and several protocols were proposed during the years. We propose a protocol which is simultaneously optimal on the following list of parameters:
Security:
it has universal composition.
Trust in setup assumptions:
only one of the parties needs to trust the setup (and some setup
is
needed for UC security).
Trust in computational assumptions:
only one of the parties needs to trust a computational assumption.
Round complexity:
it uses only two rounds.
Communication complexity:
it communicates
$\mathcal{O}(1)$
group elements to transfer one out of two group elements. The Big-O notation hides 32, meaning that the communication is probably not optimal, but is essentially optimal in that the overhead is at least constant. Our construction is based on pairings, and we assume the presence of a key registration authority.