Skip to main content
added 38 characters in body
Source Link
Mehdi Tibouchi
  • 2.6k
  • 16
  • 18

We don't know of any construction of iO from one-way functions[*], and it would be highly surprising if such a thing existed. Indeed, iO + OWF implies public-key encryption (and various other “cryptomania” primitives), so if OWF alone implied iO, it would also imply PKE.

[*] At this point in time, we don't know of any construction of iO from standard assumptions, period, as far as I knowAt this point in time, we don't know of any construction of iO from standard assumptions, period, as far as I know (see Geoffroy's comment below).

We don't know of any construction of iO from one-way functions[*], and it would be highly surprising if such a thing existed. Indeed, iO + OWF implies public-key encryption (and various other “cryptomania” primitives), so if OWF alone implied iO, it would also imply PKE.

[*] At this point in time, we don't know of any construction of iO from standard assumptions, period, as far as I know.

We don't know of any construction of iO from one-way functions[*], and it would be highly surprising if such a thing existed. Indeed, iO + OWF implies public-key encryption (and various other “cryptomania” primitives), so if OWF alone implied iO, it would also imply PKE.

[*] At this point in time, we don't know of any construction of iO from standard assumptions, period, as far as I know (see Geoffroy's comment below).

Source Link
Mehdi Tibouchi
  • 2.6k
  • 16
  • 18

We don't know of any construction of iO from one-way functions[*], and it would be highly surprising if such a thing existed. Indeed, iO + OWF implies public-key encryption (and various other “cryptomania” primitives), so if OWF alone implied iO, it would also imply PKE.

[*] At this point in time, we don't know of any construction of iO from standard assumptions, period, as far as I know.