0
$\begingroup$

In my recent PSI project, I wanted to use Diffie-Hellman encryption to obtain ciphertext as OPRF input, but I could not find similar work related to it.

In my opinion, Diffie-Hellman ciphertext length is very long. Is there any performance or security problem if it is used as the input of OPRF?

Improve this question
$\endgroup$
1
  • $\begingroup$ An ElGamal ciphertext over a 256-bit curve is only 512 bits long. That's relatively short. I don't think there should be much trouble using a 512-bit string as input to an OPRF (of course, exact performances depend on which OPRF you use). $\endgroup$
    – Geoffroy Couteau
    Mar 6 at 13:18

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy