Questions tagged [oprf]
The oprf tag has no usage guidance.
7 questions
3
votes
1
answer
78
views
Is the user's password revealed to a curious server in the OPAQUE PAKE?
If the server is honest-but-curious, it can attempt to guess the user’s password $\mathsf{pw}$ by computing $\mathsf{rw} = H(\mathsf{pw}, H'(\mathsf{pw})^s)$,where $s$ is the server's OPRF key. Then, ...
1
vote
2
answers
115
views
How to construct a permutation (shuffle) oblivious pseudorandom function?
We know that OPRF is a two-party protocol, where Alice inputs $X = {x_1, ..., x_n}$, Bob has no input, and after executing the OPRF protocol, Alice gets $F_k(x_i)$, and Bob receives a pseudorandom key ...
- 11
1
vote
1
answer
81
views
OPRF based on symmetric encryption
We need to use OPRF(oblivious pseudo random function) on very large sets. Unfortunately most of algorithms use elliptic curves and so this algorithms are very slow. Does exist some relaxation of oprf(...
- 187
1
vote
1
answer
115
views
Anonymous PAKE using two party computation
Let's say client side has a secret password $\pi$. The server has a series of indices $0..n-1$ and a salt associated value $s_i$ for all $i \in \{0,n-1\}$ call it set $S=\{s_i |
i \in \{0,n-1\}\}$ ...
- 661
0
votes
0
answers
25
views
OPRF and HashToGroup security
In OPRF protocol client needs to deterministically map an array of bytes x to an element of Group, namely an elliptic curve point.
I know that it's insecure to replace HashToCurve with scalar ...
- 149
0
votes
0
answers
34
views
Does the use of OPRF or OT remove the need of HE in PSI?
I was reading a systematic literature review on Private Set Intersection (PSI) protocols (https://www.sciencedirect.com/science/article/pii/S1574013723000345#sec8), which mentions that the main ...
- 1
0
votes
0
answers
69
views
Could ECDH-OPRF-PSI support private information retrieval？
Alice：has $x=(x_1，x_2,...x_m)$
Bob: has $(y_1,m_1),...,(y_n,m_n)$
For this, Alice wants to get some message from Bob, but does not want bob to know which one she gets
Bob generate random $a \in Z_q$，$...
- 21