Skip to main content
2 of 5
added 89 characters in body

Could ECDH-OPRF-PSI support oblivious transfer?

It is possible to utilize the OPRF-PSI algorithm to implement a K-V-PIR protocol, as follows: Alice wishes to inquire about the values corresponding to (xi, xj), while Bob possesses data in the form of (x1, y1), (x2, y2), ..., (xn, yn). Both parties would engage in the OPRF-PSI protocol, such as ECDH. In this process, Bob employs his personal key_b to encrypt the y_i data and subsequently transmits (c_y1, ..., c_yn) to Alice. Alice, in turn, uses her OPRF key_a to decrypt the data. For instance, Alice forwards H(xi)^a to Bob, who computes H(xi)^ab and returns it to Alice. Subsequently, Alice obtains H(xi)^b, which serves as the key for c_yi. It is also possible to enhance this specific implementation by incorporating additional MAC mechanisms for data verification. enter image description here