New answers tagged

2 votes
Accepted

Question on Simulation based security proof for Oblivious Transfer (OT) against semi-honest adversaries

Why while $\mathcal{A}$ chooses a random $\beta_{1-\sigma}$ when it guesses incorrectly, it is lik $\mathcal{D}$ is invoked with $(\sigma, r_0, r_1;\alpha, (B(\alpha, x_\sigma)\oplus b_\sigma, B(\...
user avatar

Top 50 recent answers are included