New answers tagged

3 votes
Accepted

Help with clarification/definitions of Oblivious Transfer (OT) flavors

My understanding: General OT Sender inputs $(m_0,m_1)$, receiver inputs $b\in\{0,1\}$, and receiver gets $m_b$ while sender gets nothing. Correlated OT Sender inputs a value $\Delta$ and a vector $\...
user avatar
  • 3,812
2 votes

Reusing base Oblivious Transfers

Once you and I have done 128 true base OTs, we never need to do any more of them again. By "true base OTs" I mean OTs that are implemented using public-key cryptography. Here's an easy way ...
user avatar
  • 10.8k
1 vote

Input-independence of base OT in OT extension

Yes, it is true. You can check for example this blog post: in the paragraph where it says “The OT extension we present here is from Ishai et al (2003)”, we can see that Step 4.1 requires the receiver ...
user avatar
  • 3,812
1 vote

Reusing base Oblivious Transfers

Many OT extension protocols give you what is known as “Random OT”, which is like OT but the messages can’t be chosen and they are set to random instead. To get “chosen input” OT from Random OT, a ...
user avatar
  • 3,812

Top 50 recent answers are included