New answers tagged

3

Can I send Alice a v value that, by knowing the m'0,m'1 received, I can crack both m0 and m1? One would hope not; if Bob can, this would show that the proposed protocol does not meet the security requirements of an OT protocol. However, in this case, selecting such a $v$ value would appear to be difficult. What Bob would need to do is find two values $y, y'...


Top 50 recent answers are included