New answers tagged private-set-intersection
0
My question is the following: why after the OT protocol, $q=r_0 \oplus[s\cdot F(y_R)]$?
Let's start with a case-distinction on the first bit of the OTs:
$s[0]=0$: In this case the sender gets $r_0[0]$ back. Written differently we actually get $r_0[0] \oplus 0\cdot F(y_R)[0]$ (because a XOR with a zero doesn't change anything). However we're in the case of $...
Top 50 recent answers are included
Related Tags
private-set-intersection × 39multiparty-computation × 9
elgamal-encryption × 6
oblivious-transfer × 6
public-key × 4
zero-knowledge-proofs × 4
pseudo-random-function × 4
data-privacy × 4
homomorphic-encryption × 3
hash × 2
protocol-design × 2
pseudo-random-generator × 2
database × 2
commutative-encryption × 2
pir × 2
encryption × 1
elliptic-curves × 1
cryptanalysis × 1
algorithm-design × 1
diffie-hellman × 1
tls × 1
provable-security × 1
secret-sharing × 1
paillier × 1
multiple-encryption × 1