Journal of Xidian University

RSA-based enhanced oblivious transfer protocol

Xinguo Li

Published Jan 1, 2005• 0 citations

Abstract

Based on the RSA signature and (string) oblivious transfer, an enhanced oblivious transfer protocol is proposed which solves the access control problem for an oblivious transfer protocol. The protocol proposed has the property that only the receiver who has the signture issued by the central authority can open the message which he choose and that the sender can not decide whether the receiver has the signature or not. That is to say, the identity of the receiver can not be confirmed after the protocol. Under the decisional Diffie-Hellman assumption the proposed scheme has provable security.

Related papers

Oblivious transfer protocol with access control

YU Zhao-ping

Based on ECC,a new oblivious transfer protocol with access control has been proposed in this paper.The proposed protocol has the property of oblivious transfer.Futhermore,the only receiver who has issued by the trust centre authority can open the message which they chose and the sender can not decide whether the receiver has been authenticated or not by the trust centre.The identity of the receiver can not be confirmed by the sender.Under the ECDLP assumption,the proposed scheme has provable security.This protocol has less data,faster and more applied value than others which are based on FFDLP.

Computer Engineering and Applications JournalJan 1, 20070 citations

Efficient k-out-of-n oblivious transfer protocol.

Qinglong Wang

A new k-out-of-n oblivious transfer protocol is presented in this paper. The communication cost of our scheme are n+1 messages of sender to receiver and k messages from the receiver to sender. To the best knowledge of the authors, the communication complexity of our scheme is the least. Also, our scheme has a lower computation cost with (k+1)n modular exponentiations for sender and 3k modular exponentiations for the receiver. The security of our scheme is only based on the Decision Diffie-Hellman assumption. Further, we proved the sender’s computational security and the receiver’s unconditional security under standard model.

Jan 1, 20151 citation

Oblivious Transfer Protocols Based on Commutative Encryption

Jen-Chieh Hsu, Raylin Tso, Yu‐Chi Chen +1 more

Oblivious transfer (OT) protocol is a fundamental building block of cryptography and can be applied widely in many fields. A secure oblivious transfer protocol is supposed to ensure the privacy of both senders and receivers. The privacy of receivers means that the information being selected by receivers would never be revealed to senders. On the other hand, the privacy of senders means that receivers have no further information except for the one that has been selected. In this case, senders are able to deceive receivers by sending same messages. Likewise, in existing 1-out-of-n OT protocols, malicious senders can make all the n messages the same, so that receivers will always get the specific one assigned by senders. This indicates that privacy of receivers wouldnt work under the 1-out-of-n OT protocol. To prevent this kind of attack, this paper provides a general framework on how to design a secure OT protocol based on commutative and ciphertext equality test and take RSA as an example to explain how the protocol is processed.

IFIP International Conference on New Technologies, Mobility and Security (NTMS)Feb 1, 20184 citations

Adaptive Oblivious Transfer with Hidden Access Policy Realizing Disjunction

Vandana Guleria, Ratna Dutta

We propose an efficient adaptive oblivious transfer protocol with hidden access policies. This scheme allows a receiver to anonymously recover a message from a database which is protected by hidden attribute based access policy if the receiver's attribute set satisfies the associated access policy implicitly. The proposed scheme is secure in the presence of malicious adversary under the q-Strong Diffie-Hellman (SDH), q-Power Decisional Diffie-Hellman (PDDH) and Decision Bilinear Diffie-Hellman (DBDH) assumption in full-simulation security model. The scheme covers disjunction of attributes. The proposed protocol outperforms the existing similar schemes in terms of both communication and computation.

International Conference on Security and CryptographyJan 1, 20143 citations

Concurrent oblivious transfer

Juan A. Garay, PHILIP D. MACKENZIE

We consider the problem of designing an efficient oblivious transfer (OT) protocol that is provably secure in a concurrent setting, i.e., where many OT sessions may be running concurrently with their messages interleaved arbitrarily. Known OT protocols use zero-knowledge proofs, and no concurrent zero-knowledge proofs are known that use less than a poly-logarithmic number of rounds (at least without requiring a pre-processing phase, a public random string, an auxiliary string, timing constraints, or pre-distributed public keys). We introduce a model for proving security of concurrent OT protocols, and present a protocol that is proven secure in this model based on the decisional Diffie-Hellman problem. The protocol is efficient, requiring only a slightly non-constant number of rounds.

Annual Symposium on Foundations of Computer ScienceNov 7, 200243 citations

Efficient k-out-of-n Oblivious Transfer Schemes

Cheng Kang Chu, Wen-Guey Tzeng

Oblivious transfer is an important cryptographic protocol in various security applications. For example, in on-line transactions, a k-out-of-n oblivious transfer scheme allows a buyer to privately choose k out of n digital goods from a merchant without learning information about other n-k goods. In this paper, we propose several efficient two-round k-out-of-n oblivious transfer schemes, in which the receiver R sends O(k) messages to the sender S, and S sends O(n) messages back to R. The schemes provide unconditional security for either sender or receiver. The computational security for the other side is based on the Decisional Diffie-Hellman (DDH) or Chosen-Target Computational Diffie-Hellman (CT-CDH) problems. Our schemes have the nice property of universal parameters, that is, each pair of R and S need not hold any secret before performing the protocol. The system parameters can be used by all senders and receivers without any trapdoor specification. In some cases, our OTkn schemes are the most efficient ones in terms of the communication cost, either in rounds or the number of messages. Moreover, one of our schemes is extended to an adaptive oblivious transfer scheme. In that scheme, S sends O(n) messages to R in one round in the commitment phase. For each query of R, only O(1) messages are exchanged and O(1) operations are performed. The preliminary version of this paper was published at PKC '05 [Chu and Tzeng 2005].

Apr 7, 202024 citations