Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Lecture notes in computer science

Cut-and-Choose Yao-Based Secure Computation in the Online/Offline and Batch Settings

Yehuda Lindell, Ben Riva

Published Jan 1, 2014• 79 citations
Publisher
DOI
10.1007/978-3-662-44381-1_27

Related papers

Non-Interactive Secure Computation Based on Cut-and-Choose

Arash Afshar, Payman Mohassel, Benny Pinkas B +1 more

Lecture notes in computer science•Jan 1, 2014•87 citations

Non-Interactive Secure Computation Based on Cut-and-Choose.

Arash Afshar, Payman Mohassel, Benny Pinkas B +1 more

•Jan 1, 2015•1 citation

Secure Two-Party Computation via Cut-and-Choose Oblivious Transfer

Yehuda Lindell, Benny Pinkas B

Lecture notes in computer science•Jan 1, 2011•175 citations

Secure Two-Party Computation via Cut-and-Choose Oblivious Transfer

Yehuda Lindell, Benny Pinkas B

Journal of Cryptology•Sep 3, 2011•124 citations

Techniques for Efficient Secure Computation Based on Yao’s Protocol

Yehuda Lindell

Lecture notes in computer science•Jan 1, 2013•0 citations

Cut-and-Choose Based Two-Party Computation in the Online/Offline and Batch Settings.

Yehuda Lindell, Ben Riva

Protocols for secure two-party computation enable a pair of mistrusting parties to compute a joint function of their private inputs without revealing anything but the output. One of the fundamental techniques for obtaining secure computation is that of Yao’s garbled circuits. In the setting of malicious adversaries, where the corrupted party can follow any arbitrary (polynomial-time) strategy in an attempt to breach security, the cut-and-choose technique is used to ensure that the garbled circuit is constructed correctly. The cost of this technique is the construction and transmission of multiple circuits; specifically, s garbled circuits are used in order to obtain a maximum cheating probability of 2−s. In this paper, we show how to reduce the amortized cost of cut-and-choose based secure two-party computation to O s logN garbled circuits when N secure computations are run. We use this method to construct a secure protocol in the batch setting. Next, we show how the cut-

•Jan 1, 2014•0 citations
Protocols for secure two-party computation enable a pair of mistrusting parties to compute a joint function of their private inputs without revealing anything but the output. One of the fundamental techniques for obtaining secure computation is that of Yao’s garbled circuits. In the setting of malicious adversaries, where the corrupted party can follow any arbitrary (polynomial-time) strategy in an attempt to breach security, the cut-and-choose technique is used to ensure that the garbled circuit is constructed correctly. The cost of this technique is the construction and transmission of multiple circuits; specifically, s garbled circuits are used in order to obtain a maximum cheating probability of 2−s. In this paper, we show how to reduce the amortized cost of cut-and-choose based secure two-party computation to O s logN garbled circuits when N secure computations are run. We use this method to construct a secure protocol in the batch setting. Next, we show how the cut-