Journal on Information Security

Quantum-resistant asymmetric secure computation with applications to priced oblivious transfer

Francesc Sebé, Sergi Simón

Published Apr 24, 2026• 0 citations

Abstract

Abstract Priced oblivious transfer (POT) is a cryptographic protocol in which a merchant provides a set of items for sale and a customer acquires one of them. The protocol guarantees that the customer receives the item if and only if they have paid its price, while the merchant remains oblivious to the acquired item. Obviously, the merchant cannot not know what price the client has paid, as such price could be unique. A recent paper proposes a POT protocol that is built from two blocks: an e-coin system and an asymmetric secure computation protocol. In this paper, we present a quantum-resistant proposal for the latter building block. As a result, we are able to construct a quantum-resistant POT protocol implemented from the newly proposed asymmetric secure computation protocol and a post-quantum implementation of the mentioned e-coin system. To our knowledge, no quantum-resistant POT protocol has been proposed so far.

DOI: 10.1186/s13635-026-00236-8

Related papers

An e-Coin Based Construction for Unlinkable Priced Oblivious Transfer

Ricard Borges, Francesc Sebé

Abstract A ‘1-out-of-n’ oblivious transfer (OT) protocol involves two participants: a sender, who provides a set of items as input, and a receiver. The protocol guarantees that the receiver gets exactly one of the items of the input set, while the sender is unable to determine which. Priced OT (POT) protocols further allow each item of the input set to be assigned a price in such a way that, after a proper execution of the protocol, the receiver gets the requested item if and only if the corresponding sum of money has been paid. In this paper, we present a construction which takes a ‘1-out-of-n’ OT protocol and transform it into a POT one. Moreover, the resulting system is unlinkable in the sense that the sender is unable to determine whether two executions of the protocol were run by the same receiver or not. When compared to existing unlinkable POT protocols, our construction offers a lower conceptual complexity as it does not involve the use of zero-knowledge proofs.

The Computer JournalApr 1, 20232 citations

Bit-string oblivious transfer based on quantum state computational distinguishability

André Souto, Paulo Mateus, Pedro Adão +1 more

Oblivious transfer protocol is a basic building block in cryptography and is used to transfer information from a sender to a receiver in such a way that, at the end of the protocol, the sender does not know if the receiver got the message or not. Since Shor's quantum algorithm appeared, the security of most of the classical cryptographic schemes has been compromised, as they rely on the fact that factoring is infeasible. To overcome this, quantum mechanics has been used intensively in the past decades, and alternatives resistant to quantum attacks have been developed in order to fulfill the (potential) lack of security of a significant number of classical schemes. In this paper, we present a quantum computationally secure protocol for bit-string oblivious transfer between two parties, under the assumption of quantum hardness of state distinguishability and the constraint of performing at most few-qubit measurements (leaving open the question of general attacks performed on all qubits involved). The protocol is feasible, in the sense that it is implementable in polynomial time.

arXiv:1403.6022Physical Review AApr 8, 201515 citations

A quantum oblivious transfer protocol

Abhishek Parakh

We propose a quantum protocol for 1-out-of-2, 1-out-of-n and k-out-of-n oblivious transfer. Oblivious transfer is a counter-intuitive cryptographic primitive in which the receiver receives only the information he is authorized for, while the sender does not know what information receiver received. In 1-out-of-2 oblivious transfer, Alice sends two bits to Bob who can choose only one of them to read, while Alice does not know which bit Bob read. k-out-of-n oblivious transfer is an extension of this idea. The proposed protocols do not require any classical communication, are practical, secure and can be implemented using current technology.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIEOct 1, 20132 citations

Universally Composable Efficient Priced Oblivious Transfer from a Flexible Membership Encryption.

Pratish Datta, Ratna Dutta, Sourav Mukhopadhyay

Abstract. Membership encryption is a newly developed cryptographic primitive that combines membership proof and encryption into an unified setting. This paper presents a new flexible mem-bership encryption scheme which is provably secure and significantly more efficient than the previous scheme. Further we apply our proposed membership encryption to construct a round optimal 1-out-of-n priced oblivious transfer (POT) protocol which, unlike the existing 1-out-of-n POT schemes, is proven secure under the universally composable (UC) security model and thus preserves secu-rity when it is executed with multiple protocol instances that run concurrently in an adversarily controlled way. Moreover, using our membership encryption, the POT protocol exhibits constant communication complexity on the buyer’s side and O(n) communication cost on the vendor’s side, which is so far the best known in the literature.

Jan 1, 20140 citations

Quantum Oblivious Transfer and Fair Digital Transactions

Yao–Hsin Chou, I-Ming Tsai, Chien‐Ming Ko +2 more

Quantum entanglement is a phenomenon available only at nanometer scale. In this paper, we show how quantum entanglement can be used to build cryptographic primitives such as oblivious transfer. In addition to studying the protocol itself, we also show how to realize some applications based on our proposal. These include typical e-business applications such as contract signing, certified mail, simultaneous secret exchange, secure transaction and remote coin flip. Unlike classical oblivious transfer, the security of this protocol is based on physical laws, instead of any unproven mathematic conjecture. As a result, our proposal provides unconditional security for e-business

Pacific Rim International Symposium on Dependable ComputingJan 1, 20066 citations

Randomized Oblivious Transfer for Secure Multiparty Computation in the Quantum Setting

Bruno Costa, Pedro Costa Branco, Manuel Goulão +2 more

Secure computation is a powerful cryptographic tool that encompasses the evaluation of any multivariate function with arbitrary inputs from mutually distrusting parties. The oblivious transfer primitive serves is a basic building block for the general task of secure multi-party computation. Therefore, analyzing the security in the universal composability framework becomes mandatory when dealing with multi-party computation protocols composed of oblivious transfer subroutines. Furthermore, since the required number of oblivious transfer instances scales with the size of the circuits, oblivious transfer remains as a bottleneck for large-scale multi-party computation implementations. Techniques that allow one to extend a small number of oblivious transfers into a larger one in an efficient way make use of the oblivious transfer variant called randomized oblivious transfer. In this work, we present randomized versions of two known oblivious transfer protocols, one quantum and another post-quantum with ring learning with an error assumption. We then prove their security in the quantum universal composability framework, in a common reference string model.

EntropyJul 31, 202112 citations