Resource-Efficient OT Combiners with Active Security

Research output: Contribution to book/anthology/report/proceedingArticle in proceedingsResearchpeer-review



  • Ignacio Cascudo, Aalborg University
  • ,
  • Ivan Damgård
  • Oriol Farràs, Universitat Rovira i Virgili, Tarragona, Spain
  • ,
  • Samuel Ranellucci

An OT-combiner takes n candidate implementations of the oblivious transfer (OT) functionality, some of which may be faulty, and produces a secure instance of oblivious transfer as long as a large enough number of the candidates are secure. We see an OT-combiner as a 2-party protocol that can make several black-box calls to each of the n OT candidates, and we want to protect against an adversary that can corrupt one of the parties and a certain number of the OT candidates, obtaining their inputs and (in the active case) full control of their outputs. In this work we consider perfectly (unconditionally, zero-error) secure OT-combiners and we focus on minimizing the number of calls to the candidate OTs. First, we construct a single-use (one call per OT candidate) OT-combiner which is perfectly secure against active adversaries corrupting one party and a constant fraction of the OT candidates. This extends a previous result by Ishai et al. (ISIT 2014) that proves the same fact for passive adversaries. Second, we consider a more general asymmetric corruption model where an adversary can corrupt different sets of OT candidates depending on whether it is Alice or Bob who is corrupted. We give sufficient and necessary conditions for the existence of an OT combiner with a given number of calls to the candidate OTs in terms of the existence of secret sharing schemes with certain access structures and share-lengths. This allows in some cases to determine the optimal number of calls to the OT candidates which are needed to construct an OT combiner secure against a given adversary.

Original languageEnglish
Title of host publicationTheory of Cryptography - 15th International Conference, TCC 2017, Proceedings
EditorsYael Kalai, Leonid Reyzin
Number of pages26
PublisherSpringer VS
Publication year1 Jan 2017
ISBN (print)9783319705026
Publication statusPublished - 1 Jan 2017
EventFifteenth IACR Theory of Cryptography Conference - TCC 2017 - Baltimore, United States
Duration: 12 Nov 201715 Nov 2017
Conference number: 15


ConferenceFifteenth IACR Theory of Cryptography Conference - TCC 2017
LandUnited States
SeriesLecture Notes in Computer Science

See relations at Aarhus University Citationformats

ID: 119399978