[Resource Topic] 2015/546: Actively Secure OT Extension with Optimal Overhead

Welcome to the resource topic for 2015/546

Title:
Actively Secure OT Extension with Optimal Overhead

Authors: Marcel Keller, Emmanuela Orsini, Peter Scholl

Abstract:

We describe an actively secure OT extension protocol in the random oracle model with efficiency very close to the passively secure IKNP protocol of Ishai et al. (Crypto 2003). For computational security parameter \kappa, our protocol requires \kappa base OTs, and is the first practical, actively secure protocol to match the cost of the passive IKNP extension in this regard. The added communication cost is only additive in O(\kappa), independent of the number of OTs being created, while the computation cost is essentially two finite field operations per extended OT. We present implementation results that show our protocol takes no more than 5% more time than the passively secure IKNP extension, in both LAN and WAN environments, and so is essentially optimal with respect to the passive protocol.

ePrint: https://eprint.iacr.org/2015/546

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .