Oblivious transfer (OT) protocol is a fundamental building block of cryptography and can be applied widely in many fields. A secure oblivious transfer protocol is supposed to ensure the privacy of both senders and receivers. The privacy of receivers means that the information being selected by receivers would never be revealed to senders. On the other hand, the privacy of senders means that receivers have no further information except for the one that has been selected. In this case, senders are able to deceive receivers by sending same messages. Likewise, in existing 1-out-of-n OT protocols, malicious senders can make all the n messages the same, so that receivers will always get the specific one assigned by senders. This indicates that privacy of receivers wouldnt work under the 1-out-of-n OT protocol. To prevent this kind of attack, this paper provides a general framework on how to design a secure OT protocol based on commutative and ciphertext equality test and take RSA as an example to explain how the protocol is processed.
展开▼
机译：遗忘传输（OT）协议是密码学的基本构建块，可以广泛应用于许多领域。一个安全的遗忘传输协议被认为可以确保发送者和接收者的私密性。接收者的隐私意味着接收者选择的信息将永远不会透露给发送者。另一方面，发送者的隐私意味着接收者除了已选择的信息外没有其他信息。在这种情况下，发送者可以通过发送相同的消息来欺骗接收者。同样，在现有的n分之一OT协议中，恶意发件人可以使所有n条消息相同，以便收件人始终获得发件人分配的特定消息。这表明接收者的隐私不会在n of OT协议中起作用。为了防止这种攻击，本文提供了一个通用的框架，用于基于交换和密文相等性测试设计安全的OT协议，并以RSA为例来说明如何处理该协议。
展开▼
