Paper 2018/1155

Universally Composable Oblivious Transfer Protocol based on the RLWE Assumption

Pedro Branco, Jintai Ding, Manuel Goulão, and Paulo Mateus


We use an RLWE-based key exchange scheme to construct a simple and efficient post-quantum oblivious transfer based on the Ring Learning with Errors assumption. We prove that our protocol is secure in the Universal Composability framework against static malicious adversaries in the random oracle model. The main idea of the protocol is that the receiver and the sender interact using the RLWE-based key exchange in such a way that the sender computes two keys, one of them shared with the receiver. It is infeasible for the sender to know which is the shared key and for the receiver to get information about the other one. The sender encrypts each message with each key using a symmetric-key encryption scheme and the receiver can only decrypt one of the ciphertexts. The protocol is extremely efficient in terms of computational and communication complexity, and thus a strong candidate for post-quantum applications.

Available format(s)
Cryptographic protocols
Publication info
Preprint. MINOR revision.
oblivious transfer
Contact author(s)
pmbranco @ math tecnico ulisboa pt
2018-12-03: received
Short URL
Creative Commons Attribution


      author = {Pedro Branco and Jintai Ding and Manuel Goulão and Paulo Mateus},
      title = {Universally Composable Oblivious Transfer Protocol based on the RLWE Assumption},
      howpublished = {Cryptology ePrint Archive, Paper 2018/1155},
      year = {2018},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.