Paper 2018/709

Simple oblivious transfer protocols compatible with Kummer and supersingular isogenies

Vanessa Vitse


The key exchange protocol of Diffie and Hellman, which can be defined for any group, has the special feature of using only exponentiations. In particular, it can also be instantiated in Kummer varieties, which are not groups, and in the post-quantum isogeny-based setting with the supersingular isogeny DH scheme of De Feo, Jao and Plût (SIDH). In this article, we propose a new simple oblivious transfer (OT) protocol, based on the Diffie-Hellman key exchange, that only uses exponentiations; we also revisit the older Wu-Zhang-Wang scheme. Both protocols can be directly instantiated on fast Kummer varieties; more importantly, they can also be transposed in the post-quantum SIDH setting. The semantic security of our proposals relies on the hardness of non-standard versions of the (supersingular) Diffie-Hellman problem, that are investigated within this article. To the best of our knowledge, these protocols are the simplest secure discrete-log based OT schemes using only exponentiations, and the first isogeny-based OT schemes.

Available format(s)
Publication info
Preprint. MINOR revision.
Oblivious transferDiffie-Hellman key exchangesupersingular isogenypost-quantum cryptography
Contact author(s)
vanessa vitse @ univ-grenoble-alpes fr
2018-10-12: revised
2018-08-01: received
See all versions
Short URL
Creative Commons Attribution


      author = {Vanessa Vitse},
      title = {Simple oblivious transfer protocols compatible with Kummer and supersingular isogenies},
      howpublished = {Cryptology ePrint Archive, Paper 2018/709},
      year = {2018},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.