Paper 2024/1143

LR-OT: Leakage-Resilient Oblivious Transfer

Francesco Berti, Bar-Ilan University, Ramat-Gan, Israel
Carmit Hazay, Bar-Ilan University, Ramat-Gan, Israel
Itamar Levi, Bar-Ilan University, Ramat-Gan, Israel
Abstract

Oblivious Transfer (OT) is a fundamental cryptographic primitive, becoming a crucial component of a practical secure protocol. OT is typically implemented in software, and one way to accelerate its running time is by using hardware implementations. However, such implementations are vulnerable to side-channel attacks (SCAs). On the other hand, protecting interactive protocols against SCA is highly challenging because of their longer secrets (which include inputs and randomness), more complicated design, and running multiple instances. Consequently, there are no truly practical leakage-resistant OT protocols yet. In this paper, we introduce two tailored indistinguishability-based security definitions for leakage-resilient OT, focusing on protecting the sender's state. Second, we propose a practical semi-honest secure OT protocol that achieves these security levels while minimizing the assumptions on the protocol's building blocks and the use of a secret state. Finally, we extend our protocol to support sequential composition and explore efficiency-security tradeoffs.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Published elsewhere. Major revision. SCN 2024
Keywords
Oblivious transferLeakage-resilient
Contact author(s)
francesco berti @ biu ac il
Carmit Hazay @ biu ac il
itamar levi @ biu ac il
History
2024-07-15: approved
2024-07-13: received
See all versions
Short URL
https://ia.cr/2024/1143
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2024/1143,
      author = {Francesco Berti and Carmit Hazay and Itamar Levi},
      title = {{LR}-{OT}: Leakage-Resilient Oblivious Transfer},
      howpublished = {Cryptology {ePrint} Archive, Paper 2024/1143},
      year = {2024},
      url = {https://eprint.iacr.org/2024/1143}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.