基于部分知识证明的全模拟茫然传输.PDFVIP

基于部分知识证明的全模拟茫然传输 魏晓超 ，赵川 ，蒋瀚 ，徐秋亮 山东大学计算机科学与技术学院，济南250101 摘要： 茫然传输是一个重要的密码学基础工具，其可以被用来构造许多密码学方案，例如两 方安全计算协议。在恶意模型下构造基于茫然传输的密码学协议时，如何构造能够抵抗恶意敌 手的茫然传输协议是一个瓶颈问题。本文基于部分DH 元组的知识的零知识证明的概念，给出 了一个基于标准DDH 问题困难性假设且可以实现全模拟的1-out-of-2 茫然传输协议。 关键词：安全两方计算；茫然传输；部分知识的零知识证明；全模拟 中图分类号：TP301 Fully Simulatable Oblivious Transfer via Proof of Partial Knowledge Wei Xiao-Chao , Zhao Chuan , Jiang Han , Xu Qiu-Liang School of Computer Science and Technology, Shandong University, Jinan 250101 Abstract: Oblivious transfer (OT) is an important cryptographic basic tool and can be used to construct many other cryptographic scheme, such as the secure two-party computation protocol. As a sub-component of one scheme, the OT protocol must meet the security requirement of the outside scheme. For example, when constructing a secure two-party computation protocol in the presence of malicious adversary, the OT protocol used should be fully simulated in the malicious model. We propose a OT protocol with full simulation under the assumption of DDH problem, relying on the notion of zero-knowledge proof of knowledge of partial (subset) Diffie-Hellman tuples. Key words: secure two-party computation; Oblivious transfer; ZK proof of partial knowledge; full simulation 0 Introduction The notion of oblivious transfer (OT) was firstly proposed by Rabin in [1]. It has been an im- portant basic cryptographic block and many cryptographic schemes use it as a sub-component, such as secure two-party computation [2, 3, 4, 5]. In the oblivious transfer setting, there are two parties which are described as sender and receiver respectively, the sender has two (or Foundations: 安全多方计算基本运算与 UC 安全研究 (No.20110131110027) Author Introdu