Abstract:We consider the problem of securely generating useful instances of two-party correlations, such as many independent copies of a random oblivious transfer (OT) correlation, using a small amount of communication. This problem is motivated by the goal of secure computation with silent preprocessing, where a low-communication input-independent setup, followed by local ("silent") computation, enables a lightweight "non-cryptographic" online phase once the inputs are known. Recent works of Boyle et al. (CCS 2018, Crypto 2019) achieve this goal with good concrete efficiency for useful kinds of two-party correlations, including OT correlations, under different variants of the Learning Parity with Noise (LPN) assumption, and using a small number of "base'' oblivious transfers. The protocols of Boyle et al. have several limitations. First, they require a large number of communication rounds. Second, they are only secure against semi-honest parties. Finally, their concrete efficiency estimates are not backed by an actual implementation. In this work we address these limitations, making three main contributions: Eliminating interaction. Under the same assumption, we obtain the first concretely efficient 2-round protocols for generating useful correlations, including OT correlations, in the semi-honest security model. This implies the first efficient 2-round OT extension protocol of any kind and, more generally, protocols for non-interactive secure computation (NISC) that are concretely efficient and have the silent preprocessing feature. Malicious security. We provide security against malicious parties without additional interaction and with only a modest overhead; prior to our work, no similar protocols were known with any number of rounds. Implementation. Finally, we implemented, optimized, and benchmarked our 2-round OT extension protocol, demonstrating that it offers a more attractive alternative to the OT extension protocol of Ishai et al. (Crypto 2003) in many realistic settings.

Efficient Two-Round OT Extension and Silent Non-Interactive Secure Computation

Supersonic OT: Fast Unconditionally Secure Oblivious Transfer

Oblivious Transfer Based on NTRUEncrypt

1-Shot Oblivious Transfer and 2-Party Computation from Noisy Quantum Storage

Communication-Efficient (Client-Aided) Secure Two-Party Protocols and Its Application

Simulatable Adaptive Oblivious Transfer with Statistical Receiver’s Privacy

Scalable Private Set Intersection Based on OT Extension

Insecurity of Quantum Two-Party Computation with Applications to Cheat-Sensitive Protocols and Oblivious Transfer Reductions

Practical Fully Simulatable Oblivious Transfer with Sublinear Communication.

Etoram: A More Efficient ORAM for Secure Computation

Fast Cut-and-Choose Bilateral Oblivious Transfer for Malicious Adversaries

Mobile Agent Protection Based on Non-Interactive Secure Function Evaluation

Correlated Pseudorandomness from the Hardness of Quasi-Abelian Decoding

Efficient 3PC for Binary Circuits with Application to Maliciously-Secure DNN Inference

A Novel Oblivious Transfer Protocol with Statistical Analysis

Efficient Mixed-Protocol Secure Four-Party Computation with Private Robustness

Low Communication Secure Computation From Semi-Trusted Hardware.

Bootstrapped Oblivious Transfer and Secure Two-Party Function Computation

Efficient Recovery of a Shared Secret via Cooperation: Applications to SDMM and PIR

$\mathsf{OPA}$: One-shot Private Aggregation with Single Client Interaction and its Applications to Federated Learning

Fast Two-Output Secure Computation with Optimal Error Probability