Formalising Oblivious Transfer in the Semi-Honest and Malicious Model in CryptHOL
Large scale implementations of Multi-Party Computation (MPC) protocols are becoming practical. Thus it is important to have strong guarantees for the whole development process, from the underlying cryptography to the implementation. Computer aided proofs are a way to provide such guarantees.
We use CryptHOL to formalise a general framework for reasoning about proofs of security of MPC. In particular we first consider protocols for 1-out-of-2 Oblivious Transfer ($OT^1_2$) — a fundamental MPC protocol — in both the semi-honest and malicious models. We then extend our semi-honest formalisation to $OT^1_4$ which is a building block for our proof of security for the GMW protocol.
The semi-honest $OT^1_2$ protocol we formalise is constructed from Extended Trapdoor Permutations (ETP), we first prove the general construction secure and then instantiate for the RSA collection. Our general proof assumes only the existence of ETPs, meaning any instantiated results come without needing to prove any security properties, only that the requirements of an ETP are met.
Tue 21 JanDisplayed time zone: Saskatchewan, Central America change
11:45 - 12:30
|Formalising Oblivious Transfer in the Semi-Honest and Malicious Model in CryptHOL|
David Butler Alan Turing Institute, David Aspinall University of Edinburgh, Adria Gascon Alan Turing InstituteDOI Pre-print Media Attached
|Verified Security of BLT Signature Scheme|
Denis Firsov Guardtime AS, Ahto Buldas Tallinn University of Technology, Ahto Truu Guardtime AS, Risto Laanoja Guardtime ASDOI Pre-print Media Attached File Attached