Simple oblivious transfer protocols compatible with Kummer and supersingular isogenies

Vanessa Vitse (1)

1 IF - Institut Fourier

The key exchange protocol of Diffie and Hellman, which can be defined for any group, has the special feature of using only exponentiations. In particular, it can also be instantiated in Kummer varieties, which are not groups, and in the post-quantum isogeny-based setting with the supersingular isogeny DH scheme of De Feo, Jao and Plût (SIDH). In this article, we propose a new simple oblivious transfer (OT) protocol, based on the Diffie-Hellman key exchange, that only uses exponentiations; we also revisit the older Wu-Zhang-Wang scheme. Both protocols can be directly instantiated on fast Kummer varieties; more importantly, they can also be transposed in the post-quantum SIDH setting. The semantic security of our proposals relies on the hardness of non-standard versions of the (supersingular) Diffie-Hellman problem, that are investigated within this article. To the best of our knowledge, these protocols are the simplest secure discrete-log based OT schemes using only exponentiations, and the first isogeny-based OT schemes.

Mots clés: Oblivious transfer; Diffie-Hellman key exchange; supersingular isogeny; post-quantum cryptography

Domaines: Cryptographie et sécurité [cs.CR]; Théorie des nombres [math.NT]

Vanessa Vitse. Simple oblivious transfer protocols compatible with Kummer and supersingular isogenies. 2019. ⟨hal-01981552⟩