Fast Contract Signing with Batch Oblivious TransferOblivious Transfer Protocol • December 28th, 2022
the argument is a valid quadruple, then SA asks a trusted third party in the ideal model for mi,b. The simulator sets H(R, x, i, b) = Ei,b ⊕ mi,b to allow A to decrypt Ei,b correctly. Whatever A outputs, so does SA.
Oblivious Transfer from Any Non-Trivial Elastic Noisy Channel via Secret Key AgreementOblivious Transfer Protocol • November 10th, 2016
Fast Contract Signing with Batch Oblivious TransferOblivious Transfer Protocol • July 18th, 2005
