Special Section on Cryptography and Information Security
Oblivious Polynomial Evaluation in the Exponent, Revisited
2017 年 E100.A 巻 1 号 p. 26-33
詳細
2017 年 E100.A 巻 1 号 p. 26-33
There are two extensions of oblivious polynomial evaluation (OPE), OPEE (oblivious polynomial evaluation in the exponent) and OPEE2. At TCC 2015, Hazay showed two OPEE2 protocols. In this paper, we first show that her first OPEE2 protocol does not run in polynomial time if the computational DH assumption holds. We next present a constant round OPEE protocol under the DDH assumption.
