Search papers, labs, and topics across Lattice.
This paper introduces $I$-$(OT)^2$, a novel base 1-out-of-2 Oblivious Transfer protocol that minimizes receiver-side computation and interaction, making it particularly suitable for low-power IoT devices. By leveraging a lightweight offline pre-computation phase, the protocol reduces online communication to just six messages and four digests, significantly enhancing efficiency in scenarios with modest transfer numbers. The implementation on real IoT hardware demonstrates a remarkable performance improvement, achieving average online costs as low as 39.90 渭s per OT, which is over ten times faster than existing solutions like SimplestOT.
$I$-$(OT)^2$ achieves over 10x faster Oblivious Transfer for IoT devices, making secure communication practical even on low-power hardware.
Oblivious Transfer (OT) is a fundamental cryptographic primitive enabling privacy-preserving computation and constitutes a core building block for secure multi-party computation while supporting a wide range of security-sensitive applications: private information retrieval, zero-knowledge proofs, and password-authenticated key exchange, to cite a few. While recent advances in OT extension have significantly reduced amortised costs, their reliance on batches of random base OTs and substantial pre-computation phases limits their practicality in scenarios where the number of transfers is modest or where communication latency and client-side computation are critical constraints. In such settings, efficient base OT protocols remain both relevant and necessary. In this work, we introduce $I$-$(OT)^2$, a novel base 1-out-of-2 OT protocol grounded in the quadratic residuosity problem, specifically designed to minimise receiver-side computation and interaction. Our construction is particularly appealing on client--server architectures in which the receiver operates on low-power hardware, such as Internet of Things (IoT) devices. Through a lightweight offline pre-computation phase, $I$-$(OT)^2$ shifts the on-transfer computational burden almost entirely to the Sender, while reducing online communication to only six messages and four digests exchanged. We provide a detailed description of the protocol, accompanied by a formal proof of its security. Moreover, to demonstrate the viability of $I$-$(OT)^2$, we also present an open-source proof-of-concept implementation (in C language) evaluated on real IoT hardware. Results are staggering: for 128-bit security using a 3072-bit RSA modulus, the receiver incurs an average online cost per OT as low as 2.80 渭s on desktop platforms and 39.90 渭s on IoT devices, more than 10$\times$ faster than the well known SimplestOT.
