Search papers, labs, and topics across Lattice.
This paper introduces PIVOT, a proactive and verifiable threshold oblivious pseudorandom function (VOPRF) framework that addresses vulnerabilities in existing isogeny-based OPRFs under mobile adversary models. By periodically refreshing server shares while maintaining the same master key and public outputs, PIVOT enhances security against key recovery attacks from compromised servers. The framework integrates advanced cryptographic techniques, including Shamir secret sharing and joint zero-knowledge relations, proving its robustness through a comprehensive security analysis and demonstrating practical applications in distributed private lookup services.
PIVOT can thwart mobile adversaries by refreshing server shares without compromising the integrity of the master key or previous outputs.
Oblivious pseudorandom functions (OPRFs) allow a client to evaluate a keyed pseudorandom function on a private input without revealing that input to the server. In a threshold OPRF, the secret key is distributed among (n) servers so that any qualified set of at least (t) servers can complete an evaluation, while fewer than (t) shares reveal no information about the key. Existing isogeny-based threshold OPRFs, however, are primarily designed for static corruption models. If the same shares remain valid throughout the lifetime of the service, a mobile adversary can compromise different servers over time, accumulate (t) shares from the same sharing state, and eventually recover the master key. We introduce PIVOT (Proactive Isogeny-based Verifiable Oblivious Threshold PRF), a dealerless threshold VOPRF framework based on effective isogeny group actions. PIVOT periodically refreshes the server shares without changing the master key, public key, or previously generated OPRF outputs. The construction combines Shamir secret sharing, additively homomorphic coefficient commitments, sequential Lagrange-weighted group actions, and joint zero-knowledge relations that link certified shares to their corresponding isogeny actions. It also supports coordinated epoch transitions, publicly verifiable blame, secure erasure, and committee resharing under a possibly different threshold. We formalize the functionality of a long-lived proactive threshold VOPRF, prove the correctness of distributed key generation, threshold evaluation, proactive refresh, and committee resharing, and provide a simulation-based security analysis under the vectorization and one-more hidden-group- action assumptions. As an application, we describe a distributed private lookup service whose encrypted database remains valid across repeated share renewals and committee migrations.
