On Robust Combiners for Oblivious Transfer and Other Primitives

A (1,2)-robust combiner for a cryptographic primitive P is a construction that takes two candidate schemes for P and combines them into one scheme that securely implement P even if one of the candidates fails. Robust combiners are a useful tool for ensuring better security in applied cryptography, and also a handy tool for constructing cryptographic protocols. For example, we show how robust combiners are useful for obtaining universal schemes for cryptographic primitives (a universal scheme is an explicit construction that implements P under the sole assumption that P exists). In this paper we study what primitives admit robust combiners. In addition to known and very simple combiners for one-way functions and equivalent primitives, we show robust combiners for protocols in the world of public key cryptography, namely for Key Agreement(KA). The main point we make is that things are not as nice for Oblivious Transfer (OT) and in general for secure computation. We prove that there are ...

• Type: Conference
• Year: 2005
• Where: EUROCRYPT
• Authors: Danny Harnik, Joe Kilian, Moni Naor, Omer Reingold, Alon Rosen
• Keywords: Cryptographic Primitives, Cryptography, EUROCRYPT 2005, Robust Combiners, Simple Combiners