Information-Theoretically Secure Oblivious Polynomial Evaluation in the Commodity-Based Model
Rafael Tonicelli, Anderson C. A. Nascimento, Rafael Dowsley, Jörn Müller‐Quade, Hideki Imai, Goichiro Hanaoka, Akira Otsuka · 2013
Abstract. Oblivious polynomial evaluation (OPE) consists of a two-party protocol where a sender inputs a polynomial p(x), and a receiver inputs a single value x0. At the end of the protocol, the sender learns nothing and the receiver learns p(x0). This paper deals with the problem of oblivious polynomial evaluation under an information-theoretic perspective, which is based on recent definitions of Unconditional Security developed by Crépeau et al. [11]. In this paper, we propose an information-theoretic model for oblivious polynomial evaluation relying on pre-distributed data, and prove very general lower bounds on the size of the pre-distributed data, as well as the size of the communications in any protocol. It is demonstrated that these bounds are tight by obtaining a round-optimal OPE protocol, which meets the lower bounds simultaneously. We present a natural generalization to OPE called oblivious linear functional evaluation.