Oblivious Transfer via Lossy Encryption from Lattice-Based Cryptography

Algorithm 1

The CRS functionality from [10].

is parameterized by an algorithm , and can interact with parities .

(i) Upon receiving a command from the party , first let , then

send the message to and send the message to the adversary;

(ii) Upon receiving a command from the party (and only ), then send

and the adversary the message , and halt.