Skip to content

Conversation

@robinhundt
Copy link
Owner

The malicious version of the silent OT protocol mistakenly used a semi-honest OT protocol for the base OTs used in silent OT. This commit changes it so that the security of the base OT protocol depends on the chosen security of the silent OT protocol.

The malicious version of the silent OT protocol mistakenly used a
semi-honest OT protocol for the base OTs used in silent OT. This commit
changes it so that the security of the base OT protocol depends on
the chosen security of the silent OT protocol.
@robinhundt robinhundt requested a review from Copilot January 13, 2026 15:03
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR addresses a critical security vulnerability in the Silent OT implementation where the malicious variant incorrectly used semi-honest security for its base OT protocol. The fix ensures that the base OT security level matches the chosen security level of the Silent OT protocol.

Changes:

  • Updated SilentOtSender and SilentOtReceiver to use the generic security parameter S for their base OT extension components
  • Removed unnecessary PhantomData<S> fields that are no longer needed since S is now actively used in type parameters
  • Removed unused marker::PhantomData import

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
cryprot-ot/src/silent_ot.rs Changed OT extension components to use generic security parameter S instead of hardcoded SemiHonestMarker; removed PhantomData workaround
cryprot-ot/src/extension.rs Removed redundant Security trait bound from struct definitions (trait bound likely enforced elsewhere)

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@robinhundt robinhundt enabled auto-merge January 13, 2026 15:03
@robinhundt robinhundt merged commit fd8af55 into main Jan 13, 2026
6 checks passed
@robinhundt robinhundt deleted the fix/silent-ot-mal-sec branch January 13, 2026 15:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants