Share two secrets between two parties

Question

Alice has a secret A, Bob has a secret B. They have a secure channel and a MAC. They each want to know the other's secret, but don't particularly want to give up their own. However, neither will not lie about the secret, but if possible, will stop communications once [s]he learns the other's secret.

How can such a protocol work, that if Alice or Bob doesn't correctly follow all steps in the protocol, neither person can gain any information about the other's secret.

You may not use a third party.

I think your question got already answered here: http://crypto.stackexchange.com/questions/1639/two-mutually-untrusted-parties-want-to-exchange-data-how-to-ensure-each-one-get — wonce, Jun 04 '15 at 00:16
"Neither will not lie about the secret?" Did you mean "neither will lie?" — cpast, Jun 04 '15 at 19:23
If you think the above link does not answer your question, please clarify. — otus, Apr 24 '16 at 05:20

score -2 · Answer 1 · answered Jun 04 '15 at 13:56

-2

M.O.Rabin answered the question in 1981, named it oblivious transfer.

answered Jun 04 '15 at 13:56

KID

1

No, oblivious transfer is something else entirely – poncho Jun 05 '15 at 18:43
Welcome to Cryptography Stack Exchange. We actually prefer answers which contain the information itself, not just referring to information elsewhere. Could you add a summary of the information to the answer? Otherwise we will convert your answer to a comment. – Paŭlo Ebermann Jun 06 '15 at 10:14

Share two secrets between two parties

1 Answers1