UC-secure OT ⇒ Malicious OT

Fully-black-box reduction · standard model · Can01 · security loss: none

Statement

A protocol that UC-realizes OT against malicious static adversaries is maliciously secure in the stand-alone sense: UC security implies stand-alone security — Can01.

Sketch

For a stand-alone adversary $\mathcal{A}$, the stand-alone simulator is the UC simulator $\mathcal{S}$ for $\mathcal{A}$: the environment that hands the parties the inputs $(x_0,x_1)$ and $c$, stays silent during the execution, and applies a stand-alone distinguisher to the output of $\mathcal{A}$ and the honest party’s output distinguishes the real UC execution from the ideal one with the same advantage — Can01.