Skip to main content

otc

Oblivious transfer (OT) communications protocol message/response functionality implementations based on Curve25519 and the Ristretto group.

PyPI version and link. Read the Docs documentation status. GitHub Actions status. Coveralls test coverage summary.

Purpose

This library provides data structures and methods for a basic oblivious transfer (OT) communications protocol defined in work by Chou and Orlandi. Thanks to the underlying oblivious library, method implementations rely on cryptographic primitives found within the libsodium library.

For more information and background about the underlying mathematical structures and primitives, consult materials about Curve25519, the Ristretto group, and the related Ed25519 system.

Installation and Usage

This library is available as a package on PyPI:

python -m pip install otc

The library can be imported in the usual manner:

import otc
from otc import *

Example

Suppose that a sender wants to send exactly one of two payloads to a receiver (such as one of two decryption keys). Furthermore, the receiver does not want to reveal to the sender which of the two payloads they chose to receive. To begin, the sender can create a send object s. The sender can then send the public key s.public to the receiver (via some communication channel):

>>> import otc
>>> s = otc.send()
>>> s.public.to_base64()
'LJKN1DmNwGiCGWl4O5DsJMIEnlJm6yhb1o2hYS8A4Hg='

The receiver can create a receive object. Once they receive s.public from the sender (via some communications channel), they can use the receive object’s query method to create an encrypted selection that the sender cannot decrypt. In the example below, the receiver is choosing the second message by supplying the integer 1 (where the two valid options are 0 or 1):

>>> r = otc.receive()
>>> selection = r.query(s.public, 1)

The sender can then use its send object’s reply method to create two encrypted replies based on the receiver’s selection; the receiver will only be able to decrypt the pre-selected payload, and the sender does not know which of the two payloads can be decrypted by the receiver:

>>> replies = s.reply(selection, bytes([0] * 16), bytes([255] * 16))

Finally, the receiver can decrypt their chosen payload using the receive object’s elect method. The example below confirms that the receiver has indeed received an encrypted version of the second message:

>>> r.elect(s.public, 1, *replies) == bytes([255] * 16)
True

See the article Privacy-Preserving Information Exchange Using Python for a more detailed presentation of this example.

Development

All installation and development dependencies are fully specified in pyproject.toml. The project.optional-dependencies object is used to specify optional requirements for various development tasks. This makes it possible to specify additional options (such as docs, lint, and so on) when performing installation using pip:

python -m pip install .[docs,lint]

Documentation

The documentation can be generated automatically from the source files using Sphinx:

python -m pip install .[docs]
cd docs
sphinx-apidoc -f -E --templatedir=_templates -o _source .. && make html

Testing and Conventions

All unit tests are executed and their coverage is measured when using pytest (see the pyproject.toml file for configuration details):

python -m pip install .[test]
python -m pytest

Alternatively, all unit tests are included in the module itself and can be executed using doctest:

python src/otc/otc.py -v

Style conventions are enforced using Pylint:

python -m pip install .[lint]
python -m pylint src/otc

Contributions

In order to contribute to the source code, open an issue or submit a pull request on the GitHub page for this library.

Versioning

The version number format for this library and the changes to the library associated with version number increments conform with Semantic Versioning 2.0.0.

Publishing

This library can be published as a package on PyPI by a package maintainer. First, install the dependencies required for packaging and publishing:

python -m pip install .[publish]

Ensure that the correct version number appears in pyproject.toml, and that any links in this README document to the Read the Docs documentation of this package (or its dependencies) have appropriate version numbers. Also ensure that the Read the Docs project for this library has an automation rule that activates and sets as the default all tagged versions. Create and push a tag for this version (replacing ?.?.? with the version number):

git tag ?.?.?
git push origin ?.?.?

Remove any old build/distribution files. Then, package the source into a distribution archive:

rm -rf build dist src/*.egg-info
python -m build --sdist --wheel .

Finally, upload the package distribution archive to PyPI:

python -m twine upload dist/*

Metadata

Release files for otc 4.0.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for otc 4.0.0
File Size Uploaded Provenance Actions
otc-4.0.0.tar.gz 7.3 kB Without provenance Details for otc-4.0.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for otc 4.0.0
File Interpreter ABI Platform Actions
otc-4.0.0-py3-none-any.whl Python 3 none any Details for otc-4.0.0-py3-none-any.whl

Total release size: 14.5 kB

Release files / otc-4.0.0.tar.gz

Download URL otc-4.0.0.tar.gz
Size 7.3 kB
Tags Source
SHA-256 checksum
How to use checksums
624016b5a8fed4a669700833504ce9c6c9545a689d28330bd588c552395a64ae
BLAKE2b-256 checksum
How to use checksums
3863d8dd36be22ad2dc67753db7c530765b0c8a929a45210a1b964512d3a5ef9
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/4.0.1 CPython/3.10.2

Release files / otc-4.0.0-py3-none-any.whl

Download URL otc-4.0.0-py3-none-any.whl
Size 7.2 kB
Tags Python 3
SHA-256 checksum
How to use checksums
0e04f208c528e7e4521c9b5e7ac4e03fa35aaa87ca94d1c19511e22d620bee35
BLAKE2b-256 checksum
How to use checksums
9f1f96d8aec6d11ce2c90205efe2ca404c57f5427c13ced39f6d4574d3bc6dbe
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/4.0.1 CPython/3.10.2

Security for otc 4.0.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page