123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462 |
- #include "ot_blinds.h"
- #include <fcntl.h>
- #include <cstdlib>
- #include <iostream>
- #include <ENCRYPTO_utils/connection.h>
- #include <fstream>
- #include <x86intrin.h> // SSE and AVX intrinsics
- //const uint64_t n_OTS = 128;
-
- ot_ext_prot test_prots[] = {IKNP};
- snd_ot_flavor test_sflavor[] = {Snd_OT, Snd_C_OT, Snd_GC_OT, Snd_R_OT};
- rec_ot_flavor test_rflavor[] = {Rec_OT, Rec_R_OT};
- //uint64_t test_numots[] = {n_OTS, 3215, 100000};
- uint64_t test_bitlen[] = {1, 3, 8, 191};
- uint32_t test_nthreads[] = {1, 4};
- field_type test_ftype[] = {P_FIELD, ECC_FIELD};
- bool test_usemecr[] = {false};
- BOOL Cleanup()
- {
- delete sndthread;
- delete rcvthread;
- return true;
- }
- void InitSender(const std::string &address, const int port, CLock *glock)
- {
- m_nPort = (uint16_t)port;
- m_nAddr = &address;
- //Server listen
- m_Socket = Listen(address, port);
- if (!m_Socket)
- {
- std::cerr << "Listen failed on " << address << ":" << port << "\n";
- std::exit(1);
- }
- sndthread = new SndThread(m_Socket.get(), glock);
- rcvthread = new RcvThread(m_Socket.get(), glock);
- sndthread->Start();
- rcvthread->Start();
- }
- void InitReceiver(const std::string &address, const int port, CLock *glock)
- {
- m_nPort = (uint16_t)port;
- m_nAddr = &address;
- //Client connect
- m_Socket = Connect(address, port);
- if (!m_Socket)
- {
- std::cerr << "Connect failed on " << address << ":" << port << "\n";
- std::exit(1);
- }
- sndthread = new SndThread(m_Socket.get(), glock);
- rcvthread = new RcvThread(m_Socket.get(), glock);
- sndthread->Start();
- rcvthread->Start();
- }
- OTExtSnd *InitOTExtSnd(ot_ext_prot m_eProt, uint32_t nbaseots, uint32_t nchecks, bool enablemecr, field_type ftype, crypto *crypt)
- {
- OTExtSnd *sender;
- switch (m_eProt)
- {
- case ALSZ:
- sender = new ALSZOTExtSnd(crypt, rcvthread, sndthread, nbaseots, nchecks);
- break;
- case IKNP:
- sender = new IKNPOTExtSnd(crypt, rcvthread, sndthread);
- break;
- case NNOB:
- sender = new NNOBOTExtSnd(crypt, rcvthread, sndthread);
- break;
- default:
- sender = new ALSZOTExtSnd(crypt, rcvthread, sndthread, nbaseots, nchecks);
- break;
- }
- if (enablemecr)
- sender->EnableMinEntCorrRobustness();
- sender->ComputeBaseOTs(ftype);
- return sender;
- }
- OTExtRec *InitOTExtRec(ot_ext_prot m_eProt, uint32_t nbaseots, uint32_t nchecks, bool enablemecr, field_type ftype, crypto *crypt)
- {
- OTExtRec *receiver;
- switch (m_eProt)
- {
- case ALSZ:
- receiver = new ALSZOTExtRec(crypt, rcvthread, sndthread, nbaseots, nchecks);
- break;
- case IKNP:
- receiver = new IKNPOTExtRec(crypt, rcvthread, sndthread);
- break;
- case NNOB:
- receiver = new NNOBOTExtRec(crypt, rcvthread, sndthread);
- break;
- default:
- receiver = new ALSZOTExtRec(crypt, rcvthread, sndthread, nbaseots, nchecks);
- break;
- }
- if (enablemecr)
- receiver->EnableMinEntCorrRobustness();
- receiver->ComputeBaseOTs(ftype);
- return receiver;
- }
- // This is P0
- void run_test_sender(uint32_t numots, uint32_t bitlength, snd_ot_flavor stype, rec_ot_flavor rtype, uint32_t numthreads,
- crypto *crypt, OTExtSnd *sender, OTExtRec *receiver)
- {
- CBitVector delta;
- CBitVector X0;
- uint32_t nsndvals = 2;
- CBitVector **X = (CBitVector **)malloc(sizeof(CBitVector *) * nsndvals);
- CBitVector **Y = (CBitVector **)malloc(sizeof(CBitVector *) * nsndvals);
- CBitVector **XoplusY = (CBitVector **)malloc(sizeof(CBitVector *) * nsndvals);
- //The masking function with which the values that are sent in the last communication step are processed
- XORMasking *m_fMaskFct = new XORMasking(bitlength, delta);
- //creates delta as an array with "numOTs" entries of "bitlength" bit-values and fills delta with random values
- delta.Create(numots, bitlength, crypt);
- //Create X1 and X2 as two arrays with "numOTs" entries of "bitlength" bit-values and resets them to 0
- //X1.Create(numots, bitlength, crypt);
- //X2.Create(numots, bitlength, crypt);
- //X[0] --> T0
- //X[1] --> X0
- //Y[0] --> Y0
- printf("run_test_sender\n");
- //(T, X0 \oplus T)
- for (uint32_t i = 0; i < nsndvals; i++)
- {
- X[i] = new CBitVector();
- // X[i]->Create(numots, bitlength, crypt);
- X[i]->Create(numots, bitlength);
- X[i]->FillRand(numots, crypt);
- Y[i] = new CBitVector();
- // X[i]->Create(numots, bitlength, crypt);
- Y[i]->Create(numots, bitlength);
-
- // Y[i]->FillRand(n_OTS, crypt);
-
- Y[i]->SetToOne(); // I added this line
- //X[i]->PrintBinary(); // I added this line
- }
-
- X0.Create(numots, bitlength);
- X0.Reset();
- X0.XOR(X[1]);
- //Y[0]->Copy(X[1]);
-
- #ifdef VERBOSE
- printf("X0:\n");
- //X[1]->PrintBinary(); // I added this line
- X0.PrintHex(); // I added this line
- printf("Y0:\n");
- Y[0]->PrintHex(); // I added this line
- printf("T0: \n");
- X[0]->PrintHex();
- #endif
- X[1]->XOR(X[0]);
- //X[1] --> X0 \oplus T0
- //for (uint32_t i = 0; i < nsndvals; i++)
- {
- // printf("T0:\n");
- // X[0]->PrintBinary(); // I added this line
- // printf("X0 ^ T0:\n");
- // X[1]->PrintBinary(); // I added this line
- }
- sender->send(numots, bitlength, nsndvals, X, stype, rtype, numthreads, m_fMaskFct);
- CBitVector response;
- //Pre-generate the respose vector for the results
- response.Create(numots, bitlength);
- response.Reset();
- //Y[0] is the choice vector.
- receiver->receive(numots, bitlength, nsndvals, Y[0], &response, stype, rtype, numthreads, m_fMaskFct);
-
-
-
- response.XOR(X[0]);
-
- #ifdef VERBOSE
- printf("\n\nLearnt Gamma0 = (X1 /cdot Y0) /oplus T------>>>>>> \n");
- response.PrintHex();
- #endif
- // std::ofstream gammafile0, X0file, Y0file;
- // gammafile0.open ("gamma0.txt", std::ios::out);
- // X0file.open("X0.txt", std::ios::out);
- // Y0file.open("Y0.txt", std::ios::out);
- int fd = open("./y0", O_CREAT | O_WRONLY | O_TRUNC, 0600);;
- ssize_t bytes = write(fd, Y[0]->GetArr(), Y[0]->GetSize());
- close(fd);
- int fd2 = open("./x0", O_CREAT | O_WRONLY | O_TRUNC, 0600);;
- ssize_t bytes2 = write(fd2, X0.GetArr(), X0.GetSize());
- close(fd2);
- int fd3 = open("./gamma0", O_CREAT | O_WRONLY | O_TRUNC, 0600);;
- ssize_t bytes3 = write(fd3, response.GetArr(), response.GetSize());
- close(fd3);
- // for(size_t j = 0; j < numots; ++j)
- // {
- // // std::cout << (int) response.GetBitNoMask(j);
- // gammafile0 << (int) response.GetBitNoMask(j);
- // X0file << (int) X0.GetBitNoMask(j);
- // Y0file << (int) Y[0]->GetBitNoMask(j);
- // }
- for (uint32_t i = 0; i < nsndvals; i++)
- {
- delete (X[i]);
- }
- free(X);
-
- delta.delCBitVector();
- delete m_fMaskFct;
- }
- // This is P1
- void run_test_receiver(uint32_t numots, uint32_t bitlength, snd_ot_flavor stype, rec_ot_flavor rtype, uint32_t numthreads,
- crypto *crypt, OTExtSnd *sender, OTExtRec *receiver, int m_nPID)
- {
- CBitVector X1, response;
- uint32_t nsndvals = 2;
- CBitVector **X = (CBitVector **)malloc(sizeof(CBitVector *) * nsndvals);
- CBitVector **Y = (CBitVector **)malloc(sizeof(CBitVector *) * nsndvals);
-
- //X[0] --> T1
- //X[1] --> X1
- //Y[0] --> Y1
- for (uint32_t i = 0; i < nsndvals; i++)
- {
- X[i] = new CBitVector();
- X[i]->Create(numots, bitlength);
- X[i]->FillRand(numots, crypt);
- Y[i] = new CBitVector();
- Y[i]->Create(numots, bitlength);
- //Y[i]->FillRand(n_OTS, crypt);
- Y[i]->SetToOne();
- }
- X1.Create(numots, bitlength);
- X1.Reset();
- X1.XOR(X[1]);
-
- #ifdef VERBOSE
- printf("X1:\n");
- //X[1]->PrintBinary(); // I added this line
- X1.PrintHex(); // I added this line
- printf("Y1:\n");
- Y[0]->PrintHex(); // I added this line
- printf("T1: \n");
- X[0]->PrintHex();
- #endif
- // X[1] -- > X1 \oplus T1
- X[1]->XOR(X[0]);
- //The masking function with which the values that are sent in the last communication step are processed
- XORMasking *m_fMaskFct = new XORMasking(bitlength);
-
-
- //Pre-generate the respose vector for the results
- response.Create(numots, bitlength);
- response.Reset();
- /*
- * The inputs of the receiver in G_OT, C_OT and R_OT are the same. The only difference is the version
- * variable that has to match the version of the sender.
- */
- //Learns: (X0 \cdot Y1) \oplus T0
- //Y0 is the choice bits.
- receiver->receive(numots, bitlength, nsndvals, Y[0], &response, stype, rtype, numthreads, m_fMaskFct);
- sender->send(numots, bitlength, nsndvals, X, stype, rtype, numthreads, m_fMaskFct);
- // printf("Learnt: (X0 /cdot Y1) /oplus T0------>>>>>> \n");
- // response.PrintBinary();
- response.XOR(X[0]);
-
- #ifdef VERBOSE
- printf("\n\nLearnt: Gamma1 = (X0 /cdot Y1) /oplus T------>>>>>> \n");
- response.PrintHex();
- #endif
- //std::ofstream gammafile1, X1file, Y1file;
-
-
- int fd = open("./y1", O_CREAT | O_WRONLY | O_TRUNC, 0600);;
- ssize_t bytes = write(fd, Y[0]->GetArr(), Y[0]->GetSize());
-
- #ifdef VERBOSE
- std::cout << "bytes = " << bytes << std::endl;
- #endif
- close(fd);
- int fd2 = open("./x1", O_CREAT | O_WRONLY | O_TRUNC, 0600);;
- ssize_t bytes2 = write(fd2, X1.GetArr(), X1.GetSize());
-
- close(fd2);
- int fd3 = open("./gamma1", O_CREAT | O_WRONLY | O_TRUNC, 0600);;
- ssize_t bytes3 = write(fd3, response.GetArr(), response.GetSize());
-
- close(fd3);
- #ifdef VERBOSE
- std::cout << "X1: \n\n";
- X1.PrintHex();
- #endif
- // gammafile1.open ("gamma1.txt", std::ios::out);
- // X1file.open("X1.txt", std::ios::out);
- // Y1file.open("Y1.txt", std::ios::out);
- // for(size_t j = 0; j < numots; ++j)
- // {
- // // std::cout << (int) response.GetBitNoMask(j);
- // gammafile1 << (int) response.GetBitNoMask(j);
- // X1file << (int) X1.GetBitNoMask(j);
- // Y1file << (int) Y[0]->GetBitNoMask(j);
- // }
-
- //gammafile1.close();
- delete m_fMaskFct;
- // choices.delCBitVector();
- response.delCBitVector();
- }
- int main(int argc, char **argv)
- {
- std::string addr0 = argv[1]; // "127.0.0.1";
- std::string addr1 = argv[2]; // "127.0.0.1";
- int port = 7766;
- __m128i blinds;
- // if (argc != 2)
- // {
- // std::cout << "Please call with 0 if acting as server or 1 if acting as client" << std::endl;
- // return EXIT_FAILURE;
- // }
- //Determines whether the program is executed in the sender or receiver role
- m_nPID = atoi(argv[3]);
- int64_t nblindbits = atoi(argv[4]);
- std::cout << "Playing as role: " << m_nPID << std::endl;
- assert(m_nPID >= 0 && m_nPID <= 1);
- //The symmetric security parameter (80, 112, 128)
- uint32_t m_nSecParam = 128;
- crypto *crypt = new crypto(m_nSecParam, (uint8_t *)m_cConstSeed[m_nPID]);
- CLock *glock = new CLock(); // pass this to sender and receiver constructors
- uint32_t m_nBaseOTs = 190;
- uint32_t m_nChecks = 380;
- // NOTE: This vector controls the settings used by the oblivious transfer.
- test_options selected_options; // = {IKNP, 128, 1, Snd_C_OT, Rec_OT, 1, ECC_FIELD, false};
- selected_options.prot = IKNP;
- selected_options.numots = nblindbits; // Number of OTs performed using the extended COT.
- selected_options.bitlen = 1;
- selected_options.sflavor = Snd_OT; //Snd_C_OT;
- selected_options.rflavor = Rec_OT;
- selected_options.nthreads = 1; // Number of threads
- selected_options.ftype = P_FIELD; // Type of field to use for the base OT.
- selected_options.usemecr = false;
- // test_options selected_options = {IKNP, 128, 1, Snd_C_OT, Rec_OT, 1, P_FIELD, false}; // Alternative using P_FIELD
-
- if (m_nPID == SERVER_ID) //Play as OT sender
- {
- InitSender(addr0, port, glock);
-
- OTExtSnd *sender = NULL;
-
- InitReceiver(addr1, port, glock);
- OTExtRec *receiver = NULL;
-
- auto start = std::chrono::steady_clock::now();
- sender = InitOTExtSnd(selected_options.prot, m_nBaseOTs, m_nChecks, selected_options.usemecr, selected_options.ftype, crypt);
- receiver = InitOTExtRec(selected_options.prot, m_nBaseOTs, m_nChecks, selected_options.usemecr, selected_options.ftype, crypt);
- std::cout << "--> : " << getProt(selected_options.prot) << " Sender " << selected_options.numots << " " << getSndFlavor(selected_options.sflavor) << " / " << getRecFlavor(selected_options.rflavor) << " on " << selected_options.bitlen << " bits with " << selected_options.nthreads << " threads, " << getFieldType(selected_options.ftype) << " and" << (selected_options.usemecr ? "" : " no") << " MECR" << std::endl;
- run_test_sender(selected_options.numots, selected_options.bitlen, selected_options.sflavor, selected_options.rflavor, selected_options.nthreads, crypt, sender, receiver);
- auto end = std::chrono::steady_clock::now();
-
- std::chrono::duration<double> elapsed_seconds = end - start;
- std::cout << "time to generate and evaluate " << nblindbits << " OTs is: " << elapsed_seconds.count() << "s\n";
- std::cout << "bytes transmitted for OT = " << (54292 + 33 * nblindbits / 2) << " bytes\n";
-
- delete sender;
- }
- else //Play as OT receiver
- {
- InitReceiver(addr0, port, glock);
- OTExtRec *receiver = NULL;
- InitSender(addr1, port, glock);
- auto start = std::chrono::steady_clock::now();
- OTExtSnd *sender = NULL;
- receiver = InitOTExtRec(selected_options.prot, m_nBaseOTs, m_nChecks, selected_options.usemecr, selected_options.ftype, crypt);
- sender = InitOTExtSnd(selected_options.prot, m_nBaseOTs, m_nChecks, selected_options.usemecr, selected_options.ftype, crypt);
- std::cout << "--> : " << getProt(selected_options.prot) << " Receiver " << selected_options.numots << " " << getSndFlavor(selected_options.sflavor) << " / " << getRecFlavor(selected_options.rflavor) << " on " << selected_options.bitlen << " bits with " << selected_options.nthreads << " threads, " << getFieldType(selected_options.ftype) << " and" << (selected_options.usemecr ? "" : " no") << " MECR" << std::endl;
- run_test_receiver(selected_options.numots, selected_options.bitlen, selected_options.sflavor, selected_options.rflavor, selected_options.nthreads, crypt, sender, receiver, m_nPID);
- delete receiver;
- auto end = std::chrono::steady_clock::now();
- std::chrono::duration<double> elapsed_seconds = end - start;
- std::cout << "time to generate and evaluate " << nblindbits << " OTs is: " << elapsed_seconds.count() << "s\n";
- std::cout << "bytes transmitted for OT = " << (54274 + 33 * nblindbits / 2) << " bytes\n";
- }
- Cleanup();
- delete crypt;
- delete glock;
- return EXIT_SUCCESS;
- }
|