A blinding factor is a fresh random value that conceals an input before a cryptographic operation, then enables the original result to be recovered. section 11.2.2
An OPRF uses the factor in four steps:
- Alice chooses a new random factor r for each protocol run. section 11.2.2
- She blinds group element x by computing x^r and sends the concealed value to Bob. section 11.2.2
- Bob applies his secret key k, returning (x^r)^k without learning x. section 11.2.2
- Alice removes the concealment with r's inverse, recovering x^k. section 11.2.2
Same input, different concealment
Different random blinding factors produce different messages to Bob, but the same input produces the same final PRF result after unblinding. section 11.2.2
