Constraining Pseudorandom Functions Privately

In a constrained pseudorandom function PRF, the master secret key can be used to derive constrained keys, where each constrained key﾿k is constrained with respect to some Boolean circuit﾿C. A constrained key﾿k can be used to evaluate the PRF on all inputs﾿x for which $Cx = 1$. In almost all existing constrained PRF constructions...More