<p>Multi-party Private Set Union (MPSU) enables multiple parties to compute the union of their private sets while revealing nothing beyond the resulting union. Gao et al. (PETS 2024) proposed an efficient MPSU protocol for large-scale sets that resists maximum semi-honest collusion, where only a designated leader learns the union. Their protocol nevertheless incurs high communication overhead due to transmitting large volumes of threshold re-randomizable public-key encryption (TR-PKE) ciphertexts during interaction. In this work, we design an optimized protocol, <InlineEquation ID="IEq1"> <EquationSource Format="TEX">\(\Pi _\text {MPSU}^\text {one-leader}\)</EquationSource> </InlineEquation>, that reduces communication by using symmetric-key encryption (SKE) for most message payloads and restricting TR-PKE to a few indispensable operations. Security is preserved by separating roles. TR-PKE is used only for set items that require re-randomization and joint threshold decryption, while SKE protects all other messages carrying masked or randomized intermediate payloads. Building on <InlineEquation ID="IEq2"> <EquationSource Format="TEX">\(\Pi _\text {MPSU}^\text {one-leader}\)</EquationSource> </InlineEquation>, we further propose a leaderless protocol, <InlineEquation ID="IEq3"> <EquationSource Format="TEX">\(\Pi _\text {MPSU}^\text {leaderless}\)</EquationSource> </InlineEquation>, which allows all parties to obtain the union output and mitigates the risk of a single leader dominating in decentralized deployments. We implement our schemes and conduct a comparison with state-of-the-art. The results demonstrate that <InlineEquation ID="IEq4"> <EquationSource Format="TEX">\(\Pi _\text {MPSU}^\text {one-leader}\)</EquationSource> </InlineEquation> achieves a 4–<InlineEquation ID="IEq5"> <EquationSource Format="TEX">\(5\times\)</EquationSource> </InlineEquation> shrinking in communication and a 1.3–<InlineEquation ID="IEq6"> <EquationSource Format="TEX">\(1.8\times\)</EquationSource> </InlineEquation> speedup, depending on the set size and the number of parties.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Efficient multi-party private set union resistant to maximum collusion attacks

  • Qiang Liu,
  • Joon-Woo Lee

摘要

Multi-party Private Set Union (MPSU) enables multiple parties to compute the union of their private sets while revealing nothing beyond the resulting union. Gao et al. (PETS 2024) proposed an efficient MPSU protocol for large-scale sets that resists maximum semi-honest collusion, where only a designated leader learns the union. Their protocol nevertheless incurs high communication overhead due to transmitting large volumes of threshold re-randomizable public-key encryption (TR-PKE) ciphertexts during interaction. In this work, we design an optimized protocol, \(\Pi _\text {MPSU}^\text {one-leader}\) , that reduces communication by using symmetric-key encryption (SKE) for most message payloads and restricting TR-PKE to a few indispensable operations. Security is preserved by separating roles. TR-PKE is used only for set items that require re-randomization and joint threshold decryption, while SKE protects all other messages carrying masked or randomized intermediate payloads. Building on \(\Pi _\text {MPSU}^\text {one-leader}\) , we further propose a leaderless protocol, \(\Pi _\text {MPSU}^\text {leaderless}\) , which allows all parties to obtain the union output and mitigates the risk of a single leader dominating in decentralized deployments. We implement our schemes and conduct a comparison with state-of-the-art. The results demonstrate that \(\Pi _\text {MPSU}^\text {one-leader}\) achieves a 4– \(5\times\) shrinking in communication and a 1.3– \(1.8\times\) speedup, depending on the set size and the number of parties.