Malicious Private Set Union with Two-Sided Output
摘要
Private Set Union (PSU) allows two parties to compute the union of their private sets without revealing any additional information—in particular, it hides their common elements (the intersection). Although recent years have seen significant progress under the semi-honest model, resulting in several efficient two-party PSU protocols, notable gaps remain: (1) some prior works model the semi-honest PSU functionality inaccurately, and (2) practical and scalable maliciously secure protocols are still lacking, except when relying on heavy generic techniques (e.g., FHE, GMW, or general-purpose NIZK). In this paper, we address these issues directly and summarize our contributions as follows: