Private Set Union (PSU) allows two parties to compute the union of their private sets without revealing any additional information—in particular, it hides their common elements (the intersection). Although recent years have seen significant progress under the semi-honest model, resulting in several efficient two-party PSU protocols, notable gaps remain: (1) some prior works model the semi-honest PSU functionality inaccurately, and (2) practical and scalable maliciously secure protocols are still lacking, except when relying on heavy generic techniques (e.g., FHE, GMW, or general-purpose NIZK). In this paper, we address these issues directly and summarize our contributions as follows:

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Malicious Private Set Union with Two-Sided Output

  • Sihang Pu,
  • Jiahui Gao,
  • Ni Trieu

摘要

Private Set Union (PSU) allows two parties to compute the union of their private sets without revealing any additional information—in particular, it hides their common elements (the intersection). Although recent years have seen significant progress under the semi-honest model, resulting in several efficient two-party PSU protocols, notable gaps remain: (1) some prior works model the semi-honest PSU functionality inaccurately, and (2) practical and scalable maliciously secure protocols are still lacking, except when relying on heavy generic techniques (e.g., FHE, GMW, or general-purpose NIZK). In this paper, we address these issues directly and summarize our contributions as follows: