[Resource Topic] 2021/266: VOLE-PSI: Fast OPRF and Circuit-PSI from Vector-OLE

Welcome to the resource topic for 2021/266

Title:
VOLE-PSI: Fast OPRF and Circuit-PSI from Vector-OLE

Authors: Peter Rindal, Phillipp Schoppmann

Abstract:

In this work we present a new construction for a batched Oblivious Pseudorandom Function (OPRF) based on Vector-OLE and the PaXoS data structure. We then use it in the standard transformation for achieving Private Set Intersection (PSI) from an OPRF. Our overall construction is highly efficient with O(n) communication and computation. We demonstrate that our protocol can achieve malicious security at only a very small overhead compared to the semi-honest variant. For input sizes n = 2^{20}, our malicious protocol needs 6.2 seconds and less than 59 MB communication. This corresponds to under 450 bits per element, which is the lowest number for any published PSI protocol (semi-honest or malicious) to date. Moreover, in theory our semi-honest (resp. malicious) protocol can achieve as low as 219 (resp. 260) bits per element for n=2^{20} at the added cost of interpolating a polynomial over n elements. As a second contribution, we present an extension where the output of the PSI is secret-shared between the two parties. This functionality is generally referred to as Circuit-PSI. It allows the parties to perform a subsequent MPC protocol on the secret-shared outputs, e.g., train a machine learning model. Our circuit PSI protocol builds on our OPRF construction along with another application of the PaXoS data structure. It achieves semi-honest security and allows for a highly efficient implementation, up to 3x faster than previous work.

ePrint: https://eprint.iacr.org/2021/266

Talk: https://www.youtube.com/watch?v=47o7E03is40

Slides: https://iacr.org/submit/files/slides/2021/eurocrypt/eurocrypt2021/366/slides.pdf

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .