Private Set Intersection

TODO Definition

An attempt at capturing the dimensions of PSI:

  • Parties
    • 2 or multiparty?
  • Set Assumptions
    • Does the protocol assume any imbalance in the set sizes? (Unbalanced or balanced)
  • Correctness
  • Soundness
  • Privacy
    • Does the protocol reveal the set sizes? (Size-hiding or not)
    • Does the

Questions to ask when reading the paper

  • Number of parties: 2 or multiple
  • Is it one-sided or multi-sided? (Everyone gets the output or a specified party)
  • Corruption Model (Semi-honest, Malicious, Malicious and Helper)

Notes

  • First introduced by Meadows 1985 S&P
  • Typically \(\lambda = 40\) and the failure probability expected is \(2^{-40}\).

TODO Best Semi-honest 2-party implementation

TODO Best Semi-honest multi-party implementation

TODO Best Malicious 2-party implementation

TODO Best Malicious multi-party implementation

TODO Best Malicious multiparty-with-helper implementation

Variations of the problem

Asymmetric PSI (Unbalanced PSI)

Labelled PSI

Circuit PSI

PSI-WCA

PSI with weighted cardinality (I learnt about it from [1])

Surveys

  • [2]