Abstract:Private Set Union (PSU) allows two players, the sender and the receiver, to compute the union of their input datasets without revealing any more information than the result. While it has found numerous applications in practice, not much research has been carried out so far, especially for large datasets. In this work, we take shuffling technique as a key to design PSU protocols for the first time. By shuffling receiver's set, we put forward the first protocol, denoted as Pi(R)(PSU), that eliminates the expensive operations in previous works, such as additive homomorphic encryption and repeated operations on the receiver's set. It outperforms the state-of-the-art design by Kolesnikov et al. (ASIACRYPT 2019) in both efficiency and security; the unnecessary leakage in Kolesnikov et al.'s design, can be avoided in our design. We further extend our investigation to the application scenarios in which both players may hold unbalanced input datasets. We propose our second protocol Pi(S)(PSU), by shuffling the sender's dataset. This design can be viewed as a dual version of our first protocol, and it is suitable in the cases where the sender's input size is much smaller than the receiver's. Finally, we implement our protocols Pi(R)(PSU) and Pi(S)(PSU) in C++ on big datasets, and perform a comprehensive evaluation in terms of both scalability and parallelizability. The results demonstrate that our design can obtain a 4-5 x improvement over the state-of-the-art by Kolesnikov et al. with a single thread in WAN/LAN settings.

AND Protocols Using Only Uniform Shuffles

Card-Based Cryptographic Protocols with a Standard Deck of Cards Using Private Operations

Card-Based Protocols for Private Set Intersection and Union

Card-based Cryptography with a Standard Deck of Cards, Revisited: Efficient Protocols in the Private Model

Secure Grouping Protocol Using a Deck of Cards

Using Five Cards to Encode Each Integer in $\mathbb{Z}/6\mathbb{Z}$

How to Solve Millionaires’ Problem with Two Kinds of Cards

Card-Based Overwriting Protocol for Equality Function and Applications

Practical card-based implementations of Yao's millionaire protocol

Multiparty protocol that usually shuffles

Private Set Intersection for Unequal Set Sizes with Mobile Applications.

A secure additive protocol for card players

The Landscape of Computing Symmetric $n$-Variable Functions with $2n$ Cards

Amplification by Shuffling without Shuffling

Round-Efficient Oblivious Database Manipulation

Automorphism Shuffles for Graphs and Hypergraphs and Its Applications

Efficient Fault-Tolerant Quantum Protocol for Differential Privacy in the Shuffle Model

Affine shuffles, shuffles with cuts, the Whitehouse module, and patience sorting

A More Efficient Computationally Sound Non-Interactive Zero-Knowledge Shuffle Argument

Shuffle-based Private Set Union: Faster and More Secure.

Privacy Amplification via Shuffled Check-Ins