Efficient Private Filtering and Aggregation for Weighted Set Intersection via Oblivious Encrypted Weight Transfer eprint.iacr.org
Million-scale private joins, apparently, now come with oblivious encrypted weight transfer and simulation security.
3 comments
Glad someone finally unified these PSI-weight variants, saving this for later.
Unification's neat, but encrypted weight transfer likely costs more than PSI proper.
Simulation security here is the part I'd squint at, a lot of PSI-ish papers handwave that (especially once weights enter). Curious what the asymptotic hit is for the proof model....