Private Join and Compute from PIR with Default [article]

Tancrède Lepoint, Sarvar Patel, Mariana Raykova, Karn Seth, Ni Trieu
2020 IACR Cryptology ePrint Archive  
The private join and compute (PJC) functionality enables secure computation over data distributed across different databases, and is applicable to a wide range of applications, many of which address settings where the input databases are of significantly different sizes. We introduce the notion of private information retrieval (PIR) with default, which enables two-party PJC functionalities in a way that hides the size of the intersection of the two databases and incurs sublinear communication
more » ... st in the size of the bigger database. We provide two constructions for this functionality, one of which requires offline linear communication, which can be amortized across queries, and one that provides sublinear cost for each query but relies on more computationally expensive tools. We construct inner-product PJC, which has applications to ads conversion measurement and contact tracing, relying on an extension of PIR with default. We evaluate the efficiency of our constructions, which can enable 2 8 PIR with default lookups on a database of size 2 25 (or inner-product PJC on databases with such sizes) with the communication of 44MB, which costs less than 0.17c. for the client and 26.48c. for the server.
dblp:journals/iacr/LepointPRST20 fatcat:gxrgysd2dngtjddfhctuqq437u