Title
Polynomial Representation Is Tricky: Maliciously Secure Private Set Intersection Revisited
Abstract
Private Set Intersection protocols (PSIs) allow parties to compute the intersection of their private sets, such that nothing about the sets' elements beyond the intersection is revealed. PSIs have a variety of applications, primarily in efficiently supporting data sharing in a privacy-preserving manner. At Eurocrypt 2019, Ghosh and Nilges proposed three efficient PSIs based on the polynomial representation of sets and proved their security against active adversaries. In this work, we show that these three PSIs are susceptible to several serious attacks. The attacks let an adversary (1) learn the correct intersection while making its victim believe that the intersection is empty, (2) learn a certain element of its victim's set beyond the intersection, and (3) delete multiple elements of its victim's input set. We explain why the proofs did not identify these attacks and propose a set of mitigations.
Year
DOI
Venue
2021
10.1007/978-3-030-88428-4_35
COMPUTER SECURITY - ESORICS 2021, PT II
DocType
Volume
ISSN
Conference
12973
0302-9743
Citations 
PageRank 
References 
0
0.34
0
Authors
3
Name
Order
Citations
PageRank
Aydin Abadi100.34
Steven J. Murdoch280657.90
Thomas Zacharias300.34