Lune

S&P2026Top-tier venue

Practical Multi-Party Private Set Intersection with Reducible Zero-Sharing

Yewei Guan, Hua Guo, Man Ho Au, Jiarong Huo, Jin Tan, Zhenyu Guan

2026Year

Abstract

Multi-party Private Set Intersection (mPSI) enables n(n≥3)n(n \geq 3) parties, each holding a set of size mm, to jointly compute their intersection while preserving the confidentiality of each set, which is essential for privacy-preserving data analysis and secure database queries. Existing mPSI protocols have limitations in achieving both sufficient security and practical efficiency. This paper presents a novel and efficient mPSI construction in the semi-honest model while resisting arbitrary collusion attacks. Our construction works in the offline/online paradigm. Given the corruption threshold tt, the online phase achieves linear total computational and communication complexity, that is O((n+t)m)O((n+t) m), and solely uses symmetric operations. This makes our construction theoretically outperform the existing works. The technical core of the construction is our newly extracted primitive called reducible zero-sharing, which allows t(tpartiestoobtainsharesofzeroforitemsintheintersectionoft(t parties to obtain shares of zero for items in the intersection of nparties′inputset,whileresistinguptoparties' input set, while resisting up tot-1colludingparties.Wepresentapracticalconstructionofreduciblezero−sharingintheoffline/onlineparadigmbyleveragingthehomomorphicpropertyofobliviouskey−valuestore(OKVS).Withextensiveexperiments,wedemonstratethatourconstructionoutperformsstate−of−the−artworksintermsofonlinerunningtimeandcommunicationcost.Specifically,comparedtoworkswithsufficientsecurity,theonlinerunningtimeofourmPSIconstructioniscolluding parties. We present a practical construction of reducible zero-sharing in the offline/online paradigm by leveraging the homomorphic property of oblivious key-value store (OKVS). With extensive experiments, we demonstrate that our construction outperforms state-of-the-art works in terms of online running time and communication cost. Specifically, compared to works with sufficient security, the online running time of our mPSI construction is9.57-114.46 fasterintheLANsetting,faster in the LAN setting,2.69-28.41 fasterintheWANsetting,whilethecommunicationcostisfaster in the WAN setting, while the communication cost is0.29-28.70 lower.Notably,thetotalperformance(offline+online)stillobtainsuptolower. Notably, the total performance (offline+online) still obtains up to18.73 $ improvement. Compared with works with practical efficiency, our mPSI construction achieves similar performance while providing stronger security.

Ask about this paper

Ask your agent about it.

Lune has read the top-tier papers around this one, so every answer names the papers it rests on.

Questions to start from

Your agent calls

Lunesearch_papers

Ask in Lune

Free to start. No credit card required.

Related papers

Dusk over the sea between two cliffs drawn in fine vertical lines