One Attack to Rule Them All: Tight Quadratic Bounds for Adaptive Queries on Cardinality Sketches

Cardinality sketches are compact data structures for representing sets or vectors. These sketches are space-efficient, typically requiring only logarithmic storage in the input size, and enable approximation of cardinality (or the number of nonzero entries). A crucial property in applications is composability, meaning that the sketch of a union of sets can be computed from individual sketches. Existing designs provide strong statistical guarantees, ensuring that a randomly sampled sketching map remains robust for an exponential number of queries in terms of the sketch size k. However, these guarantees degrade to quadratic in k when queries are adaptive, meaning they depend on previous responses.

Prior works on statistical queries (Steinke and Ullman, 2015) and specific MinHash cardinality sketches (Ahmadian and Cohen, 2024) established that this is tight in that they can be compromised using a quadratic number of adaptive queries. In this work, we develop a universal attack framework that applies to broad classes of cardinality sketches. We show that any union-composable sketching map can be compromised with Õ(k 4 ) adaptive queries and this improves to a tight bound of Õ(k 2 ) for monotone maps (including MinHash, statistical queries, and Boolean linear maps). Similarly, any linear sketching map over the reals R and finite fields F p can be compromised using Õ(k 2 ) adaptive queries, which is optimal and strengthens some of the recent results by Gribelyuk et al. [2024], who established a weaker polynomial bound.

1 and to support additional approximate queries in sketch space such as set similarity 2 for the purpose of analysis, the queries can be considered to be fixed in advance, before the map is sampled.