DDH-based Private Intersection-Sum Protocol

A Rust implementation of the DDH-based Private Intersection-Sum protocol described in On Deploying Secure Computing: Private Intersection-Sum-with-Cardinality.

Stack

• PSI: ristretto255 with hash to curve.
• AHE: Paillier cryptosystem for additive homomorphic aggregation.

Demo

cargo run

TODO

• Hash seeding
• Hash on init
• Plaintext packing
• serde for communication measurement
• Benchmark