Fuzzy PSI from Symmetric Primitives with Exact Logarithmic Dependence on Distance Threshold
About
Previous FPSI works have demonstrated a linear scaling with the distance threshold $\delta$, while some recent works have achieved a poly-logarithmic dependence on $\delta$. However, these protocols either support only the $L_\infty$ distance, or they support general $L_{p\in[1,\infty]}$ distances but rely on expensive additive homomorphic encryption (AHE). Achieving exact logarithmic dependence on $\delta$ for general $L_{p\in[1,\infty]}$ distances without relying on costly AHE would constitute a theoretical breakthrough in optimal threshold scaling and a practical advance toward scalable FPSI applications. In this work, we present new FPSI protocols for $L_{p\in[1,\infty]}$ distances that are entirely built from oblivious transfer (OT) and symmetric-key primitives. We propose FPSI protocols based on both the apart and the separate assumptions, which are applicable to low- and high-dimensional settings, respectively. Our constructions achieve strictly logarithmic complexity in $\delta$, which is optimal in the sense that distinguishing all values in an interval of length $O(\delta)$ necessarily requires $\Omega(\log \delta)$ bits of information. Our core idea is to perform fuzzy matching via prefix representation and interactively determine the correct prefix using equality conditions. To this end, we propose a suite of new components that can be implemented efficiently using only OT and symmetric-key operations. We implement our FPSI protocols and compare them with the state-of-the-art FPSI protocols for $L_{p\in[1,\infty]}$ distance. Experiments show that our protocols outperform the prior state-of-the-art by up to $43.7\times$ in runtime and $31.3\times$ in communication.
Related benchmarks
| Task | Dataset | Result | Rank | |
|---|---|---|---|---|
| L1 distance computation | High-dimensional WAN setting for L1 distance | Communication Cost (MB)21.81 | 165 | |
| High-dimensional L_infinity distance Fuzzy Private Set Intersection | Synthetic datasets in WAN setting | Communication Cost (MB, delta=16)11.1 | 51 | |
| Fuzzy Private Set Intersection | Synthetic Set Size m=n=2^8, Dimension d=2 | Communication Cost (MB)10.03 | 20 | |
| Fuzzy Private Set Intersection | Synthetic Set Size m=n=2^8, Dimension d=3 | Communication Cost (MB)17.37 | 20 | |
| Fuzzy Private Set Intersection | Synthetic Set Size m=n=2^8, Dimension d=4 | Communication Cost (MB)29 | 20 | |
| Fuzzy Private Set Intersection | Synthetic Set Size m=n=2^{12}, Dimension d=2 | Communication Cost (MB)127.8 | 20 | |
| Fuzzy Private Set Intersection | Synthetic Set Size m=n=2^{12}, Dimension d=3 | Communication Cost (MB)246.1 | 20 | |
| Fuzzy Private Set Intersection | L1-FPSI Set Size m=n=2^8, Dimension d=2, WAN | Communication Cost (MB)7.329 | 20 | |
| Fuzzy Private Set Intersection | L1-FPSI Set Size m=n=2^8, Dimension d=3, WAN | Communication Cost (MB)12.15 | 20 | |
| Fuzzy Private Set Intersection | L1-FPSI Set Size m=n=2^8, Dimension d=4, WAN | Communication Cost (MB)20.08 | 20 |