|
First, let's talk about the first protocol I want to introduce, secagg. SecAgg is a secure aggregation protocol based on a dual mask structure and a threshold sharing scheme and is mainly considered for implementation on mobile devices. The authors propose two variants of the protocol to facilitate balancing cost and security: one is more efficient and can be shown to be secure against honest but curious adversaries in the common model. The other guarantees privacy against malicious attackers (including malicious servers), but requires an extra round of consistency checks and sign and verify some of these communications using a third-party signing key and a verifying public key distributed by a third-party organization. In this protocol, users process data using a double mask structure. Each user calculates yu, and sends it to the server by the following formula where xu is the data of user u; U is the set of users. su,v is the shared secret value (unknown to the server) for user u and user v. Each user generates a random sample of bu and sends their share of bu secrets to all other users. |