|
The Third one we would like to discuss is User Dropout Robustness. We note that all current secure aggregation protocols that we are aware of use threshold sharing schemes to solve the user dropout problem. Since threshold sharing involves extensive sharing between users for secret shares and communication between users is typically left to the server, this approach introduces significant communication overhead and additional communication rounds. This single technical limitation also leads to secure aggregation protocols for scenarios that must have user dropout robustness to use only secret sharing primitives for encryption. We hope that in the future development of secure aggregation more solutions to the user dropout problem will emerge or targeted sharing solutions with better performance can be proposed, and FastShare gives us a good start. |