Oct 2026· Proceedings on Privacy Enhancing Technologies· Vol 2026, pp. 1088-1105· 0 citations· 54 references
Computer Science
TL;DR
RingOA is introduced, the first three-party OA protocol that supports ET while directly producing arithmetic shares, and two practical applications are developed: a fully oblivious full-text search protocol for pattern matching over secret-shared string datasets, and a fully oblivious range-search protocol supporting statistical queries over secret-shared numerical sequences.
Abstract
Many privacy-preserving data analysis tasks based on multi-party computation require oblivious retrieval of data elements for downstream use. As database sizes grow, this retrieval step becomes a dominant bottleneck, highlighting the need for more efficient oblivious access (OA) primitives that retrieve a database entry without revealing the accessed position. A common approach uses distributed point functions (DPFs), which reduce communication but still incur local computation that scales linearly with the database size. Early termination (ET) optimization reduces local computation, but applying it yields only Boolean shares that require costly conversion for arithmetic use. This incompatibility between ET and arithmetic outputs makes it difficult for OA to scale efficiently on large databases. We introduce RingOA, the first three-party OA protocol that supports ET while directly producing arithmetic shares. Our method eliminates the need for share conversion and preserves the computational benefits of ET. RingOA achieves a 13.1x to 15.7x improvement in runtime on databases exceeding one billion entries compared to a state-of-the-art OA protocol. Building on RingOA, we construct an oblivious rank query, a core primitive underlying many structured-data analyses. We develop two practical applications: a fully oblivious full-text search protocol for pattern matching over secret-shared string datasets, and a fully oblivious range-search protocol supporting statistical queries over secret-shared numerical sequences. Experiments on real large-scale genomic datasets show that these applications achieve practical performance, demonstrating the utility of our OA protocol and its applications.
The first oblivious implementations of Rank and Select that require only a single ORAM access per operation, use O(1) client-side space, and add negligible client computation overhead are presented.
Mariagiovanna Rotundo, P. Ferragina· International Conference on...· 0 citations
Orq protects data against semi-honest or malicious parties and can efficiently evaluate relational queries with multi-way joins and aggregations that have been considered notoriously expensive under MPC.
Eli Baum, Sam Buxbaum, Nitin Mathai et al.· ACM Transactions on Computer...· 1 citation
This work proposes a practical non-interactive encrypted retrieval framework for RAG based on threshold selection, and introduces a precision-stable mask polarization method that ensures accurate recovery of selected documents.
Yang Gao, Gang Quan, Scott Piersall et al.· arXiv.org· 0 citations
Modern Log-Structured Merged-tree (LSM) based key-value stores achieve high performance through sequential writes and structured data organization, but this design implicitly exposes rich side-channel information at the storage layer. Even in the presence of encryption, adversaries can exploit observable artifacts, suc...
Tieming Geng, Chin-Tser Huang· International Conference on...· 0 citations
A practical design that combines Ring ORAM to hide access patterns to outsourced data, with a Patricia trie for space-efficient search over variable-length strings to support search over variable-length string datasets in an ORAM scenario, while retaining efficient storage and access both on the client and the server i...
Mariagiovanna Rotundo, Giuseppe Persiano, P. Ferragina· International Conference on...· 0 citations
This work presents an Authenticated Private Information Retrieval protocol for range queries with guarantees of soundness and completeness, and introduces the APIR-tree, a novel authenticated data structure that embeds values at every node, enabling nodes to serve as VOs for their ancestors and eliminating redundancy.