Towards making private telemetry as ubiquitous as TLS
summary
Proposes Heli, a heavy‑light private aggregation design that makes the nonprofit “light” helper’s cost essentially constant by using a key‑homomorphic PRF and an aggregation‑only encryption primitive plus client zero‑knowledge proofs. Implemented in Rust over Ristretto255 and evaluated on AWS with 10 million simulated clients (10% dropout, 32 one‑bit inputs per client), the light server does one exponentiation and sends one group element per aggregate, yielding up to a 120,000x reduction versus Prio/Whisper while the heavy server’s work rises (up to ~60x); requires one‑time setup and stable client sets.
AI-written summary · about
chapters (8)
- 0:00Private telemetry challenges
- 3:36Barriers to aggregation adoption
- 7:33Heavy-light aggregation model
- 12:04Heli encryption model
- 19:49Heli evaluation at scale
- 24:51Adoption incentives like TLS
- 28:05Open problems and future work
- 31:15Q&A
related talks
27mMetadata-private data transfer
57mPractical Groth16 Aggregation
40mWillow: Secure Aggregation with One-Shot Clients
40mIt’s a Kind Of Magic: Computation on Ciphertexts
28mPaying for Privacy Preserving Messaging
08mPrivacy and Security
26mUse case deep dive: Secure and privacy-preserving cyber threat intelligence exchange
45mUnjamming Lightning