Skip to content

Latest commit

 

History

History
60 lines (47 loc) · 3 KB

README.md

File metadata and controls

60 lines (47 loc) · 3 KB
Raw

Basic PSI protocol example

The following diagram explains the basic example of the library using Client to implement two roles that want to know the common items between they data without share the raw version with the other:

Alice (client A):

  1. Shares to Bob him RSA public key to share the common prime number securily.
  2. With him SRA key, encrypts him own data, receives the Bob encrypted data and re-encrypts it to be shared with Bob.
  3. Receives the interesection result and parse it (decrypting with him SRA key).

Bob (client B):

  1. Generates a common prime and encrypt it with the Alice RSA public key to share it with her.
  2. With his SRA key, encrypts his own data, send it to Alice to be re-encrypted by she.
  3. Receives his re-encrypted data from Alice and creates a Bloom Filter to be rady for any intersection request.
  4. Receives Alice encrypted data to perform the intersection, re-encrypts it with his SRA key and compare with his
  5. re-encrypted data using the Bloom Filter.

This example is implemented into psi_example/main.go file.

However you can use SRA or BloomFilters isolated and also design your own protocol using it.

Run the example

go run main.go

Iteration flow

sequenceDiagram
    participant Alice (client A)
    participant Bob (client B)

    par
        Alice (client A)-->>Alice (client A): initialize the client - Client.Init()
    and
        Bob (client B)-->>Bob (client B): initialize the client - Client.Init()
    end

    Note over Alice (client A),Bob (client B): Request intersection
    Alice (client A)->>+Bob (client B): send alice RSA public key - Client.PubKey()
    Bob (client B)-->>Bob (client B): generate prime number and encrypt it w/ alice public key - Client.GenEncryptedPrime()
    Bob (client B)-->>-Alice (client A): send prime number encrypted
    Alice (client A)-->>Alice (client A): decrypt and store prime number received - Client.SetEncryptedPrime()

    Note over Alice (client A),Bob (client B): perform intersection
    par both encrypts its own data with the common prime
        Alice (client A)-->>Alice (client A): encrypt its data with SRA - Client.Encrypt()
    and
        Bob (client B)-->>Bob (client B): encrypt its data with SRA - Client.Encrypt()
    end

    Bob (client B)->>Alice (client A): send encrypted data
    Alice (client A)-->>Alice (client A): re-encrypt bob data with SRA - Client.EncryptExt()
    Alice (client A)->>Bob (client B): send its encrypted data and bobs re-encrypted data
    Bob (client B)-->>Bob (client B): initialize intersection with re-encrypted data - Client.PrepareIntersection()
    Bob (client B)-->>Bob (client B): re-encrypt alice data with SRA and compare - Client.GetIntersection()
    Bob (client B)-->>Alice (client A): send the intersection between re-encrypted data sets
    Alice (client A)-->>Alice (client A): decrypte and parse the results of intersection - Client.ParseIntersection()
Loading