Common PIR schemes only protect the client's privacy, not the server's, while Symmetric PIR(SPIR) can do both.

In many papers, it is mentioned that we can use the Naor and Pinkas method (https://dl.acm.org/doi/pdf/10.1145/301250.301312) to turn a PIR scheme into SPIR one, however when implementing this, I found this method is only useful for one query:

In Protocol 2.1, A use oblivious transfer to pick l keys out of B's 2l keys. This is just allowed to be done once, otherwise A could get most of the 2l keys and decrypt everything she got.

To ensure B's privacy, the database has to change all the 2*l keys (i.e. re-encrypt all the entries) after each query. So I wonder is Naor and Pinkas' method efficient for Symmetric BatchPIR ?


  • 1
    $\begingroup$ I am unfamiliar with SPIR, but my understanding was that PIR that protects both a senders and recievers' privacy was actually Oblivious Transfer (OT), so you may find it useful to look into this notion as well. $\endgroup$
    – Mark Schultz-Wu
    Commented Aug 18, 2023 at 16:25


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.