Methods for protecting privacy

A method performed by a first computing system, comprising:

• engaging, with a plurality of client devices, in an oblivious pseudorandom function protocol using a plurality of data items to produce a plurality of seeds;
• receiving, from the plurality of client devices, a plurality of encrypted secret shares and a plurality of verification shares, wherein each of the plurality of verification shares is a cryptographic commitment to a corresponding encrypted secret share;
• authenticating the plurality of encrypted secret shares by comparing the plurality of verification shares to a shared key associated with the encrypted secret shares;
• processing the plurality of encrypted secret shares to produce processed data;
• and
• transmitting the processed data to a second computing system, wherein the second computing system is configured to (i) recover underlying data from the plurality of encrypted secret shares and (ii) perform one or more aggregation operations using the underlying data.

A non-transitory computer readable medium, storing instructions that, upon execution by a first computing device, cause the first computing device to perform operations comprising:

• engaging, with a plurality of client devices, in an oblivious pseudorandom function protocol using a plurality of data items to produce a plurality of seeds;
• receiving, from the plurality of client devices, a plurality of encrypted secret shares and a plurality of verification shares, wherein each of the plurality of verification shares is a cryptographic commitment to a corresponding encrypted secret share;
• authenticating the plurality of encrypted secret shares using by comparing the plurality of verification shares to a shared key associated with the encrypted secret shares;
• processing the plurality of encrypted secret shares to produce processed data;
• and
• transmitting the processed data to a second computing system, wherein the second computing system is configured to (i) recover underlying data from the plurality of encrypted secret shares and (ii) perform one or more aggregation operations using the underlying data.