Hacker News new | ask | show | jobs
by snovv_crash 2211 days ago
If it's the same query, it would be the same 100 random rows, wouldn't it? Then repeated queries wouldn't leak.
1 comments

No, if you run the same query the server must not be able to determine that it was the same query. Repeated invocations of the same question would be transformed with added noise during encryption so that the encrypted query and answer is different each time.

If the same query would access the same 100 random rows, then after seeing your (hidden) query and getting the 100-random-row signature it would be trivial to run a bunch of candidates and see which one of them gets the same 100-random-row signature and thus figure out what you queried.