Syllabus

Content

Topic 1: Aggregate User Data Collection and Telemetry
Cryptographic protocols	Systems
Differential privacy, central model Differential privacy, local model Secret sharing Oblivious pseudorandom functions	Google: RAPPOR Mozilla: Prio Brave: STAR Academic: Poplar for heavy hitters Academic: Popstar Academic: Whisper

Topic 2: Advertising Personalization and Attribution
Cryptographic protocols	Systems
Blind signatures Private set intersection Private information retrieval	Google: Privacy Sandbox + Topics Apple: Private Click Measurement Mozilla + Meta: Interoperable Private Attribution Microsoft: Parakeet Facebook: Private Matching for Compute Brave: PrivateFetch Academic: Ibex

Topic 3: Payments
Cryptographic protocols	Systems
Sigma protocols for discrete log representations General-purpose SNARKs	Monero ZCash / TornadoCash Academic: UTT Academic: Derecho

Topic 4: Aggregate User Data Collection and Telemetry (Part 2)
Cryptographic protocols	Systems
Mixnets Differential privacy, shuffle model Pairwise masking Additive homomorphic encryption	Google: Prochlo Academic: Differentially-oblivious Shuffling Google: Secure Aggregation for Machine Learning Academic: Flamingo Academic: Secure Aggregation from LWE

Format

This course will consist of a mix of instructor presentations and student presentations, primarily based on paper-reading and discussion. Each topic will begin with instructor presentations on relevant underlying cryptographic protocols and representative systems in which they have been proposed/deployed. Student presentations will build on this base to cover newly-proposed academic systems in the topic space. The course will also have a project component in which students may dive deeper into a particular topic or apply learned cryptographic protocols to a different topic of their choosing.