HSS VS FHE HSS is generally weaker 2(or more) shares Vs single ciphertext Non-collusion assumption but has some advantages Ultimate output compactness Efficient and public decoding Can aggregate many outputsHSS vs. FHE • HSS is generally weaker… – 2 (or more) shares vs. single ciphertext – Non-collusion assumption • … but has some advantages – Ultimate output compactness – Efficient and public decoding – Can aggregate many outputs