Privacy-Enhancing Technologies

Overview

Personal information is central to our identity, and protecting it is crucial to preserving our fundamental right to privacy. Yet, rapid advances in technology often challenge our ability to safeguard it. In this course, we will explore how privacy can be formally defined and protected. We will examine how techniques from cryptography and statistics can be applied to build systems that enable data-driven applications while protecting individual privacy.

The first part of the course introduces key cryptographic concepts, including secure multiparty computation (MPC), fully homomorphic encryption (FHE), zero-knowledge proofs (ZKPs), private information retrieval, oblivious RAM, and anonymous communication protocols. The second part covers statistical approaches to privacy, with a particular focus on differential privacy. Toward the end of the course, we will discuss real-world applications of these privacy-enhancing technologies.

Course Information

• Instructor: Anwar Hithnawi
• E-mail: ahithnawi@cs.toronto.edu
• Class Time & Location: Thursday 9:00 AM – 11:00 AM. Room: BA 2179
• Office Hours: Thursday , 11:00 AM – 12:00 PM, or by appointment. Room: BA 7270

Important Links

• Course Website: https://pps-lab.com/teaching/pets
• Quercus (announcements): https://q.utoronto.ca/courses/466647
• Paper Reviews: https://uoft-csc2231f2026.hotcrp.com/
  

All course materials, including the schedule, lecture slides, and readings, will be available on the course website.

Prerequisites

A general background in computer systems and cryptography is required. There is no required textbook for this course. For a refresher on security concepts, you can consult the Berkeley Introduction to Security Textbook and for cryptography, see A Graduate Course in Applied Cryptography.

Course Evaluation

• 30% – Paper presentation (slides due at the start of your presentation)
• 20% – Participation and paper reviews (reviews due at the start of class)
• 10% – Project proposal (due October 15)
• 40% – Final project (due December 10)

Deliverables

Presentations and Reviews: All students are required to read both papers assigned for each class before the session. You must submit a written review for one of those two papers (of your choice) by 9:00 AM on the day of the lecture. Each paper will be presented by a designated student in a 30-minute conference-style talk. The presenter will then lead a discussion lasting about 55 minutes in total for both presentation and Q&A. We will have a 10-minute break at the midpoint of class. One week before your scheduled presentation, please meet with me during office hours to get feedback on your slides and talk. In addition to the two assigned papers per class, recommended readings will sometimes be posted. You are encouraged to read as many of these additional materials as possible to get the most out of the course.

Projects: Students will work in pairs on a research project related to privacy-enhancing technologies. Each pair must submit a proposal to the instructor no later than October 15 at 9:00 AM. Near the end of the term, you will present your work to the class in a 30-minute (including Q&A) conference-style presentation. In addition, by December 10, you must submit either a workshop-quality paper of 8–10 pages describing your project or a technical blog post. Examples of blog posts from last year’s course projects can be found here. We encourage you to consult with the instructor regularly to ensure you are making progress. If you have difficulty finding a project topic, please reach out early; we can provide a list of suggested topics.

Format

Please submit your presentation slides, project proposal, and final project write-up in PDF format via email. We strongly encourage typesetting your deliverables in LaTeX. Use the course’s HotCRP submission system to submit paper reviews for assigned readings.

Late Policy

• Paper reviews: No reviews are accepted once the class has started. You may skip reviews for two papers without penalty.

• Project proposal and final report: If your project proposal or final report is submitted late, 20% will be deducted from the grade for each day it is overdue.

Policy on the Use of Artificial Intelligence

Large-language model-based tools (e.g., ChatGPT) can be very helpful, and you are encouraged to leverage them. However, please do not use them in any way that trivializes the assignments or bypasses the course's learning objectives. If you have doubts about permissible usage, please check with the instructor first.

Schedule and Readings

The schedule may be adjusted as the semester progresses; any changes will be announced in class and on Quercus. If you have questions, please contact the instructor. Check this link to find out when you're presenting.