Matching Without Sharing: Private Set Intersection in Government and Industry
cdt.org