Jianan Lu

1. In the construction in Fig. 2 of Pretzel, one could have done the dot product inside the garbled circuits as well and not use the additive homomorphism. Why did the authors choose to do the dot product outside the garbled circuits?

The inputs are big and the computation procedure is now more complicated. This means the size of generated garbled circuit can become super large, which incurs a lot of network overheads and storage burden on the client side.