Jeremy Kun on Nostr: Correct, they can't get away with pure FHE because it would be too slow to do a ...

Correct, they can't get away with pure FHE because it would be too slow to do a nearest neighbor search across all images. Sharding means that Apple sends each device all the cluster centroids, and the client requests a search within a particular cluster by including the centroid. The centroid would be public, and leak some info about what the client wants to identify, but the anonymization network + DP is supposed to alleviate this.

In my side of the world, we're not betting on hybrid protocols, and instead hardware acceleration, but basically all production FHE applications today are hybrid protocols like this. I wonder if the same author would feel the same way if they saw the other places this same technology was used.