We present a practical framework for asynchronous anonymous broadcasts with guaranteed output delivery (G.O.D., a.k.a. robustness), enabling a set of servers to privately solicit messages from distinct clients, such that these messages remain secret until they are simultaneously revealed in a uniformly random order. Here, asynchronous G.O.D. ensures that all solicited messages will eventually be randomly mixed despite (i) arbitrary malicious behaviors by up to Byzantine servers and (ii) unpredictable network delays and jitters.
At the core of , we first propose a couple of practical arithmetic circuits and for mixing in Shamir-secret-shared multi-party computation (MPC) over , along with their server-optimized variants. When randomly mixing messages, their online phases require only multiplicative depth, expected scalar multiplications (between public and shared values), and up to MPC multiplications (between shared values). Moreover, assuming a robust underlying MPC framework, they guarantee that all revealed inputs are uniformly shuffled. In contrast, existing techniques fail to achieve all these performance and functionality features: The DC-net variant (CCS’20) may reveal a non-negligible fraction of inputs without shuffling them; Butterfly switching networks in secret-shared MPC (CCS’19) incur multiplicative depth; RabbitMix (Security’24) requires MPC multiplications; and PowerMix (CCS’19) incurs scalar multiplications.
We also implement our mixing methods within , our computation-optimized implementation of the state-of-the-art robust AMPC framework (Security’25), which provides more concretely efficient offline preprocessing while preserving asynchronous G.O.D. and optimal resilience. We then conduct extensive evaluations with to servers under varying network settings, revealing that our new mixing circuits achieve 44.8--65.9× (resp. 37.1--52.7×), 4.8--7.1× (resp. 3.9--5.5×), and 2.7--4.0× (resp. 5.1--7.2×) speedups over RabbitMix, PowerMix, and the butterfly switching network, respectively, when shuffling 1024 messages in LAN (resp. WAN).