Abstract: Different clients encrypt secrets using a server's public RSA key, blind them using randomly generated onetime use blinding factors, and bind them to unique identifiers of corresponding client policies. Encrypted, blinded secrets bound to unique policy ids are transmitted to the server. The server processes different encrypted, blinded secrets received from different clients according to the bound policies. Processing an encrypted blinded secret can involve decrypting it using the corresponding policy id and the server's private key, resulting in a decrypted but still blinded secret which is not readable by the server. The server can then transmit the decrypted blinded secret to one or more clients according to the policy. A client that receives the decrypted blinded secret can unblind and read the secret as plaintext, provided the client has the policy id and the unblinding factor.