I wonder if anybody has any thoughts on this article. Can a system that encrypts a 128-bit block with AES in several seconds (in comparison, Crypto++ benchmark only needs a fraction of a millisecond) really be called practical? Also some other works (e.g., reference ) also claimed that MPCs are becoming practical. But in , comparing two 16-bit integers takes up to a few minutes. With this kind of performance, can they really be used in the real-world?