Note: All protocols for secure three-party/four-party computation (i.e., 3PC/4PC) tolerate one corruption, and thus belong to the honest-majority setting. For malicious adversaries, “Abort”, “Fairness”, and “GOD” denote the PPML protocols that achieve security with abort, fairness, and guaranteed output delivery, respectively. For the underlying LSSS, we use “ASS” and “RSS” to denote the additive secret sharing and the replicated secret sharing, respectively. If a PPML protocol supports multiple neural-network architectures, we only describe the one with largest parameters for private ML inference.