Suppose an aggregator wants to know the sum of n users ages. Design a scheme which allows the aggregator to obtain the sum without revealing any individual users age to any other party. Assumptions about the system: users can communication to each other; no party is trusted; at most two users can collude; no user colludes with the aggregator; no party can eavesdrop the communications between any two users.