{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:3Z3MAWNSEBJ42VVAOEY3CD6FAX","short_pith_number":"pith:3Z3MAWNS","canonical_record":{"source":{"id":"2208.04591","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-08-09T08:13:48Z","cross_cats_sorted":["cs.DS","cs.LG","stat.ML"],"title_canon_sha256":"13f5532be850a08024eefc86df653ff3fd1701ecd822e1287605bcf832bdca72","abstract_canon_sha256":"7b453e99f6f753990b401a37ece8a9811eb829fc285f248fd3ad4a607869d142"},"schema_version":"1.0"},"canonical_sha256":"de76c059b22053cd56a07131b10fc505f9f5efb018ccb1955826da7bb364c7da","source":{"kind":"arxiv","id":"2208.04591","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2208.04591","created_at":"2026-07-05T07:07:04Z"},{"alias_kind":"arxiv_version","alias_value":"2208.04591v2","created_at":"2026-07-05T07:07:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2208.04591","created_at":"2026-07-05T07:07:04Z"},{"alias_kind":"pith_short_12","alias_value":"3Z3MAWNSEBJ4","created_at":"2026-07-05T07:07:04Z"},{"alias_kind":"pith_short_16","alias_value":"3Z3MAWNSEBJ42VVA","created_at":"2026-07-05T07:07:04Z"},{"alias_kind":"pith_short_8","alias_value":"3Z3MAWNS","created_at":"2026-07-05T07:07:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:3Z3MAWNSEBJ42VVAOEY3CD6FAX","target":"record","payload":{"canonical_record":{"source":{"id":"2208.04591","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-08-09T08:13:48Z","cross_cats_sorted":["cs.DS","cs.LG","stat.ML"],"title_canon_sha256":"13f5532be850a08024eefc86df653ff3fd1701ecd822e1287605bcf832bdca72","abstract_canon_sha256":"7b453e99f6f753990b401a37ece8a9811eb829fc285f248fd3ad4a607869d142"},"schema_version":"1.0"},"canonical_sha256":"de76c059b22053cd56a07131b10fc505f9f5efb018ccb1955826da7bb364c7da","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:07:04.609311Z","signature_b64":"/HQBAlQK8R+ztENF7yFfc3g+e5OkOwuj6CO8d6Fgx8fkB9e//V/F9mUz4hSAdfNopeefJaRqkMmljFhQkTZfDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"de76c059b22053cd56a07131b10fc505f9f5efb018ccb1955826da7bb364c7da","last_reissued_at":"2026-07-05T07:07:04.608876Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:07:04.608876Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2208.04591","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:07:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4u1l/RKcJKsN3sk0ZEf0akcIFXfySjpBSN/QswAkl64RyMfqbvMyQG3VnXl5ykakuUld/abFK9uzTZaGtkChAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T11:22:48.968110Z"},"content_sha256":"af0872489c86bb9e62b893a950da07f5b44889294140dec5907e99309ac8fc5d","schema_version":"1.0","event_id":"sha256:af0872489c86bb9e62b893a950da07f5b44889294140dec5907e99309ac8fc5d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:3Z3MAWNSEBJ42VVAOEY3CD6FAX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Stronger Privacy Amplification by Shuffling for R\\'enyi and Approximate Differential Privacy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.DS","cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Audra McMillan, Kunal Talwar, Vitaly Feldman","submitted_at":"2022-08-09T08:13:48Z","abstract_excerpt":"The shuffle model of differential privacy has gained significant interest as an intermediate trust model between the standard local and central models [EFMRTT19; CSUZZ19]. A key result in this model is that randomly shuffling locally randomized data amplifies differential privacy guarantees. Such amplification implies substantially stronger privacy guarantees for systems in which data is contributed anonymously [BEMMRLRKTS17].\n  In this work, we improve the state of the art privacy amplification by shuffling results both theoretically and numerically. Our first contribution is the first asympt"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2208.04591","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2208.04591/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:07:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QPVhQgt6BIFNyyO7u15gmYg8/p86uRaGKRWIPp4HyUVvFWIhW0fQRrSpGopepcGbo3ZA5oN8TviL4xCfPERkBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T11:22:48.968717Z"},"content_sha256":"fad5bb7474473af893063e087315cda51d63242a63564b104c89543f5bed6f17","schema_version":"1.0","event_id":"sha256:fad5bb7474473af893063e087315cda51d63242a63564b104c89543f5bed6f17"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3Z3MAWNSEBJ42VVAOEY3CD6FAX/bundle.json","state_url":"https://pith.science/pith/3Z3MAWNSEBJ42VVAOEY3CD6FAX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3Z3MAWNSEBJ42VVAOEY3CD6FAX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T11:22:48Z","links":{"resolver":"https://pith.science/pith/3Z3MAWNSEBJ42VVAOEY3CD6FAX","bundle":"https://pith.science/pith/3Z3MAWNSEBJ42VVAOEY3CD6FAX/bundle.json","state":"https://pith.science/pith/3Z3MAWNSEBJ42VVAOEY3CD6FAX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3Z3MAWNSEBJ42VVAOEY3CD6FAX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:3Z3MAWNSEBJ42VVAOEY3CD6FAX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7b453e99f6f753990b401a37ece8a9811eb829fc285f248fd3ad4a607869d142","cross_cats_sorted":["cs.DS","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-08-09T08:13:48Z","title_canon_sha256":"13f5532be850a08024eefc86df653ff3fd1701ecd822e1287605bcf832bdca72"},"schema_version":"1.0","source":{"id":"2208.04591","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2208.04591","created_at":"2026-07-05T07:07:04Z"},{"alias_kind":"arxiv_version","alias_value":"2208.04591v2","created_at":"2026-07-05T07:07:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2208.04591","created_at":"2026-07-05T07:07:04Z"},{"alias_kind":"pith_short_12","alias_value":"3Z3MAWNSEBJ4","created_at":"2026-07-05T07:07:04Z"},{"alias_kind":"pith_short_16","alias_value":"3Z3MAWNSEBJ42VVA","created_at":"2026-07-05T07:07:04Z"},{"alias_kind":"pith_short_8","alias_value":"3Z3MAWNS","created_at":"2026-07-05T07:07:04Z"}],"graph_snapshots":[{"event_id":"sha256:fad5bb7474473af893063e087315cda51d63242a63564b104c89543f5bed6f17","target":"graph","created_at":"2026-07-05T07:07:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2208.04591/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The shuffle model of differential privacy has gained significant interest as an intermediate trust model between the standard local and central models [EFMRTT19; CSUZZ19]. A key result in this model is that randomly shuffling locally randomized data amplifies differential privacy guarantees. Such amplification implies substantially stronger privacy guarantees for systems in which data is contributed anonymously [BEMMRLRKTS17].\n  In this work, we improve the state of the art privacy amplification by shuffling results both theoretically and numerically. Our first contribution is the first asympt","authors_text":"Audra McMillan, Kunal Talwar, Vitaly Feldman","cross_cats":["cs.DS","cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-08-09T08:13:48Z","title":"Stronger Privacy Amplification by Shuffling for R\\'enyi and Approximate Differential Privacy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2208.04591","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:af0872489c86bb9e62b893a950da07f5b44889294140dec5907e99309ac8fc5d","target":"record","created_at":"2026-07-05T07:07:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7b453e99f6f753990b401a37ece8a9811eb829fc285f248fd3ad4a607869d142","cross_cats_sorted":["cs.DS","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-08-09T08:13:48Z","title_canon_sha256":"13f5532be850a08024eefc86df653ff3fd1701ecd822e1287605bcf832bdca72"},"schema_version":"1.0","source":{"id":"2208.04591","kind":"arxiv","version":2}},"canonical_sha256":"de76c059b22053cd56a07131b10fc505f9f5efb018ccb1955826da7bb364c7da","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"de76c059b22053cd56a07131b10fc505f9f5efb018ccb1955826da7bb364c7da","first_computed_at":"2026-07-05T07:07:04.608876Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:07:04.608876Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/HQBAlQK8R+ztENF7yFfc3g+e5OkOwuj6CO8d6Fgx8fkB9e//V/F9mUz4hSAdfNopeefJaRqkMmljFhQkTZfDA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:07:04.609311Z","signed_message":"canonical_sha256_bytes"},"source_id":"2208.04591","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:af0872489c86bb9e62b893a950da07f5b44889294140dec5907e99309ac8fc5d","sha256:fad5bb7474473af893063e087315cda51d63242a63564b104c89543f5bed6f17"],"state_sha256":"fb2af5c06d14d958f4eef6d3a535651fae49f513c540e9de64cc481e70b8682f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Js8VQOwKEfnCeDsnwqIu5dOpNmf2Av+7BAaKvhsxlK7q6BPMNCZvQUOyDXFkb4xMivM1HZPjq/OmhDhuOcw6Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T11:22:48.975171Z","bundle_sha256":"a59029df318f7637984852d7f6c33d49ed9034827554b13d3623e667a79f17ff"}}