{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:O3PPVRBHJYHUSYUJXNW5PYP3QM","short_pith_number":"pith:O3PPVRBH","canonical_record":{"source":{"id":"1808.01394","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-04T00:24:12Z","cross_cats_sorted":["cs.DS"],"title_canon_sha256":"939e19c276b5294fda5b513e6a5f677c49d21f3c114281b7338109b7ce409f7d","abstract_canon_sha256":"240e00a5c087bba1af6b6f8ac0192f2c3ae0f2d710c2679121455cbd4630aebe"},"schema_version":"1.0"},"canonical_sha256":"76defac4274e0f496289bb6dd7e1fb8314164cfa6eea931443a5f91c363f40f2","source":{"kind":"arxiv","id":"1808.01394","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1808.01394","created_at":"2026-05-17T23:45:58Z"},{"alias_kind":"arxiv_version","alias_value":"1808.01394v3","created_at":"2026-05-17T23:45:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1808.01394","created_at":"2026-05-17T23:45:58Z"},{"alias_kind":"pith_short_12","alias_value":"O3PPVRBHJYHU","created_at":"2026-05-18T12:32:40Z"},{"alias_kind":"pith_short_16","alias_value":"O3PPVRBHJYHUSYUJ","created_at":"2026-05-18T12:32:40Z"},{"alias_kind":"pith_short_8","alias_value":"O3PPVRBH","created_at":"2026-05-18T12:32:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:O3PPVRBHJYHUSYUJXNW5PYP3QM","target":"record","payload":{"canonical_record":{"source":{"id":"1808.01394","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-04T00:24:12Z","cross_cats_sorted":["cs.DS"],"title_canon_sha256":"939e19c276b5294fda5b513e6a5f677c49d21f3c114281b7338109b7ce409f7d","abstract_canon_sha256":"240e00a5c087bba1af6b6f8ac0192f2c3ae0f2d710c2679121455cbd4630aebe"},"schema_version":"1.0"},"canonical_sha256":"76defac4274e0f496289bb6dd7e1fb8314164cfa6eea931443a5f91c363f40f2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:45:58.008881Z","signature_b64":"+GjanCOX5FiIHlUmp6AEzu/c5/KvHsgxlEsqEBAFQweVLvY9+6DLd151m8peV+DCPtOqYJkwhYJtSUsnIY3mCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"76defac4274e0f496289bb6dd7e1fb8314164cfa6eea931443a5f91c363f40f2","last_reissued_at":"2026-05-17T23:45:58.008364Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:45:58.008364Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1808.01394","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:45:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IKYCW7Q9P6CC5wUZneSrsZgk0qc0GHuHP5id9EoALEtmkH4AeobIOPD1Ux+ZVHG2AEMnw3Ebp7YFXK1T1UAjAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-08T20:42:23.421597Z"},"content_sha256":"6cae2a6c89537c8b43f0bf9cca2456185dd55a36987033da46a93411f0af6bdd","schema_version":"1.0","event_id":"sha256:6cae2a6c89537c8b43f0bf9cca2456185dd55a36987033da46a93411f0af6bdd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:O3PPVRBHJYHUSYUJXNW5PYP3QM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Distributed Differential Privacy via Shuffling","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.DS"],"primary_cat":"cs.CR","authors_text":"Adam Smith, Albert Cheu, David Zeber, Jonathan Ullman, Maxim Zhilyaev","submitted_at":"2018-08-04T00:24:12Z","abstract_excerpt":"We consider the problem of designing scalable, robust protocols for computing statistics about sensitive data. Specifically, we look at how best to design differentially private protocols in a distributed setting, where each user holds a private datum. The literature has mostly considered two models: the \"central\" model, in which a trusted server collects users' data in the clear, which allows greater accuracy; and the \"local\" model, in which users individually randomize their data, and need not trust the server, but accuracy is limited. Attempts to achieve the accuracy of the central model wi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1808.01394","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:45:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NiB4uV1duqv56yQTzewNLynFa2FMXITRkfL7AZOEweWKD42nEU0CodLgNrs7qqObisFbps2Y6YHCASU370tOCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-08T20:42:23.422377Z"},"content_sha256":"a863e5deac3b712807af08c40bb0798f4334826715d21254f3b45c710d242b8f","schema_version":"1.0","event_id":"sha256:a863e5deac3b712807af08c40bb0798f4334826715d21254f3b45c710d242b8f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O3PPVRBHJYHUSYUJXNW5PYP3QM/bundle.json","state_url":"https://pith.science/pith/O3PPVRBHJYHUSYUJXNW5PYP3QM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O3PPVRBHJYHUSYUJXNW5PYP3QM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-08T20:42:23Z","links":{"resolver":"https://pith.science/pith/O3PPVRBHJYHUSYUJXNW5PYP3QM","bundle":"https://pith.science/pith/O3PPVRBHJYHUSYUJXNW5PYP3QM/bundle.json","state":"https://pith.science/pith/O3PPVRBHJYHUSYUJXNW5PYP3QM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O3PPVRBHJYHUSYUJXNW5PYP3QM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:O3PPVRBHJYHUSYUJXNW5PYP3QM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"240e00a5c087bba1af6b6f8ac0192f2c3ae0f2d710c2679121455cbd4630aebe","cross_cats_sorted":["cs.DS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-04T00:24:12Z","title_canon_sha256":"939e19c276b5294fda5b513e6a5f677c49d21f3c114281b7338109b7ce409f7d"},"schema_version":"1.0","source":{"id":"1808.01394","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1808.01394","created_at":"2026-05-17T23:45:58Z"},{"alias_kind":"arxiv_version","alias_value":"1808.01394v3","created_at":"2026-05-17T23:45:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1808.01394","created_at":"2026-05-17T23:45:58Z"},{"alias_kind":"pith_short_12","alias_value":"O3PPVRBHJYHU","created_at":"2026-05-18T12:32:40Z"},{"alias_kind":"pith_short_16","alias_value":"O3PPVRBHJYHUSYUJ","created_at":"2026-05-18T12:32:40Z"},{"alias_kind":"pith_short_8","alias_value":"O3PPVRBH","created_at":"2026-05-18T12:32:40Z"}],"graph_snapshots":[{"event_id":"sha256:a863e5deac3b712807af08c40bb0798f4334826715d21254f3b45c710d242b8f","target":"graph","created_at":"2026-05-17T23:45:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"We consider the problem of designing scalable, robust protocols for computing statistics about sensitive data. Specifically, we look at how best to design differentially private protocols in a distributed setting, where each user holds a private datum. The literature has mostly considered two models: the \"central\" model, in which a trusted server collects users' data in the clear, which allows greater accuracy; and the \"local\" model, in which users individually randomize their data, and need not trust the server, but accuracy is limited. Attempts to achieve the accuracy of the central model wi","authors_text":"Adam Smith, Albert Cheu, David Zeber, Jonathan Ullman, Maxim Zhilyaev","cross_cats":["cs.DS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-04T00:24:12Z","title":"Distributed Differential Privacy via Shuffling"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1808.01394","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6cae2a6c89537c8b43f0bf9cca2456185dd55a36987033da46a93411f0af6bdd","target":"record","created_at":"2026-05-17T23:45:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"240e00a5c087bba1af6b6f8ac0192f2c3ae0f2d710c2679121455cbd4630aebe","cross_cats_sorted":["cs.DS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-04T00:24:12Z","title_canon_sha256":"939e19c276b5294fda5b513e6a5f677c49d21f3c114281b7338109b7ce409f7d"},"schema_version":"1.0","source":{"id":"1808.01394","kind":"arxiv","version":3}},"canonical_sha256":"76defac4274e0f496289bb6dd7e1fb8314164cfa6eea931443a5f91c363f40f2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"76defac4274e0f496289bb6dd7e1fb8314164cfa6eea931443a5f91c363f40f2","first_computed_at":"2026-05-17T23:45:58.008364Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:45:58.008364Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+GjanCOX5FiIHlUmp6AEzu/c5/KvHsgxlEsqEBAFQweVLvY9+6DLd151m8peV+DCPtOqYJkwhYJtSUsnIY3mCQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:45:58.008881Z","signed_message":"canonical_sha256_bytes"},"source_id":"1808.01394","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6cae2a6c89537c8b43f0bf9cca2456185dd55a36987033da46a93411f0af6bdd","sha256:a863e5deac3b712807af08c40bb0798f4334826715d21254f3b45c710d242b8f"],"state_sha256":"7157823344f23c87499362b4c6a59575832bfc1a942cbff4eae68a16d077fc04"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dhgGnY4Pf5bSWUUcmmI6wljwdT0TTbFDjkwy13w9kv7h5ZdRpzB5RmEC6Ay9gYrUvITJ5q/hktfwOFvLbYE+Cw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-08T20:42:23.426328Z","bundle_sha256":"27751db8e0465da834126b92d55b44e42b0d0a8d1b4222120ca1257931a8b884"}}