Stronger Privacy Amplification by Shuffling for R'enyi and Approximate Differential Privacy
Not on the map. Why?
Abstract (arXiv)
The shuffle model of differential privacy has gained significant interest as an intermediate trust model between the standard local and central models [EFMRTT19; CSUZZ19]. A key result in this model is that randomly shuffling locally randomized data amplifies differential privacy guarantees. Such amplification implies substantially stronger privacy guarantees for systems in which data is contributed anonymously [BEMMRLRKTS17]. In this work, we improve the state of the art privacy amplification by shuffling results both theoretically and numerically. Our first contribution is the first asymptotically optimal analysis of the R'enyi differential privacy parameters for the shuffled outputs of LDP randomizers. Our second contribution is a new analysis of privacy amplification by shuffling. This analysis improves on the techniques of [FMT20] and leads to tighter numerical bounds in all parameter settings.
Key facts. Cited by 29 papers in the map (data through 7 Oct 2026). Builds on 23 of its 33 references that are in the map. First posted on arXiv 9 Aug 2022.
Builds on
23 of 33 references.
References · 23
- 2016Deep Learning with Differential Privacycited by 2,682
- 2017Renyi Differential Privacycited by 643
- 2016Concentrated Differential Privacy: Simplifications, Extensions, and Lower Boundscited by 339
- 2014RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Responsecited by 262
- 2018Amplification by Shuffling: From Local to Central Differential Privacy via Anonymitycited by 163
- 2017Collecting Telemetry Data Privatelycited by 147
- 2016Concentrated Differential Privacycited by 139
- 2020The Discrete Gaussian for Differential Privacycited by 134
- 2018Distributed Differential Privacy via Shufflingcited by 115
- 2020Hiding Among the Clones: A Simple and Nearly Optimal Analysis of Privacy Amplification by Shufflingcited by 96
- 2019The Privacy Blanket of the Shuffle Modelcited by 73
- 2017Prochlo: Strong Privacy for Analytics in the Crowdcited by 51
11 more
- 2020Encode, Shuffle, Analyze Privacy Revisited: Formalizations and Empirical Evaluationcited by 39
- 2020Privacy Amplification via Random Check-Inscited by 39
- 2017Prio: Private, Robust, and Scalable Computation of Aggregate Statisticscited by 35
- 2020Private Summation in the Multi-Message Shuffle Modelcited by 34
- 2017Optimal Schemes for Discrete Distribution Estimation under Locally Differential Privacycited by 28
- 2019Scalable and Differentially Private Distributed Aggregation in the Shuffled Modelcited by 20
- 2019Separating Local & Shuffled Differential Privacy via Histogramscited by 16
- 2019Private Aggregation from Fewer Anonymous Messagescited by 15
- 2020Shuffled Model of Federated Learning: Privacy, Communication and Accuracy Trade-offscited by 15
- 2020The Limits of Pan Privacy and Shuffle Privacy for Learning and Estimationcited by 7
- 2021Tight Accounting in the Shuffle Model of Differential Privacycited by 5
Built on by
Citing papers per year: 2022: 2; 2023: 6; 2024: 8; 2025: 8; 2026: 5.
29 papers.
Sort:
- 2022Composition of Differential Privacy & Privacy Amplification by Subsamplingcited by 42
- 2023One-shot Empirical Privacy Estimation for Federated Learningcited by 35
- 2023Privacy Amplification via Compression: Achieving the Optimal Privacy-Accuracy-Communication Trade-off in Distributed Mean Estimationcited by 22
- 2024How Private are DP-SGD Implementations?cited by 22
- 2022Individual Privacy Accounting with Gaussian Differential Privacycited by 19
- 2024Scalable DP-SGD: Shuffling vs. Poisson Subsamplingcited by 16
- 2023Unified Enhancement of Privacy Bounds for Mixture Mechanisms via f-Differential Privacycited by 13
- 2025Privacy amplification by random allocationcited by 13
- 2024A Statistical Viewpoint on Differential Privacy: Hypothesis Testing, Representation and Blackwell's Theoremcited by 8
- 2025Leveraging Randomness in Model and Data Partitioning for Privacy Amplificationcited by 7
- 2024To Shuffle or not to Shuffle: Auditing DP-SGD with Shufflingcited by 6
- 2024Improved Communication-Privacy Trade-offs in L2 Mean Estimation under Streaming Differential Privacycited by 4
17 more
- 2026Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGDcited by 4
- 2025Mitigating Privacy-Utility Trade-off in Decentralized Federated Learning via f-Differential Privacycited by 3
- 2026Efficient privacy loss accounting for subsampling and random allocationcited by 3
- 2023Multi-Message Shuffled Privacy in Federated Learningcited by 2
- 2023Differentially Private Heavy Hitter Detection using Federated Analyticscited by 2
- 2024Convex Approximation of Two-Layer ReLU Networks for Hidden State Differential Privacycited by 2
- 2023Training generative models from privatized datacited by 1
- 2024Beyond Statistical Estimation: Differentially Private Individual Computation via Shufflingcited by 1
- 2024Universally Harmonizing Differential Privacy Mechanisms for Federated Learning: Boosting Accuracy and Convergencecited by 1
- 2025Learning from End User Data with Shuffled Differential Privacy over Kernel Densitiescited by 1
- 2025How to Securely Shuffle? A survey about Secure Shufflers for privacy-preserving computationscited by 1
- 2025Practical and Private Hybrid ML Inference with Fully Homomorphic Encryptioncited by 0
- 2025Federated Learning with Enhanced Privacy via Model Splitting and Random Client Participationcited by 0
- 2025Differentially Private Spectral Graph Clustering: Balancing Privacy, Accuracy, and Efficiencycited by 0
- 2026Jacobian-Guided Anisotropic Noise Reshaping for Enhancing Representation Utility under Local Differential Privacycited by 0
- 2026Dithered Gaussian Mechanism for Randomness-Efficient Differential Privacycited by 0
- 2026Robust Estimation of Sparse Numerical Vectors under Local Differential Privacycited by 0
- 2026Robust Estimation of Sparse Numerical Vectors under Local Differential Privacy30 Jul 2026
- 2026Dithered Gaussian Mechanism for Randomness-Efficient Differential Privacy7 Jul 2026
- 2026Jacobian-Guided Anisotropic Noise Reshaping for Enhancing Representation Utility under Local Differential Privacy16 May 2026
- 2026Efficient privacy loss accounting for subsampling and random allocation19 Feb 2026
- 2026Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGD15 Jan 2026
- 2025Mitigating Privacy-Utility Trade-off in Decentralized Federated Learning via f-Differential Privacy22 Oct 2025
- 2025Differentially Private Spectral Graph Clustering: Balancing Privacy, Accuracy, and Efficiency8 Oct 2025
- 2025Federated Learning with Enhanced Privacy via Model Splitting and Random Client Participation30 Sep 2025
- 2025Practical and Private Hybrid ML Inference with Fully Homomorphic Encryption1 Sep 2025
- 2025How to Securely Shuffle? A survey about Secure Shufflers for privacy-preserving computations2 Jul 2025
- 2025Leveraging Randomness in Model and Data Partitioning for Privacy Amplification4 Mar 2025
- 2025Learning from End User Data with Shuffled Differential Privacy over Kernel Densities19 Feb 2025
17 more
- 2025Privacy amplification by random allocation12 Feb 2025
- 2024To Shuffle or not to Shuffle: Auditing DP-SGD with Shuffling15 Nov 2024
- 2024Scalable DP-SGD: Shuffling vs. Poisson Subsampling6 Nov 2024
- 2024A Statistical Viewpoint on Differential Privacy: Hypothesis Testing, Representation and Blackwell's Theorem14 Sep 2024
- 2024Universally Harmonizing Differential Privacy Mechanisms for Federated Learning: Boosting Accuracy and Convergence20 Jul 2024
- 2024Convex Approximation of Two-Layer ReLU Networks for Hidden State Differential Privacy5 Jul 2024
- 2024Beyond Statistical Estimation: Differentially Private Individual Computation via Shuffling26 Jun 2024
- 2024Improved Communication-Privacy Trade-offs in L2 Mean Estimation under Streaming Differential Privacy2 May 2024
- 2024How Private are DP-SGD Implementations?26 Mar 2024
- 2023Unified Enhancement of Privacy Bounds for Mixture Mechanisms via f-Differential Privacy30 Oct 2023
- 2023Differentially Private Heavy Hitter Detection using Federated Analytics21 Jul 2023
- 2023Training generative models from privatized data15 Jun 2023
- 2023Privacy Amplification via Compression: Achieving the Optimal Privacy-Accuracy-Communication Trade-off in Distributed Mean Estimation4 Apr 2023
- 2023Multi-Message Shuffled Privacy in Federated Learning22 Feb 2023
- 2023One-shot Empirical Privacy Estimation for Federated Learning6 Feb 2023
- 2022Composition of Differential Privacy & Privacy Amplification by Subsampling2 Oct 2022
- 2022Individual Privacy Accounting with Gaussian Differential Privacy30 Sep 2022
- 2022Composition of Differential Privacy & Privacy Amplification by Subsamplingcited by 42
- 2023One-shot Empirical Privacy Estimation for Federated Learningcited by 35
- 2023Privacy Amplification via Compression: Achieving the Optimal Privacy-Accuracy-Communication Trade-off in Distributed Mean Estimationcited by 22
- 2024How Private are DP-SGD Implementations?cited by 22
- 2022Individual Privacy Accounting with Gaussian Differential Privacycited by 19
- 2024Scalable DP-SGD: Shuffling vs. Poisson Subsamplingcited by 16
- 2023Unified Enhancement of Privacy Bounds for Mixture Mechanisms via f-Differential Privacycited by 13
- 2025Privacy amplification by random allocationcited by 13
- 2024A Statistical Viewpoint on Differential Privacy: Hypothesis Testing, Representation and Blackwell's Theoremcited by 8
- 2025Leveraging Randomness in Model and Data Partitioning for Privacy Amplificationcited by 7
- 2024To Shuffle or not to Shuffle: Auditing DP-SGD with Shufflingcited by 6
- 2024Improved Communication-Privacy Trade-offs in L2 Mean Estimation under Streaming Differential Privacycited by 4
12 most cited of 29 All 29 (JSON)
- 2026Robust Estimation of Sparse Numerical Vectors under Local Differential Privacy30 Jul 2026
- 2026Dithered Gaussian Mechanism for Randomness-Efficient Differential Privacy7 Jul 2026
- 2026Jacobian-Guided Anisotropic Noise Reshaping for Enhancing Representation Utility under Local Differential Privacy16 May 2026
- 2026Efficient privacy loss accounting for subsampling and random allocation19 Feb 2026
- 2026Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGD15 Jan 2026
- 2025Mitigating Privacy-Utility Trade-off in Decentralized Federated Learning via f-Differential Privacy22 Oct 2025
- 2025Differentially Private Spectral Graph Clustering: Balancing Privacy, Accuracy, and Efficiency8 Oct 2025
- 2025Federated Learning with Enhanced Privacy via Model Splitting and Random Client Participation30 Sep 2025
- 2025Practical and Private Hybrid ML Inference with Fully Homomorphic Encryption1 Sep 2025
- 2025How to Securely Shuffle? A survey about Secure Shufflers for privacy-preserving computations2 Jul 2025
- 2025Leveraging Randomness in Model and Data Partitioning for Privacy Amplification4 Mar 2025
- 2025Learning from End User Data with Shuffled Differential Privacy over Kernel Densities19 Feb 2025
12 newest of 29 All 29 (JSON)