mlsanityData to 7 Oct 2026

Fingerprinting Codes Meet Geometry: Improved Lower Bounds for Private Query Release and Adaptive Data Analysis

arXiv 2412.14396 ↗First posted 18 Dec 2024cs.DS cs.CR cs.LGcited by 3

Not on the map. Why?

Abstract (arXiv)

Fingerprinting codes are a crucial tool for proving lower bounds in differential privacy. They have been used to prove tight lower bounds for several fundamental questions, especially in the ``low accuracy'' regime. Unlike reconstruction/discrepancy approaches however, they are more suited for query sets that arise naturally from the fingerprinting codes construction. In this work, we propose a general framework for proving fingerprinting type lower bounds, that allows us to tailor the technique to the geometry of the query set. Our approach allows us to prove several new results, including the following. First, we show that any (sample- and population-)accurate algorithm for answering Q arbitrary adaptive counting queries over a universe X to accuracy α needs Omega(frac√log |X|· log Qα3) samples, matching known upper bounds. This shows that the approaches based on differential privacy are optimal for this question, and improves significantly on the previously known lower bounds of fraclog Qα2 and min(√Q, √log |X|)/α2. Second, we show that any (varepsilon,δ)-DP algorithm for answering Q counting queries to accuracy α needs Omega(frac√ log|X| log(1/δ) log Qvarepsilonα2) samples, matching known upper bounds up to constants. Our framework allows for proving this bound via a direct correlation analysis and improves the prior bound of [BUV'14] by √log(1/δ). Third, we characterize the sample complexity of answering a set of random 0-1 queries under approximate differential privacy. We give new upper and lower bounds in different regimes. By combining them with known results, we can complete the whole picture.

Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 40 of its 68 references that are in the map. First posted on arXiv 18 Dec 2024.

Builds on

40 of 68 references.

References · 40

  1. 2016Concentrated Differential Privacy: Simplifications, Extensions, and Lower Boundscited by 339
  2. 2016Concentrated Differential Privacycited by 139
  3. 2014Preserving Statistical Validity in Adaptive Data Analysiscited by 102
  4. 2015Algorithmic Stability for Adaptive Data Analysiscited by 88
  5. 2013Fingerprinting Codes and the Price of Approximate Differential Privacycited by 81
  6. 2015Generalization in Adaptive Data Analysis and Holdout Reusecited by 76
  7. 2023Federated Learning of Gboard Language Models with Differential Privacycited by 64
  8. 2015Between Pure and Approximate Differential Privacycited by 55
  9. 2020Differentially Private Assouad, Fano, and Le Camcited by 54
  10. 2022Geographic Spines in the 2020 Census Disclosure Avoidance Systemcited by 42
  11. 2014Interactive Fingerprinting Codes and the Hardness of Preventing False Discoverycited by 35
  12. 2014Preventing False Discovery in Interactive Data Analysis is Hardcited by 34
28 more
  1. 2017Tight Lower Bounds for Differentially Private Selectioncited by 33
  2. 2022New Lower Bounds for Private Estimation and a Generalized Fingerprinting Lemmacited by 32
  3. 2017Calibrating Noise to Variance in Adaptive Data Analysiscited by 28
  4. 2017Generalization for Adaptively-chosen Estimators via Stable Mediancited by 26
  5. 2021Tight and Robust Private Mean Estimation with Few Userscited by 26
  6. 2016Max-Information, Differential Privacy, and Post-Selection Hypothesis Testingcited by 25
  7. 2020A Framework for Adversarially Robust Streaming Algorithmscited by 21
  8. 2020Adversarially Robust Streaming Algorithms via Differential Privacycited by 21
  9. 2023Score Attack: A Lower Bound Technique for Optimal Differentially Private Learningcited by 21
  10. 2019The Adversarial Robustness of Samplingcited by 18
  11. 2013Efficient Algorithms for Privately Releasing Marginals via Convex Relaxationscited by 17
  12. 2021Dynamic Algorithms Against an Adaptive Adversary: Generic Constructions and Lower Boundscited by 17
  13. 2018The Limits of Post-Selection Generalizationcited by 16
  14. 2023Better and Simpler Lower Bounds for Differentially Private Statistical Estimationcited by 16
  15. 2024Differentially Private Release of Israel's National Registry of Live Birthscited by 16
  16. 2020A bounded-noise mechanism for differential privacycited by 15
  17. 2018Towards Instance-Optimal Private Query Releasecited by 9
  18. 2022Adaptive Data Analysis with Correlated Observationscited by 9
  19. 2023On Differential Privacy and Adaptive Data Analysis with Bounded Spacecited by 9
  20. 2023Subsampling Suffices for Adaptive Data Analysiscited by 9
  21. 2024Lower Bounds for Private Estimation of Gaussian Covariance Matrices under All Reasonable Parameter Regimescited by 9
  22. 2024Instance-Optimal Private Density Estimation in the Wasserstein Distancecited by 9
  23. 2023Smooth Lower Bounds for Differentially Private Algorithms via Padding-and-Permuting Fingerprinting Codescited by 8
  24. 2017Sampling Without Compromising Accuracy in Adaptive Data Analysiscited by 6
  25. 2023Adaptive Data Analysis in a Balanced Adversarial Modelcited by 5
  26. 2017Information, Privacy and Stability in Adaptive Data Analysiscited by 4
  27. 2016Challenges in Bayesian Adaptive Data Analysiscited by 3
  28. 2022Generalized Private Selection and Testing with High Confidencecited by 2

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 1; 2026: 2.

3 papers.