Demonstrates the impact of identifier renewal on shuffle privacy, highlighting significant privacy degradation without it.
Exact information-theoretic framework for shuffle model privacy under partial linkability — when some messages can be linked via side-channels or timing attacks. Key result: The Anonymity Renewal Theorem shows that without per-round identifier renewal, privacy degrades catastrophically — over a billion-fold in 5 rounds. Includes exact JSD asymptotics, finite-n bounds, Gaussian extension, and design guidelines.
No takes yet. Share an insight, caveat, or question.
Alex B. Shvets (2026) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: