Differential Privacy in the Shuffle Model: A Survey of Separations
Classical work in differential privacy operates in extremes of trust assumptions: either all users give their data to a single party or they have no trust in any party. The shuffle model posits an intermediary level of trust in hopes of gaining an intermediary level of accuracy. This survey gives an overview of results in the shuffle model which validate that trade off.