Our Data, Ourselves: Privacy via Distributed Noise Generation
Calibrating Noise to Sensitivity in Private Data Analysis