Differentially private aggregation of distributed time-series with transformation and encryption
Practical privacy: the SuLQ framework