Unobservable communication over fully untrusted infrastructure
The Power of Two Choices in Randomized Load Balancing