Unobservable communication over fully untrusted infrastructure ( extended version ) ⋆
Evaluating the privacy properties of telephone metadata