Tight Accounting in the Shuffle Model of Differential Privacy
  Shuffle model of differential privacy is a novel distributed privacy model
based on a combination of local privacy mechanisms and a secure shuffler. It
has been shown that the additional randomisation provided by the shuffler
improves privacy bounds compared to the purely local mechanisms. Accounting
tight bounds, however, is complicated by the complexity brought by the
shuffler. The recently proposed numerical techniques for evaluating
$(\varepsilon,\delta)$-differential privacy guarantees have been shown to give
tighter bounds than commonly used methods for compositions of various complex
mechanisms. In this paper, we show how to obtain accurate bounds for adaptive
compositions of general $\varepsilon$-LDP shufflers using the analysis by
Feldman et al. (2021) and tight bounds for adaptive compositions of shufflers
of $k$-randomised response mechanisms, using the analysis by Balle et al.
(2019). We show how to speed up the evaluation of the resulting privacy loss
distribution from $\mathcal{O}(n^2)$ to $\mathcal{O}(n)$, where $n$ is the
number of users, without noticeable change in the resulting
$\delta(\varepsilon)$-upper bounds. We also demonstrate looseness of the
existing bounds and methods found in the literature, improving previous
composition results significantly.
