Are We There Yet? Timing and Floating-Point Attacks on Differential Privacy Systems. (arXiv:2112.05307v3 [cs.CR] UPDATED)

Differential privacy is a de facto privacy framework that has seen adoption
in practice via a number of mature software platforms. Implementation of
differentially private (DP) mechanisms has to be done carefully to ensure
end-to-end security guarantees. In this paper we study two implementation flaws
in the noise generation commonly used in DP systems. First we examine the
Gaussian mechanism's susceptibility to a floating-point representation attack.
The premise of this first vulnerability is similar to the one carried out by …

attacks differential privacy privacy systems