[tor-dev] Crux: Privacy-preserving statistics for Tor