[tor-bugs] #23147 [Core Tor/Tor]: prop280: Merge privcount-in-tor data collector backend implementation

[Tor Bug Tracker & Wiki]

#23147: prop280: Merge privcount-in-tor data collector backend implementation
--------------------------+------------------------------------
 Reporter:  nickm         |          Owner:  (none)
     Type:  defect        |         Status:  new
 Priority:  Medium        |      Milestone:  Tor: 0.3.3.x-final
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:  SponsorQ
--------------------------+------------------------------------

Comment (by teor):

 T5. The function documentation of sample_unit_gaussian() should answer the
 following questions:
 * what is the range of outputs?
 * what is the precision of the outputs?

 sample_gaussian() should document, and possible enforce:
 * what is the maximum `stddev` value that can be used within the limits of
 double precision arithmetic?
   * to preserve differential privacy, the low bits have to be obscured by
 the noise. So this can be at most 2^53^.
 * what is the minimum `stddev` value that can be used within the limits of
 double precision arithmetic?
   * (zero provides no differential privacy)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23147#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online