Provable security
without compromising privacy