Skirting Additive Error Barriers for Private Turnstile Streams
Anders Aamand, Justin Y. Chen, Sandeep Silwal

TL;DR
This paper introduces algorithms for differentially private continual release of stream statistics that achieve polylogarithmic error bounds by allowing both additive and multiplicative errors, overcoming previous additive error barriers.
Contribution
It presents novel algorithms that break the additive error lower bounds for private turnstile streams by incorporating multiplicative error, using only polylogarithmic space.
Findings
Achieves polylogarithmic multiplicative and additive error for distinct count estimation.
Provides similar results for $F_2$ moment estimation with near-constant multiplicative error.
Uses polylogarithmic space, improving over prior polynomial space methods.
Abstract
We study differentially private continual release of the number of distinct items in a turnstile stream, where items may be both inserted and deleted. A recent work of Jain, Kalemaj, Raskhodnikova, Sivakumar, and Smith (NeurIPS '23) shows that for streams of length , polynomial additive error of is necessary, even without any space restrictions. We show that this additive error lower bound can be circumvented if the algorithm is allowed to output estimates with both additive \emph{and multiplicative} error. We give an algorithm for the continual release of the number of distinct elements with multiplicative and additive error. We also show a qualitatively similar phenomenon for estimating the moment of a turnstile stream, where we can obtain multiplicative and additive error. Both results…
Peer Reviews
Decision·ICLR 2026 Poster
* The paper provides a nice contribution to the literature on space-bounded private computations, addressing basic problems ($F_0$ and $F_2$ estimation). * The paper an open question explicitly asked by previous work of JKRSS (Jain et al, ICML 2023); it improves on [CEMMOZ] (Cummings et al., ICML 25), which explicitly addressed the same question. * The paper appears to be technically sound, with clear high-level overviews of the algorithms and proof ideas.
* The polylog multiplicative guarantee is quite weak. The previous work of CEMMOZ (as well as a combination of JKRSS and KNW'10) achieves a $(1+\eta)$-multiplicative guarantee, and already demonstrates that sublinear additive error and space guarantees are possible. Is there any evidence that one cannot get a constant-factor multiplicative approximation along with a polylogarithmic additive error guarantee? Significant, but not major, drawbacks: * The techniques in the paper are standard—the
The paper's strength lies in being the first private algorithm for distinct counting and F_2 moment estimation under the general turnstile update model. Their result also raises a general question as to what the tradeoff is between multiplicative and additive error. I also like the fact that the authors mention some open problems with proper discussion. In terms of idea, I do not see something new that comes up and that is alright. I do not consider it a weakness and actually consider a streng
My biggest worry is that the multiplicative error and the additive error have the same scale. In particular, what the authors end up showing in the upper bound side is that they can approximate distinct elements with polylog(T) multiplicative approximation (the additive term can get subsumed if we consider that there are at least $O(1)$ distinct elements). The same goes for $F_2$ estimation. This makes me a little worried about the strength of the result, especially because in both problems, one
- This paper opens an interesting research direction of considering multiplicative error algorithms in the space of continual release algorithms, where strong additive error lower bounds are known. - Allowing for multiplicative error gives rise to algorithms with polylog space, which has been a relevant question of prior works (Jain et al 2023, Cummings et al 25).
- The algorithmic techniques are not very novel, the main results are achieved through a combination of common streaming algorithms and the differentially private technique of continual counting. - Without lower bounds, it is hard to say how close/far from optimal the approximation bound is. It is very open whether an algorithm with constant multiplicative error exists.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsCryptography and Data Security · Privacy-Preserving Technologies in Data · Blockchain Technology Applications and Security
