@article{anattackoninstahideisprivatelearning,
  title = {Is Private Learning Possible with Instance Encoding?},
  author = {Nicholas Carlini and Samuel Deng and Sanjam Garg and Somesh Jha and Saeed Mahloujifar and Mohammad Mahmoody and Shuang Song and Abhradeep Thakurta and Florian Tramer},
  year = {2020},
  eprint = {2011.05315},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2011.05315v2},
}