We study the problem of private vector mean estimation in the shuffle model of privacy where users each have a unit vector in dimensions. We propose a new multi-message protocol that achieves the optimal error using messages per user. Moreover, we show that any (unbiased) protocol that achieves optimal error requires each user to send messages, demonstrating the optimality of our message complexity up to logarithmic factors.
Additionally, we study the single-message setting and design a protocol that achieves mean squared error . Moreover, we show that any single-message protocol must incur mean squared error showing that our protocol is optimal in the standard setting where . Finally, we study robustness to malicious users and show that malicious users can incur large additive error with a single shuffler.
