Jointly Restraining Big Brother: Using cryptography to reconcile privacy with data aggregation