Attacks

correlation
queries and blocks are encrypted
... but adversary can likely guess keys
partitioning
content migration
probabilities
highly connected network
hot-path routing
query padding instead of noise
... but strong adversary may still succeed
=> configure to require more cover traffic
isolation