MIT/EPFL anonymity system (PETS 2016) combining verifiable shuffles with private information retrieval. Provides anonymity even when most servers in the anonymity set are malicious, with bandwidth costs an order of magnitude better than prior strong-anonymity systems. Research prototype, no deployed implementation.