The 900x Gap the Cipher Cannot Close

Ada re-derives this chapter’s own numbers step by step, at full precision

ADA · CALCULATION AUDIT

The 900x Gap the Cipher Cannot Close

The same encrypted smart meter reveals wildly different things depending on how often it samples. One reading per second lets individual appliance signatures — a kettle, a refrigerator compressor cycle, a television — become distinguishable, piling up roughly 2.6 million samples per meter each month. Drop to one reading every 15 minutes and about 2,880 samples still serve time-of-use billing while staying too coarse to name most appliances. The chapter’s point is that the privacy protection is the sampling rate, not the cipher — so this audit measures the gap between those two rates and asks whether encryption can ever close it.

Companion to the chapter Privacy vs Security in IoT — every number here comes from that chapter.

Ada: The smart-meter example rests on two sample counts — “roughly 2.6 million” per month at one sample per second, and “about 2,880” per month at one sample per fifteen minutes. Those two numbers are the whole argument for minimization, so let me confirm them and then measure the gap between them. I will use a 30-day month as the stated, illustrative basis.

• One sample per second: 1 x 60 x 60 x 24 x 30 = 2,592,000 samples — the chapter’s “roughly 2.6 million”.
• One sample per 15 minutes: (60 / 15) x 24 x 30 = 4 x 720 = 2,880 samples — the chapter’s “about 2,880”.

Both check out. Now the ratio of the two collection rates:

2,592,000 / 2,880 = 900

And that 900 is not arbitrary: fifteen minutes is 15 x 60 = 900 seconds, so the fast meter records one reading everywhere the slow meter records 1/900 of one. The fine-grained stream carries 900 times more readings per meter — and every one of those extra readings is where appliance-level inference lives.

The design point lands hard once the ratio is explicit: end-to-end encryption changes this 900x by a factor of exactly one, because the authorized utility decrypts and analyzes the data anyway. Only the sampling rate moves the number that matters. Whatever the meter never records at one-second resolution cannot later be breached, subpoenaed, or inferred — which is why the coarsest rate that still serves billing, not the strength of the cipher, is the real privacy control here.

Every number above is taken from the chapter’s own material and re-derived step by step.