Experimental evaluation of privacy-preserving aggregation schemes on planetlab