Privacy-preserving detection of poisoning attacks in federated learning