From Length to Content: Token-Length Side-Channel Attacks on LLM API Merged Outputs

Sijia Li, Tianyu Cui, Miao Chen, Xinjie Lin, and Zheyuan Gu, Zhongguancun Laboratory; Xinhao Deng, Tsinghua University; Ke Xu and Qi Li, Tsinghua University; Zhongguancun Laboratory