https://whispersystems.org/blog/private-groups/ is going into some detail.