Privacy-preserving Average Consensus: Privacy Analysis and Algorithm Design