M ixminion: D esign of a T ype III Anonymous Remailer Prot ocol - - PowerPoint PPT Presentation

m ixminion d esign of a t ype iii anonymous remailer prot
SMART_READER_LITE
LIVE PREVIEW

M ixminion: D esign of a T ype III Anonymous Remailer Prot ocol - - PowerPoint PPT Presentation

M ixminion: D esign of a T ype III Anonymous Remailer Prot ocol Roger D ingledine T he Free Haven Project 1 T hreat M odel ( what we aim t o defend against ) Global passive adversary can observe M ult iple Hops A E ...(E (M,to B),


slide-1
SLIDE 1

M ixminion: D esign of a T ype III Anonymous Remailer Prot ocol Roger D ingledine T he Free Haven Project

1

slide-2
SLIDE 2

T hreat M odel ( what we aim t o defend against )

  • Global passive adversary – can observe
slide-3
SLIDE 3
slide-4
SLIDE 4
slide-5
SLIDE 5

M ult iple Hops

1

A B

M

2

E ...(E (M,to B), to 2)

2 1 2

E ...(M,to B)

slide-6
SLIDE 6
slide-7
SLIDE 7

D irect Reply

slide-8
SLIDE 8
slide-9
SLIDE 9

Nymserver

NS

B A

E(E(...(M))) M,alice@nym.alias.net M, "alice"

...

N S knows A ’s reply block but not her locat ion.

9

slide-10
SLIDE 10
slide-11
SLIDE 11
slide-12
SLIDE 12
slide-13
SLIDE 13

Replay cache

  • W hen a message comes in, hash it and add it t o

t he replay cache.

  • If it ’s already in t he cache, drop it .

B ut : you have t o remember all t he hashes forever!

13

slide-14
SLIDE 14

Expirat ion dat es

  • Exp dat e is chosen randomly between 3 days ago

and 3 days from now.

  • Each node checks exp dat e; if more t han 7 days
  • ld, drop.
  • Now adversary can’t t ell when t he message was
slide-15
SLIDE 15