How to break a practical MIX and design a new one

  • Authors:
  • Yvo Desmedt;Kaoru Kurosawa

  • Affiliations:
  • Department of Computer Science, Florida State University, Tallahassee, FL and Dept. of Mathematics, Royal Holloway, University of London, UK;Dept. of Electrical and Electronic Engineering, Faculty of Engineering, Tokyo Institute of Technology, Tokyo, Japan

  • Venue:
  • EUROCRYPT'00 Proceedings of the 19th international conference on Theory and application of cryptographic techniques
  • Year:
  • 2000

Quantified Score

Hi-index 0.00

Visualization

Abstract

A MIX net takes a list of ciphertexts (c1; ... ; cN) and outputs a permuted list of the plaintexts (m1; ... ;mN) without revealing the relationship between (c1; ... ; cN) and (m1; ... ;mN). This paper first shows that the Jakobsson's MIX net of Eurocrypt'98, which was believed to be resilient and very efficient, is broken. We next propose an efficient t-resilient MIX net with O(t2) servers in which the cost of each MIX server is O(N). Two new concepts are introduced, existential-honesty and limited-open-verification. They will be useful for distributed computation in general.