Anonymous webs of trust

  • Authors:
  • Michael Backes;Stefan Lorenz;Matteo Maffei;Kim Pecina

  • Affiliations:
  • Saarland University, Saarbrücken, Germany and Max Planck Institute for Software Systems;Saarland University, Saarbrücken, Germany;Saarland University, Saarbrücken, Germany;Saarland University, Saarbrücken, Germany

  • Venue:
  • PETS'10 Proceedings of the 10th international conference on Privacy enhancing technologies
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Webs of trust constitute a decentralized infrastructure for establishing the authenticity of the binding between public keys and users and, more generally, trust relationships among users. This paper introduces the concept of anonymous webs of trust - an extension of webs of trust where users can authenticate messages and determine each other's trust level without compromising their anonymity. Our framework comprises a novel cryptographic protocol based on zero-knowledge proofs, a symbolic abstraction and formal verification of our protocol, and a prototypical implementation based on the OpenPGP standard. The framework is capable of dealing with various core and optional features of common webs of trust, such as key attributes, key expiration dates, existence of multiple certificate chains, and trust measures between different users.