Provable anonymity

  • Authors:
  • Flavio D. Garcia;Ichiro Hasuo;Wolter Pieters;Peter van Rossum

  • Affiliations:
  • Radboud University Nijmegen, Nijmegen, The Netherlands;Radboud University Nijmegen, Nijmegen, The Netherlands;Radboud University Nijmegen, Nijmegen, The Netherlands;Radboud University Nijmegen, Nijmegen, The Netherlands

  • Venue:
  • Proceedings of the 2005 ACM workshop on Formal methods in security engineering
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper provides a formal framework for the analysis of information hiding properties of anonymous communication protocols in terms of epistemic logic.The key ingredient is our notion of observational equivalence, which is based on the cryptographic structure of messages and relations between otherwise random looking messages. Two runs are considered observationally equivalent if a spy cannot discover any meaningful distinction between them.We illustrate our approach by proving sender anonymity and unlinkability for two anonymizing protocols, Onion Routing and Crowds. Moreover, we consider a version of Onion Routing in which we inject a subtle error and show how our framework is capable of capturing this flaw.