<?xml version="1.0" encoding="utf-8"?>
<?xml-stylesheet href="paper.xsl" type="text/xsl"?>

<paper xmlns="http://www.cse.ucsd.edu/daniele/XML">

  <filename>AnonChannel</filename>

  <title>An indistinguishability-based characterization of anonymous channels
  </title>
  
  <author>Alejandro Hevia</author>
  <author>Daniele Micciancio</author>

  
  <reference>
    <conference>Privacy Enhancing Technologies Symposium</conference>
    <conf href="http://petsymposium.org/2008/">PETS 2008</conf>
    <address>Leuven, Belgium</address>
    <year>2008</year>
    <month>7</month>
    <volume>5134</volume>
    <doi>10.1007/978-3-540-70630-4_3</doi>
    <pages>24-43</pages>
  </reference>

  <abstract>
    <p xmlns="http://www.w3.org/1999/xhtml">
      We revisit the problem of anonymous communication, 
      in which users wish to send messages to each other without revealing 
      their identities. We propose a novel framework to organize and compare 
      anonymity definitions. In this framework, we present simple and 
      practical definitions for anonymous channels in the context of 
      computational indistinguishability. The notions seem to capture the 
      intuitive properties of several types of anonymous channels (Pfitzmann 
      and Köhntopp 2001) (eg. sender anonymity and unlinkability). We justify 
      these notions by showing they naturally capture practical scenarios 
      where information is unavoidably leaked in the system. Then, we compare 
      the notions and we show they form a natural hierarchy for which we 
      exhibit non-trivial implications. In particular, we show how to 
      implement stronger notions from weaker ones using cryptography and 
      dummy traffic – in a provably optimal way. 
      With these tools, we revisit the security of previous anonymous channels 
      protocols, in particular constructions based on broadcast networks 
      (Blaze et al. 2003), anonymous broadcast (Chaum 1981), and mix networks 
      (Groth 2003, Nguyen et al. 2004). Our results give generic, optimal 
      constructions to transform known protocols into new ones that achieve 
      the strongest notions of anonymity.
    </p>
  </abstract>
</paper>
