Commitment-Based Fault-Removing MIX cascade

We present a new anonymous communication channel based on MIXes. The channel is such that faulty nodes can be identified and removed without violating the untraceability of the users, under the assumption that at least a single mix is honest and networking delays are bounded.

Our protocol has three phases, a key sharing phase, a commitment phase, and a sending phase. Once the first two phases are completed, the sending phase can be repeated to send multiple messages.

Our system has the advantage of being computationally more efficient than existing fault-tolerant cascades, in which each MIX has to perform in the order of 50 exponentiations per sender. On the other hand, the protocol presented here lacks a provision for fault compensation without restarting the protocol.

Our scheme makes use of the most basic cryptographic primitives, namely hash functions, signatures, and shared and public key encryptions.

By: Ceki Gulcu

Published in: RZ3125 in 1999

LIMITED DISTRIBUTION NOTICE:

This Research Report is available. This report has been submitted for publication outside of IBM and will probably be copyrighted if accepted for publication. It has been issued as a Research Report for early dissemination of its contents. In view of the transfer of copyright to the outside publisher, its distribution outside of IBM prior to publication should be limited to peer communications and specific requests. After outside publication, requests should be filled only by reprints or legally obtained copies of the article (e.g., payment of royalties). I have read and understand this notice and am a member of the scientific community outside or inside of IBM seeking a single copy only.

rz3125.ps

Questions about this service can be mailed to reports@us.ibm.com .