Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [anonymity]

Anonymity describes the state of being unknown or unacknowledged.

1
vote
1answer
61 views

What is an “anonymous admissible timestamp”?

Can anybody explain the term "anonymous admissible timestamp" to me? Could you show a case where it is useful to apply it? I came across this term in the comments of a question on the StackExchange ...
1
vote
0answers
32 views

Proofs of security for anonymity in a multi-party setting

I'm looking for material that proves the anonymity of parties in a non-interactive setting. I would like to know if there are simulation based proofs (UC) and property based proofs (game based) for ...
1
vote
0answers
12 views

The semantic security in Anonymous Hierarchical identity-bases encryption?

In Anonymous Hierarchical Identity-Based Encryption (Without Random Oracles) by Boyen, to prove security it defined challenge ciphertext like I actually can't get how does the proof work? Why we ...
0
votes
0answers
51 views

Anonymized identifier

I'm trying to find an algorithm which would allow me to create anonymized zero-metadata identifiers. I'm creating a system which creates integer identifiers using a counter. Using such identifiers ...
1
vote
1answer
71 views

Anonymity of Paillier cryptosystem in e-voting system

I'm not an expert so at the moment I'm trying to figure out (at high level) how such cryptosystem would exploit it's homomorphic properties to guarantee anonymity in a e-voting system. As far as i ...
0
votes
0answers
42 views

Derive anonymous dsa key-pair from two certificate authorities

Is it possible to derive a dsa key-pair based on two private keys from different/independent "Certificate Authorities" (ca1 and ca2) to sign s.th. which then verifies only that the signature is a ...
2
votes
1answer
102 views

Advantages of group signature schemes without encryption over with encryption

Many group signature schemes follow sign-encrypt then prove paradigm, where a membership certificate, is encrypted using some public-key encryption scheme. There are some encryption free group ...
0
votes
1answer
61 views

Does an anonymous signature hide the sender's identity from the receiver?

Does an anonymous signature hide the sender's identity from the receiver, or simply just hide the sender's identity from an eavesdropper or third party?
1
vote
0answers
32 views

Seeking Fast Bloom Filter for Anonymous Address

I had an idea to use something like public message boards to pass secrets anonymously and non-interactively (similar to TV/Movie Trope : http://tvtropes.org/pmwiki/pmwiki.php/Main/PublicSecretMessage )...
0
votes
0answers
37 views

Can NTRUPrime public keys be identified from ciphertext?

Is it possible to distinguish which NTRU public key a ciphertext/encrypted message is for? Assume the attacker has no plaintext or access to secret keys. I suppose this would be a form of key ...
0
votes
1answer
36 views

A method to receive payments at obscured addresses [closed]

The background: We assume that coin ownership and payments are recorded on a public ledger. Suppose Alice wants to publish some information to let her receive coins from anyone. But she does not want ...
1
vote
0answers
48 views

identify PK in ring signatures by using (t,n)-threshold

Consider a group of $n$ public keys $pk_1,...,pk_n$ with corresponding secret keys $sk_1,...,sk_n$. I'm looking for a cryptographic primitive with the following properties: Ring signature property. ...
1
vote
0answers
30 views

Is integrity important when building anonymity?

I was thinking about applying an anonymity process based on ECDSA signatures to anonymize blocks of information, not the public-key itself. Using a deterministic form of ECDSA to sign blocks and ...
0
votes
1answer
88 views

Understanding the big picture with regard to how anonymous credentials work

I'm trying to learn about anonymous credential systems. I started with Lysyanskaya's thesis, which gives an outline of how to build an AC system given some particular primitives (signature scheme, ...
1
vote
1answer
80 views

How to anonymously transfer ownership where sender cannot resend

I'm new to cyptography, so I apologize if this is a dumb/impossible goal or has already been answered (I was not able to find it by searching). I wish to devise an anonymous protocol for transferring ...
0
votes
0answers
164 views

If an encryption scheme is IND-CPA, can we construct an anonymous PKE?

Is the following statement true? Given an IND-CPA secure public key encryption , one can always construct an anonymous PKE in a blackbox way, i.e., call the algorithms of as subroutines. Why? ...
3
votes
1answer
385 views

Is it possible to derive an Ed25519-public-key from an Ed25519-signature?

If you have an Ed25519-signature and the signed message, can you derive the corresponding public-key or is the signature anonymous (except if you already know the public-key of course)?
3
votes
1answer
126 views

What are the actual anonymity features of ZCash?

I have looked at their FAQ but I didn't find the answer to this. Having looked at their whitepaper, it seems to me that the main feature of ZCash is that you can't trace where the money came from, ...
3
votes
0answers
175 views

How CL-signature can act as positive & additive accumulator?

A paper (http://ieeexplore.ieee.org/abstract/document/7961987/) proposes a Braavos (adaptively sound dynamic positive accumulator). Braavos uses two other accumulators. One is adaptively sound ...
1
vote
0answers
111 views

Revocation in Idemix and U-prove

I read some materials about MS u-prove and IBM Idemix. But according to these materials, the opinion about revocation is different. Some materials say that u-prove and idemix do not provide ...
4
votes
0answers
69 views

High-latency anonymous communication minimum delay?

High-latency anonymous communication (e.g. Mixmaster and Mixminion) delay messages for a long time using mixers to anonymous communications. I understand that it has applications for email and p2p but ...
1
vote
0answers
23 views

Combating Traffic analysis Msc Dissertation ideas [closed]

I have started my MSc dissertation on anonymity (how to beat traffic analysis techniques) and i'm looking for practical ideas. What tactics and software technology would be that guarantees private ...
5
votes
1answer
295 views

Check if two anonymously signed messages have the same author

I need digital signature scheme with following rules: Signature is "anonymous" which means it doesn't expose author identity (See papers in this answer. Anonymous RSA version or Boneh-Boyen algorithm ...
0
votes
0answers
52 views

Ways a newspaper to set up a anonymous and encrypted tip line with file upload capabilites

I'm trying to help a newspaper which I shall not name create a way for people to anonymously contact them. They want this information to be encrypted so that if intercepted it won't be able to be read....
2
votes
1answer
249 views

What is the difference between “Linkable” and “Traceable” Ring Signatures?

In particular, both papers on Traceable Ring Signatures and Linkable Ring Signatures propose they are fit for the creation of ballots. The Wikipedia Article on Ring Signatures, though, suggests ...
2
votes
2answers
254 views

Choice of bilinear group for implementation of BLS signature with NIWI proof?

I am trying to sign the multiple (millions of) different readings but the receiver should not be able to link multiple signed readings together (unlinkability) or with the identity of the signer (...
4
votes
2answers
468 views

Alice answering Bob without knowing the question

I'm a student and I don't know how to solve the following problem : Alice is proposing a 10 questions list to Bob. Bob choose only 1 question and wants to know the answer without Alice knowing the ...
3
votes
0answers
110 views

David Chaum's anonymous credential

I am a newbie in cryptography (I know the basic RSA, AES stuffs) and am interested in anonymous authentication systems. Looks like David Chaum is the godly figure in the field. I see lots of people ...
4
votes
1answer
177 views

State of the art techniques for Anonymous Authentication?

What are the state of the art techniques for Anonymous Authentication? What are the most popular ones? The problem domain I am considering is with respect to different users accessing cloud content; ...
0
votes
1answer
134 views

Why is Tor alone not enough to guarantee anonymity for Bitcoin?

Why is Tor alone not enough to guarantee anonymity for Bitcoin? Why do we need the constructions like Zerocoin?
1
vote
1answer
114 views

Are Anonymity and Authentication possible together?

Anonymity and authentication look to be seemingly contradictory but are both possible together ? I tried reading couple of papers but could not get the big picture. So what are the major approaches ...
1
vote
1answer
712 views

anonymous signature implementation and usage?

This is one of the question asked in my class. Implement a anonymous digital signature. So it means hiding signers information. i could not find any article in anonymous digital signing. Also another ...
3
votes
0answers
67 views

During electronic voting, how does one hide the choice from Voting device?

Assume the following: I want to cast a vote during an election through an electronic voting system. For our system we make the assumption that the device one uses to cast the vote is potentially ...
4
votes
0answers
120 views

Anonymisation resilient to key leak

Problem statement Elbonian citizens have been issued a card holding a random $B_j\in\{0,1\}^b$, $0\le j<2^n$, $b\ge n+20$ (representative example $b=64$, $n=28$). The habit has grown to use this ...
1
vote
1answer
1k views

How do I safely anonymize/hash a unique identifier to protect privacy?

I am building a system to collect a unique identifier (MAC addresses from 802.11 probe requests). The system will have several collection points over a large area, submitting to a central database. I ...
4
votes
2answers
265 views

How can one encrypt with RSA (or ElGamal) without revealing whom the ciphertext is intended for?

Imagine Alice wants to encrypt for Bob and post this encryption publicly, so that only Bob can decrypt but no one can other than Alice or Bob tell that the message was encrypted for Bob. The naive ...
1
vote
1answer
196 views

Group Signature Scheme without Opening but with Revocation

After reading many papers about group signature schemes, I saw that basically all of them employ the possibility of "signature opening": The Group Manager (GM) can identify any signature made by his ...
2
votes
1answer
226 views

Is Bitmessage a Mix network?

I've read the Bitmessage whitepaper and I found it rather lacking on the details, but it promises anonymous routing. Can it be considered a variation on mix-networks, where each peer acts as a mix-...
1
vote
0answers
196 views

Can you show how that RSA does/doesn't provide anonymity?

Considering a CPA-secure version of RSA where the ciphertext is just a rundom element from $Z^*_N$. Does that meet the anonymity requirement in which an cpa adversary cannot distinguish between a ...
5
votes
1answer
161 views

Private Messaging

Suppose Alice and Bob wants to send messages through Sue without revealing to Eve that the exchange took place. Slightly more formally, I don't want Eve to have any advantage telling if Alice is ...
1
vote
0answers
116 views

How does Dissent protect against Sybil Attacks?

Dissent claims to be able to be resistant to Sybil attacks. Dissent seeks to offer accountable anonymity, giving users strong guarantees of anonymity while also protecting online groups or forums ...
-7
votes
2answers
394 views

Snowden Challenge II: Can we solve Snowden challenge quantumly? [closed]

Suppose that tomorrow is July 7, 2050 and Snowden is still stayed in Sheremetyevo airport. Further, let us suppose that quantum computation and quantum commincation are available to everyone, and ...
21
votes
3answers
1k views

Cryptographic Challenge: How to Say Something Confidentially to Snowden?

The Snowden situation raises an intereting cryptograpic problem. At present, how can something be sent confidentially to Snowden? Claim: I have no particular political orientation. The above ...
1
vote
1answer
472 views

Tor's integrity verification system?

I am trying to understand the design of Tor(onion router). I am reading the original paper on the 2nd generation onion routing system. Where, under integrity checking on streams, they say, "When Alice ...
4
votes
1answer
1k views

Can you identify the public key used to encrypt something?

If I encrypt a string with a public key, does the encrypted ciphertext reveal the public key I used to encrypt it? Basically, I don't want anyone to know who the ciphertext is addressed to. I'm ...
3
votes
2answers
164 views

Key Exchange and anonymity issue

If Alice (sender) sends a private message embedded with public key of the Bob(recipient) through onion network, so in this key exchange, does Bob remains anonymous to Alice as Alice knows about the ...
3
votes
1answer
285 views

Anonymity in end-to-end encryption

Considering a scenario of anonymous data transfer between seller and buyer using proxies. If we consider that there are three proxies that are being selected by the buyer to obtain data from different ...
1
vote
0answers
94 views

Can a LIRA system work with cjdns or other decentralized meshnets?

LIRA (Lightweight Incentivized Routing for Anonymity) is a scheme to incentivize participants in Tor to contribute resources, in particular bandwidth. The paper talks about it being used for Tor. Can ...
4
votes
3answers
457 views

What crypto system allows for 3 parties: Party 1 who makes an assertion, Party 2 mutates the assertion, Party 3 validates it

I'm looking for the cryptographic equivalent of a Drivers license where the issuer can be verified, the issuer doesn't need to know who you showed the drivers license to, but also allows per-...
5
votes
2answers
202 views

Current Status of mixnets for voting

I am currently doing some research on universally verifiable mixnets, but it seems to me that there are too few papers about them after 2006 or so and most of them come from the team of Douglas ...