Skip to main content

Questions tagged [mixnets]

Mix networks are routing protocols that create hard-to-trace communications by using a chain of proxy servers known as mixes which take in messages from multiple senders, shuffle them, and send them back out in random order to the next destination (possibly another mix node). This breaks the link between the source of the request and the destination, making it harder for eavesdroppers to trace end-to-end communications.

Filter by
Sorted by
Tagged with
3 votes
0 answers
131 views

Do random numbers avoid replay attacks in Chaum's mixes?

So I've been visiting a security lecture at my university and they introduced the concept of Chaum's mixes to us and how replay attacks can compromise the anonymity granted by a mixnet. It is ...
prettybonsai's user avatar
2 votes
0 answers
87 views

Efficient Zero Knowledge Proof for proving a reencryption shuffling for an arbitrary table

I have a problem where I have a table of various reencryptable/rerandomizable ciphertexts (Paillier, Elgamal, EC Additive Elgamal). Each row on a given table has the same structure, but each column ...
Zarquan's user avatar
  • 313
0 votes
1 answer
72 views

Oblivious Decision Making

Suppose there is a ciphertext $C_1$ that hides message $m_1$ using a distributed additively homomorphic public key. I would like the holders of the key to run a protocol where if $m_1 = 0$, then it ...
Zarquan's user avatar
  • 313
1 vote
0 answers
43 views

Paillier cryptosystem for verifiable shuffles

I am looking for some algorithm or implementation on Pailler cryptosystem-based verifiable shuffles for mixNet. So far, all the verifiable shuffles and mixNet are available for ElGamal cryptosystems ...
Nomana's user avatar
  • 41
2 votes
0 answers
45 views

Can you derive the public key from a PGP encrypted message without knowing the message content?

I am working on a system to transfer short messages while obfuscating the intended recipient. In essence, it combines many messages encrypted using PGP, and periodically publishes a file containing ...
Electron-Capture's user avatar
0 votes
0 answers
155 views

Decryption of an El Gamal re encryption mixnet

I have interest in e-voting and am currently trying to understand El Gamal re-encryption mixnet. I understand how El Gamal encryption works and how mixnet works but what's not cristal clear for me is ...
Xavier's user avatar
  • 11
0 votes
1 answer
152 views

Implementation of a decryption mixnet, and problems with the size of the key

I've been studying decryption mixnets, in the context of e-voting and stealth networks. Let's describe it in a very simplified way. The concept is pretty simple. A message M is forwarded through ...
FairLight's user avatar
1 vote
0 answers
230 views

Difference between DCnet and mixnet in terms of forwarding anonymity?

It seems that with both anonymous communication protocols we can achieve some level of forwarding anonymity, however, is one protocol better than the other in this respect? It seems that they both ...
John's user avatar
  • 11
5 votes
1 answer
183 views

How do mix networks work with server downtime?

I am looking for an analysis of practical mix networks with server downtime. For example, if a message is supposed to go from A -> B -> C -> D, what happens if B wants to send the message but C is ...
Some Guy's user avatar
  • 153
1 vote
2 answers
188 views

Implementing commitments and challenges for a distributed ElGamal encryption scheme

I am trying to implement a distributed encryption system by having as a main source of information this book (Introduction to Cryptography by Delfs and Knebl) and this Internet article (More Mix than ...
dearn44's user avatar
  • 177
1 vote
1 answer
420 views

Security proof of mix net

I am writing an exercise in cryptography about anonymous communication. One of the systems I have looked into is the mix net protocol. I want to prove that this is secure. I have seen many different ...
Ashild Damsgard's user avatar
1 vote
1 answer
291 views

Generating ElGamal parameters in a mix net

I am reading this paper regarding re-encryption mix nets. I want to implement my own for educational purposes and I am stuck at the initial steps of how I should generate the keys and distribute them. ...
dearn44's user avatar
  • 177
6 votes
2 answers
209 views

Layered encryption in mixnets with post-quantum cryptography

I am trying to implement a mixnet using post-quantum public-key crypto. Each message may be encrypted by up to 10 levels of public keys, shuffled, before the layers of encryption are stripped off one ...
J. Doe's user avatar
  • 93
3 votes
0 answers
119 views

High-latency anonymous communication minimum delay?

High-latency anonymous communication (e.g. Mixmaster and Mixminion) delay messages for a long time using mixers to anonymous communications. I understand that it has applications for email and p2p but ...
user153882's user avatar
6 votes
1 answer
111 views

Is there a studied notion of "party independent transfer"?

I've been thinking about the following set-up involving three parties, Alice, Bob and Charlie: Bob and Charlie decide among themselves who is going to receive a bit from Alice (perhaps by a coin toss)...
Alex May's user avatar
  • 161
7 votes
2 answers
5k views

Difference between mix networks and onion routing

From what I know, the two seems to be the same: Onion routing: Encryption is done in layers. Alice and server1 exchanges keys and she encrypts her message. Then, Alice and server2 exchanges keys and ...
user153882's user avatar
1 vote
0 answers
59 views

Valid reencryption of simple mixnet

How can I provide a non interactive proof using the Fiat Shamir method for the valid reencryption of a simple mixnet?
user3697730's user avatar
4 votes
1 answer
510 views

Why is the re-encryption algorithm in Universal Re-encryption for Mixnets more complicated than apparently necessary?

This is the paper. On page 6, the paper describes a variant of El Gamal and a way of re-encrypting ciphertexts. I thought an easier way to do encryption is to output $(m(g^x)^y,g^y)$, and universal ...
wlad's user avatar
  • 1,239
2 votes
1 answer
267 views

Is Bitmessage a Mix network?

I've read the Bitmessage whitepaper and I found it rather lacking on the details, but it promises anonymous routing. Can it be considered a variation on mix-networks, where each peer acts as a mix-...
user11477's user avatar
8 votes
1 answer
2k views

Single Party Encryption, Multi Party Decryption

I am looking for an adequate protocol for public key decryption, which would allow $n$ parties to jointly decrypt a cipher text. The usage scenario for such a protocol would be a mixnet that wouldn't ...
Henrick Hellström's user avatar
5 votes
2 answers
277 views

Current Status of mixnets for voting

I am currently doing some research on universally verifiable mixnets, but it seems to me that there are too few papers about them after 2006 or so and most of them come from the team of Douglas ...
Panagiotis Grontas's user avatar