Riffle
Riffle
复制标题
DOI：
10.1515/popets-2016-0008
复制
发表时间：
2016-04
影响因子：
--
通讯作者：
Albert Kwon;David Lazar;S. Devadas;B. Ford
中科院分区：
文献类型：
--
作者：
Albert Kwon;David Lazar;S. Devadas;B. Ford
摘要现有的匿名系统牺牲了匿名性来实现有效的通信，反之亦然。洋葱路由实现了低延迟、高带宽和可扩展的匿名通信，但容易受到流量分析攻击。另一方面，基于DC-Net的设计保护用户免受流量分析攻击，但牺牲了带宽。可验证混合网具有较强的匿名性和较低的带宽开销，但计算开销较大。在本文中，我们提出了Riffle，带宽和计算效率的通信系统具有强匿名性。Riffle由少量匿名服务器和大量用户组成，只要存在至少一个诚实服务器，就可以保证所有诚实客户端的匿名性。Riffle使用一种新的混合可验证洗牌技术和私人信息检索，以实现带宽和计算效率高的匿名通信。我们对Riffle在文件共享和微博应用中的评估表明，Riffle在文件共享的情况下可以在200个用户的匿名集合中实现超过100 KB/s的带宽，并且在微博的情况下可以以小于10秒的延迟处理超过10万个用户。
Abstract Existing anonymity systems sacrifice anonymity for efficient communication or vice-versa. Onion-routing achieves low latency, high bandwidth, and scalable anonymous communication, but is susceptible to traffic analysis attacks. Designs based on DC-Nets, on the other hand, protect the users against traffic analysis attacks, but sacrifice bandwidth. Verifiable mixnets maintain strong anonymity with low bandwidth overhead, but suffer from high computation overhead instead. In this paper, we present Riffle, a bandwidth and computation efficient communication system with strong anonymity. Riffle consists of a small set of anonymity servers and a large number of users, and guarantees anonymity among all honest clients as long as there exists at least one honest server. Riffle uses a new hybrid verifiable shuffle technique and private information retrieval for bandwidth- and computation-efficient anonymous communication. Our evaluation of Riffle in file sharing and microblogging applications shows that Riffle can achieve a bandwidth of over 100KB/s per user in an anonymity set of 200 users in the case of file sharing, and handle over 100,000 users with less than 10 second latency in the case of microblogging.