A Formal Treatment of Onion Routing
A Formal Treatment of Onion Routing
复制标题
DOI:
10.1007/11535218_11
复制
发表时间:
2005-08
期刊:
影响因子:
--
通讯作者:
J. Camenisch;Anna Lysyanskaya
中科院分区:
文献类型:
--
作者:
J. Camenisch;Anna Lysyanskaya
Anonymous channels are necessary for a multitude of privacy-protecting protocols. Onion routing is probably the best known way to achieve anonymity in practice. However, the cryptographic aspects of onion routing have not been sufficiently explored: no satisfactory definitions of security have been given, and existing constructions have only had ad-hoc security analysis for the most part.We provide a formal definition of onion-routing in the universally composable framework, and also discover a simpler definition (similar to CCA2 security for encryption) that implies security in the UC framework. We then exhibit an efficient and easy to implement construction of an onion routing scheme satisfying this definition.