Alpenhorn: Bootstrapping Secure Communication without Leaking Metadata
Name
MIT-CSAIL-TR-2016-013.pdf
Size
356.06 KB
Format
Adobe PDF
Checksum (MD5)
18d813ad835094a215ef3720dede2c8d
Download all files submitted through automated deposit
Author(s)
Lazar, David
Zeldovich, Nickolai
Advisor(s)
Nickolai Zeldovich
Date Issued
October 5, 2016
Citation
David Lazar and Nickolai Zeldovich. Alpenhorn: Bootstrapping Secure Communication without Leaking Metadata. In Proceedings of the 12th Symposium on Operating Systems Design and Implementation (OSDI), Savannah, GA, Nov. 2016.
Series/Report no.
MIT-CSAIL-TR-2016-013
Abstract
Alpenhorn is the first system for initiating an encrypted connection between two users that provides strong privacy and forward secrecy guarantees for metadata (i.e., information about which users connected to each other) and that does not require out-of-band communication other than knowing the other user's Alpenhorn username (email address). This resolves a significant shortcoming in all prior works on private messaging, which assume an out-of-band key distribution mechanism. Alpenhorn's design builds on three ideas. First, Alpenhorn provides each user with an address book of friends that the user can call to establish a connection. Second, when a user adds a friend for the first time, Alpenhorn ensures the adversary does not learn the friend's identity, by using identity-based encryption in a novel wayto privately determine the friend's public key. Finally, when calling a friend, Alpenhorn ensures forward secrecy of metadata by storing pairwise shared secrets in friends' address books, and evolving them over time, using a new keywheel construction. Alpenhorn relies on a number of servers, but operates in an anytrust model, requiring just one of the servers to be honest. We implemented a prototype of Alpenhorn, and integrated it into the Vuvuzela private messaging system (which did not previously provide privacy or forward secrecy of metadata when initiating conversations). Experimental results show that Alpenhorn can scale to many users, supporting 10 million users on three Alpenhorn servers with an average call latency of 150 seconds and a client bandwidth overhead of 3.7 KB/sec.
Terms of Use
Creative Commons Attribution 4.0 International
Persistent DSpace Link
