2003 Symposium on Security and Privacy, 2003. (2003)
May 11, 2003 to May 14, 2003
George Danezis , University of Cambridge
Roger Dingledine , The Free Haven Project
Nick Mathewson , The Free Haven Project
We present Mixminion, a message-based anonymous remailer protocol with secure single-use reply blocks. Mix nodes cannot distinguish Mixminion forward messages from reply messages, so forward and reply messages share the same anonymity set. We add directory servers that allow users to learn public keys and performance statistics of participating remailers, and we describe nymservers that provide long-term pseudonyms using single-use reply blocks as a primitive. Our design integrates link encryption between remailers to provide forward anonymity. Mixminion works in a real-world Internet environment, requires little synchronization or coordination between nodes, and protects against known anonymity-breaking attacks as well as or better than other systems with similar design parameters.
N. Mathewson, G. Danezis and R. Dingledine, "Mixminion: Design of a Type III Anonymous Remailer Protocol," 2003 Symposium on Security and Privacy, 2003.(SP), Berkeley, CA, 2003, pp. 2.