Anonymous Communication Networks

199 Pages·2014·2.23 MB·English

by  Kun Peng

OTHER COMMUNICATIONS BOOKS FROM AUERBACH
Advances in Biometrics for Secure Human Image Encryption: A Communication Perspective
Authentication and Recognition Fathi E. Abd El-Samie, Hossam Eldin H. Ahmed,
Edited by Dakshina Ranjan Kisku, Phalguni Gupta, Ibrahim F. Elashry, Mai H. Shahieen, Osama S. Faragallah,
and Jamuna Kanta Sing El-Sayed M. El-Rabaie, and Saleh A. Alshebeili
ISBN 978-1-4665-8242-2 ISBN 978-1-4665-7698-8
Intrusion Detection in Wireless Ad-Hoc Networks
Anonymous Communication Networks: Protecting
Nabendu Chaki and Rituparna Chaki
Privacy on the Web
ISBN 978-1-4665-1565-9
Kun Peng
ISBN 978-1-4398-8157-6 Intrusion Detection Networks: A Key to Collaborative
Security
Case Studies in Enterprise Systems, Complex Systems,
Carol Fung and Raouf Boutaba
and System of Systems Engineering
ISBN 978-1-4665-6412-1
Edited by Alex Gorod, Brian E. White, Vernon Ireland,
S. Jimmy Gandhi,and Brian Sauser MIMO Processing for 4G and Beyond: Fundamentals
ISBN 978-1-4665-0239-0 and Evolution
Edited by Mário Marques da Silva and Francisco A.T.B.N. Monteiro
Cyber-Physical Systems: Integrated Computing and ISBN 978-1-4665-9807-2
Engineering Design
Modeling and Analysis of P2P Content Distribution
Fei Hu
Systems
ISBN 978-1-4665-7700-8
Yipeng Zhou and Dah Ming Chiu
Evolutionary Dynamics of Complex Communications ISBN 978-1-4822-1920-3
Networks
Network Innovation through OpenFlow and SDN:
Vasileios Karyotis, Eleni Stai, and Symeon Papavassiliou
Principles and Design
ISBN 978-1-4665-1840-7
Edited by Fei Hu
ISBN 978-1-4665-7209-6
Extending the Internet of Things: Towards a Global
and Seemless Integration Pervasive Computing: Concepts, Technologies and
Antonio J. Jara-Valera Applications
ISBN 9781466518483 Guo Minyi, Zhou Jingyu, Tang Feilong, and Shen Yao
ISBN 978-1-4665-9627-6
Fading and Interference Mitigation in Wireless
Communications Physical Layer Security in Wireless Communications
Stefan Panic Edited by Xiangyun Zhou. Lingyang Song, and Yan Zhang
ISBN 978-1-4665-0841-5 ISBN 978-1-4665-6700-9
The Future of Wireless Networks: Architectures, Security for Multihop Wireless Networks
Protocols, and Services Shafiullah Khan and Jaime Lloret Mauri
ISBN 978-1-4665-7803-6
Edited by Mohesen Guizani, Hsiao-Hwa Chen,
and Chonggang Wang Self-Healing Systems and Wireless Networks Management
ISBN 978-1-4822-2094-0 Junaid Ahsenali Chaudhry
ISBN 978-1-4665-5648-5
Green Networking and Communications: ICT for
Sustainability Unit and Ubiquitous Internet of Things
Edited by Shafiullah Khan and Jaime Lloret Mauri Huansheng Ning
ISBN 978-1-4665-6874-7 ISBN 978-1-4665-6166-3
AUERBACH PUBLICATIONS
www.auerbach-publications.com
To Order Call: 1-800-272-7737 • Fax: [phone]
E-mail: [email protected]
(cid:105) (cid:105)
“K13841” — 2014/3/3 — 10:35
(cid:105) (cid:105)
Anonymous
Communication
Networks
Protecting Privacy on the Web
Kun Peng
Proudly sourced and uploaded by [StormRG]
Kickass Torrents | The Pirate Bay | ExtraTorrent
(cid:105) (cid:105)
(cid:105) (cid:105)
CRC Press
Taylor & Francis Group
6000 Broken Sound Parkway NW, Suite 300
Boca Raton, FL 33487-2742
© 2014 by Taylor & Francis Group, LLC
CRC Press is an imprint of Taylor & Francis Group, an Informa business
No claim to original U.S. Government works
Version Date: 20140210
International Standard Book Number-13: 978-1-4398-8160-6 (eBook - PDF)
This book contains information obtained from authentic and highly regarded sources. Reasonable efforts
have been made to publish reliable data and information, but the author and publisher cannot assume
responsibility for the validity of all materials or the consequences of their use. The authors and publishers
have attempted to trace the copyright holders of all material reproduced in this publication and apologize to
copyright holders if permission to publish in this form has not been obtained. If any copyright material has
not been acknowledged please write and let us know so we may rectify in any future reprint.
Except as permitted under U.S. Copyright Law, no part of this book may be reprinted, reproduced, transmit-
ted, or utilized in any form by any electronic, mechanical, or other means, now known or hereafter invented,
including photocopying, microfilming, and recording, or in any information storage or retrieval system,
without written permission from the publishers.
For permission to photocopy or use material electronically from this work, please access www.copyright.
com (http://www.copyright.com/) or contact the Copyright Clearance Center, Inc. (CCC), 222 Rosewood
Drive, Danvers, MA 01923, 978-750-8400. CCC is a not-for-profit organization that provides licenses and
registration for a variety of users. For organizations that have been granted a photocopy license by the CCC,
a separate system of payment has been arranged.
Trademark Notice: Product or corporate names may be trademarks or registered trademarks, and are used
only for identification and explanation without intent to infringe.
Visit the Taylor & Francis Web site at
http://www.taylorandfrancis.com
and the CRC Press Web site at
http://www.crcpress.com
✐ ✐
“K13841” — 2014/3/4 — 15:45
✐ ✐
Contents
1 Anonymity in Network Communication 1
1.1 Right to Be Anonymous . . . . . . . . . . . . . . . . . . . . . . 2
1.2 When We Need to Be Anonymous . . . . . . . . . . . . . . . . 8
1.3 The Current Situation and Where We Start . . . . . . . . . . . 10
2 Mix Networks 15
2.1 Definition of Mix Network . . . . . . . . . . . . . . . . . . . . . 16
2.2 Classification of Mix Networks . . . . . . . . . . . . . . . . . . 17
2.2.1 Decryption Chain or Re-encryption. . . . . . . . . . . . 17
2.2.2 General or Separate Verification . . . . . . . . . . . . . 19
2.2.3 Tag Attached to Input . . . . . . . . . . . . . . . . . . . 21
2.2.4 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . 22
2.3 Efficient and Secure GMN: a Simple and Efficient Solution. . . 22
2.3.1 The GMN in [92] . . . . . . . . . . . . . . . . . . . . . . 24
2.3.2 Analysis and Summary . . . . . . . . . . . . . . . . . . 26
2.4 Efficient and Secure SMN: the Most Important Mix Network. . 27
2.4.1 SMN Employing Multiplicative Homomorphic
Encryption Algorithm . . . . . . . . . . . . . . . . . . . 32
2.4.2 SMN Employing Additive Homomorphic
Encryption Algorithm . . . . . . . . . . . . . . . . . . . 35
2.5 Grouped Shuffling: a Trade-off to Improve Efficiency
of Mix Networks . . . . . . . . . . . . . . . . . . . . . . . . . . 38
2.5.1 Group Shuffling in [93] . . . . . . . . . . . . . . . . . . . 39
2.5.2 Another Grouped Shuffling Protocol to Support
Efficient SMN . . . . . . . . . . . . . . . . . . . . . . . . 44
2.6 Survey and Analysis of SMN . . . . . . . . . . . . . . . . . . . 49
2.6.1 The Assumptions Needed in the Mix Networks in [51]
and [52] . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
2.6.2 Security Concerns in [90] and [102] . . . . . . . . . . . . 53
2.6.3 Failure in Functionality of the Mix Network
by Wikstrom . . . . . . . . . . . . . . . . . . . . . . . . 55
2.7 Efficiency of SMN: Claim and Reality . . . . . . . . . . . . . . 57
2.7.1 Unfair Usage of Short Exponents . . . . . . . . . . . . . 58
v
✐ ✐
✐ ✐
✐ ✐
“K13841” — 2014/3/4 — 15:45
✐ ✐
vi Contents
2.7.2 Other Unfair Factors in Efficiency Claim
and Comparison . . . . . . . . . . . . . . . . . . . . . . 59
2.7.3 Re-evaluating Efficiency . . . . . . . . . . . . . . . . . . 59
2.8 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
3 Application of Mix Network to E-Voting: a Case Study 63
3.1 Mix Network for E-Voting . . . . . . . . . . . . . . . . . . . . . 63
3.1.1 The Recent Mix Network Schemes . . . . . . . . . . . . 64
3.1.2 The New Mix Network . . . . . . . . . . . . . . . . . . . 66
3.1.3 Security and Efficiency Analysis . . . . . . . . . . . . . 72
3.1.4 Extension and Application . . . . . . . . . . . . . . . . 76
3.2 Mix Network-BasedE-Voting . . . . . . . . . . . . . . . . . . . 78
3.3 Security Concerns and Suggested Solution in Practice . . . . . 81
3.3.1 Various Relation Attacks and the Existing
Countermeasures . . . . . . . . . . . . . . . . . . . . . . 83
3.3.2 Main Idea of the New Countermeasure . . . . . . . . . . 88
3.3.3 A Prototype and Its Drawbacks. . . . . . . . . . . . . . 91
3.3.4 Optimization and Security Analysis . . . . . . . . . . . 93
3.4 Off-Line Pre-Computation in Mix Networks . . . . . . . . . . . 99
3.4.1 Security Model of Shuffles . . . . . . . . . . . . . . . . . 102
3.4.2 The Basic Design . . . . . . . . . . . . . . . . . . . . . . 103
3.4.3 Off-Line Pre-Computation and Batch Verification. . . . 106
3.4.4 TheFinalShufflingProtocol:ModifyingEncryptionand
Further Improving Efficiency . . . . . . . . . . . . . . . 108
3.4.5 Comparison and Conclusion . . . . . . . . . . . . . . . . 111
4 Onion Routing 115
4.1 The Basic Idea . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
4.2 Formal Definition of Security . . . . . . . . . . . . . . . . . . . 117
4.3 Second Generation: Tor . . . . . . . . . . . . . . . . . . . . . . 124
4.3.1 Design of Tor . . . . . . . . . . . . . . . . . . . . . . . . 127
4.3.2 Application of Symmetric Cipher and Diffie-Hellman
Key Exchange in Tor: Efficiency Improvement. . . . . . 133
5 Optimisation and Practical Application of Onion Routing 137
5.1 Verifiable TOR: a Verifiable Application of Onion Routing . . . 137
5.1.1 Preliminaries . . . . . . . . . . . . . . . . . . . . . . . . 138
5.1.2 Advanced Tor with a Verification Mechanism . . . . . . 139
5.2 Efficiency Improvment Using Diffie-Hellman Chain . . . . . . . 142
5.2.1 A Simple Optimisation of Tor and its Drawback:
Simpler but Still Direct Application of Diffie-Hellman
Key Exchange . . . . . . . . . . . . . . . . . . . . . . . 143
5.2.2 A New and More Advanced Technique: Diffie-Hellman
Chain . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
5.2.3 Analysis and Comparison . . . . . . . . . . . . . . . . . 147
✐ ✐
✐ ✐
✐ ✐
“K13841” — 2014/3/4 — 15:45
✐ ✐
Contents vii
5.2.4 Further Optimisation: Small Compressed
Onion Routing . . . . . . . . . . . . . . . . . . . . . . . 148
5.3 A Practical Application: Paid and Anonymous Use of Cloud
Softwares . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
5.3.1 How to Obtain Anonymous Usage Permit of a Cloud
Software: Anonymous Token . . . . . . . . . . . . . . . 153
5.3.2 Two-WayOnionRoutingtoSupportAnonymousUsage
of Cloud Software . . . . . . . . . . . . . . . . . . . . . 155
5.3.3 Efficiency Optimisation:Two-WayOnionRouting with
Compact Diffie-Hellman Handshakes . . . . . . . . . . . 158
5.3.4 Security Analysis . . . . . . . . . . . . . . . . . . . . . . 162
6 Practical Systems to Achieve Anonymity: How
to Use Them 165
6.1 Installation and Usage of Tor . . . . . . . . . . . . . . . . . . . 166
6.1.1 Download and Installation . . . . . . . . . . . . . . . . . 166
6.1.2 Configuration . . . . . . . . . . . . . . . . . . . . . . . . 168
6.2 Installation and Usage of I2P . . . . . . . . . . . . . . . . . . . 169
6.2.1 Download and Installation . . . . . . . . . . . . . . . . . 169
6.2.2 Configuration . . . . . . . . . . . . . . . . . . . . . . . . 173
6.3 Installation and Usage of JAP/JonDo . . . . . . . . . . . . . . 174
6.3.1 Download and Installation . . . . . . . . . . . . . . . . . 175
6.3.2 Configuration . . . . . . . . . . . . . . . . . . . . . . . . 176
6.4 Installation and Usage of QuickSilver . . . . . . . . . . . . . . . 178
6.4.1 Download and Installation . . . . . . . . . . . . . . . . . 178
6.4.2 Configuration . . . . . . . . . . . . . . . . . . . . . . . . 180
References 183
Index 191
✐ ✐
✐ ✐
TThhiiss ppaaggee iinntteennttiioonnaallllyy lleefftt bbllaannkk
✐ ✐
“K13841” — 2014/3/4 — 15:45
✐ ✐
Chapter 1
Anonymity in Network
Communication
Anonymityisafundamentalrightofademocraticsociety.Inmostdemocratic
nations, anonymity is very important and the laws and government regula-
tionshavebeensetuptoprotectinformationprivacyineveryaspectofsociety
including the fast-developing computer and communication network. Users’
anonymity is one of the most important requirements to informationprivacy.
AccordingtothePrivacyActRegulations[3],anonymityisanimportantprop-
ertyinapplicationsofnetworkcommunication.Due towide applicationofIT
and network techniques, user anonymity in network applications has become
a critical challenge of security of our society, especially in areas like finance
andterrorismandcrime prevention.Accordingto theAustralianFederalPri-
vacyCommissioner,thenumberofcomplaintsandenquiriesaboutanonymity
remains high [1] and IT and Internet issues have become very important [2]
in recent years. There are various motivations for this. Many participants of
network applications like e-finance, e-commerce and e-health want to conceal
their activity and identity so that their personalprivacy can be protected. In
someotherapplicationslikee-votingtheparticipantsdonotwanttheiridenti-
tiestobelinkedtotheiractivities.Inalltheseapplications,anonymityhasto
be implemented although their requirements for anonymity may be different.
Acomplicatingfactoristhatcomputersandcomputernetworksmakeitquite
easy to maintain and distribute digital information. Millions of bits can be
transferred without error, stored, and analyzed in seconds. People are aware
of the potentialdangerof this informationprocessingpowerand areafraidof
losing control of their personal data in both their private and business lives.
Yet, their behavior is often inconsistent with that fear.
Without a satisfactory solution to anonymity of network communication,
many network applications cannot gain customers’ confidence and thus can-
not replace the traditional counterparts. For example, coins and notes in
1
✐ ✐
✐ ✐
✐ ✐
“K13841” — 2014/3/4 — 15:45
✐ ✐
2 Anonymous Communication Networks: Protecting Privacy on the Web
traditional cash are indistinguishable and do not reveal consumers’ identi-
ties while each e-cash coin is a distinguishable string and may be linked to
a consumer. So a customer used to traditional cash and traditional shopping
manner may worry about his anonymity and be reluctant to use e-cash and
on-lineshopping.Inanotherexample,intraditionalpaper-basedelectionsys-
tems a scrambled ballot box can guarantee anonymity of the voters. If no
electronic scrambling is provided, the voters will be concerned about their
anonymity and be unwilling to vote, which is especially serious in a nation
with compulsory elections like Australia. In e-health systems, medical infor-
mation must be transfered, shared and viewed while the patients’ anonymity
mustbe protected.Whenanonymityisimplemented, agoodbalancemustbe
kept with other security and practical properties like integrity, efficiency and
information recovery(in abnormalsituations). For example, digital signature
is a normal tool to guarantee information integrity, but often violates users’
anonymity.Insome networkapplications,specialdigitalsignaturetechniques
like group signatures and ring signatures are employed to achieve integrity
and anonymity simultaneously. However, group signatures and ring signa-
tures schemes are usually too inefficient for practical systems. So integrity,
anonymityandefficiencyarecontradictoryinsomeapplications.Anothercon-
tradictionisbetweenpersonalprivacyandnationalsecurity.Individualswant
to reserve anonymity in communication while the government may want to
monitor suspicious communication.With a democratic social system facing a
serious terrorism threat, a government must achieve a good balance between
anonymity and national security. After September 11, the American govern-
ment began to limit usage of encryption in communication. However, this is
not necessarily a good solution. A more flexible method is to design recov-
erable anonymity such that messages through private communication can be
recoveredwith a court order.
1.1 Right to Be Anonymous
Privacyandanonymityareessentialpartsoftoday’ssociety.Insomeenviron-
ments, such as medical treatments and banking, the privacy and anonymity
of individuals are protected by law. Other aspects of modern life may not
have such clear protections. Today, people are increasingly using computer
networks to accomplish activities that were always assumed to be private or
anonymousinthenon-virtualworld.The currentprotectionsprovidedbylaw
and law enforcement are slowly being driven to adapt to this new life in the
virtual world.
Computer and telecommunication technologies have generated great con-
cerns regarding the protection of privacy and anonmymity on global net-
works.Manyscholars,policymakersand“netizens”havediscussedappropriate
methods to protect privacy in electronic transactions and to ensure protec-
tionofpersonalidentityonnetworks.Internationalorganizations,suchasthe
✐ ✐
✐ ✐