Asymmetric Message Franking: Content Moderation for Metadata-Private End-to-End Encryption

Nirvan Tyagi; Paul Grubbs; Julia Len; Ian Miers; Thomas Ristenpart

Paper 2019/565 Original: eprint.iacr.org/2019/565 ↗

Asymmetric Message Franking: Content Moderation for Metadata-Private End-to-End Encryption

Nirvan Tyagi

Paul Grubbs

Julia Len

Ian Miers

Thomas Ristenpart

Abstract

Content moderation is crucial for stopping abuse and harassment via messaging on online platforms. Existing moderation mechanisms, such as message franking, require platform providers to see user identifiers on encrypted traffic. These mechanisms cannot be used in messaging systems in which users can hide their identities, such as Signal. The key technical challenge preventing moderation is in simultaneously achieving cryptographic accountability while preserving deniability. In this work, we resolve this tension with a new cryptographic primitive: asymmetric message franking schemes (AMFs). We define strong security notions for AMFs, including the first formal treatment of deniability in moderation settings. We then construct, analyze, and implement an AMF scheme that is fast enough for deployment. We detail how to use AMFs to build content moderation for metadata-private messaging.

Metadata

Available format(s): PDF
Category: Public-key cryptography
Publication info: Preprint.
History: 2019-05-27: last updated; 2019-05-27: published
Short URL: https://ia.cr/2019/565
License: https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2019/565,
      author = {Nirvan Tyagi and Paul Grubbs and Julia Len and Ian Miers and Thomas Ristenpart},
      title = {Asymmetric Message Franking: Content Moderation for Metadata-Private End-to-End Encryption},
      howpublished = {Cryptology {ePrint} Archive, Paper 2019/565},
      year = {2019},
      url = {https://eprint.iacr.org/2019/565}
}