Paper 2022/1139 Original: eprint.iacr.org/2022/1139 ↗

Formal Security Definition of Metadata-Private Messaging

Shengtong Zhang
Arvid Lunnemark
Sualeh Asif
Abstract

We present a novel, complete definition of metadata-private messaging (MPM) and show that our definition is achievable and non-trivially more general than previous attempts that we are aware of. Our main contributions are: 1) We describe a vulnerability in existing MPM implementations through a variation of the compromised-friend (CF) attack proposed by Angel et al. Our attack can compromise the exact metadata of any conversations between honest users. 2) We present a security definition for MPM systems assuming that some friends may be compromised. 3) We present a protocol satisfying our security definition based on Anysphere, an MPM system we deployed in practice.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Preprint.
History
2022-08-31: last updated
2022-08-31: published
Short URL
https://ia.cr/2022/1139
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2022/1139,
      author = {Shengtong Zhang and Arvid Lunnemark and Sualeh Asif},
      title = {Formal Security Definition of Metadata-Private Messaging},
      howpublished = {Cryptology {ePrint} Archive, Paper 2022/1139},
      year = {2022},
      url = {https://eprint.iacr.org/2022/1139}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.