Search papers, labs, and topics across Lattice.
TrustMix is a novel mix protocol designed for mobile ad hoc networks (MANETs) that operates without a central trusted party, addressing the limitations of existing solutions that require prior knowledge of network topology. By allowing users to forward messages through multiple groups, TrustMix enhances anonymity even in the presence of adversarial parties, as anonymity is preserved unless all group members are adversarial. The protocol also implements rate limiting through linkable ring signatures, ensuring that message sending limits are enforced without compromising user identities, and demonstrates significant improvements in message anonymity through simulation and a proof-of-concept Android implementation.
TrustMix enables robust message anonymity in mobile ad hoc networks without relying on a central authority, even when adversarial nodes are present.
Mix networks are a highly effective way to achieve anonymity, defending against a wide range of traffic-analysis attacks. However, mix networks are usually designed for infrastructure networks and cannot be directly applied in the context of mobile ad hoc networks (MANETs). The few existing solutions for MANETs require advance knowledge of the topology or a trusted central party. In this paper, we present TrustMix, a mix protocol for MANETs that operates without any central trusted party. In TrustMix, parties join groups and then messages are forwarded via multiple groups to provide anonymity. With TrustMix, users only need to find a party nearby that they consider trusted. They then forward the message to this party's group, and the party shuffles messages before forwarding to other groups, meaning that the original message and the forwarded message cannot be linked. Furthermore, even if the chosen party is adversarial, they can only break the anonymity if all parties in their group are adversarial as all of them contribute to the shuffling. In addition to anonymity, TrustMix also enforces rate limits on the number of messages through the use of linkable ring signatures, which allows detecting that parties send more messages that allowed without revealing identities. We prove the security of our protocol in the random oracle model. We evaluate its anonymity using an existing mix-network simulator and show that TrustMix significantly improves message anonymity. Finally, we present a proof-of-concept Android implementation and show that TrustMix achieves acceptable throughput with 5 mobile devices.
