Circumventing Cryptographic Deniability with Remote Attestation

Thumbnail Image
Access rights
openAccess
Journal Title
Journal ISSN
Volume Title
Conference article in proceedings
This publication is imported from Aalto University research portal.
View publication in the Research portal
View/Open full text file from the Research portal
Author
Date
2019-07-12
Department
Adj. Prof Asokan N. group
Department of Computer Science
Major/Subject
Mcode
Degree programme
Language
en
Pages
350–369
Series
Proceedings on Privacy Enhancing Technologies, Volume 2019, issue 3
Abstract
Deniable messaging protocols allow two parties to have ‘off-the-record’ conversations without leaving any record that can convince external verifiers about what either of them said during the conversation. Recent events like the Podesta email dump underscore the importance of deniable messaging to politicians, whistleblowers, dissidents and many others. Consequently, messaging protocols like Signal and OTR are designed with cryptographic mechanisms to ensure deniable communication, irrespective of whether the communications partner is trusted. Many commodity devices today support hardware assisted remote attestation which can be used to convince a remote verifier of some property locally observed on the device. We show how an adversary can use remote attestation to undetectably generate a non-repudiable transcript from any deniable protocol (including messaging protocols) providing sender authentication, proving to skeptical verifiers what was said. We describe a concrete implementation of the technique using the Signal messaging protocol. We then show how to design protocols that are deniable even against an adversary capable of attestation, and in particular how attestation itself can be used to restore deniability by thwarting realistic classes of adversary.
Description
Keywords
Other note
DOI
10.2478/popets-2019-0051
Citation
Gunn , L , Vieitez Parra , R & Asokan , N 2019 , Circumventing Cryptographic Deniability with Remote Attestation . in Proceedings on Privacy Enhancing Technologies . Proceedings on Privacy Enhancing Technologies , no. 3 , vol. 2019 , De Gruyter , pp. 350–369 , Privacy Enhancing Technologies Symposium , Stockholm , Sweden , 16/07/2019 . https://doi.org/10.2478/popets-2019-0051
Permanent link to this item
https://urn.fi/URN:NBN:fi:aalto-201909205326
Collections
[article-cris] Perustieteiden korkeakoulu / SCI