In many important applications, a collection of mutually distrustful parties must perform
private computation over multisets. Each party's input to the function is his private input …

We present Mixminion, a message-based anonymous remailer protocol with secure single-
use reply blocks. Mix nodes cannot distinguish Mixminion forward messages from reply …

We present the trafic analysis problem and expose the most important protocols, attacks and
design issues. Afterwards, we propose directions for further research. As we are mostly …

Mix-nets are used in e-voting schemes and other applications that require anonymity.
Shuffles of homomorphic encryptions are often used in the construction of mix-nets. A shuffle …

We introduce a new cryptographic technique that we call universal re-encryption. A
conventional cryptosystem that permits re-encryption, such as ElGamal, does so only for a …

Computer keyboards are often used to transmit confidential data such as passwords. Since
they contain electronic components, keyboards eventually emit electromagnetic waves …

We propose a new technique for making mix nets robust, called randomized partial checking
(RPC). The basic idea is that rather than providing a proof of completely correct operation …

We discuss problems and trade-offs with systems providing anonymity for web browsing (or
more generally any communication system that requires low latency interaction). We focus …

Abstract In 2005, Murdoch and Danezis demonstrated the first practical congestion attack
against a deployed anonymity network. They could identify which relays were on a target Tor …

Targeted advertising has transformed the marketing landscape for a wide variety of
businesses, by creating new opportunities for advertisers to reach prospective customers by …