Circumventing Cryptographic Deniability with Remote Attestation

Lachlan Gunn, Ricardo Vieitez Parra, N. Asokan

Research output: Chapter in Book/Report/Conference proceedingConference contributionScientificpeer-review

124 Downloads (Pure)

Abstract

Deniable messaging protocols allow two parties to have ‘off-the-record’ conversations without leaving any record that can convince external verifiers about what either of them said during the conversation. Recent events like the Podesta email dump underscore the importance of deniable messaging to politicians, whistleblowers, dissidents and many others. Consequently, messaging protocols like Signal and OTR are designed with cryptographic mechanisms to ensure deniable communication, irrespective of whether the communications partner is trusted.

Many commodity devices today support hardware assisted remote attestation which can be used to convince a remote verifier of some property locally observed on the device.

We show how an adversary can use remote attestation to undetectably generate a non-repudiable transcript from any deniable protocol (including messaging protocols) providing sender authentication, proving to skeptical verifiers what was said. We describe a concrete implementation of the technique using the Signal messaging protocol. We then show how to design protocols that are deniable even against an adversary capable of attestation, and in particular how attestation itself can be used to restore deniability by thwarting realistic classes
of adversary.
Original languageEnglish
Title of host publicationProceedings on Privacy Enhancing Technologies
Pages350–369
DOIs
Publication statusPublished - 12 Jul 2019
MoE publication typeA4 Article in a conference publication
EventPrivacy Enhancing Technologies Symposium - Stockholm, Sweden
Duration: 16 Jul 201920 Jul 2019
Conference number: 19

Publication series

NameProceedings on Privacy Enhancing Technologies
PublisherDe Gruyter
Number3
Volume2019
ISSN (Electronic)2299-0984

Conference

ConferencePrivacy Enhancing Technologies Symposium
Abbreviated titlePETS
CountrySweden
CityStockholm
Period16/07/201920/07/2019

Fingerprint Dive into the research topics of 'Circumventing Cryptographic Deniability with Remote Attestation'. Together they form a unique fingerprint.

Cite this