David Molnar Wrote:
> Anyway, recipient-hiding is most obviously useful when public bulletin
> boards are involved. I'm not so sure it's useful between remailers, since
> the underlying transport protocol will tend to reveal the ID of the next
> hop anyway...but it strikes me as something to have as a hedge against
> future clever attacks I can't think of.
If a number of mixes share a broadcast channel, recipient-hiding might be
very useful for reducing the number of "good" mixes in a chain needed to
achieve complete mixing. For efficiency, it would be desirable to have a
recipient-hiding encryption scheme that allows easy screening of
ciphertexts that can be decrypted by a given private key. Is this
possible? All of the schemes you listed seem to require trial decryptions
of every ciphertext.
--
cryptopp.com
