[Resource Topic] 2018/638: BurnBox: Self-Revocable Encryption in a World of Compelled Access

Welcome to the resource topic for 2018/638

Title:
BurnBox: Self-Revocable Encryption in a World of Compelled Access

Authors: Nirvan Tyagi, Muhammad Haris Mughees, Thomas Ristenpart, Ian Miers

Abstract:

Dissidents, journalists, and others require technical means to protect their privacy in the face of compelled access to their digital devices (smartphones, laptops, tablets, etc.). For example, authorities increasingly force disclosure of all secrets, including passwords, to search devices upon national border crossings. We therefore present the design, implementation, and evaluation of a new system to help victims of compelled searches. Our system, called BurnBox, provides self-revocable encryption: the user can temporarily disable their access to specific files stored remotely, without revealing which files were revoked during compelled searches, even if the adversary also compromises the cloud storage service. They can later restore access. We formalize the threat model and provide a construction that uses an erasable index, secure erasure of keys, and standard cryptographic tools in order to provide security supported by our formal analysis. We report on a prototype implementation, which showcases the practicality of BurnBox.

ePrint: https://eprint.iacr.org/2018/638

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .