Nav: Home

Cryptographic breakthrough helps spies to shake hands

April 30, 2019

When spies meet, they use secret handshakes to confirm their identities, ensuring they are who they say they are. Now, researchers at Stevens Institute of Technology, and colleagues, have solved a 15-year-old problem that allows handshake-style encryption to be used for time-delayed digital communications such as email - a challenge once thought to be impossible.

The work, led by Giuseppe Ateniese, David and GG Farber Endowed Chair in Computer Science, dramatically expands the technology's utility not just for intelligence agencies and Web-savvy spies, but for anyone with an interest in secure online communication, including journalists, financial workers, lawyers, medical professionals, and others for whom security and privacy are key priorities.

"The demand for tools like this is incredible," said Ateniese, whose work appears in arxiv.org and will be presented at Crypto 2019, one of the most competitive conferences in this research area. "Privacy is growing more and more important, and encryption is essential for almost everyone."

Digital handshakes, like in-person handshakes, use real-time interactions to verify participants' identities. That's fine for live communication like online chats, explained Ateniese. But it's a deal breaker for email-style communications, in which messages may need to be decoded long after they were originally sent.

Ateniese and his team, including Danilo Francati, a doctoral student at Stevens, as well as Daniele Venturi from Sapienza University of Rome and David Nuñez from Nucypher, a cryptography company, combined existing key-based cryptographic algorithms in a novel arrangement to create a system called matchmaking encryption, which simultaneously checks the identities of both sender and receiver before decrypting a message. Crucially, matchmaking encryption does away with the need for real-time interactions, allowing messages to be sent on a "dead drop" basis and read at a later date.

"A dead drop is like when a spy leaves a message behind a rock," said Ateniese. "It can be used when you need to send a message to someone who's not there at the moment, but will find it if he or she is the intended recipient.

To use matchmaking encryption, both sender and receiver create policies, or lists of traits, that describe the people with whom they are willing to communicate. Only when both policies are satisfied will a message actually be delivered and decrypted, ensuring that only the intended recipients can read the message without anyone else knowing they are communicating.

Matchmaking encryption can be used for individual-to-individual communication, but also allows users to designate classes of people with whom they are willing to communicate. An FBI agent in Philadelphia could make their messages accessible only to CIA agents in New York, for example; while CIA agents in New York could refuse to accept messages from anyone other than Philadelphia-based FBI agents. "It's a way to combine these two requests, from sender and receiver, into a single system," said Ateniese.

Messages that don't satisfy both users' policies aren't decrypted, with neither sender nor receiver receiving information about the other party. "This is important for intelligence -- I don't want to reveal to you that I'm an FBI agent, so I want assurances that you are who you say you are," said Francati. "Matchmaking encryption provides that assurance as well as a level of privacy that's stronger than anything else that's available."

As a proof of concept, Ateniese and his team created a matchmaking encryption bulletin board accessible via the Tor Browser, a web browser that anonymizes one's web traffic, making it easy to protect one's identity online. Users can scan the bulletin board for messages that match their policies and for which they match the sender's policy, and decrypt them in just a few milliseconds -- a sign that the matchmaking encryption system doesn't unduly strain computing resources, suggesting it is both effective and efficient.

Ateniese predicts that additional applications will quickly emerge as researchers explore the new technology, and find ways to make matchmaking encryption even more powerful for professions where security and privacy are key priorities.

"The work opens up new frontiers in secure communication, said Ateniese. "A very important result - a real and long-awaited breakthrough."
-end-


Stevens Institute of Technology

Related Intelligence Articles:

Artificial intelligence predicts patient lifespans
A computer's ability to predict a patient's lifespan simply by looking at images of their organs is a step closer to becoming a reality, thanks to new research led by the University of Adelaide.
Scientists find new genetic roots for intelligence
An international research team led by Professor Danielle Posthuma from the Vrije Universiteit Amsterdam, The Netherlands, has made a major advance in understanding the genetic underpinnings of intelligence.
Artificial intelligence may help diagnose tuberculosis in remote areas
Researchers are training artificial intelligence models to identify tuberculosis (TB) on chest X-rays, which may help screening and evaluation efforts in TB-prevalent areas with limited access to radiologists, according to a new study.
Emotional intelligence helps make better doctors
A study found that pediatric residents had a median score of 110 on an emotional intelligence survey, compared to an average score of 100 in the general population.
Conformity is not a universal indicator of intelligence in children, study says
Because innovation is part of the American culture, adults in the United States may be less likely to associate children's conformity with intelligence than adults from other populations, according to research from developmental psychologists at the University of Texas at Austin.
More Intelligence News and Intelligence Current Events

Best Science Podcasts 2019

We have hand picked the best science podcasts for 2019. Sit back and enjoy new science podcasts updated daily from your favorite science news services and scientists.
Now Playing: TED Radio Hour

Anthropomorphic
Do animals grieve? Do they have language or consciousness? For a long time, scientists resisted the urge to look for human qualities in animals. This hour, TED speakers explore how that is changing. Guests include biological anthropologist Barbara King, dolphin researcher Denise Herzing, primatologist Frans de Waal, and ecologist Carl Safina.
Now Playing: Science for the People

#534 Bacteria are Coming for Your OJ
What makes breakfast, breakfast? Well, according to every movie and TV show we've ever seen, a big glass of orange juice is basically required. But our morning grapefruit might be in danger. Why? Citrus greening, a bacteria carried by a bug, has infected 90% of the citrus groves in Florida. It's coming for your OJ. We'll talk with University of Maryland plant virologist Anne Simon about ways to stop the citrus killer, and with science writer and journalist Maryn McKenna about why throwing antibiotics at the problem is probably not the solution. Related links: A Review of the Citrus Greening...