Express: Lowering the Cost of Metadata-hiding Communication with Cryptographic Privacy
Saba Eskandarian, Henry Corrigan-Gibbs, Matei Zaharia, Dan Boneh

TL;DR
Express is a cryptographic messaging system that drastically reduces communication and computation costs for metadata-hiding, enabling more practical and scalable privacy-preserving communication.
Contribution
It introduces a two-server system that achieves cryptographic privacy with constant-factor communication overhead and uses only symmetric cryptography, improving efficiency over prior methods.
Findings
Reduces bandwidth by over 100x compared to previous systems.
Decreases latency and increases message throughput.
Lowers end-to-end costs of privacy-preserving applications by 6x.
Abstract
Existing systems for metadata-hiding messaging that provide cryptographic privacy properties have either high communication costs, high computation costs, or both. In this paper, we introduce Express, a metadata-hiding communication system that significantly reduces both communication and computation costs. Express is a two-server system that provides cryptographic security against an arbitrary number of malicious clients and one malicious server. In terms of communication, Express only incurs a constant-factor overhead per message sent regardless of the number of users, whereas previous cryptographically-secure systems Pung and Riposte had communication costs proportional to roughly the square root of the number of users. In terms of computation, Express only uses symmetric key cryptographic primitives and makes both practical and asymptotic improvements on protocols employed by prior…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsInternet Traffic Analysis and Secure E-voting · Cryptography and Data Security · Privacy-Preserving Technologies in Data
