Robust, privacy-preserving, transparent, and auditable on-device blocklisting
Kurt Thomas, Sarah Meiklejohn, Michael A. Specter, Xiang Wang, Xavier, Llor\`a, Stephan Somogyi, and David Kleidermacher

TL;DR
This paper introduces two privacy-preserving, transparent, and auditable on-device blocklisting protocols that leverage cryptographic techniques to determine harmful objects while maintaining user privacy and trustworthiness.
Contribution
It presents novel protocols combining private set intersection, cryptographic hashes, signatures, and Merkle proofs for secure, transparent, and auditable on-device blocklisting.
Findings
Protocols are practical for email, messaging, and storage applications.
Benchmark results show time and space efficiency of the protocols.
Highlights remaining challenges like privacy and censorship issues.
Abstract
With the accelerated adoption of end-to-end encryption, there is an opportunity to re-architect security and anti-abuse primitives in a manner that preserves new privacy expectations. In this paper, we consider two novel protocols for on-device blocklisting that allow a client to determine whether an object (e.g., URL, document, image, etc.) is harmful based on threat information possessed by a so-called remote enforcer in a way that is both privacy-preserving and trustworthy. Our protocols leverage a unique combination of private set intersection to promote privacy, cryptographic hashes to ensure resilience to false positives, cryptographic signatures to improve transparency, and Merkle inclusion proofs to ensure consistency and auditability. We benchmark our protocols -- one that is time-efficient, and the other space-efficient -- to demonstrate their practical use for applications…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsCryptography and Data Security · Blockchain Technology Applications and Security · Internet Traffic Analysis and Secure E-voting
