Cryptology ePrint Archive: Report 2019/390

KeyForge: Mitigating Email Breaches with Forward-Forgeable Signatures

Michael Specter and Sunoo Park and Matthew Green

Abstract: Email breaches are commonplace, and they expose a wealth of personal, business, and political data that may have devastating consequences. The current email system allows any attacker who gains access to your email to prove the authenticity of the stolen messages to third parties -- a property arising from a necessary anti-spam / anti-spoofing protocol called DKIM. This exacerbates the problem of email breaches by greatly increasing the potential for attackers to damage the users' reputation, blackmail them, or sell the stolen information to third parties.

In this paper, we introduce "non-attributable email", which guarantees that a wide class of adversaries are unable to convince any third party of the authenticity of stolen emails. We formally define non-attributability, and present two practical system proposals -- KeyForge and TimeForge -- that provably achieve non-attributability while maintaining the important protection against spam and spoofing that is currently provided by DKIM. Moreover, we implement KeyForge and demonstrate that that scheme is practical, achieving competitive verification and signing speed while also requiring 42% less bandwidth per email than RSA2048.

Category / Keywords: cryptographic protocols / deniability, key management, public-key cryptography, digital signatures, applications

Date: received 12 Apr 2019

Contact author: specter at mit edu

Available format(s): PDF | BibTeX Citation

Version: 20190418:185728 (All versions of this report)

Short URL: ia.cr/2019/390


[ Cryptology ePrint archive ]