Cryptology ePrint Archive: Report 2020/399

Analysis of DP3T

Serge Vaudenay

Abstract: To help fighting the COVID-19 pandemic, the Pan-European Privacy-Preserving Proximity Tracing (PEPP-PT) project proposed a Decentralized Privacy-Preserving Proximity Tracing (DP3T) system. This helps tracking the spread of SARS-CoV-2 virus while keeping the privacy of individuals safe. In this report, we analyze the security and the privacy protection of DP3T. Without questioning how effective it could be against the pandemic, we show that it may introduce severe risks to society. Furthermore, we argue that some privacy protection measurements by DP3T may have the opposite affect of what they were intended to. Specifically, sick and reported people may be deanonymized, private encounters may be revealed, and people may be coerced to reveal the private data they collect.

Category / Keywords: applications / COVID-19, tracking, security, privacy

Date: received 8 Apr 2020

Contact author: serge vaudenay at epfl ch

Available format(s): PDF | BibTeX Citation

Version: 20200409:125022 (All versions of this report)

Short URL: ia.cr/2020/399


[ Cryptology ePrint archive ]