PDA

View Full Version : Phantom: New anonymized P2P protocol



Renk
31.03.11, 20:33
History:


The Phantom anonymity protocol was designed in 2008 by Swedish security researcher Magnus Bråding to provide anonymity optimized for the current conditions and needs of average internet users. (...)

The protocol was first presented publicly by Magnus Bråding at the IT security and hacking conference DEFCON 16 in Las Vegas 2008.

A first implementation was completed in the second half of 2010 by Johannes Schlumberger, as a final year project at the University of Erlangen-Nuremberg, with initial implementation work also being performed by Michael Prinzinger at the same university. This source code was released to the public in March 2011.



Features:


One of the most important aspects of the protocol is that it is completely distributed and decentralized, making it much more resilient to censorship or attempts to shut it down than existing anonymization protocols like Tor.

The protocol design stems from eight goals:

1. Completely decentralized.

No critical or weak points to attack or put (il)legal pressure on.

2. Maximum resistance against all kinds of DoS attacks.

Direct technical destructive attacks will practically be the only possible way to even attempt to stop it.

3. Theoretically secure anonymization.

Probabilistic methods (contrary to deterministic methods) must be used in a completely decentralized design like this, where no other peer can be trusted, so focus is put on optimizing these methods.

4. Theoretically secure end-to-end transport encryption.

This is simple in itself, but still important in the context of anonymization.

5. Completely (virtually) isolated from the "normal" Internet.

No one should have to worry about crimes being perpetrated from their own IP address.

6. Maximum protection against identification of protocol usage through traffic analysis.

You never know what the next draconian law might be.

7. Capable of handling larger data volumes, with acceptable throughput.

Most existing anonymization solutions are practically unusable for (or even prohibit) larger data volumes.

8. Generic and well-abstracted design, compatible with all new and existing network enabled software.

Software application developer participation should not be needed, it should be easy to apply the anonymization to both new and already existing products like e.g. web browsers and file transfer software.


https://secure.wikimedia.org/wikipedia/en/wiki/Phantom_Anonymity_Protocol

Too beautifull to be true ????


First source code here:
https://groups.google.com/group/phantom-protocol/browse_thread/thread/c2fca0eba8e2c102

Mr. Crane
03.04.11, 16:22
We'll see where this goes, it certainly seems interesting.