Conscript Your Friends into Larger Anonymity Sets with JavaScript
This addresses the problem of limited anonymity for users of systems like remailers and e-voting by incrementally improving anonymity set sizes through web-based conscription.
The paper tackles the problem of small anonymity sets in anonymous communication systems by introducing ConScript, a framework that uses JavaScript to conscript casual web users into generating dummy messages, increasing anonymity set sizes for applications like remailers and e-voting; implementation results show that generating dummy messages takes 81 ms for a mix-net and 156 ms for a DoS-resistant DC-net.
We present the design and prototype implementation of ConScript, a framework for using JavaScript to allow casual Web users to participate in an anonymous communication system. When a Web user visits a cooperative Web site, the site serves a JavaScript application that instructs the browser to create and submit "dummy" messages into the anonymity system. Users who want to send non-dummy messages through the anonymity system use a browser plug-in to replace these dummy messages with real messages. Creating such conscripted anonymity sets can increase the anonymity set size available to users of remailer, e-voting, and verifiable shuffle-style anonymity systems. We outline ConScript's architecture, we address a number of potential attacks against ConScript, and we discuss the ethical issues related to deploying such a system. Our implementation results demonstrate the practicality of ConScript: a workstation running our ConScript prototype JavaScript client generates a dummy message for a mix-net in 81 milliseconds and it generates a dummy message for a DoS-resistant DC-net in 156 milliseconds.