Boomerang: Metadata-Private Messaging under Hardware Trust
summary
Boomerang claims cryptographic metadata privacy by running the message mixer inside secure enclaves and using label-based routing plus oblivious proactive patching (oblivious sorting + linear scans) to detect and bounce irregular messages so attackers cannot distinguish blocked or injected clients. A two-layer entry/load-balancer design enforces global mixing and input-independent batching; evaluation reports 99th-percentile 7.76 s latency on 32 machines for 220 clients and about 10 s for 1M clients on 16 servers, showing horizontal scalability.
AI-written summary · about
chapters (5)
- 0:00Motivation and background
- 3:16Single-server design
- 5:11Oblivious patching
- 8:55Multi-server scalability
- 14:32Evaluation and conclusion
related talks
28mPaying for Privacy Preserving Messaging
25mMCMix: Anonymous Messaging via Secure Multiparty Computation
12mChop Chop: Byzantine Atomic Broadcast to the Network Limit
51mMessaging Layer Security: Towards a New Era of Secure Group Messaging
29mThe Loopix Anonymity System
28mConversational big data
22mXRD: Scalable Messaging System with Cryptographic Privacy
15mBots can Snoop: Uncovering and Mitigating Privacy Risks of Bots in Group Chats