Association for Computing Machinery
The main idea behind the TRIPLEX framework is to analyze relevant privacy aspects of privacy-enhancing protocols in a specified scenario that may involve several actors and protocol instances (of different protocols). Systems dealing with personal information are legally required to satisfy the principle of data minimization. Privacy-enhancing protocols use cryptographic primitives to minimize the amount of personal information exposed by communication. However, the complexity of these primitives and their interplay makes it hard for non-cryptography experts to understand the privacy implications of their use. In this paper, the authors present TRIPLEX, a framework for the analysis of data minimization in privacy-enhancing protocols.