Mix networks are routing protocols that create hard-to-trace communications by using a chain of proxy servers known as mixes which take in messages from multiple senders, shuffle them, and send them back out in random order to the next destination (possibly another mix node). This breaks the link between the source of the request and the destination, making it harder for eavesdroppers to trace end-to-end communications. Furthermore, mixes only know the node that it immediately received the message from, and the immediate destination to send the shuffled messages to, making the network resistant to malicious mix nodes. Each message is encrypted to each proxy using public key cryptography; the resulting encryption is layered like a Russian doll (except that each "doll" is of the same size) with the message as the innermost layer. Each proxy server strips off its own layer of encryption to reveal where to send the message next. If all but one of the proxy servers are compromised by the tracer, untraceability can still be achieved against some weaker adversaries. The concept of a mix "cryptosystem" in the context of electronic mail was first described by David Chaum in 1981 because of the "traffic analysis problem" (traffic analysis). Applications that are based on this concept include anonymous remailers (such as Mixmaster), onion routing, garlic routing, and key-based routing (including Tor, I2P, and Freenet). Large-scale implementations of the mix network concept began to emerge in the 2020s, driven by advancements in privacy-preserving technologies and decentralized infrastructure.
History David Chaum published the concept of "mixes" in 1979 in a paper for his master's degree thesis work, shortly after he was first introduced to the field of cryptography through the work of public key cryptography, Martin Hellman, Whitfield Diffie and Ralph Merkle. While public key cryptography encrypted the security of information, Chaum believed there to be personal privacy vulnerabilities in the meta data found in communications. Some vulnerabilities that enabled the compromise of personal privacy included time of messages sent and received, size of messages and the address of the original sender. He cites Martin Hellman and Whitfield's paper "New Directions in Cryptography" (1976) in his work.
1990s: Cypherpunk movement Innovators like Ian Goldberg and Adam Back made huge contributions to mixnet technology. This era saw significant advancements in cryptographic methods, which were important for the practical implementation of mixnets. Mixnets began to draw attention in academic circles, leading to more research on improving their efficiency and security. However, widespread practical application was still limited, and mixnets stayed largely within experimental stages. A "cypherpunk remailer" software was developed to make it easier for individuals to send anonymous emails using mixnets.
2000s: Inspiration for other anonymous networks In the 2000s, the increasing concerns about internet privacy highlighted the significance of mix networks (mixnets). This era was marked by the emergence of Tor (The Onion Router) around the mid-2000s. Although Tor was not a straightforward implementation of a mixnet, it drew heavily from David Chaum's foundational ideas, particularly utilizing a form of onion routing akin to mixnet concepts. This period also witnessed the emergence of other systems that incorporated mixnet principles to various extents, all aimed at enhancing secure and anonymous communication.
2010s: Renewed academic interest in mix networks Entering the 2010s, there was a significant shift towards making mixnets more scalable and efficient. This change was driven by the introduction of new protocols and algorithms, which helped overcome some of the primary challenges that had previously hindered the widespread deployment of mixnets. The relevance of mixnets surged, especially after 2013, following Edward Snowden's disclosures about extensive global surveillance programs. This period saw a renewed focus on mixnets as vital tools for protecting privacy. The Loopix architecture, introduced in 2017, integrated several pre-existing privacy-enhancing techniques to form a modern mix network design. Key elements of Loopix included:
"Sphinx" packet format, ensuring unlinkability and layered encryption Poisson-process-based packet transmission, introducing randomness to prevent traffic correlation attacks. Exponential mixing delays, making traffic analysis more difficult. Loop-based cover traffic, where dummy packets (placeholder packets that do not contain actual data) are continuously injected to obscure real data flows. Stratified mix node topology, optimizing anonymity while maintaining network efficiency. The rise of blockchain technologies opened new possibilities for scalable decentralized systems, paving the way for large-scale, distributed mix networks.
2020s: First large-scale implementations Throughout the 2020s, various public and private research and development programs contributed to the realization of the first large-scale mix networks. By 2025, multiple projects—including 0KN, HOPR, Katzenpost, Nym (as the overlay for the later NymVPN), and xx.network (led by David Chaum)—are under active development, aiming to enhance privacy-preserving communication on a broader scale.
How it works
Participant A prepares a message for delivery to participant B by appending a random value R to the message, sealing it with the addressee's public key K b {\displaystyle K_{b}} , appending B's address, and then sealing the result with the mix's public key K m {\displaystyle K_{m}} . M opens it with his private key, now he knows B's address, and he sends K b ( m e s s a g e , R ) {\displaystyle K_{b}(message,R)} to B.
Message format
… excerpt ends here. Continue reading the full article.
