Zombie: Middleboxes that Don’t Snoop

ePrint Report: Zombie: Middleboxes that Don’t Snoop

Collin Zhang, Zachary DeStefano, Arasu Arun, Joseph Bonneau, Paul Grubbs, Michael Walfish

Zero-knowledge middleboxes (ZKMBs) are a recent paradigm in which clients get privacy while middleboxes enforce policy: clients prove in zero knowledge that the plaintext underlying their encrypted traffic complies with network policies, such as DNS filtering. However, prior work had impractically poor performance and was limited in functionality.


This work presents Zombie, the first system built using the ZKMB paradigm. Zombie …

clients dns dns filtering don encrypted encrypted traffic eprint report knowledge michael middleboxes network paradigm paul plaintext policies policy privacy prove report traffic zero knowledge zombie