Privacy-preserving VPN handshakes with Schnorr-based zero-knowledge proofs

Basit Öğe Kaydı
dc.contributor.authorYüce, Mehmet Fatih
dc.contributor.authorErtürk, Mehmet Ali
dc.contributor.authorAydın, Muhammed Ali
dc.date.accessioned2026-03-23T05:57:39Z
dc.date.available2026-03-23T05:57:39Z
dc.date.issued2026
dc.departmentFakülteler, Mühendislik Fakültesi, Bilgisayar Mühendisliği Bölümü
dc.description.abstractModern Virtual Private Network (VPN) protocols rely on public-key-based handshakes that authenticate peers but can inadvertently reveal identifying or linkable information across sessions or network observers. This paper presents a privacy-preserving handshake framework that integrates Schnorr-based zero-knowledge proofs into existing VPN key-exchange mechanisms, allowing each party to prove key ownership without disclosing longterm identifiers such as static public keys. The framework is expressed as a generic extension layer applicable to a wide class of VPN protocols employing Diffie-Hellman-based mutual authentication (e.g., IKEv2/IPsec, OpenVPN, and WireGuard). To demonstrate feasibility, we integrate the scheme into WireGuard as a case study, yielding WireGuard-ZK. Implementation results show that the added privacy protection incurs modest computational and latency overhead while maintaining WireGuard's lightweight performance characteristics. The proposed design thus provides a generalizable cryptographic handshake model for privacy-preserving VPNs, combining theoretical soundness with practical deployability across modern tunneling frameworks.
dc.description.sponsorshipIstanbul University ; 36754
dc.identifier.doi10.1016/j.cose.2026.104887
dc.identifier.issn0167-4048
dc.identifier.issn1872-6208
dc.identifier.scopus2-s2.0-105032353596
dc.identifier.scopusqualityQ1
dc.identifier.urihttps://doi.org/10.1016/j.cose.2026.104887
dc.identifier.urihttps://hdl.handle.net/11501/2663
dc.identifier.volume166
dc.identifier.wosWOS:001716996900001
dc.identifier.wosqualityQ1
dc.indekslendigikaynakWeb of Science
dc.indekslendigikaynakScopus
dc.institutionauthorYüce, Mehmet Fatih
dc.institutionauthorid0000-0001-7698-274X
dc.language.isoen
dc.publisherElsevier Ltd
dc.relation.ispartofComputers and Security
dc.relation.publicationcategoryMakale - Uluslararası Hakemli Dergi - Kurum Öğretim Elemanı
dc.rightsinfo:eu-repo/semantics/closedAccess
dc.subjectNIZK
dc.subjectPrivacy-Preserving Authentication
dc.subjectVPN Handshake
dc.subjectWireGuard
dc.titlePrivacy-preserving VPN handshakes with Schnorr-based zero-knowledge proofs
dc.typeArticle

Dosyalar

Orijinal paket
Listeleniyor 1 - 1 / 1
Kapalı Erişim
İsim:
Tam Metin / Full Text
Boyut:
2.52 MB
Biçim:
Adobe Portable Document Format
İndir
Lisans paketi
Listeleniyor 1 - 1 / 1
Kapalı Erişim
İsim:
license.txt
Boyut:
1.17 KB
Biçim:
Item-specific license agreed to upon submission
Açıklama:
İndir

Koleksiyon

Mühendislik Fakültesi Koleksiyonu
Scopus İndeksli Yayınlar Koleksiyonu
WoS İndeksli Yayınlar Koleksiyonu