A Description and Proof of a Generalised and Optimised Variant of Wikstr\"om's Mixnet

Abstract

In this paper, we describe an optimised variant of Wikstr\"om's mixnet which shuffles vectors of ElGamal ciphertexts in parallel. We then show in detail that this construction is secure. Wikstr\"om's verifiable mixnet as we refer to it here was first presented in "Proofs of Restricted Shuffles" by Terelius and Wikstr\"om, building on Wikstr\"om's previous work. Specifically we take the optimised variant for ElGamal which appears to be in common use; for instance, it is presented in Haenni et al's "Pseudo-Code Algorithms for Verifiable Re-Encryption Mix-Nets". We extend the mixnet to support parallel shuffles. (The possibility of doing this is proven by the Wikstr\"om's result but we wish to show that this particular instance with its optimisations is secure.)