We present a formal model of Chaum’s Mix concept and apply known analysis techniques to a new type of security property, namely anonymity, in a network composed of senders, receivers and Mix stations. The network and its components are formalized as CSP processes, and combined with a (passive) attacker. Based on the model-checker FDR, formal analyses of networks and their security properties ar...
