Anonymity: The idea Untraceability: hide connection between senders and recipients Unlinkability: hide connection between actions by the same sender Unobservability: hide the fact that a user is participating in the system Sender vs Recipient anonymity High-latency vs low-latency systems