Live data from Hacker News

Cryptographic coin flipping, now in Keybase

keybase.io

81–90 of 101 posts

Re: Cryptographic coin flipping, now in Keybase

#81
post #79

>> Who invented commitment schemes? > ~My wife~ Not sure. Seriously? You work professionally in the crypto space and don't know where this is from? Or don't feel it's important to attribute such fundamental ideas to the appropriate people? If you really don't know, a quick google would have educated you. But what I fear to be more likely is that you apparently just don't give a damn. For anybody remotely interested,…

I think you're unfairly punishing him for not knowing; it's a bit tough to find. I'll give you that the joke -- pinning it on his wife -- is unfunny. None of the folks you mentioned, I believe, invented commitment schemes. Whit Diffie has a good history here: https://ee.stanford.edu/~hellman/publications/24.pdf . So these innovations would have been ~1 academic generation prior. Of course, the GCHQ probably invented…

Hm, I'd consider Whit and Martin to be the same generation as Blum and the RSA gang. :) I'd say Goldreich, Goldwasser, Micali and friends are the "next generation", if you really want to distinguish generations, no?

I didn't actually find the joke too unfunny, but not acknowledging the giants on whose shoulders his little business stands is a pretty inexcusable faux-pas.

Re: Cryptographic coin flipping, now in Keybase

#82
I've thought about trustless lotteries quite a bit, and haven't really came up with a solution that works without using head-to-head brackets.

>A bad actor can't change the outcome of a flip but could prevent it from resolving.

The post glosses over this but it can get pretty bad. E.g. 99 actors have revealed their seeds and then the 100th decides whether to reveal or not, based on whether they or their confederates will be the winner after that final reveal.

Re: Cryptographic coin flipping, now in Keybase

#83
post #46

Is this a problem with commitment schemes? I want a heads to come up. I add a couple of hacked members to the group, so there are 3 honest members, and lets say 3 coordinated dishonest members. Everyone shares their commitment hash, and the dishonest members share their actual commitments amongst themselves. Once everyone has the commitment hashes, the 3 honest members broadcast their commitment. The three dishonest…

Yup. It's pretty gameable using collusion due to the ability to refuse to reveal.

Re: Cryptographic coin flipping, now in Keybase

#84

Earlier quoted context omitted.

> It covers aspects (think pareto principle) of email, linkedin, slack, github, dropbox, whatsapp, online banking and probably more core use cases that I don’t have on top of my mind. Soooo... A centralized solution for everything? ;)

Exactly... unless the work is open source, they are just another centralized solution. Reminds me of Telegram.

I thought Keybase was open source? Released under the New BSD (3 Clause) License?

Re: Cryptographic coin flipping, now in Keybase

#85

I'd be curious if people on HN would want a zero knowledge survey and voting system inside Keybase, and if so, what would it look like? The background: we talk about it sometimes as a solution to a real problem: in certain teams and workplaces, people can be afraid to give honest feedback (who dares to submit an "anonymous" survey to HR?), but Keybase may be in a unique position to let people in a group give written…

OT: One of the things I find interesting is that "zero knowledge" has become a buzzword. On the one hand it is frustrating, because when cryptographers say "zero knowledge" we mean something very specific and rigorously defined (a survey protocol cannot be zero knowledge because the results of a survey do reveal something about the respondents' inputs). On the other hand, the fact that non-experts are comfortable wit…

From the anonize paper [1]: “Our system is constructed in two steps. We first provide an abstract implementation of secure ad-hoc surveys from generic primitives, such as commitment schemes, signatures schemes, pseudo-random functions (PRF) and generic non-interactive zero-knowledge (NIZK) arguments for NP.”

[1] https://eprint.iacr.org/2015/681.pdf

Re: Cryptographic coin flipping, now in Keybase

#87
post #86

I'll add my usual reminder here that keybase is a proprietary walled garden that made up its own crypto standards and protocols on many levels leading to dangerous design flaws like this one: https://github.com/keybase/keybase-issues/issues/1946

Also to cut off the usual arguments: no you don't need to be closed source or violate standards to provide secure yet user friendly crypto tools. See: OpenKeychain

Re: Cryptographic coin flipping, now in Keybase

#88

Earlier quoted context omitted.

Exactly... unless the work is open source, they are just another centralized solution. Reminds me of Telegram.

I thought Keybase was open source? Released under the New BSD (3 Clause) License?

The clients are. The platform they all run on top of is centralized, made up its own irresponsibly insecure key handling and crypto protocols, and is proprietary.

Re: Cryptographic coin flipping, now in Keybase

#89
post #88

Earlier quoted context omitted.

I thought Keybase was open source? Released under the New BSD (3 Clause) License?

The clients are. The platform they all run on top of is centralized, made up its own irresponsibly insecure key handling and crypto protocols, and is proprietary.

They didn't make any of their own security, they use very well established open-source security libraries for everything. Stop spreading FUD.

Re: Cryptographic coin flipping, now in Keybase

#90

>> Who invented commitment schemes? > ~My wife~ Not sure. Seriously? You work professionally in the crypto space and don't know where this is from? Or don't feel it's important to attribute such fundamental ideas to the appropriate people? If you really don't know, a quick google would have educated you. But what I fear to be more likely is that you apparently just don't give a damn. For anybody remotely interested,…

I read that as a joke...
Post reply on HN