Rust and Elixir libraries for end-to-end encrypted secure communication

#1

Post by mooreds » Fri, Sep 30, 2022, 6:05 PM UTC

Rust and Elixir libraries for end-to-end encrypted secure communication
github.com

Re: Rust and Elixir libraries for end-to-end encrypted secure communication

#2

Post by mattgreg » Fri, Sep 30, 2022, 7:08 PM UTC

Aw. Thanks for posting this. Hi, I'm Matt, the CEO at Ockam. If anyone has any questions, we are happy to take them on in this thread today.

Re: Rust and Elixir libraries for end-to-end encrypted secure communication

#3

Post by loceng » Fri, Sep 30, 2022, 7:43 PM UTC

mattgreg wrote: post #2

Aw. Thanks for posting this. Hi, I'm Matt, the CEO at Ockam. If anyone has any questions, we are happy to take them on in this thread today.

Does the name Ockam have any relation to Occam's Razor?

Re: Rust and Elixir libraries for end-to-end encrypted secure communication

#4

Post by dvdplm » Fri, Sep 30, 2022, 7:53 PM UTC

What is the business model for this? The enterprise addons?

Re: Rust and Elixir libraries for end-to-end encrypted secure communication

#5

Post by mattgreg » Fri, Sep 30, 2022, 7:54 PM UTC

loceng wrote: post #3

mattgreg wrote: post #2

Aw. Thanks for posting this. Hi, I'm Matt, the CEO at Ockam. If anyone has any questions, we are happy to take them on in this thread today.

Does the name Ockam have any relation to Occam's Razor?

Good question. It's a nested reference. I named the company Ockam as a tribute to a company that a mentor of mine built and ran in the 70's - 2000's. He named his company after Occam's Razor.

The full story: https://www.ockam.io/blog/whats_behind_the_ockam_name

Re: Rust and Elixir libraries for end-to-end encrypted secure communication

#6

Post by mattgreg » Fri, Sep 30, 2022, 7:58 PM UTC

dvdplm wrote: post #4

What is the business model for this? The enterprise addons?

We have two products. The first is avail under Apache 2 lic. The second is available as a paid subscription through AWS marketplace.

1. Ockam Open Source: It's all the protocols, packages, and tools (like CLI) for building things.

2. Ockam Orchestrator: It allows for running small to massive scale systems. It's also has add-ons for Okta, Confluent Cloud, various DBs...

Re: Rust and Elixir libraries for end-to-end encrypted secure communication

#7

Post by [deleted] » Fri, Sep 30, 2022, 8:04 PM UTC

mattgreg wrote: post #5

loceng wrote: post #3

Earlier quoted context omitted.

Does the name Ockam have any relation to Occam's Razor?

Good question. It's a nested reference. I named the company Ockam as a tribute to a company that a mentor of mine built and ran in the 70's - 2000's. He named his company after Occam's Razor. The full story: https://www.ockam.io/blog/whats_behind_the_ockam_name

[deleted]

Re: Rust and Elixir libraries for end-to-end encrypted secure communication

#8

Post by aliqot » Fri, Sep 30, 2022, 8:11 PM UTC

mattgreg wrote: post #5

loceng wrote: post #3

Earlier quoted context omitted.

Does the name Ockam have any relation to Occam's Razor?

Good question. It's a nested reference. I named the company Ockam as a tribute to a company that a mentor of mine built and ran in the 70's - 2000's. He named his company after Occam's Razor. The full story: https://www.ockam.io/blog/whats_behind_the_ockam_name

So how did you end up fixing the networked devices issue?

Re: Rust and Elixir libraries for end-to-end encrypted secure communication

#9

Post by gz5 » Fri, Sep 30, 2022, 8:50 PM UTC

mattgreg wrote: post #2

Aw. Thanks for posting this. Hi, I'm Matt, the CEO at Ockam. If anyone has any questions, we are happy to take them on in this thread today.

Looks good, Matt, and thanks for open source and SaaS flexibility. Can you add to or correct the comparisons to OpenZiti and Wireguard to help us frame the sweet spot for Ockam?

OpenZiti

In common: mTLS w/ built in PKI mgmt; attribute based access control; SDKs to embed in apps.

Different: OpenZiti includes the network overlay as well. Ockam add-ons may target other use cases?

Wireguard

In common: E2E encryption; hosted SaaS avail

Different: UDP hole punching; network-level segmentation; no mTLS; no app embed

Re: Rust and Elixir libraries for end-to-end encrypted secure communication

#10

Post by mwadhwa » Fri, Sep 30, 2022, 9:17 PM UTC

gz5 wrote: post #9

mattgreg wrote: post #2

Aw. Thanks for posting this. Hi, I'm Matt, the CEO at Ockam. If anyone has any questions, we are happy to take them on in this thread today.

Looks good, Matt, and thanks for open source and SaaS flexibility. Can you add to or correct the comparisons to OpenZiti and Wireguard to help us frame the sweet spot for Ockam? OpenZiti In common: mTLS w/ built in PKI mgmt; attribute based access control; SDKs to embed in apps. Different: OpenZiti includes the network overlay as well. Ockam add-ons may target other use cases? Wireguard In common: E2E encryption; hos…

Great question!

I led the design of Ockam. I am somewhat familiar with Wiregaurd and not at all familiar with OpenZiti. All tools that are helping us build application that have much much smaller vulnerability surfaces are awesome!!

Some things that you can do with Ockam:

1. Create Noise based secure channels all sorts of multi-hop, multi-protocol, network topologies - TCP TCP, or TCP TCP TCP, or UDP Kafka TCP, or BlueTooth TCP TCP etc.

2. Move end-to-end encrypted data through Kafka, RabbitMQ, and other messaging and streaming systems.

3. Run on small embedded devices (Rust no_std) or run on large servers.

5. Encrypted Relays through Ockam Orchestrator. UDP hole puncturing coming soon.

6. Store keys and run cryptography in hardware or in cloud KMS.

7. Plug into enterprise Identity Providers and Policy Providers and enforce Attribute based access control policies.

8. Operate very lightweight credential authorities

9. Scale Enrollment Protocols, Credentials rotation/revocation etc.

and more.