Cryptographic Data Structures

#1

Post by bren2013 » Sun, May 17, 2015, 6:01 PM UTC

Cryptographic Data Structures
blog.bren2010.io

Re: Cryptographic Data Structures

#2

Post by rawnlq » Mon, May 18, 2015, 12:42 AM UTC

What are some applications of this? If an attacker has access to memory there's not much left you can do right?

Or is the use case similar to why you would want to zero out the memory used to store password strings?

Re: Cryptographic Data Structures

#3

Post by bren2013 » Mon, May 18, 2015, 12:52 AM UTC

rawnlq wrote: post #2

What are some applications of this? If an attacker has access to memory there's not much left you can do right? Or is the use case similar to why you would want to zero out the memory used to store password strings?

There are lots of scenarios where you would want to let an untrusted intermediary handle critical operations for you without actually having to build trust with them.

Typical example: Certificate authorities distribute CRLs primarily through untrusted channels and third parties to lower their operating cost. The CRLs are signed so its a win-win for everybody.