Cryptographic Data Structures (opens in new tab)

(blog.bren2010.io)

62 pointsbren201310y ago2 comments

2 comments

What are some applications of this? If an attacker has access to memory there's not much left you can do right?

Or is the use case similar to why you would want to zero out the memory used to store password strings?

bren2013OP10y ago

There are lots of scenarios where you would want to let an untrusted intermediary handle critical operations for you without actually having to build trust with them.

Typical example: Certificate authorities distribute CRLs primarily through untrusted channels and third parties to lower their operating cost. The CRLs are signed so its a win-win for everybody.

j / k navigate · click thread line to collapse

2 comments

rawnlq10y ago

What are some applications of this? If an attacker has access to memory there's not much left you can do right?

Or is the use case similar to why you would want to zero out the memory used to store password strings?

bren2013OP10y ago

There are lots of scenarios where you would want to let an untrusted intermediary handle critical operations for you without actually having to build trust with them.

Typical example: Certificate authorities distribute CRLs primarily through untrusted channels and third parties to lower their operating cost. The CRLs are signed so its a win-win for everybody.

j / k navigate · click thread line to collapse