3 ms·
Okay, here is what I think this is - It is a straight forward combination of two forms of encryption from pairing cryptography world. Identity Based Encryption
by zmanian 10y ago
Okay, here is what I think this is
- It is a straight forward combination of two forms of encryption from pairing cryptography world. Identity Based Encryption and Threshold Encryption.
- In Identity based encryption, your public key and private key is generated by an identity provider based on an identity string provided to it. This allows encrypting messages to party that hasn't yet recieved the keys. This work has been around for ages.
- Milagro proposes to distribute the trusted third party by having multiple identity providers. The public key and private key are formed from a threshold encryption/ decryption procedure.
- tptacek 10y agoRogaway has some concerning things to say about IBE here: http://web.cs.ucdavis.edu/~rogaway/papers/moral-fn.pdf http://web.cs.ucdavis.edu/~rogaway/papers/moral-fn.pdf It'd be a tangent, except that Milagro proposes to alter the TLS handshake to accommodate their scheme.
- moby_click 10y agoThanks for the link. I think I saw his talk about the topic and that milagro resonates well with it. The use of threshold encryption works around an unfortunate aspect of IBE and is practical today. PS: As I grow older, I become more accepting of the fact that state power is not going anywhere soon. If multiple authorities (preferably under different jurisdictions) can be coerced into deriving client secrets for law enforcement with proper oversight, like public visibilty of the amount intervention and auditabilty by data protection officers, that would be acceptable to me and better than outlawing homebrewed encryption or more drastic backdooring measures.