3 ms·
We were working on a more decentralized solution here: https://github.com/dedis/cothority/tree/master/cisc https://github.com/dedis/cothority/tree/master/cisc -
by ineiti 9y ago
We were working on a more decentralized solution here: https://github.com/dedis/cothority/tree/master/cisc https://github.com/dedis/cothority/tree/master/cisc - unfortunately the update is still 1 month away...
This system uses a set of untrusted nodes that form a permissioned blockchain. Updating the chain requires a threshold of keys stored in the first block. The private keys are distributed over laptops/phones.
A person can have multiple devices that accept/deny new keys, while the servers check periodically for updates and can verify the new ssh-keys are legit by verifying the signatures.
I did a small demo at HotPETs 2016:
https://www.securityweek2016.tu-darmstadt.de/fileadmin/user_upload/Group_securityweek2016/pets2016/1_Managing_identities_bryan_ford_etc.pdf https://www.securityweek2016.tu-darmstadt.de/fileadmin/user_...
I also hope to have it running again, soon. If anybody is interested, don't hesitate to contact us at linus.gasser@epfl.ch