3 ms·
Perhaps it's not as small as you think. It all depends on who is the adversary in your threat model. If you have applications that run in the field, and need t
by ithkuil 5y ago
Perhaps it's not as small as you think. It all depends on who is the adversary in your threat model.
If you have applications that run in the field, and need to perform computation on data you don't want to be seized if the adversary gets hold of the device itself (state or private agents), then this may be a relatively low cost way to address this concern.
If you search for a solution for all possible threat models, well homomorphic encryption would all the boxes except it's too slow for doing anything practical with it.
- tmikaeld 5y agoIf someone has access to the physical device, that device need to be able to display the actual data = the device has the "secret" information already.
- ithkuil 5y agoif you need to output the secret, then you have no use for offloading computation on encrypted data. There are scenarios where you can compute on encrypted data and produce a result that doesn't leak the entire data.
- tmikaeld 5y agoThat is a use case, sure, but this service doesn’t provide computations, only management of keys.
- ithkuil 5y agoI don't know; I just read what's written on their home page: Evervault Cages Process the data you encrypt with Relay or our SDK by deploying your code in Cages — isolated serverless functions hosted on Evervault. Cages automatically decrypt your data in an isolated environment, so you can still process data without handling it in plaintext. perhaps I misunderstood what that feature is; if that's true I suspect it's not entirely my fault, but there is something misleading in the product description.
- tmikaeld 5y agoNo, you're right, I missed that feature.
- kodah 5y ago> There are scenarios where you can compute on encrypted data and produce a result that doesn't leak the entire data. I believe what you're referring to is homomorphic encryption.
- ithkuil 5y agoYes I did mention that technique in my comment upthread. But there is a more simple stupid way: just perform the computation somewhere else, on some server you own, one some server you rent, on some service you rent... From the POV of the device in the field it doesn't really matter.