3 ms·

I've just watched a presentation about Cosmian (https://cosmian.com/ https://cosmian.com/) and their solution boasts using FHE, at a significant price though: c

by wazoox 4y ago

I've just watched a presentation about Cosmian (https://cosmian.com/ https://cosmian.com/) and their solution boasts using FHE, at a significant price though: computations and queries are about 1000 slower than on unencrypted data according to their CTO. I was quite impressed that it even works at all, though :)

hinkley 4y ago
Don’t those sorts of differences suggest that perhaps enclave decryption would be as fast and support more functionality?
- wazoox 4y ago
  Probably but the main objective is to keep data safe in the cloud while keeping everything encrypted (traffic and data), all the time.
  - hinkley 4y ago
    That's certainly fair. One of the oldest classic physical security failures I know of, which really stuck with me, is "who did background checks on the janitors?" It doesn't literally have to be janitors, but there are a lot of people in your space that we assume are not threats, even though there is a lot of overlap between "hacker" and "people who work for vendors". I knew someone who was responsible for delivering backups from a secure data center to a lockbox every couple of days. Unfortunately the bank was only a few blocks from the data center so I'm not sure how much physical separation that really provided. Also this particular person would have been able to do absolutely nothing about being mugged for the disks if someone actually cared. But maybe I'm a little too paranoid. I recall once having to drop the night's deposit off from the restaurant I worked at. They were down a manager due to illness, it was on the way home, I was a figurative if no longer a literal boyscout, so the math on "shenanigans if hinkley leaves with the money" versus "shenanigans if there is no night manager in the store" apparently leaned toward me. I'm glad they trusted me but I was a nervous wreck for four blocks until that bag went into the night deposit box. Anything that can move "precious cargo" without a human failure mode is alright in my book.
    - wazoox 4y ago
      "Only the paranoid survive" is my motto :)
zcw100 4y ago
There are a few companies in this space. Duality is one of the bigger ones. https://dualitytech.com/ https://dualitytech.com/

by wazoox 4y ago

hinkley 4y ago

Don’t those sorts of differences suggest that perhaps enclave decryption would be as fast and support more functionality?

wazoox 4y ago
Probably but the main objective is to keep data safe in the cloud while keeping everything encrypted (traffic and data), all the time.
- hinkley 4y ago
  That's certainly fair. One of the oldest classic physical security failures I know of, which really stuck with me, is "who did background checks on the janitors?" It doesn't literally have to be janitors, but there are a lot of people in your space that we assume are not threats, even though there is a lot of overlap between "hacker" and "people who work for vendors". I knew someone who was responsible for delivering backups from a secure data center to a lockbox every couple of days. Unfortunately the bank was only a few blocks from the data center so I'm not sure how much physical separation that really provided. Also this particular person would have been able to do absolutely nothing about being mugged for the disks if someone actually cared. But maybe I'm a little too paranoid. I recall once having to drop the night's deposit off from the restaurant I worked at. They were down a manager due to illness, it was on the way home, I was a figurative if no longer a literal boyscout, so the math on "shenanigans if hinkley leaves with the money" versus "shenanigans if there is no night manager in the store" apparently leaned toward me. I'm glad they trusted me but I was a nervous wreck for four blocks until that bag went into the night deposit box. Anything that can move "precious cargo" without a human failure mode is alright in my book.
  - wazoox 4y ago
    "Only the paranoid survive" is my motto :)

zcw100 4y ago

There are a few companies in this space. Duality is one of the bigger ones. https://dualitytech.com/ https://dualitytech.com/