3 ms·
Beautiful explanation. After reading this I wonder if anyone knows about homomorphic encryption and ZKP uses for role/policy management? Or something similar?
by vrnvu 4y ago
Beautiful explanation. After reading this I wonder if anyone knows about homomorphic encryption and ZKP uses for role/policy management? Or something similar?
They main uses I know for ZKPs are in open distributed scenarios but I wonder if it could be used to simplify other spaces where public/private keys are involved.
For example, instead of having a user creating roles and policies and storing all of this info in a traditional DB we could have a token system based on homomorphic keys that we can verify... Where we could aggregate tokens, generate tokens with specific policies on-demand without storing it in a DB...
- Nzen 4y agoYou've described the problem that macaroons [0] intend to solve by amending an hmac access token with constraints on its use. The described scenario of appending a hme circuit to evaluate policy requests sounds much more expensive (both in terms of effort to answer 'can this request send an email?' and size of the token) than a key:value pair. [0] https://fly.io/blog/api-tokens-a-tedious-survey/#macaroons https://fly.io/blog/api-tokens-a-tedious-survey/#macaroons