6 ms·

I wonder why they're not using a secret sharing algorithm: http://en.wikipedia.org/wiki/Secret_sharing http://en.wikipedia.org/wiki/Secret_sharing It would re

by cdjk 13y ago

I wonder why they're not using a secret sharing algorithm: http://en.wikipedia.org/wiki/Secret_sharing http://en.wikipedia.org/wiki/Secret_sharing It would reduce the complexity of encrypting the data encryption key multiple times with each pair of keys, and the math behind them is pretty neat.

shabble 13y ago
Quoting from the Cloudflare article[1]: Red October is based on combinatorial techniques and trusted cryptographic primitives. We investigated using complicated secret primitives like Shamir's sharing scheme, but we found that a simpler combinatorial approach based on primitives from Go's standard library was preferable to implementing a mathematical algorithm from scratch. Which seems like a reasonable choice for smallish numbers of keys/sharers, especially given the data they're encrypting isn't exactly huge. Are there good libraries (for any language) implementing shared secrets? [1] https://blog.cloudflare.com/red-october-cloudflares-open-source-implementation-of-the-two-man-rule https://blog.cloudflare.com/red-october-cloudflares-open-sou...
- j_s 13y ago
  libgfshare[1] was mentioned[2] last time this project was discussed. [1] http://www.digital-scurf.org/software/libgfshare http://www.digital-scurf.org/software/libgfshare [2] https://news.ycombinator.com/item?id=6780346 https://news.ycombinator.com/item?id=6780346
sebm 13y ago
It's exactly the algorithm I've decided to implement in one of my projects [1][shameless plug]. And although secret sharing is maybe not directly easy/relevant to implement in their context and for their type of use it would nevertheless be worth investigating what is currently done and is maybe related in the academic papers such maybe as [2]. At least it could give some ideas. [1] http://coresecret.io/ http://coresecret.io/ [2] http://eprint.iacr.org/2013/629 http://eprint.iacr.org/2013/629
VLM 13y ago
ssss is a good implementation, but its GPL and their app is BSD, so... I googled around for ssss implementations and bsd license and found one in javascript of all things. (Please no license flamewar, just stating the facts!)

by cdjk 13y ago

shabble 13y ago

Quoting from the Cloudflare article[1]: Red October is based on combinatorial techniques and trusted cryptographic primitives. We investigated using complicated secret primitives like Shamir's sharing scheme, but we found that a simpler combinatorial approach based on primitives from Go's standard library was preferable to implementing a mathematical algorithm from scratch. Which seems like a reasonable choice for smallish numbers of keys/sharers, especially given the data they're encrypting isn't exactly huge. Are there good libraries (for any language) implementing shared secrets? [1] https://blog.cloudflare.com/red-october-cloudflares-open-source-implementation-of-the-two-man-rule https://blog.cloudflare.com/red-october-cloudflares-open-sou...

j_s 13y ago
libgfshare[1] was mentioned[2] last time this project was discussed. [1] http://www.digital-scurf.org/software/libgfshare http://www.digital-scurf.org/software/libgfshare [2] https://news.ycombinator.com/item?id=6780346 https://news.ycombinator.com/item?id=6780346

sebm 13y ago

It's exactly the algorithm I've decided to implement in one of my projects [1][shameless plug]. And although secret sharing is maybe not directly easy/relevant to implement in their context and for their type of use it would nevertheless be worth investigating what is currently done and is maybe related in the academic papers such maybe as [2]. At least it could give some ideas. [1] http://coresecret.io/ http://coresecret.io/ [2] http://eprint.iacr.org/2013/629 http://eprint.iacr.org/2013/629

VLM 13y ago

ssss is a good implementation, but its GPL and their app is BSD, so... I googled around for ssss implementations and bsd license and found one in javascript of all things. (Please no license flamewar, just stating the facts!)