blintz

10 ms·

61.
by blintz 4y ago
This seems like it would be a cool browser standard. The browser could check that the specified SRI hash matches one published by some other entity, and then include extra information in the ‘lock’ icon or dialog, that goes further than TLS
62.
by blintz 4y ago
Yeah, we don’t natively support range queries. The simple way to efficiently do this kind of check would be to store an index of keys (perhaps chunk them into buckets, like 0-10, 10-20, etc), and then privately retrieve the individual items
63.
by blintz 4y ago
The space overhead is roughly constant (or at most logarithmic in n), and varies by the scheme. In practice, it’s something like 1.5-8x overhead. This is no big deal for storage, but does make it a pain on the memory side for processing (si
64.
by blintz 4y ago
True! We are using FHE to perform PIR. The underlying scheme we use is a real homomorphic encryption scheme (Regev + GSW), but yeah, we explicitly do not support performing arbitrary computation on encrypted data. As it turns out, that&#x
65.
by blintz 4y ago
Yes, it's generated in the browser for each query. And this depends on the application - for example, for the private password checker, all the dumped passwords data is from a public dataset, so its not encrypted. In messaging, the dat
66.
by blintz 4y ago
Yeah, this is definitely a risk of any in-browser demo of this tech. The story for apps is much better, since there's a routine installation process, signatures are checked, etc. We'd like private retrievals to eventually be part
67.
by blintz 4y ago
Things tend to get pretty slow when you try to compute SNARKs over FHE computations. Some progress is getting made, but it's still pretty academic. There is a cool company trying to instead use FHE to accelerate SNARKs: https:/&#
68.
by blintz 4y ago
Some data, like passwords or other credentials, isn't stuff anyone really wants to monetize - so secrets managers (things like HashiCorp Vault) and password managers are both interested in using this to allow them to collect even less
69.
by blintz 4y ago
Great question! The ciphertexts will be different every time, just like in standard encryption; the scheme uses something very similar to a nonce. We are trying to avoid the "ECB Penguin", of course: https://crypto.stac
70.
by blintz 4y ago
Interesting that the hardest AP exams for it seem to be the English ones. I wonder why?
71.
by blintz 4y ago
A big part of this company has turned out to be figuring out how to explain FHE :) I'm working on a higher-level "why/how to use this" blog post that should help. Thanks for the suggestions!
72.
by blintz 4y ago
Love the idea of running this stuff on-prem / in house. Just not being beholden to random updates in the rules or logging policies seems like a big value add. +1 to the other commenter who mentioned they'd love to see a version fo
73.
by blintz 4y ago
It's FHE applied to solve a variant of oblivious transfer, called "private information retrieval" ( https://en.wikipedia.org/wiki/Private_information_retrieval ). PIR is very similar to oblivious transfer,
74.
by blintz 4y ago
It's 1-2 seconds for a 1 GB database with millions of items. (A couple years ago this was more like minutes, and about 10 years ago it would have taken hours!)
75.
by blintz 4y ago
Sure! End-to-end encryption (E2EE) in a messaging context is about the service provider (Meta for WhatsApp, Apple for iMessage) not learning the contents of messages sent on the platform. E2EE also gets used when referring to backups, whe
76.
by blintz 4y ago
We don't think this guarantee is only useful to bad actors, in the same way that end-to-end encryption has turned out to be useful even if you're not doing something illegal. The businesses using Blyss want to perform tasks (like
77.
by blintz 4y ago
Thanks! The secret client key stays in the browser or app. It's used to encrypt queries, and decrypt the server responses.
78.
Launch HN: Blyss (YC W23) – Homomorphic encryption as a service
206 points by blintz 4y ago|75 comments
79.
by blintz 4y ago
Yes, the server multiplies the query by the entire 8 GB every time. It’s not as slow as it sounds :-) … it’s basically limited by memory bandwidth. Yeah, we do return the full row. It does leak the hashes, but these are already public (you
80.
by blintz 4y ago
Hey, I made this! Happy to answer any questions.
81.
Show HN: "Have I Been Pwned” with homomorphic encryption(passwords.blyss.dev)
5 points by blintz 4y ago|4 comments
82.
Show HN: Check passwords against data breaches using homomorphic encryption(playground.blyss.dev)
1 points by blintz 4y ago|0 comments
83.
Homomorphic encryption for “Have I Been Pwned” lookups(blintzbase.com)
2 points by blintz 4y ago|0 comments
84.
The iPhone Matches Most of Its Hype (2007)(nytimes.com)
2 points by blintz 4y ago|0 comments
85.
by blintz 4y ago
I wonder if there's a number class for the value that the sides take. Are they all ultimately numbers formed with standard operations and radicals? Or are there some that we have only found with like 'numeric' techniques?
86.
by blintz 4y ago
I’m sure this article is right about some stuff, but man if it doesn’t make me sad to read. Software can be so exciting and fun, and this “careerist” perspective really sucks the joy out of it. If you’re looking for something that is kind o
87.
by blintz 4y ago
FWIW, symmetric encryption like AES-256 GCM is just astoundingly unlikely to be “broken” in the next ~20 years (or perhaps ever…) There’s more of a case for public-key stuff changing, but this doesn’t rely on anything public key.
88.
by blintz 4y ago
Cool project! This stuff is all possible thanks to the SubtleCrypto API ( https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypt... ), which became widespread in browsers in the last ~5 years. It&#x2
89.
by blintz 4y ago
We use standard hardware, with some special attention paid to making sure we maximally leverage AVX2/AVX512. The computation is naively parallel and very simple, so better hardware doesn't seem terribly likely to decrease costs. I
90.
by blintz 4y ago
Yeah, there is a a bit of cold-start problem with respect to standards / certification. People kinda have to widely use something before it seems worthwhile to standards bodies to write standards, but often folks are sensibly cautious

More ›