davidcerezo

5 ms·

1.
Cryptographically Private and Verifiable Financial Instruments (Ethereum/Fabric)(calctopia.com)
4 points by davidcerezo 9y ago|1 comments
2.
by davidcerezo 10y ago
No, you can't reverse anything. There are more details at: https://www.calctopia.com/2017/02/01/on-the-security-model/
3.
by davidcerezo 10y ago
OK, I'll make much easier examples: other people which I've asked thought them OK.
4.
by davidcerezo 10y ago
You're right about that: just trying to explain it to business people. I've put more detailed information for math/crypto people here: https://www.calctopia.com/2017/02/01/on-the-security-model&
5.
by davidcerezo 10y ago
>Honest question: Can't I do that already by using SFTP or ssh and uploading a spreadsheet? I just feel like I'm missing something. Do you have some kind of real-time aspect going on? No, you aren't encrypting the computat
6.
by davidcerezo 10y ago
You can read more details about the algorithms/protocols here: https://www.calctopia.com/2017/02/01/on-the-security-model/ I don't agree with the statement "because is open-source is more
7.
by davidcerezo 10y ago
Absolutely not: outsourcing the secure computation to third-party servers is not on the first release. The secure multi-party computation runs between the computers of both participants (over LAN/WAN).
8.
by davidcerezo 10y ago
Actually, ABY is faster and more capable than Tasty: https://github.com/encryptogroup/ABY
9.
by davidcerezo 10y ago
Sure, I've just published more details taken from the documentation: https://www.calctopia.com/2017/02/01/on-the-security-model
10.
by davidcerezo 10y ago
It's not homomorphic encryption: it's garbled circuits and oblivious transfer (order of magnitudes faster than homomorphic encryption, a cryptographic technique with lots of publicity but it'll take some years before it'
11.
by davidcerezo 10y ago
It's running over HTTPS (protecting the network traffic between the user and their servers), but it doesn't offer encrypted computation.
12.
by davidcerezo 10y ago
It's not using homomorphic encryption: it's using garbled circuits and oblivious transfer (order of magnitudes faster).
13.
by davidcerezo 10y ago
Both parties are computing some spreadsheet formulas contributing their own secret inputs, in such a way that both learn the result but not the input of the other party: it's cryptographically impossible to do so. Regular collaborative
14.
by davidcerezo 10y ago
The point is letting others use your data (vg. your valuations, prices, ...) without others learning/stealing your information, et vice versa. It's usually explained using the Millionaires' Problem ( https://en.wiki
15.
by davidcerezo 10y ago
It's not about encrypting files (encryption at rest): you can do the secure multi-party computations over your private LAN, and the encrypted network traffic will never leak to anybody (ie. no way to cryptanalyze anything in the future
16.
by davidcerezo 10y ago
There's a succint description of the steps at the webpage: 1- Both parties have to agree to the same formulas that will be computed 2- The spreadsheets are different because the inputs of the two parties are different, not the formulas
17.
by davidcerezo 10y ago
Yes, it's state-of-the-art secure multi-party computation. The code is closed for now, but it'll be gradually open-sourced in the future.
18.
by davidcerezo 10y ago
It's secure multiparty computation, specifically tailored for spreadsheets: your secret inputs never get out of your computer in plaintext form, only in encrypted form between the participants of the computation. For the moment, it&#x2
19.
Show HN: SECCOMP – A Secure Spreadsheet(calctopia.com)
34 points by davidcerezo 10y ago|51 comments