Re: [tor-dev] Proposal: Tor with collective signatures

2016-05-03 Thread Nicolas Gailly
A quick response: it also decreases the incentive to launch such an attack because the threshold of witnesses that are required to sign the document for the signature to be accepted can be locally set on each client. >>> This does; however, give a pretty straightfo

Re: [tor-dev] Proposal: Tor with collective signatures

2016-05-02 Thread Tom Ritter
On 30 April 2016 at 09:56, Nicolas Gailly wrote: > On 04/29/2016 05:13 PM, Tom Ritter wrote: >>> The mechanism is similar for >>> witnesses that went offline. The parent of an offline witness will >>> set the bit >>> in the bitmap of the failed witness. >> You mention this in Cons as well

Re: [tor-dev] Proposal: Tor with collective signatures

2016-04-30 Thread Tim Wilson-Brown - teor
> On 1 May 2016, at 00:56, Nicolas Gailly wrote: > >>> 4.2 Benefits >>> >>>Technically, it is quite easy to implement witness cosigning if the >>> group >>>of witnesses is small. If we want the group of witnesses to be >>> large, however >>>– and we do, to ensure that compromising t

Re: [tor-dev] Proposal: Tor with collective signatures

2016-04-30 Thread Nicolas Gailly
On 04/29/2016 05:13 PM, Tom Ritter wrote: >> The mechanism is similar for >> witnesses that went offline. The parent of an offline witness will >> set the bit >> in the bitmap of the failed witness. > You mention this in Cons as well - it seems like the parents in the > tree need to be more

Re: [tor-dev] Proposal: Tor with collective signatures

2016-04-29 Thread Tim Wilson-Brown - teor
> On 30 Apr 2016, at 01:13, Tom Ritter wrote: > >> 3.4 Optional: Break-the-glass Emergency Directory Adjustments >> ... >> With even fancier crypto, even the witnesses would not >> necessarily need >>to know, but that’s beyond the scope of this proposal and its >> desirability may >>be q

Re: [tor-dev] Proposal: Tor with collective signatures

2016-04-29 Thread Tom Ritter
On 25 April 2016 at 07:32, Nicolas Gailly wrote: > They can / should > probably > publish logs of the statements they witness or simply make available > a public > mirror of everything that its tree roster has been asked to sign. This mirror can be 'unprotected' in the sense that you just

[tor-dev] Proposal: Tor with collective signatures

2016-04-25 Thread Nicolas Gailly
Hi all, Since the first post, I've received some comments off-list and consequently added more sections to the proposal. Particularly, it adds a detailed description of the messages that needs to be passed down between the witnesses, paragraphs to answer some questions, and a link to the official

[tor-dev] Proposal: Tor with collective signatures

2016-04-14 Thread Nicolas Gailly
Hi Tor devs, I'm part of the DeDiS team at EPFL and we are working on Cothority, which is a generic framework for Collective Authority. We worked on a proposal to apply Collective Signatures (CoSi) to D.A. consensus document in the Tor ecosystem. While not adding too much complexity to the Tor eco