Re: Cryptographic hash computations for a revision range on the repository side

2014-01-21 Thread Thierry Moreau
And what's the difference to your proposed solution? Basically, the differences are that a) one has to control paper sheet(s) instead of a private signature key data value and computing environment, and b) this control is about integrity only, no need for long-term private signature key secr

Re: Cryptographic hash computations for a revision range on the repository side

2014-01-21 Thread Thorsten Schöning
Guten Tag Thierry Moreau, am Dienstag, 21. Januar 2014 um 05:11 schrieben Sie: > Digital signatures require public/private key protections, just shifting > the problem to yet another security challenge. And what's the difference to your proposed solution? You are simply re-inventing signatures wi

Cryptographic hash computations for a revision range on the repository side

2014-01-20 Thread Thierry Moreau
Hi! Suppose someone becomes very paranoid that someone will surreptitiously tamper with a subversion repository while off-duty (no commits without this person review and authorization). Taking a backup when leaving the office and making a diff when coming back is considered impractical. Moreo