It is surprising to see *Tim* suggesting that *lawyers* (and other
contractable providers
of private distributed escrow services) are appropriate mechanisms for
timed release.
What if the 5th is scrubbed, or you're British and subject to 'mandatory
disclosure'
of your keys? If the keys are out there, they're subpeona-able. Or
black-baggable.
Better to lose the keys entirely, let the futurehistorians deal with
it. Like a PGPfone
conversation.
Also the authors of the (yes, naif) paper *require* a non-parallelizable
cracker, so Tim's
discussion of well-financed "historians" getting ahead buy buying heavy
iron wouldn't apply.
Tim did suggest using an alternate mechanism based on split keys
(e.g., Mojo distributed, motivated
storage). This doesn't strike me as too safe, if future Hememon Tyrants
psyop the populace
into a frenzy looking for someone's diary. Look at how many people will
give DNA samples
if asked by the State for a Good Cause.
Better to trust math and physics than lawyers and folks you don't know
in a future you can't
predict.
