On Mon, Mar 19, 2018 at 12:12:13AM +0100, Marek Marczykowski-Górecki wrote: > > > I wasn't aware of the NIST Randomness Beacon. Very interesting. Thanks > > > for bringing it to my attention. As far as I can tell, this looks like a > > > very good source for the Proof of Freshness. Would you like to submit a > > > PR that adds it to the script? > > > > > > https://github.com/QubesOS/qubes-secpack/blob/master/utils/proof_of_freshness_generator.sh > > > > > > > Sure! I've just submitted a pull request. Another thing I was thinking > > about is adding the nasdaq/some other stock index (preferably worldwide) to > > the proof of freshness, as being able to predict them is impossible ahead > > of time and it is hard for a government to control stock prices. While > > organizations can be infiltrated/hacked, something that combines data from > > so many companies' performance will be very hard. > > To be honest, I don't think we need more proofs of freshness there. We > already have various news headlines (chosen from different countries), > bitcoin blockchain and now NIST Randomness Beacon. What we might need, > is timestamps - proof that canaries (or other files there) were > created at the time included there, not later.
Not to mention, you can also prove freshness of any source by timestamping that source and then including a block hash - timestamping makes the block hash dependent on the freshness source, thus making the timestamp proof a proof of freshness. In fact, I've been timestamping the NIST Randomness Beacon output for months now; if I make that database of timestamps public anyone could use it to prove freshness against the NIST Randomness Beacon. -- https://petertodd.org 'peter'[:-1]@petertodd.org -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/20180319041643.GA3554%40savin.petertodd.org. For more options, visit https://groups.google.com/d/optout.
signature.asc
Description: Digital signature
