[cryptography] Keyspace: client-side encryption for key/value stores

2013-03-21 Thread Tony Arcieri
https://github.com/livingsocial/keyspace tl;dr: Keyspace provides least authority client-side encryption for key/value stores using NaCl's crypto_secretbox (XSalsa20 + Poly1305) and Ed25519 as part of a capability-based security model. One problem I've dealt with quite frequently when deploying

Re: [cryptography] Keyspace: client-side encryption for key/value stores

2013-03-21 Thread Jeffrey Walton
On Thu, Mar 21, 2013 at 2:52 AM, Tony Arcieri tony.arci...@gmail.com wrote: https://github.com/livingsocial/keyspace tl;dr: Keyspace provides least authority client-side encryption for key/value stores using NaCl's crypto_secretbox (XSalsa20 + Poly1305) and Ed25519 as part of a

Re: [cryptography] Keyspace: client-side encryption for key/value stores

2013-03-21 Thread Tony Arcieri
Keyspace is a bit different from an OS keychain in that it's a networked system, designed to be centrally managed by the holders of a writecap, accessed by holders of the readcap, and with the verifycap on the server to determine the authenticity of values published by administrators with

Re: [cryptography] Keyspace: client-side encryption for key/value stores

2013-03-21 Thread Peter Gutmann
Jeffrey Walton noloa...@gmail.com writes: Android 4.0 and above also offer a Keychain ( http://developer.android.com/reference/android/security/KeyChain.html). If using a lesser version, use a Keystore ( http://developer.android.com/reference/java/security/KeyStore.html). What Android gives you

Re: [cryptography] Keyspace: client-side encryption for key/value stores

2013-03-21 Thread ianG
On 21/03/13 09:52 AM, Tony Arcieri wrote: https://github.com/livingsocial/keyspace tl;dr: Keyspace provides least authority client-side encryption for key/value stores using NaCl's crypto_secretbox (XSalsa20 + Poly1305) and Ed25519 as part of a capability-based security model. ... A question

Re: [cryptography] Keyspace: client-side encryption for key/value stores

2013-03-21 Thread ianG
On 21/03/13 10:07 AM, Jeffrey Walton wrote: On Thu, Mar 21, 2013 at 2:52 AM, Tony Arcieri tony.arci...@gmail.com wrote: https://github.com/livingsocial/keyspace tl;dr: Keyspace provides least authority client-side encryption for key/value stores using NaCl's crypto_secretbox (XSalsa20 +

Re: [cryptography] Keyspace: client-side encryption for key/value stores

2013-03-21 Thread Thierry Moreau
Peter Gutmann wrote: Jeffrey Walton noloa...@gmail.com writes: Android 4.0 and above also offer a Keychain ( http://developer.android.com/reference/android/security/KeyChain.html). If using a lesser version, use a Keystore ( http://developer.android.com/reference/java/security/KeyStore.html).

[cryptography] List test

2013-03-21 Thread Jack Lloyd
___ cryptography mailing list cryptography@randombit.net http://lists.randombit.net/mailman/listinfo/cryptography

Re: [cryptography] Keyspace: client-side encryption for key/value stores

2013-03-21 Thread James A. Donald
On 2013-03-21 5:59 PM, ianG wrote: On 21/03/13 09:52 AM, Tony Arcieri wrote: A question about crypto-capabilities is: how do you share them securely? Using a crypto-capability for secure sharing. Which leads to a boot-strapping problem, of course, but that's part of the fun. A partial