BBVA / qed

The scalable, auditable and high-performance tamper-evident log project
https://qed.readthedocs.io/
Apache License 2.0
94 stars 19 forks source link

Add support to encrypt all gossip network traffic #174

Open aalda opened 4 years ago

aalda commented 4 years ago

The gossip library we are using (Hashicorp's Memberlist) uses a symmetric key, or shared secret, cryptosystem. The threat model is the same that Serf has identified here, and it implies a key rotation and distribution. The process of configuring the encryption system should be similar to the one that Serf specifies here.

Some issues are still open.