m-ld / m-ld-spec

Platform-independent m-ld specification
https://spec.m-ld.org/
MIT License
24 stars 1 forks source link

Sign fused journal entries by means traceable back to original operations #106

Open mcalligator opened 2 years ago

mcalligator commented 2 years ago

As discussed on the Traceability page of m-ld's Security Design, it is not currently possible to trace verifiably the updates computed from operations for which the associated journal entries have been fused, since two or more of the original entries are consolidated into a resultant. However, it is necessary that verification of fused entries permit verification of the set of atomic entries pre-fusion, such as via algorithmic derivation from signed individual entries. Motivation: This shortcoming in the m-ld's audit capabilities needs addressing to ensure comprehensive traceability.