search

syndicate-storage / syndicate

Internet-scale software-defined storage system
Apache License 2.0
56 stars 10 forks source link

Sign closures with owner's private key #59

Closed jcnelson closed 10 years ago

jcnelson commented 10 years ago

Make sure the gateway is deployed with its user's public key (or that it can get it, somehow). Check the signature of the closure with it. This is to hedge against a coerced MS attack.

jcnelson commented 10 years ago

Alternative solution: encrypt the closure with the gateway's key pair, and encrypt the gateway's private key with a gateway-specific password known only to the user. This should have the same effect, as long as the private key cleartext is not made available to the attacker.