search

syndicate-storage / syndicate

Internet-scale software-defined storage system
Apache License 2.0
56 stars 10 forks source link

Syndicate Observer: derive per-slice shared secret #89

Closed jcnelson closed 10 years ago

jcnelson commented 10 years ago

Instead of using the master secret for all slices, cryptographically derive one for each slice. Make a tool to generate the derived key.

jcnelson commented 10 years ago

For this milestone, we'll simply make the slice secret available to syndicate.py (via SSL). We don't want the user to be involved in the bootstrapping process, and we can compromise security in this way for the time being.

Once we have keypairs established between slices and OpenCloud, we'll have the Syndicate observer serve the secret encrypted with the slice's public key.

jcnelson commented 10 years ago

Fixed in a325c04bdbbd98fa70b67da33be61dcd8c31a058