Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

please help me pick right design of software

I have to design client-server software, where server should verify that client runs software from exact source code. And where software doesn't simulate actions(results of algorithms). So we accept that client could be compromised.

The real task behind this question: Burn after read text messenger. How sender could verify that client really deleted message, and don't store it in ram.

Related question: is there FOSS software which operates like Smart card?

=== design should implement open source software, and could be applied to p2p network (that means server could be compromised too, and we need avoid 51% botnet attack). It should be applied to basic x86 desktops, without TPM, CA & Smart card.

=== I feel answer could lies near fields of cryptography, GPG, i2p, DHT, Kademlia, Bitcoin.

share|improve this question
    
Short answer: that is impossible on today's commodity PC, even discounting the generic attack in this answer. –  fgrieu yesterday
    
Intel seems to be working on something that could enable such functionality in future CPUs. (But Intel itself could still subvert it and it obviously can't prevent the analog attack) –  CodesInChaos yesterday
    
You might find this paper interesting. –  mikeazo yesterday
    
@mikeazo In short: a method of calculating a checksum without a (practical) possibility for an attacker to alter the memory in such a way that the same checksum is obtained. (yawn) –  owlstead 23 hours ago
add comment

1 Answer

Assumption: the normal user can read the message, which is displayed on his screen.

Generic attack: the user uses a camera to take a snapshot of the screen when the message is displayed.

And voila! What you seek is demonstrated to be impossible.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.