106 reputation
9
bio website gary-rowe.com
location United Kingdom
age 44
visits member for 2 years, 10 months
seen May 6 at 10:48

I'm a Java contractor working in the UK.

My Stack Exchange stats

I maintain a hobby interest in cryptography, particularly as it relates to currency through the Bitcoin protocol.


Jun
25
comment Basic explanation of Elliptic Curve Cryptography?
Another good link: kakaroto.homelinux.net/2012/01/how-the-ecdsa-algorithm-works
Sep
30
comment Where can i get the info to implement AES?
For reference, a Java implementation of FIPS AES can be found in the Bouncy Castle open source project: bouncycastle.org/specifications.html
Sep
30
comment How should one implement a delegated shared trust protocol?
Many thanks for @PulpSpy (and everyone else who provided comments and answers) for guiding me in the right direction.
Sep
26
comment How should one implement a delegated shared trust protocol?
Thanks for a good answer. The reason that all communication goes through Trent is to allow him to build up a customer base and obtain an income from his efforts. Trent must have an incentive to act on Alice's behalf. Steve/Sarah/Sam are there to allow Alice to recover from an absence of Trent (either temporary or permanent). The general idea is that if enough substitutes are present then it is harder to attack the overall network. Finally, if Trent is the initiator, but not implementor, is there a way to ensure random selection of substitutes outside of Trent's control?
Sep
26
comment How should one implement a delegated shared trust protocol?
I've added a significant edit that includes a real world example that may be helpful in clarifying the problem.
Sep
25
comment How should one implement a delegated shared trust protocol?
@Bill you should put these observations into an answer. I'll look closely at your linked articles. Many thanks.
Sep
25
comment How should one implement a delegated shared trust protocol?
@Bill Thanks for your interest in this. I'm not sure your approach is quite on the mark. Assume I'm Alice (or Bob :-) ). I don't have any understanding of crypto at all, so I pay Trent to issue contracts on my behalf using a PKI, in my case Trent is using a combination of SHA-256 and elliptic curve DSA. Unfortunately, Trent gets hacked by Mallory and suddenly my private key is exploited. Disaster! How can I protect myself against this? Trent can't rely on me encrypting my private key with a password since Mallory simply roots the server and monitors cleartext memory.
Sep
25
comment How should one implement a delegated shared trust protocol?
@Bill It's more complex than that. Perhaps this related question on the Bitcoin site may shed more light on a problem that would benefit from this protocol: bitcoin.stackexchange.com/q/517/117
Sep
22
comment How should one implement a delegated shared trust protocol?
Is that a tumbleweed I see before me?