Changes between Version 6 and Version 7 of NewCaps/WhatCouldGoWrong

Timestamp:

2009-10-11T01:18:11Z (15 years ago)

Author:

davidsarah

Comment:

add attack on verify cap

NewCaps/WhatCouldGoWrong

@@ -8 +8 @@
 ||5||unauthorized read||attack the encryption of the plaintext with ''K1''||anyone||any one file||the cipher's security and the secrecy of the encryption key ''K1''||2^''k''^||
 ||6||unauthorized read||figure out the input to the hash function that generates ''S''||anyone||any one file||the hash function's pre-image resistance on ''S''||brute force on ''R'' is !#2||
-||7||unauthorized deletion||brute force KD||anyone||any one file||secrecy of ''KD''||2^''d''
-||8||unauthorized deletion||figure out the destroy key KD from Dhash||anyone||any one file||the hash function's pre-image resistance on ''Dhash''||brute force on ''KD'' is !#7
-||9||denial of service||prevent access to servers holding sufficient shares (by controlling some of them, or by attacking them)||anyone||any file||not prevented by crypto||n/a
+||7||unauthorized deletion||brute force KD||anyone||any one file||secrecy of ''KD''||2^''d''^||
+||8||unauthorized deletion||figure out the destroy key KD from Dhash||anyone||any one file||the hash function's pre-image resistance on ''Dhash''||brute force on ''KD'' is !#7||
+||9||denial of service||prevent access to servers holding sufficient shares (by controlling some of them, or by attacking them)||anyone||any file||not prevented by crypto||n/a||
+||10||cause invalid share to verify||generate (''K1enc'',''Dhash'',''V'') that hash to someone else's (''T'',''U''), and copy their ''S''||anyone||any one file||the hash function's second-pre-image resistance on (''T'',''U'')||2^''t''+''u''^||
+||11||undeletion||undelete a file (making it readable by existing read caps) by restoring its shares||anyone||any one file||assuming a "tombstone" is present on all relevant servers: same as !#10||2^''t''+''u''^||
 
-where ''k'' = bitlength(''K1''), ''n'' = bitlength(''R''), ''t'' = bitlength(''T''), ''d'' = bitlength(''KD'').
+where ''k'' = bitlength(''K1''), ''n'' = bitlength(''R''), ''t'' = bitlength(''T''), ''u'' = bitlength(''U''), ''d'' = bitlength(''KD'').
 
 1. ''shape-shifter immutable file'': creator creates more than one file matching the immutable file readcap