Marcela Melara
Marcela Melara
There is currently no link/reference to our contributing guidelines on the main README, so folks still actively using our code may not immediately know what to do in case of...
Specifically: how does an auditor obtain the initial STR, the directory's prior history and the directory's signing key? Potential solution: Assuming a directory `d` has a list of running auditors,...
From the CoSi paper [abstract](http://dedis.cs.yale.edu/dissent/papers/witness-abs): > To protect authorities and their clients proactively from undetected exploits and misuse, we introduce CoSi, a scalable witness cosigning protocol ensuring that every authoritative...
ServerBase is a generic server API that can be used to implement any server-side functionality used in CONIKS components (e.g. key server, auditor service) See https://github.com/coniks-sys/coniks-go/pull/195/files/c86968440e2d93561f539cfb617ab7692cde9465#diff-29ca0f53bd9a1d94bcc57fe038e0a55e
There seems to be a lot of repeated code used for testing (e.g. constructing a tree with 3 entries). It might be worth moving these repeated code segments into appropriate...
Auditing is a protocol necessary for detection of equivocation. It includes an auditor component, a separate entity that is supposed to check a key server's STR history. The idea is...
The idea here is that clients can specify a maximum number of STRs they want to receive from a server/auditor in one request, possibly based on the size of an...
Clients/auditors need to ensure that they are indeed receiving the latest STR from the directory. The main problem here is: After missing multiple epochs, how does a client/auditor know what...
The client already ensures that a cached TB for its user is inserted by the next epoch during monitoring, but the client should also ensure that all other cached TBs...