Intro WIP

This commit is contained in:
jaseg 2025-11-25 17:14:16 +01:00
parent fc759c3e73
commit eb3e0b0c6b

View file

@ -50,20 +50,20 @@ cryptography, it is generally seen as best practice to have the least amount of
computation.
Most cryptographic problems are easily solved by involving a trusted third party (TTP).
% FIXME cite TTP examples
Yet, cryptographers have time and time again rejected attempts to involve third parties in cryptographic
protocols~\cite{
Yet, cryptographers have time and again rejected attempts to involve third parties in cryptographic protocols~\cite{
abelsonRisksKeyRecovery1997,
abelsonKeysDoormats2015,
andersonSecurityEngineeringGuide2020,
rogawayMoralCharacterCryptographic2015,
}.
The field has produced a versatile set of complex tools for tasks as diverse as secure communication,
Considerable research has been focused on creating a versatile set of tools to perform tasks as diverse as secure
communication,
% FIXME cite: signal, noise, something metadata resistant
private information retrieval,
% FIXME PIR = ORAM?
%FIXME cite ORAM papers, and oblivious transfer papers
and even general computation that decentralize authority and avoid any sort of centralized control.
and even general computation in a decentralized way that avoids trusted authorities.
% FIXME cite MPC papers
While politically, this blanket rejection of authority represents a fringe viewpoint, in cryptography it has a long
tradition originating with the Cypherpunk and Hacker movements~\cite{
@ -100,10 +100,13 @@ As \textcite{andersonSecurityEngineeringGuide2020} writes on HSMs and their secu
\end{flushright}
\end{quote}
In this thesis, we aim to fill this gap in available, secure hardware and extend the level of protection afforded by
cryptographic protocol design down the technology stack to the hardware level.
In this thesis, we aim to fill this gap in easily obtainable, secure hardware and extend the level of protection
afforded by cryptographic protocol design down the technology stack to the hardware level.
We propose a new HSM design that unlike existing designs can be manufactured at low cost and without access to
specialized tools.
% Go into drawbacks of existing HSMs, they violate kerckhoffs' principle
We publish our design fully open source
Kerckhoffs' principle, and the principle of least authority. Kerckhoffs' principle\footnote{
\textcite{petitcolasKerckhoffsPrinciplesCryptographie} contains a high-quality OCR'ed copy of the original source,
as well as a translation of the cited part from French. The original source is