📅 Original date posted:2014-08-19
📝 Original message:If your threat model is passive listeners, it seems to me that simply
establishing a symmetric key for each connection at handshake time
using diffie-hellman is all you need. No public private crypto needed
at all.
The whole thing seems like a bit of security theater unfortunately.
The kind of attacker that can pull off widespread passive listening is
probably able and willing to do active MITM. It's not a huge
incremental cost.
Instead, those users that do have a need for security should probably
connect to the network using Tor or I2P, which can give much better
security guarantees than anything being discussed here.
On Tue, Aug 19, 2014 at 12:58 PM, Angel Leon <gubatron at gmail.com> wrote:
> "
> I suggest that Bitcoin Core should generate a public/private key pair and
> share the public one with peers."
>
> I've not read the p2p protocol of Bitcoin core, but I suppose the initial
> handshake between 2 peers would be the ideal place to exchange a public
> keys.
>
> would it make sense to generate a new random pair of keys per each peer you
> connect to?
> then each subsequent message to every peer gets encrypted differently,
> keeping each conversation isolated from each other encryption-speaking.
>
> These keys would have nothing to do with your wallet, they're just to
> encrypt any further communication between peers post-handshake. Would that
> be of any use to "This could provide privacy and integrity but not
> autentication."?
>
> http://twitter.com/gubatron
>
>
> On Tue, Aug 19, 2014 at 12:38 PM, Gregory Maxwell <gmaxwell at gmail.com>
> wrote:
>>
>> On Tue, Aug 19, 2014 at 9:07 AM, Justus Ranvier
>> <justusranvier at riseup.net> wrote:
>> > If that's not acceptable, even using TLS with self-signed certificates
>> > would be an improvement.
>>
>> TLS is a huge complex attack surface, any use of it requires an
>> additional dependency with a large amount of difficult to audit code.
>> TLS is trivially DOS attacked and every major/widely used TLS
>> implementation has had multiple memory disclosure or remote execution
>> vulnerabilities even in just the last several years.
>>
>> We've dodged several emergency scale vulnerabilities by not having TLS.
>>
>>
>> ------------------------------------------------------------------------------
>> _______________________________________________
>> Bitcoin-development mailing list
>> Bitcoin-development at lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
>
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-development at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
>
Christophe Biocca [ARCHIVE] /
npub1mt…9g5zm
2023-06-07 15:25:20
in reply to nevent1q…5wyx
Author Public Key
npub1mtxs7jztn027d9cylej99hltqq9vq84uxm80zl4naxafd9hpxqwsj9g5zmPublished at
2023-06-07 15:25:20Event JSON
{
"id": "a56f6ff9bdc58e6dcabb09f1e8b50eb295e2adcf6733477dcc15fe022da2f1c4",
"pubkey": "dacd0f484b9bd5e69704fe6452dfeb000ac01ebc36cef17eb3e9ba9696e1301d",
"created_at": 1686151520,
"kind": 1,
"tags": [
[
"e",
"f7d80207f3f3e09247c97d3e8c17b8e8b9ffc855be5e4ac09f019815084b2528",
"",
"root"
],
[
"e",
"a677b015796704fb7214bd9da0712b95a3e6525bd03840cca56c84c5ceb07e4c",
"",
"reply"
],
[
"p",
"c1d3f07ddbb5e8ccdf7e1a71dc707629a884323a62c7d504be5dc931240f61b9"
]
],
"content": "📅 Original date posted:2014-08-19\n📝 Original message:If your threat model is passive listeners, it seems to me that simply\nestablishing a symmetric key for each connection at handshake time\nusing diffie-hellman is all you need. No public private crypto needed\nat all.\n\nThe whole thing seems like a bit of security theater unfortunately.\nThe kind of attacker that can pull off widespread passive listening is\nprobably able and willing to do active MITM. It's not a huge\nincremental cost.\n\nInstead, those users that do have a need for security should probably\nconnect to the network using Tor or I2P, which can give much better\nsecurity guarantees than anything being discussed here.\n\nOn Tue, Aug 19, 2014 at 12:58 PM, Angel Leon \u003cgubatron at gmail.com\u003e wrote:\n\u003e \"\n\u003e I suggest that Bitcoin Core should generate a public/private key pair and\n\u003e share the public one with peers.\"\n\u003e\n\u003e I've not read the p2p protocol of Bitcoin core, but I suppose the initial\n\u003e handshake between 2 peers would be the ideal place to exchange a public\n\u003e keys.\n\u003e\n\u003e would it make sense to generate a new random pair of keys per each peer you\n\u003e connect to?\n\u003e then each subsequent message to every peer gets encrypted differently,\n\u003e keeping each conversation isolated from each other encryption-speaking.\n\u003e\n\u003e These keys would have nothing to do with your wallet, they're just to\n\u003e encrypt any further communication between peers post-handshake. Would that\n\u003e be of any use to \"This could provide privacy and integrity but not\n\u003e autentication.\"?\n\u003e\n\u003e http://twitter.com/gubatron\n\u003e\n\u003e\n\u003e On Tue, Aug 19, 2014 at 12:38 PM, Gregory Maxwell \u003cgmaxwell at gmail.com\u003e\n\u003e wrote:\n\u003e\u003e\n\u003e\u003e On Tue, Aug 19, 2014 at 9:07 AM, Justus Ranvier\n\u003e\u003e \u003cjustusranvier at riseup.net\u003e wrote:\n\u003e\u003e \u003e If that's not acceptable, even using TLS with self-signed certificates\n\u003e\u003e \u003e would be an improvement.\n\u003e\u003e\n\u003e\u003e TLS is a huge complex attack surface, any use of it requires an\n\u003e\u003e additional dependency with a large amount of difficult to audit code.\n\u003e\u003e TLS is trivially DOS attacked and every major/widely used TLS\n\u003e\u003e implementation has had multiple memory disclosure or remote execution\n\u003e\u003e vulnerabilities even in just the last several years.\n\u003e\u003e\n\u003e\u003e We've dodged several emergency scale vulnerabilities by not having TLS.\n\u003e\u003e\n\u003e\u003e\n\u003e\u003e ------------------------------------------------------------------------------\n\u003e\u003e _______________________________________________\n\u003e\u003e Bitcoin-development mailing list\n\u003e\u003e Bitcoin-development at lists.sourceforge.net\n\u003e\u003e https://lists.sourceforge.net/lists/listinfo/bitcoin-development\n\u003e\n\u003e\n\u003e\n\u003e ------------------------------------------------------------------------------\n\u003e\n\u003e _______________________________________________\n\u003e Bitcoin-development mailing list\n\u003e Bitcoin-development at lists.sourceforge.net\n\u003e https://lists.sourceforge.net/lists/listinfo/bitcoin-development\n\u003e",
"sig": "2ab774606247dde711bd5af6c356c031a064fcf7fae3534d490ecb9b2d94625022380eb7d462dfc56bde01b9eb240d4a92552dc029b1cf303fc373b1be48e550"
}