We have discussed this previously. A simple password scheme does not work for updating data on Freenet, even if the password can be validated because it appeared in hashed form in the previous version. The problem is that some node must get the the update first, and then, having the password, that node can replace your data with anything else on all the other nodes.
Updating documents has to require asymmetric crypto because you have to be able to identify yourself as the previous author without giving them a chance to identify themselves as the authors. And whatever sense there was in Greg Retkowski's post I did not find myself very interested in, seeing as it was overshadowed by his complete ignorance and arrogance as to the rest of Freenet and our goals. On Thu, 04 May 2000, Bill Trost wrote: > Travis Bemann writes: <snip> > The only secure way to do this is with cryptographic > authentication. Your proposal is not secure at all... > > Actually, it is (or, it is the way *I* read it). If you define the > following: > > updateHash = SHA1(SHA1(data) + secret-password insertHash = ) > SHA1(updateHash ) > > then you can insert a new message with the insertHash. This is simply > stored with the message. When an update comes along, the node can > verify that the hash of the updateHash in the update message is equal to > insertHash. > > Admittedly, there is no way to tie the updateHash to the replacement's > insertHash, so this only lets you distribute deletions, not updates. > > Either way, until someone figures out how to actually make deleting or > replacing *work* in Freenet, the whole issue seems moot. > > _______________________________________________ > Freenet-dev mailing list > Freenet-dev at lists.sourceforge.net > http://lists.sourceforge.net/mailman/listinfo/freenet-dev -- Oskar Sandberg md98-osa at nada.kth.se #!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj $/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1 lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/) _______________________________________________ Freenet-dev mailing list Freenet-dev at lists.sourceforge.net http://lists.sourceforge.net/mailman/listinfo/freenet-dev
