On Aug 12 2008, Matthew Toseland wrote:
>No. You can only decrypt the data if you have the key. :)
>
> Seriously, we encrypt the blocks in the salted hash datastore with a key 
> derived from the key of the block. And we index them by a different hash 
> of the same key. This increases the cost of an offline attack on the 
> store considerably.

If I can tell which blocks are in the store just by starting the node, then 
anyone who seizes my hard drive can also tell which blocks are in the 
store.

The only way to get around that would be to introduce some secret that I 
know but the person seizing my harddrive doesn't, ie a passphrase. Anything 
else is just pointless obfuscation.

Cheers,
Michael

Reply via email to