Re: Students' Project seeks help

2011-07-25 Thread Philip Martin
Jan Peters writes: > we are a follow-up project to a student's group at Ruhr-University > Bochum, Germany, which tried to integrate a functionality into > Subversion to allow users to encrypt all their data on the > client-side, before committing and to decrpyt while updating. > > To achieve this

Re: Students' Project seeks help

2011-07-25 Thread Daniel Shahaf
Jan Peters wrote on Mon, Jul 25, 2011 at 15:25:40 +0200: > Hi there, > we are a follow-up project to a student's group at Ruhr-University > Bochum, Germany, which tried to integrate a functionality into > Subversion to allow users to encrypt all their data on the > client-side, before committing an

Re: Students' Project seeks help

2011-07-26 Thread Tom Widmer
On 25/07/2011 14:25, Jan Peters wrote: Hi there, we are a follow-up project to a student's group at Ruhr-University Bochum, Germany, which tried to integrate a functionality into Subversion to allow users to encrypt all their data on the client-side, before committing and to decrpyt while updatin

Re: Students' Project seeks help

2011-07-26 Thread Peter Samuelson
[Tom Widmer] > If I understand you correctly, I have a feeling that this is > fundamentally a bad idea, since Subversion stores data using diffs. Actually binary deltas (and yes, it makes a difference in context). > Since encrypted data looks identical to random binary data, all diffs > will nec

Re: Students' Project seeks help

2011-07-26 Thread Hyrum K Wright
On Tue, Jul 26, 2011 at 11:12 AM, Tom Widmer wrote: > On 25/07/2011 14:25, Jan Peters wrote: >> >> Hi there, >> we are a follow-up project to a student's group at Ruhr-University >> Bochum, Germany, which tried to integrate a functionality into >> Subversion to allow users to encrypt all their dat

Re: Students' Project seeks help

2011-08-01 Thread Jan Peters
Hi Everybody, thanks for all the quick repsonses. I myself wasn't able to answer until now since we wanted to discuss things in our group. We plan to integrate this so that a compromised server does not allow the attacker to read data, even if he has got access to the repositories, no matter

RE: Students' Project seeks help

2011-08-01 Thread Bob Archer
> Hi Everybody, > thanks for all the quick repsonses. I myself wasn't able to answer > until > now since we wanted to discuss things in our group. > > We plan to integrate this so that a compromised server does not > allow > the attacker to read data, even if he has got access to the > repositorie

Re: Students' Project seeks help

2011-08-01 Thread Tom Widmer
On 01/08/2011 15:28, Bob Archer wrote: Hi Everybody, thanks for all the quick repsonses. I myself wasn't able to answer until now since we wanted to discuss things in our group. We plan to integrate this so that a compromised server does not allow the attacker to read data, even if he has got ac

Re: Students' Project seeks help

2011-08-01 Thread Julian Foad
On Mon, 2011-07-25, Jan Peters wrote: > [...] Yet the code of the update functionality is by far harder to > comprehend. Hi Jan. I'll just reply to this part of your question about how the 'update' code works. > To me personally it looks like the svn_ra_do_update2 fetches the data > from the s

Re: Students' Project seeks help

2011-08-01 Thread Tom Widmer
On 01/08/2011 11:09, Jan Peters wrote: Hi Everybody, thanks for all the quick repsonses. I myself wasn't able to answer until now since we wanted to discuss things in our group. We plan to integrate this so that a compromised server does not allow the attacker to read data, even if he has got ac