On Apr 29 2008, Matthew Toseland wrote:
>Oh, so you didn't actually simulate true random replacement with an index? 

Sorry, I don't understand - what would the index contain if you were doing 
random replacement?

> The big question is whether it is safe to have an implementation that 
> doesn't support rekeying. If we have to periodically rekey then an 
> indirect implementation will be necessary, which works on the same 
> principles but is much more complex.

I guess the question is what we're trying to protect against by rekeying. 
If it's an attacker pushing a single block out of our cache by inserting 
other blocks and then requesting the target block with HTL=1 to see whether 
it was pushed out, I don't think we should spend any effort trying to 
prevent the attack. There are a hundred worse things an attacker could do 
with a similar amount of effort.

>I thought there were standard models? I assume they all suck?

There are standard models for things like phone and web traffic, but the 
question is how will people use Freenet - how much of the traffic will be 
file sharing, messaging, web browsing, etc?

Cheers,
Michael


Reply via email to