schrödinger

feed me, seymour

  • KSI : Keyless Security Infrastructure

    An Estonian, blockchain stack alternative to PKI, developed in 2007

    https://guardtime.com/technology/ksi-technology

    Unlike traditional approaches that depend on asymmetric key cryptography, KSI uses only hash-function cryptography, allowing verification to rely only on the security of hash-functions and the availability of a public ledger commonly referred to as a blockchain.

    A blockchain is a distributed public ledger; a database of transactions such that there is a set of pre-defined rules as to how the ledger gets appended, achieved by distributed consensus of participants in the system.

    The KSI blockchain overcomes three major weaknesses of mainstream blockchain technologies - which were designed to facilitate asset transactions - making KSI suitable also for cybersecurity and data governance applications:

    • Scalability
    • Settlement time
    • Formal security proof

    It can be used to help combat cyberattacks :

    https://techcrunch.com/2016/12/05/how-blockchain-can-help-fight-cyberattacks

    “The fundamental threat with PKI is that you need to base your security on the secrets (keys) and the people who manage them,” Johnson says. “That is very hard to do well and impossible to prove — just as in the real world you can‘t prove a secret has been kept, in the security world you can‘t prove a key has not been compromised.”

    In contrast, instead of relying on secrets, blockchain-based security is predicated on distributing the evidence among many parties, which makes it impossible to manipulate data without being detected.

    “Blockchain has eliminated the need for trusted parties to verify the integrity of data just as in the cryptocurrency example it eliminated the need for a centralized authority to act as a bank,” Johnson explains.

    See also https://seenthis.net/messages/540234

    #blockchain
    #PKI #KSI
    #DDoS