70 likes | 210 Vues
This document outlines the process of Alice registering in a directory service using her public key (PKey) to establish a secure communication framework. The service manages user connections via a once-per-user policy, ensuring trust either through the directory or user certificates. It details how Alice sends a message (M1) to node I1, which is decrypted and routed through subsequent nodes while establishing rules for message handling, ultimately facilitating a secure rendezvous with Bob. This framework underscores the importance of trust and security in decentralized networks.
E N D
Alice registers herself in the directory service. • Under the key: H(Alice’s IP) • H(IP) IP , Alice’s PKey • The directory service stores her for others nodes to use her under a relay • A once-per user policy is enforced • Either the directory service is trusted or each user also has some kind of certificate (or something) • You probably need to trust someone…. Bootup
Alice sends message M1 to I1 • I1 decrypts M1 with its PK • Inside M1, the message M2 is included Ring Establishment Messages • M1 establishes a rule on I1 • Whatever I give you from now on, try and decrypt with SK1 • See if there is something for you in the message and forward rest to I2 • Else forward to I2
In node “In” a rule is established: • If you receive something from an outsider, forward in the ring Entry Point
Alice and Bob share a secret: RAB • Bob will use H(Alice, RAB) to lookup Alice • Alice needs a way to inform Bob of her in-proxy, “In” Enter The Rendezvous Service Rendezvousing