Adapting secure group messaging for encrypted CRDTs

Slides from a talk at LightKone workshop on Verification, Security and Antidote.

Kaiserslautern, Germany, 15 May 2019.

https://martin.kleppmann.com/2019/05/15/encrypted-crdts.html

Abstract:

Secure messaging apps like WhatsApp, Signal, and iMessage have brought end-to-end encryption to over 1 billion users. The protocols underlying these apps provide much stronger security properties than earlier encryption systems such as PGP/GnuPG. This makes them an interesting basis for implementing CRDT-based data systems with end-to-end security: if we simply send all the CRDT operations or state updates via a secure messaging protocol, we inherit its strong security properties.

However, there are lots of subtleties about the guarantees provided by secure messaging protocols: in particular, the properties that hold for communication between two parties often don't easily generalise to groups of more than two participants. This talk will summarise the current state of research in secure group messaging, and discuss how we can bring this work into the world of CRDTs.

Transcript

35. References Snapdoc: https://martin.kleppmann.com/papers/snapdoc-pets19.pdf MLS: https://messaginglayersecurity.rocks ART: https://eprint.iacr.org/2017/666.pdf TreeKEM: https://mailarchive.ietf.org/arch/msg/mls/ v1CY0jFAOVOHokB4DtNqS__tX1o/4 KleeQ: http://cacr.uwaterloo.ca/techreports/2007/cacr2007-03.pdf Loopix: https://www.usenix.org/system/files/conference/ usenixsecurity17/sec17-piotrowska.pdf Contact: Martin Kleppmann <mk428@cl.cam.ac.uk>