IRC channel logs
2026-02-28.log
back to list of logs
<pukkamustard>sneek: later tell ridley: re: confidentiality and objectives of ERIS. ERIS is designed to make content robustly available. the more formal security property is called: censorship-resistance. In some ways this is the opposite of confidentiality. The reason for having encryption in ERIS is not to prevent an advisory from reading content, but to prevent an advisory from being able to selectively block <pukkamustard>content. Now the encryption used in ERIS does seem to provide confidentiality, but we do not recommend using ERIS for confidentiality. For example the fact that ERIS provides a non-revocable persistent read-capability is probably not something you want for confidentiality. If you want confidentiality use authenticated-encryption. This is well studied, understood and widely used. <pukkamustard>sneek: later tell ridley: Now the encryption used in ERIS does seem to provide confidentiality, but we do not recommend using ERIS for confidentiality. For example the fact that ERIS provides a non-revocable persistent read-capability is probably not something you want for confidentiality. If you want confidentiality use authenticated-encryption. This is well studied, understood and widely used.