Zero Knowledge Proofs
Zero-knowledge proofs are a powerful cryptographic technique at the heart of self-sovereign identity (SSI). This post should help you understand what they are and how they can be used.
Continue reading {Zero Knowledge Proofs}
Reciprocal Negotiated Accountability
The self-sovereign internet underscores a tension between those who desire perfect oversight of society and those who desire perfect privacy. In this post, I explore a method for conditional legibility of private communications.
Continue reading {Reciprocal Negotiated Accountability}
TL;DR: How Sovrin Works
An animation showing how Sovrin works.
Continue reading {TL;DR: How Sovrin Works}
How Sovrin Works
This article describes how Sovrin works by showing the interactions of a Sovrin user, Jane, with organizations she does business with. The examples highlights Sovrin's features and method of operation.
Continue reading {How Sovrin Works}
Encrypting Your Email Address
Via a Wired story on protecting yourself from spam, I found Jim Tucek's Email Protector, a Javascript that let's you embed a mailto: link to your email address on your Web page without actually revealing the email address except to people who run the Javascript. The theory is that email address harvesters don't run Javascript.
Continue reading {Encrypting Your Email Address}
The SHA-1 Defense
SHA-1 has been officially cracked. So what? Technically, it probably doesn't mean much. Being able to produce a hash collision doesn't mean that you can produce a meaningful collision. For example if you have a digitally signed contract for $100, you won't be able to produce a contract for $100,000 that has the same signature--at least not yet. What could be a problem are the legal challenges to SHA-1 based signatures on the basis of "reasonable" doubt. George Ou discuses these kinds of challenges and points to the MD5 defense: A Sydney Magistrate threw out the digitally time stamped
Continue reading {The SHA-1 Defense}





