[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[GNUnet-SVN] r3654 - GNUnet-docs/papers/ecrs
|
From: |
grothoff |
|
Subject: |
[GNUnet-SVN] r3654 - GNUnet-docs/papers/ecrs |
|
Date: |
Mon, 6 Nov 2006 13:11:12 -0800 (PST) |
Author: grothoff
Date: 2006-11-06 13:11:04 -0800 (Mon, 06 Nov 2006)
New Revision: 3654
Modified:
GNUnet-docs/papers/ecrs/main.aux
GNUnet-docs/papers/ecrs/main.bbl
GNUnet-docs/papers/ecrs/main.blg
GNUnet-docs/papers/ecrs/main.dvi
GNUnet-docs/papers/ecrs/main.log
GNUnet-docs/papers/ecrs/main.pdf
GNUnet-docs/papers/ecrs/main.ps
GNUnet-docs/papers/ecrs/main.tex
Log:
page limit
Modified: GNUnet-docs/papers/ecrs/main.aux
===================================================================
--- GNUnet-docs/papers/ecrs/main.aux 2006-11-06 20:51:03 UTC (rev 3653)
+++ GNUnet-docs/papers/ecrs/main.aux 2006-11-06 21:11:04 UTC (rev 3654)
@@ -11,13 +11,13 @@
\global \let address@hidden
\fi
-\citation{dingledine02mixminion,syverson97anonymous}
address@hidden {title}{An Encoding for Censorship-Resistant
Sharing}{1}{chapter.1}}
address@hidden {author}{Christian Grothoff\unskip {}, Krista Grothoff\unskip
{}, Tzvetan Horozov\unskip {}, Jussi T. Lindgren\unskip {}}{1}{chapter.1}}
address@hidden {section}{\numberline {1}Introduction}{1}{section.1.1}}
\citation{perng2005csr}
\citation{perng2005csr}
\citation{perng2005csr}
+\citation{perng2005csr}
\citation{clark99distributed}
\citation{farsite}
\citation{ebe2003}
@@ -25,11 +25,12 @@
\citation{esed}
\citation{anderson96eternity,chen99prototype,clark99distributed,herlihy87how,waldman2001tangler,pub00}
\citation{cohen02replication}
+\citation{clark99distributed}
address@hidden {section}{\numberline {2}Related Work}{3}{section.1.2}}
\newlabel{related}{{2}{3}{Related Work\relax }{section.1.2}{}}
-\citation{clark99distributed}
address@hidden {subsection}{\numberline {2.1}Freenet}{3}{subsection.1.2.1}}
\citation{waldman2001tangler}
address@hidden {subsection}{\numberline {2.1}Freenet}{4}{subsection.1.2.1}}
address@hidden {subsection}{\numberline {2.2}Tangler}{4}{subsection.1.2.2}}
\citation{shamir}
\citation{ecrstechreport}
\citation{cfs:sosp01,mazieres02building,muthitacharoen02ivy,rowstron01storage}
@@ -37,7 +38,6 @@
\citation{maymounkov02kademlia,stoica01chord}
\citation{mazires00sfs}
\citation{mazieres02building}
address@hidden {subsection}{\numberline {2.2}Tangler}{5}{subsection.1.2.2}}
address@hidden {subsection}{\numberline {2.3}Gnutella and
FastTrack}{5}{subsection.1.2.3}}
address@hidden {subsection}{\numberline {2.4}Distributed File
Systems}{5}{subsection.1.2.4}}
\citation{stratton_oakmont}
@@ -68,12 +68,12 @@
address@hidden {figure}{\numberline {3}{\ignorespaces The ECRS encoding
algorithm.}}{11}{figure.1.3}}
\newlabel{ECRS}{{3}{11}{Summary\relax }{figure.1.3}{}}
address@hidden {subsection}{\numberline {3.5}Summary}{11}{subsection.1.3.5}}
address@hidden {section}{\numberline {4}Discussion}{11}{section.1.4}}
+\newlabel{discussion}{{4}{11}{Discussion\relax }{section.1.4}{}}
\citation{freehaven-berk,mojotech}
\citation{rabin89efficient}
address@hidden {figure}{\numberline {4}{\ignorespaces Example protocol for an
ECRS download. $(Q_i,K_i)$ is a CHK pair to request and decrypt block
$i$.}}{12}{figure.1.4}}
\newlabel{protocol}{{4}{12}{Summary\relax }{figure.1.4}{}}
address@hidden {section}{\numberline {4}Discussion}{12}{section.1.4}}
-\newlabel{discussion}{{4}{12}{Discussion\relax }{section.1.4}{}}
\citation{ecrstechreport}
\citation{levien03advogato}
address@hidden {section}{\numberline {5}Conclusion}{13}{section.1.5}}
@@ -87,27 +87,25 @@
\bibcite{clark99distributed}{5}
\bibcite{cohen02replication}{6}
\bibcite{cfs:sosp01}{7}
-\bibcite{dingledine02mixminion}{8}
-\bibcite{freehaven-berk}{9}
-\bibcite{farsite}{10}
-\bibcite{secure2004goh}{11}
-\bibcite{ebe2003}{12}
-\bibcite{hartman99swarm}{13}
-\bibcite{herlihy87how}{14}
-\bibcite{levien03advogato}{15}
-\bibcite{maymounkov02kademlia}{16}
-\bibcite{mazires00sfs}{17}
-\bibcite{mazieres02building}{18}
-\bibcite{mckusick84fast}{19}
-\bibcite{merkle89tree}{20}
-\bibcite{muthitacharoen02ivy}{21}
-\bibcite{perng2005csr}{22}
-\bibcite{rabin89efficient}{23}
-\bibcite{rowstron01storage}{24}
-\bibcite{shamir}{25}
-\bibcite{stoica01chord}{26}
-\bibcite{stratton_oakmont}{27}
-\bibcite{syverson97anonymous}{28}
-\bibcite{waldman2001tangler}{29}
-\bibcite{pub00}{30}
-\bibcite{mojotech}{31}
+\bibcite{freehaven-berk}{8}
+\bibcite{farsite}{9}
+\bibcite{secure2004goh}{10}
+\bibcite{ebe2003}{11}
+\bibcite{hartman99swarm}{12}
+\bibcite{herlihy87how}{13}
+\bibcite{levien03advogato}{14}
+\bibcite{maymounkov02kademlia}{15}
+\bibcite{mazires00sfs}{16}
+\bibcite{mazieres02building}{17}
+\bibcite{mckusick84fast}{18}
+\bibcite{merkle89tree}{19}
+\bibcite{muthitacharoen02ivy}{20}
+\bibcite{perng2005csr}{21}
+\bibcite{rabin89efficient}{22}
+\bibcite{rowstron01storage}{23}
+\bibcite{shamir}{24}
+\bibcite{stoica01chord}{25}
+\bibcite{stratton_oakmont}{26}
+\bibcite{waldman2001tangler}{27}
+\bibcite{pub00}{28}
+\bibcite{mojotech}{29}
Modified: GNUnet-docs/papers/ecrs/main.bbl
===================================================================
--- GNUnet-docs/papers/ecrs/main.bbl 2006-11-06 20:51:03 UTC (rev 3653)
+++ GNUnet-docs/papers/ecrs/main.bbl 2006-11-06 21:11:04 UTC (rev 3654)
@@ -46,11 +46,6 @@
{S}ystems {P}rinciples ({SOSP} '01)}, Chateau Lake Louise, Banff, Canada,
October 2001.
-\bibitem{dingledine02mixminion}
-George Danezis, Roger Dingledine, and Nick Mathewson.
-\newblock {Mixminion: Design of a Type III Anonymous Remailer Protocol}.
-\newblock In {\em {IEEE} Symposium on Security and Privacy}, 2003.
-
\bibitem{freehaven-berk}
Roger Dingledine, Michael~J. Freedman, and David Molnar.
\newblock The free haven project: Distributed anonymous storage service.
@@ -164,12 +159,6 @@
{Stratton Oakmont vs Prodigy Services Company}, 1995 N.Y. Misc. Lexis 229,
(N.Y. Sup. Ct. Nassau Co., 1995).
-\bibitem{syverson97anonymous}
-Paul Syverson, David Goldschlag, and Michael Reed.
-\newblock {Anonymous Connections and Onion Routing}.
-\newblock In {\em {IEEE} Symposium on Security and Privacy}, pages 44--54,
- Oakland, California, 4--7 1997.
-
\bibitem{waldman2001tangler}
Marc Waldman and David {Mazi\`eres}.
\newblock Tangler: A censorhip-resistant publishing system based on document
Modified: GNUnet-docs/papers/ecrs/main.blg
===================================================================
--- GNUnet-docs/papers/ecrs/main.blg 2006-11-06 20:51:03 UTC (rev 3653)
+++ GNUnet-docs/papers/ecrs/main.blg 2006-11-06 21:11:04 UTC (rev 3654)
@@ -3,45 +3,45 @@
The style file: plain.bst
Database file #1: ref.bib
Warning--empty institution in ecrstechreport
-You've used 31 entries,
+You've used 29 entries,
2118 wiz_defined-function locations,
- 669 strings with 9418 characters,
-and the built_in function-call counts, 11079 in all, are:
-= -- 1058
-> -- 500
-< -- 15
-+ -- 201
-- -- 165
-* -- 685
-:= -- 1759
-add.period$ -- 100
-call.type$ -- 31
-change.case$ -- 174
+ 658 strings with 9098 characters,
+and the built_in function-call counts, 10327 in all, are:
+= -- 986
+> -- 464
+< -- 14
++ -- 187
+- -- 153
+* -- 637
+:= -- 1642
+add.period$ -- 94
+call.type$ -- 29
+change.case$ -- 162
chr.to.int$ -- 0
-cite$ -- 32
-duplicate$ -- 496
-empty$ -- 941
-format.name$ -- 165
-if$ -- 2433
+cite$ -- 30
+duplicate$ -- 461
+empty$ -- 877
+format.name$ -- 153
+if$ -- 2267
int.to.chr$ -- 0
-int.to.str$ -- 31
-missing$ -- 26
-newline$ -- 158
-num.names$ -- 68
-pop$ -- 237
+int.to.str$ -- 29
+missing$ -- 24
+newline$ -- 148
+num.names$ -- 64
+pop$ -- 218
preamble$ -- 1
-purify$ -- 143
+purify$ -- 133
quote$ -- 0
-skip$ -- 355
+skip$ -- 333
stack$ -- 0
-substring$ -- 538
-swap$ -- 156
-text.length$ -- 15
+substring$ -- 504
+swap$ -- 146
+text.length$ -- 14
text.prefix$ -- 0
top$ -- 0
-type$ -- 124
+type$ -- 116
warning$ -- 1
-while$ -- 97
-width$ -- 33
-write$ -- 341
+while$ -- 90
+width$ -- 31
+write$ -- 319
(There was 1 warning)
Modified: GNUnet-docs/papers/ecrs/main.dvi
===================================================================
(Binary files differ)
Modified: GNUnet-docs/papers/ecrs/main.log
===================================================================
--- GNUnet-docs/papers/ecrs/main.log 2006-11-06 20:51:03 UTC (rev 3653)
+++ GNUnet-docs/papers/ecrs/main.log 2006-11-06 21:11:04 UTC (rev 3654)
@@ -1,4 +1,4 @@
-This is pdfeTeX, Version 3.141592-1.21a-2.2 (Web2C 7.5.4) (format=pdflatex
2006.10.11) 23 OCT 2006 15:35
+This is pdfeTeX, Version 3.141592-1.21a-2.2 (Web2C 7.5.4) (format=pdflatex
2006.10.12) 6 NOV 2006 14:42
entering extended mode
**main.tex
(./main.tex
@@ -11,9 +11,9 @@
(./llncs.cls
Document Class: llncs 2001/08/14 v2.10
experimental LaTeX document class for Lecture Notes in Computer Science
-(/usr/share/texmf/tex/latex/base/article.cls
+(/usr/share/texmf-tetex/tex/latex/base/article.cls
Document Class: article 2004/02/16 v1.4f Standard LaTeX document class
-(/usr/share/texmf/tex/latex/base/size10.clo
+(/usr/share/texmf-tetex/tex/latex/base/size10.clo
File: size10.clo 2004/02/16 v1.4f Standard LaTeX file (size option)
)
address@hidden
@@ -28,7 +28,7 @@
\belowcaptionskip=\skip42
\bibindent=\dimen102
)
-(/usr/share/texmf/tex/latex/tools/multicol.sty
+(/usr/share/texmf-tetex/tex/latex/tools/multicol.sty
Package: multicol 2004/02/14 v1.6e multicolumn formatting (FMi)
address@hidden
address@hidden
@@ -126,30 +126,30 @@
address@hidden
\headlineindent=\dimen123
)
-(/usr/share/texmf/tex/latex/base/inputenc.sty
+(/usr/share/texmf-tetex/tex/latex/base/inputenc.sty
Package: inputenc 2004/02/05 v1.0d Input encoding file
-(/usr/share/texmf/tex/latex/base/ansinew.def
+(/usr/share/texmf-tetex/tex/latex/base/ansinew.def
File: ansinew.def 2004/02/05 v1.0d Input encoding file
))
-(/usr/share/texmf/tex/latex/amsmath/amsmath.sty
+(/usr/share/texmf-tetex/tex/latex/amsmath/amsmath.sty
Package: amsmath 2000/07/18 v2.13 AMS math features
address@hidden
For additional information on amsmath, use the `?' option.
-(/usr/share/texmf/tex/latex/amsmath/amstext.sty
+(/usr/share/texmf-tetex/tex/latex/amsmath/amstext.sty
Package: amstext 2000/06/29 v2.01
-(/usr/share/texmf/tex/latex/amsmath/amsgen.sty
+(/usr/share/texmf-tetex/tex/latex/amsmath/amsgen.sty
File: amsgen.sty 1999/11/30 v2.0
address@hidden
address@hidden
))
-(/usr/share/texmf/tex/latex/amsmath/amsbsy.sty
+(/usr/share/texmf-tetex/tex/latex/amsmath/amsbsy.sty
Package: amsbsy 1999/11/29 v1.2d
address@hidden
)
-(/usr/share/texmf/tex/latex/amsmath/amsopn.sty
+(/usr/share/texmf-tetex/tex/latex/amsmath/amsopn.sty
Package: amsopn 1999/12/14 v2.01 operator names
)
address@hidden
@@ -193,17 +193,17 @@
address@hidden
LaTeX Info: Redefining \[ on input line 2666.
LaTeX Info: Redefining \] on input line 2667.
-) (/usr/share/texmf/tex/latex/amsfonts/amssymb.sty
+) (/usr/share/texmf-tetex/tex/latex/amsfonts/amssymb.sty
Package: amssymb 2002/01/22 v2.2d
-(/usr/share/texmf/tex/latex/amsfonts/amsfonts.sty
+(/usr/share/texmf-tetex/tex/latex/amsfonts/amsfonts.sty
Package: amsfonts 2001/10/25 v2.2f
\symAMSa=\mathgroup4
\symAMSb=\mathgroup5
LaTeX Font Info: Overwriting math alphabet `\mathfrak' in version `bold'
(Font) U/euf/m/n --> U/euf/b/n on input line 132.
))
-(/usr/share/texmf/tex/latex/base/exscale.sty
+(/usr/share/texmf-tetex/tex/latex/base/exscale.sty
Package: exscale 1997/06/16 v2.1g Standard LaTeX package exscale
LaTeX Font Info: Redeclaring symbol font `largesymbols' on input line 52.
LaTeX Font Info: Overwriting symbol font `largesymbols' in version `normal'
@@ -212,28 +212,28 @@
(Font) OMX/cmex/m/n --> OMX/cmex/m/n on input line 52.
address@hidden
)
-(/usr/share/texmf/tex/latex/graphics/epsfig.sty
+(/usr/share/texmf-tetex/tex/latex/graphics/epsfig.sty
Package: epsfig 1999/02/16 v1.7a (e)psfig emulation (SPQR)
-(/usr/share/texmf/tex/latex/graphics/graphicx.sty
+(/usr/share/texmf-tetex/tex/latex/graphics/graphicx.sty
Package: graphicx 1999/02/16 v1.0f Enhanced LaTeX Graphics (DPC,SPQR)
-(/usr/share/texmf/tex/latex/graphics/keyval.sty
+(/usr/share/texmf-tetex/tex/latex/graphics/keyval.sty
Package: keyval 1999/03/16 v1.13 key=value parser (DPC)
address@hidden@=\toks23
)
-(/usr/share/texmf/tex/latex/graphics/graphics.sty
+(/usr/share/texmf-tetex/tex/latex/graphics/graphics.sty
Package: graphics 2001/07/07 v1.0n Standard LaTeX Graphics (DPC,SPQR)
-(/usr/share/texmf/tex/latex/graphics/trig.sty
+(/usr/share/texmf-tetex/tex/latex/graphics/trig.sty
Package: trig 1999/03/16 v1.09 sin cos tan (DPC)
)
-(/usr/share/texmf/tex/latex/graphics/graphics.cfg
+(/usr/share/texmf-tetex/tex/latex/graphics/graphics.cfg
File: graphics.cfg 2005/02/03 v1.3 graphics configuration of teTeX/TeXLive
)
Package graphics Info: Driver file: pdftex.def on input line 80.
-(/usr/share/texmf/tex/latex/graphics/pdftex.def
+(/usr/share/texmf-tetex/tex/latex/graphics/pdftex.def
File: pdftex.def 2002/06/19 v0.03k graphics/color for pdftex
address@hidden
))
@@ -243,13 +243,13 @@
\epsfxsize=\dimen136
\epsfysize=\dimen137
)
-(/usr/share/texmf/tex/latex/tools/verbatim.sty
+(/usr/share/texmf-tetex/tex/latex/tools/verbatim.sty
Package: verbatim 2003/08/22 v1.5q LaTeX2e package for verbatim enhancements
address@hidden
address@hidden
address@hidden@stream=\read1
)
-(/usr/share/texmf/tex/latex/float/float.sty
+(/usr/share/texmf-tetex/tex/latex/float/float.sty
Package: float 2001/11/08 v1.3d Float enhancements (AL)
address@hidden@type=\count128
address@hidden
@@ -257,10 +257,10 @@
address@hidden@everytoks=\toks27
address@hidden
)
-(/usr/share/texmf/tex/generic/xypic/xy.sty
-(/usr/share/texmf/tex/generic/xypic/xy.tex Bootstrap'ing: catcodes, docmode,
-(/usr/share/texmf/tex/generic/xypic/xyrecat.tex)
-(/usr/share/texmf/tex/generic/xypic/xyidioms.tex)
+(/usr/share/texmf-tetex/tex/generic/xypic/xy.sty
+(/usr/share/texmf-tetex/tex/generic/xypic/xy.tex Bootstrap'ing: catcodes,
+docmode, (/usr/share/texmf-tetex/tex/generic/xypic/xyrecat.tex)
+(/usr/share/texmf-tetex/tex/generic/xypic/xyidioms.tex)
Xy-pic version 3.7 <1999/02/16>
Copyright (c) 1991-1998 by Kristoffer H. Rose <address@hidden>
@@ -317,9 +317,9 @@
edges, connections; Xy-pic loaded)
Package: xy 1999/02/16 Xy-pic version 3.7
-(/usr/share/texmf/tex/generic/xypic/xyall.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xyall.tex
Xy-pic option: All features v.3.3
-(/usr/share/texmf/tex/generic/xypic/xycurve.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xycurve.tex
Xy-pic option: Curve and Spline extension v.3.7 curve,
address@hidden@=\count133
address@hidden
@@ -331,21 +331,21 @@
circles,
address@hidden
loaded)
-(/usr/share/texmf/tex/generic/xypic/xyframe.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xyframe.tex
Xy-pic option: Frame and Bracket extension v.3.7 loaded)
-(/usr/share/texmf/tex/generic/xypic/xycmtip.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xycmtip.tex
Xy-pic option: Computer Modern tip extension v.3.3
-(/usr/share/texmf/tex/generic/xypic/xytips.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xytips.tex
Xy-pic option: More Tips extension v.3.3 loaded) loaded)
-(/usr/share/texmf/tex/generic/xypic/xyline.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xyline.tex
Xy-pic option: Line styles extension v.3.6
address@hidden
loaded)
-(/usr/share/texmf/tex/generic/xypic/xyrotate.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xyrotate.tex
Xy-pic option: Rotate and Scale extension v.3.3 loaded)
-(/usr/share/texmf/tex/generic/xypic/xycolor.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xycolor.tex
Xy-pic option: Colour extension v.3.3 loaded)
-(/usr/share/texmf/tex/generic/xypic/xymatrix.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xymatrix.tex
Xy-pic option: Matrix feature v.3.4
\Row=\count134
\Col=\count135
@@ -355,26 +355,26 @@
\qcount@@=\count137
address@hidden
loaded)
-(/usr/share/texmf/tex/generic/xypic/xyarrow.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xyarrow.tex
Xy-pic option: Arrow and Path feature v.3.5 path, \ar, loaded)
-(/usr/share/texmf/tex/generic/xypic/xygraph.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xygraph.tex
Xy-pic option: Graph feature v.3.7 loaded) loaded)
-(/usr/share/texmf/tex/generic/xypic/xyknot.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xyknot.tex
Xy-pic option: Knots and Links feature v.3.4 knots and links, loaded)
-(/usr/share/texmf/tex/generic/xypic/xypoly.tex
+(/usr/share/texmf-tetex/tex/generic/xypic/xypoly.tex
Xy-pic option: Polygon feature v.3.7 polygons,
address@hidden
loaded))
-(/usr/share/texmf/tex/latex/hyperref/hyperref.sty
+(/usr/share/texmf-tetex/tex/latex/hyperref/hyperref.sty
Package: hyperref 2003/11/30 v6.74m Hypertext links for LaTeX
address@hidden
address@hidden
address@hidden
-(/usr/share/texmf/tex/latex/hyperref/pd1enc.def
+(/usr/share/texmf-tetex/tex/latex/hyperref/pd1enc.def
File: pd1enc.def 2003/11/30 v6.74m Hyperref: PDFDocEncoding definition (HO)
)
-(/usr/share/texmf/tex/latex/hyperref/hyperref.cfg
+(/usr/share/texmf-tetex/tex/latex/hyperref/hyperref.cfg
File: hyperref.cfg 2002/06/06 v1.2 hyperref configuration of TeXLive and teTeX
)
Package hyperref Info: Hyper figures OFF on input line 1880.
@@ -385,7 +385,7 @@
Implicit mode ON; LaTeX internals redefined
Package hyperref Info: Bookmarks ON on input line 2004.
-(/usr/share/texmf/tex/latex/url/url.sty
+(/usr/share/texmf-tetex/tex/latex/url/url.sty
\Urlmuskip=\muskip11
Package: url 2004/03/15 ver 3.1 Verb mode for urls, etc.
)
@@ -404,19 +404,19 @@
address@hidden
)
*hyperref using default driver hpdftex*
-(/usr/share/texmf/tex/latex/hyperref/hpdftex.def
+(/usr/share/texmf-tetex/tex/latex/hyperref/hpdftex.def
File: hpdftex.def 2003/11/30 v6.74m Hyperref driver for pdfTeX
-(/usr/share/texmf/tex/latex/psnfss/pifont.sty
+(/usr/share/texmf-tetex/tex/latex/psnfss/pifont.sty
Package: pifont 2004/09/15 PSNFSS-v9.2 Pi font support (SPQR)
LaTeX Font Info: Try loading font information for U+pzd on input line 63.
-(/usr/share/texmf/tex/latex/psnfss/upzd.fd
+(/usr/share/texmf-tetex/tex/latex/psnfss/upzd.fd
File: upzd.fd 2001/06/04 font definitions for U/pzd.
)
LaTeX Font Info: Try loading font information for U+psy on input line 64.
-(/usr/share/texmf/tex/latex/psnfss/upsy.fd
+(/usr/share/texmf-tetex/tex/latex/psnfss/upsy.fd
File: upsy.fd 2001/06/04 font definitions for U/psy.
))
address@hidden
@@ -444,8 +444,8 @@
LaTeX Font Info: ... okay on input line 19.
LaTeX Font Info: Checking defaults for PD1/pdf/m/n on input line 19.
LaTeX Font Info: ... okay on input line 19.
- (/usr/share/texmf/tex/context/base/supp-pdf.tex
-(/usr/share/texmf/tex/context/base/supp-mis.tex
+ (/usr/share/texmf-tetex/tex/context/base/supp-pdf.tex
+(/usr/share/texmf-tetex/tex/context/base/supp-mis.tex
loading : Context Support Macros / Miscellaneous (2004.10.26)
\protectiondepth=\count146
\scratchcounter=\count147
@@ -477,24 +477,25 @@
\MPscratchDim=\dimen182
\MPnumerator=\count155
\everyMPtoPDFconversion=\toks40
-) (/usr/share/texmf/tex/latex/graphics/color.sty
+) (/usr/share/texmf-tetex/tex/latex/graphics/color.sty
Package: color 1999/02/16 v1.0i Standard LaTeX Color (DPC)
LaTeX Info: Redefining \color on input line 71.
-(/usr/share/texmf/tex/latex/graphics/color.cfg
+(/usr/share/texmf-tetex/tex/latex/graphics/color.cfg
File: color.cfg 2005/02/03 v1.3 color configuration of teTeX/TeXLive
)
Package color Info: Driver file: pdftex.def on input line 125.
)
Package hyperref Info: Link coloring ON on input line 19.
-(/usr/share/texmf/tex/latex/hyperref/nameref.sty
+(/usr/share/texmf-tetex/tex/latex/hyperref/nameref.sty
Package: nameref 2003/12/03 v2.21 Cross-referencing by name of section
address@hidden@level=\count156
)
LaTeX Info: Redefining \ref on input line 19.
LaTeX Info: Redefining \pageref on input line 19.
- (./main.out) (./main.out)
+ (./main.out)
+(./main.out)
\openout4 = `main.out'.
LaTeX Font Info: External font `cmex7' loaded for size
@@ -502,13 +503,12 @@
LaTeX Font Info: External font `cmex7' loaded for size
(Font) <5> on input line 83.
LaTeX Font Info: Try loading font information for U+msa on input line 83.
-
-(/usr/share/texmf/tex/latex/amsfonts/umsa.fd
+ (/usr/share/texmf-tetex/tex/latex/amsfonts/umsa.fd
File: umsa.fd 2002/01/19 v2.2g AMS font definitions
)
LaTeX Font Info: Try loading font information for U+msb on input line 83.
-(/usr/share/texmf/tex/latex/amsfonts/umsb.fd
+(/usr/share/texmf-tetex/tex/latex/amsfonts/umsb.fd
File: umsb.fd 2002/01/19 v2.2g AMS font definitions
)
LaTeX Font Info: External font `cmex7' loaded for size
@@ -544,52 +544,57 @@
[1
-{/usr/share/texmf-var/fonts/map/pdftex/updmap/pdftex.map}]
-Underfull \vbox (badness 5105) has occurred while \output is active []
+{/var/lib/texmf/fonts/map/pdftex/updmap/pdftex.map}]
+Underfull \vbox (badness 2158) has occurred while \output is active []
[2]
[3] [4] [5] [6] <xymatrix 9x6 932>
-Underfull \vbox (badness 2158) has occurred while \output is active []
+Underfull \vbox (badness 10000) has occurred while \output is active []
[7]
[8] [9] <xymatrix 7x3 383>
+Underfull \vbox (badness 2158) has occurred while \output is active []
+
+ [10]
+[11]
Underfull \vbox (badness 10000) has occurred while \output is active []
- [10]
-[11] [12] [13] (./main.bbl [14]
-Underfull \hbox (badness 6658) in paragraph at lines 90--93
+ [12]
+[13] (./main.bbl [14]
+Underfull \hbox (badness 6658) in paragraph at lines 85--88
[]\OT1/cmr/m/n/9 Raph Levien. At-tack re-sis-tant trust met-rics. Draft avail
-able at
[]
-[15]) [16] (./main.aux) )
+) [15] (./main.aux) )
Here is how much of TeX's memory you used:
- 6692 strings out of 94500
- 82179 string characters out of 1176765
- 219985 words of memory out of 1000000
- 9660 multiletter control sequences out of 10000+50000
+ 6687 strings out of 94500
+ 82803 string characters out of 1175770
+ 220486 words of memory out of 1000000
+ 9658 multiletter control sequences out of 10000+50000
13509 words of font info for 54 fonts, out of 500000 for 2000
- 580 hyphenation exceptions out of 1000
+ 580 hyphenation exceptions out of 8191
32i,14n,27p,438b,612s stack positions out of 1500i,500n,5000p,200000b,5000s
PDF statistics:
- 276 PDF objects out of 300000
- 79 named destinations out of 131072
+ 269 PDF objects out of 300000
+ 76 named destinations out of 131072
33 words of extra memory for PDF output out of 65536
-</usr/share/texmf/fonts/type1/bluesky/cm/cmcsc10.pfb><
-/usr/share/texmf/fonts/type1/bluesky/cm/cmsy9.pfb></usr/share/texmf/fonts/type1
-/bluesky/cm/cmr5.pfb></usr/share/texmf/fonts/type1/bluesky/cm/cmtt8.pfb></usr/s
-hare/texmf/fonts/type1/bluesky/cm/cmmi5.pfb></usr/share/texmf/fonts/type1/blues
-ky/cm/cmmi7.pfb></usr/share/texmf/fonts/type1/bluesky/cm/cmbxti10.pfb></usr/sha
-re/texmf/fonts/type1/bluesky/cm/cmmi6.pfb></usr/share/texmf/fonts/type1/public/
-xypic/xydash10.pfb></usr/share/texmf/fonts/type1/bluesky/cm/cmsy6.pfb></usr/sha
-re/texmf/fonts/type1/public/xypic/xybtip10.pfb></usr/share/texmf/fonts/type1/pu
-blic/xypic/xyatip10.pfb></usr/share/texmf/fonts/type1/bluesky/cm/cmmi9.pfb></us
-r/share/texmf/fonts/type1/bluesky/cm/cmti9.pfb></usr/share/texmf/fonts/type1/bl
-uesky/cm/cmbx10.pfb></usr/share/texmf/fonts/type1/bluesky/cm/cmmi10.pfb></usr/s
-hare/texmf/fonts/type1/bluesky/cm/cmti10.pfb></usr/share/texmf/fonts/type1/blue
-sky/cm/cmbx9.pfb></usr/share/texmf/fonts/type1/bluesky/cm/cmtt9.pfb></usr/share
-/texmf/fonts/type1/bluesky/cm/cmr9.pfb></usr/share/texmf/fonts/type1/bluesky/cm
-/cmr6.pfb></usr/share/texmf/fonts/type1/bluesky/cm/cmr7.pfb></usr/share/texmf/f
-onts/type1/bluesky/cm/cmr10.pfb></usr/share/texmf/fonts/type1/bluesky/cm/cmbx12
-.pfb>
-Output written on main.pdf (16 pages, 247426 bytes).
+</usr/share/texmf-tetex/fonts/type1/bluesky/cm/cmcsc10.pfb
+></usr/share/texmf-tetex/fonts/type1/bluesky/cm/cmsy9.pfb></usr/share/texmf-tet
+ex/fonts/type1/bluesky/cm/cmr5.pfb></usr/share/texmf-tetex/fonts/type1/bluesky/
+cm/cmtt8.pfb></usr/share/texmf-tetex/fonts/type1/bluesky/cm/cmmi5.pfb></usr/sha
+re/texmf-tetex/fonts/type1/bluesky/cm/cmmi7.pfb></usr/share/texmf-tetex/fonts/t
+ype1/bluesky/cm/cmbxti10.pfb></usr/share/texmf-tetex/fonts/type1/bluesky/cm/cmm
+i6.pfb></usr/share/texmf-tetex/fonts/type1/public/xypic/xydash10.pfb></usr/shar
+e/texmf-tetex/fonts/type1/bluesky/cm/cmsy6.pfb></usr/share/texmf-tetex/fonts/ty
+pe1/public/xypic/xybtip10.pfb></usr/share/texmf-tetex/fonts/type1/public/xypic/
+xyatip10.pfb></usr/share/texmf-tetex/fonts/type1/bluesky/cm/cmmi9.pfb></usr/sha
+re/texmf-tetex/fonts/type1/bluesky/cm/cmti9.pfb></usr/share/texmf-tetex/fonts/t
+ype1/bluesky/cm/cmbx10.pfb></usr/share/texmf-tetex/fonts/type1/bluesky/cm/cmmi1
+0.pfb></usr/share/texmf-tetex/fonts/type1/bluesky/cm/cmti10.pfb></usr/share/tex
+mf-tetex/fonts/type1/bluesky/cm/cmbx9.pfb></usr/share/texmf-tetex/fonts/type1/b
+luesky/cm/cmtt9.pfb></usr/share/texmf-tetex/fonts/type1/bluesky/cm/cmr9.pfb></u
+sr/share/texmf-tetex/fonts/type1/bluesky/cm/cmr6.pfb></usr/share/texmf-tetex/fo
+nts/type1/bluesky/cm/cmr7.pfb></usr/share/texmf-tetex/fonts/type1/bluesky/cm/cm
+r10.pfb></usr/share/texmf-tetex/fonts/type1/bluesky/cm/cmbx12.pfb>
+Output written on main.pdf (15 pages, 245480 bytes).
Modified: GNUnet-docs/papers/ecrs/main.pdf
===================================================================
(Binary files differ)
Modified: GNUnet-docs/papers/ecrs/main.ps
===================================================================
--- GNUnet-docs/papers/ecrs/main.ps 2006-11-06 20:51:03 UTC (rev 3653)
+++ GNUnet-docs/papers/ecrs/main.ps 2006-11-06 21:11:04 UTC (rev 3654)
@@ -1,7 +1,7 @@
%!PS-Adobe-2.0
%%Creator: dvips(k) 5.95a Copyright 2005 Radical Eye Software
%%Title: main.dvi
-%%Pages: 16
+%%Pages: 15
%%PageOrder: Ascend
%%BoundingBox: 0 0 612 792
%%DocumentFonts: CMBX12 CMR10 CMR7 CMR6 CMR9 CMTT9 CMBX9 CMTI10 CMMI10
@@ -12,7 +12,7 @@
%DVIPSWebPage: (www.radicaleye.com)
%DVIPSCommandLine: dvips main.dvi -o main.ps
%DVIPSParameters: dpi=600
-%DVIPSSource: TeX output 2006.10.23:1535
+%DVIPSSource: TeX output 2006.11.06:1442
%%BeginProcSet: tex.pro 0 0
%!
/TeXDict 300 dict def TeXDict begin/N{def}def/B{bind def}N/S{exch}N/X{S
@@ -5276,79 +5276,81 @@
end
523 365 a Black Black 586 448 a
Fy(An)45 b(Enco)t(ding)f(for)h(Censorship-Resistan)l(t)i(Sharing)566
-740 y Fx(Christian)27 b(Grotho\013)1239 710 y Fw(1)1276
-740 y Fx(,)g(Krista)g(Grotho\013)1889 710 y Fw(2)1926
-740 y Fx(,)g(Tzv)n(etan)g(Horozo)n(v)2599 710 y Fw(3)2634
-740 y Fx(,)h(Jussi)f(T.)h(Lindgren)3326 710 y Fw(4)894
-882 y Fv(1)967 914 y Fu(Departmen)n(t)d(of)i(Computer)f(Science,)g
-(Univ)n(ersit)n(y)e(of)j(Den)n(v)n(er,)e(USA)1532 1005
-y Ft(address@hidden)606 1065 y Fv(2)679 1096
+737 y Fx(Christian)27 b(Grotho\013)1239 707 y Fw(1)1276
+737 y Fx(,)g(Krista)g(Grotho\013)1889 707 y Fw(2)1926
+737 y Fx(,)g(Tzv)n(etan)g(Horozo)n(v)2599 707 y Fw(3)2634
+737 y Fx(,)h(Jussi)f(T.)h(Lindgren)3326 707 y Fw(4)894
+879 y Fv(1)967 911 y Fu(Departmen)n(t)d(of)i(Computer)f(Science,)g
+(Univ)n(ersit)n(y)e(of)j(Den)n(v)n(er,)e(USA)1532 1002
+y Ft(address@hidden)606 1062 y Fv(2)679 1094
y Fu(CERIAS)g(/)h(In)n(terdepartmen)n(tal)f(Program)i(in)f
(Linguistics,)h(Purdue)e(Univ)n(ersit)n(y)-6 b(,)25 b(USA)1591
-1188 y Ft(address@hidden)1580 1247 y Fv(3)1653 1279
-y Fu(Motorola)j(Labs,)e(USA)1572 1370 y Ft(address@hidden)827
-1430 y Fv(4)900 1462 y Fu(Departmen)n(t)f(of)h(Computer)g(Science,)g
-(Univ)n(ersit)n(y)f(of)i(Helsinki,)f(Finland)1513 1553
-y Ft(address@hidden)p Black 759 1916 a Fs(Abstract.)p
+1185 y Ft(address@hidden)1580 1244 y Fv(3)1653 1276
+y Fu(Motorola)j(Labs,)e(USA)1572 1368 y Ft(address@hidden)827
+1427 y Fv(4)900 1459 y Fu(Departmen)n(t)f(of)h(Computer)g(Science,)g
+(Univ)n(ersit)n(y)f(of)i(Helsinki,)f(Finland)1513 1550
+y Ft(address@hidden)p Black 759 1865 a Fs(Abstract.)p
Black 43 w Fu(This)i(pap)r(er)g(describ)r(es)h(ECRS,)f(a)h(con)n(ten)n
-(t)e(enco)r(ding)i(sc)n(heme)f(for)759 2007 y(censorship-resistan)n(t)
+(t)e(enco)r(ding)i(sc)n(heme)f(for)759 1956 y(censorship-resistan)n(t)
18 b(p)r(eer-to-p)r(eer)f(net)n(w)n(orking.)h(The)f(prop)r(osed)h(enco)
-r(ding)f(mec)n(h-)759 2098 y(anism)36 b(supp)r(orts)e(b)r(oth)h
+r(ding)f(mec)n(h-)759 2048 y(anism)36 b(supp)r(orts)e(b)r(oth)h
(e\016cien)n(t)f(dissemination)i(of)g(encrypted)d(data)i(as)h(w)n(ell)
-759 2190 y(as)f(encrypted)e(queries)h(o)n(v)n(er)g(this)g(data.)g(In)n
-(termediaries)h(can)f(v)n(erify)g(that)g(an)759 2281
+759 2139 y(as)f(encrypted)e(queries)h(o)n(v)n(er)g(this)g(data.)g(In)n
+(termediaries)h(can)f(v)n(erify)g(that)g(an)759 2230
y(encrypted)c(resp)r(onse)h(matc)n(hes)g(an)g(encrypted)f(query)f
-(without)i(b)r(eing)g(able)g(to)759 2372 y(decrypt)24
+(without)i(b)r(eing)g(able)g(to)759 2322 y(decrypt)24
b(either.)h(F)-6 b(urthermore,)24 b(ECRS)h(allo)n(ws)h(users)f(to)g
-(share)g(\014les)g(encrypted)759 2464 y(under)i(descriptiv)n(e)g(k)n
+(share)g(\014les)g(encrypted)759 2413 y(under)i(descriptiv)n(e)g(k)n
(eys)g(whic)n(h)g(are)h(the)f(basis)i(for)f(querying)f(the)g(net)n(w)n
-(ork)g(for)759 2555 y(con)n(ten)n(t.)f(With)f(the)g(prop)r(osed)h(sc)n
+(ork)g(for)759 2504 y(con)n(ten)n(t.)f(With)f(the)g(prop)r(osed)h(sc)n
(heme,)g(e\013ectiv)n(e)g(load)g(balancing)g(and)g(sw)n(arm)759
-2646 y(distribution)21 b(are)h(p)r(ossible.)h(The)e(enco)r(ding)h(mec)n
-(hanism)g(handles)f(data)g(in)g(small)759 2738 y(c)n(h)n(unks,)h(whic)n
+2596 y(distribution)21 b(are)h(p)r(ossible.)h(The)e(enco)r(ding)h(mec)n
+(hanism)g(handles)f(data)g(in)g(small)759 2687 y(c)n(h)n(unks,)h(whic)n
(h)h(can)g(also)h(b)r(e)f(e\016cien)n(tly)g(enco)r(ded)g(on)g(demand)f
-(from)i(the)f(plain-)759 2829 y(text.)29 b(The)h(prop)r(osed)g(enco)r
+(from)i(the)f(plain-)759 2778 y(text.)29 b(The)h(prop)r(osed)g(enco)r
(ding)g(is)g(conceptually)f(simple)h(and)f(easy)h(to)g(imple-)759
-2920 y(men)n(t.)523 3095 y
+2870 y(men)n(t.)523 3024 y
SDict begin H.S end
- 523 3095 a 523 3095 a
+ 523 3024 a 523 3024 a
SDict begin 12 H.A end
523
-3095 a 523 3095 a
+3024 a 523 3024 a
SDict begin [ /View [/XYZ H.V] /Dest (section.1.1) cvn H.B /DEST pdfmark
end
- 523 3095 a 119 x Fr(1)112 b(In)m(tro)s(duction)523
-3427 y Fx(In)n(ternet)40 b(censorship)f(is)i(a)f(p)r(o)n(w)n(erful)f(w)
+ 523 3024 a 116 x Fr(1)112 b(In)m(tro)s(duction)523
+3330 y Fx(In)n(ternet)40 b(censorship)f(is)i(a)f(p)r(o)n(w)n(erful)f(w)
n(eap)r(on)h(for)g(oppressiv)n(e)e(go)n(v)n(ernmen)n(ts,)g(corp)r(o-)
-523 3527 y(rations)g(and)h(pressure)f(groups)g(in)i(sti\015ing)f
-(dissen)n(t)g(and)g(suppressing)f(dissemination)523 3626
+523 3430 y(rations)g(and)h(pressure)f(groups)g(in)i(sti\015ing)f
+(dissen)n(t)g(and)g(suppressing)f(dissemination)523 3530
y(of)d(information.)f(A)h(v)-5 b(ariet)n(y)34 b(of)h(tec)n(hniques)f
(can)h(b)r(e)g(used)g(to)g(censor)e(online)i(informa-)523
-3726 y(tion;)h(hard)f(driv)n(es)g(can)h(b)r(e)g(con\014scated)f(and)h
+3629 y(tion;)h(hard)f(driv)n(es)g(can)h(b)r(e)g(con\014scated)f(and)h
(searc)n(hed,)f(tra\016c)g(can)h(b)r(e)g(\014ltered,)g(and)523
-3826 y(denial-of-service)28 b(attac)n(ks)h(can)g(b)r(e)h(p)r(erformed)g
+3729 y(denial-of-service)28 b(attac)n(ks)h(can)g(b)r(e)h(p)r(erformed)g
(against)f(serv)n(ers.)e(In)j(addition)g(to)g(these)523
-3925 y(tec)n(hnical)25 b(measures,)f(individuals)h(can)f(b)r(e)i
+3828 y(tec)n(hnical)25 b(measures,)f(individuals)h(can)f(b)r(e)i
(singled)e(out)h(and)g(sub)5 b(jected)26 b(to)f(harassmen)n(t.)523
-4025 y(A)h(common)e(requiremen)n(t)h(for)g(censorship)f(in)h(an)n(y)g
+3928 y(A)h(common)e(requiremen)n(t)h(for)g(censorship)f(in)h(an)n(y)g
(form)g(is)g(the)h(abilit)n(y)f(to)g Fq(r)l(e)l(c)l(o)l(gnize)h
-Fx(the)523 4125 y(ob)5 b(jectionable)27 b(information.)648
-4227 y(The)21 b(goal)g(of)g(the)h(enco)r(ding)f(sc)n(heme)g(presen)n
+Fx(the)523 4028 y(ob)5 b(jectionable)27 b(information.)648
+4127 y(The)21 b(goal)g(of)g(the)h(enco)r(ding)f(sc)n(heme)g(presen)n
(ted)g(in)h(this)g(pap)r(er)f(is)h(to)f(mak)n(e)g(it)h(di\016cult)523
-4327 y(to)31 b(iden)n(tify)g(information)f(stored)g(or)f(transmitted)i
+4227 y(to)31 b(iden)n(tify)g(information)f(stored)g(or)f(transmitted)i
(in)g(a)f(op)r(en)h Fq(de)l(c)l(entr)l(alize)l(d)h Fx(wide-area)523
-4426 y(net)n(w)n(ork)21 b(where)h(man)n(y)f Fq(untruste)l(d)g
+4327 y(net)n(w)n(ork)21 b(where)h(man)n(y)f Fq(untruste)l(d)g
Fx(p)r(eers)h(w)n(an)n(t)g(to)g(share)f(data.)h(The)g(prop)r(osed)f
-(enco)r(ding)523 4526 y(sc)n(heme,)36 b(called)g(ECRS,)g(allo)n(ws)f(b)
+(enco)r(ding)523 4426 y(sc)n(heme,)36 b(called)g(ECRS,)g(allo)n(ws)f(b)
r(oth)i(con)n(ten)n(t)f(and)g(queries)g(to)g(b)r(e)h(encrypted)f(while)
-523 4625 y(b)r(eing)g(transmitted)g(or)g(stored)f(on)h(the)g(net)n(w)n
+523 4526 y(b)r(eing)g(transmitted)g(or)g(stored)f(on)h(the)g(net)n(w)n
(ork.)f(This)h(ensures)f(that)h(in)n(termediaries)523
-4725 y(remain)31 b(oblivious)f(to)h(the)h(data)f(they)g(are)f
-(handling,)h(reducing)g(the)h(c)n(hance)e(that)i(they)523
-4825 y(can)d(b)r(e)g(singled)g(out)g(for)f(an)h(attac)n(k)f(or)g(held)i
-(liable.)e(It)i(is)f(imp)r(ortan)n(t)f(to)h(note)g(that)h(the)523
-4924 y(primary)19 b(goal)f(is)h Fq(deniability)k Fx(for)c(the)h(p)r
-(eers)f(storing)g(and)g(transmitting)h(the)g(information.)p
+4625 y(remain)19 b(oblivious)f(to)h(the)h(data)f(they)g(are)f
+(handling,)i(reducing)e(the)i(c)n(hance)e(that)i(they)f(can)523
+4725 y(b)r(e)g(singled)g(out)f(for)h(an)f(attac)n(k)g(or)g(held)h
+(liable.)f(It)i(is)e(imp)r(ortan)n(t)h(to)f(note)h(that)g(the)g
+(primary)523 4825 y(goal)25 b(is)i Fq(deniability)i Fx(for)d(the)h(p)r
+(eers)f(storing)g(and)g(transmitting)g(the)h(information.)f(These)523
+4924 y(p)r(eers)37 b(m)n(ust)g(b)r(e)h(able)f(to)g(claim)g(that)g
+(decrypting)g(the)g(information)g(is)g(infeasible)g Fq(for)p
Black Black eop end
%%Page: 2 2
TeXDict begin 2 1 bop 0 0 a
@@ -5367,157 +5369,151 @@
end
523 232 a Black Fu(2)237 b(C.)27
b(Grotho\013,)f(K.)g(Grotho\013,)g(T.)h(Horozo)n(v,)f(J.T.)h(Lindgren)p
-Black 523 448 a Fx(These)h(p)r(eers)f(m)n(ust)i(b)r(e)f(able)g(to)g
-(claim)g(that)g(decrypting)f(the)i(information)e(is)h(infeasible)523
-548 y Fq(for)j(them)p Fx(.)648 678 y(W)-7 b(e)23 b(\014nd)g(it)f
-(acceptable)g(if)h(a)g(censor)e(who)h(kno)n(ws)g(precisely)f(whic)n(h)i
-(con)n(ten)n(t)f(to)g(censor)523 778 y(is)28 b(able)f(to)g(matc)n(h)h
-(a)f(request)g(or)f(resp)r(onse)h(against)f(that)i(particular)f(con)n
-(ten)n(t.)g(ECRS)g(is)523 878 y(supp)r(osed)33 b(to)f(protect)h(in)n
-(termediaries)e(that)i(merely)f(transmit)h(information)f(and)h(that)523
-977 y(need)f(to)f(b)r(e)h(able)f(to)h(sho)n(w)e(that)i(they)g(are)e
-(unable)i(to)f(recognize)f(ob)5 b(jectionable)31 b(infor-)523
-1077 y(mation)c(for)f(their)g(o)n(wn)g(protection.)h(The)f(ultimate)i
-(senders)d(and)i(receiv)n(ers)e(of)h(the)h(data)523 1177
-y(should)36 b(b)r(e)h(protected)f(b)n(y)g(other)f(means,)h(suc)n(h)g
-(as)g(anon)n(ymous)e(routing)i([)p 0 1 0 TeXcolorrgb
-3002 1177 a
+Black 523 448 a Fq(them)p Fx(.)g(F)-7 b(or)26 b(ECRS,)h(it)g(is)g
+(acceptable)f(if)h(a)g(censor)e(who)i(kno)n(ws)f(precisely)g(whic)n(h)g
+(con)n(ten)n(t)523 548 y(to)g(censor)f(is)g(able)h(to)g(matc)n(h)g(a)f
+(request)h(or)f(resp)r(onse)g(against)f(that)j(particular)d(con)n(ten)n
+(t.)523 648 y(ECRS)33 b(is)h(supp)r(osed)f(to)g(protect)g(in)n
+(termediaries)g(that)g(merely)g(transmit)h(information)523
+747 y(and)23 b(that)g(need)g(to)g(b)r(e)g(able)f(to)h(sho)n(w)f(that)h
+(they)g(are)f(unable)h(to)g(recognize)e(ob)5 b(jectionable)523
+847 y(information)27 b(for)g(their)h(o)n(wn)f(protection.)648
+970 y(The)34 b(meaning)f(of)h(censorship)f(resistance)f(used)i(in)h
+(this)f(w)n(ork)e(is)i(a)g(v)-5 b(arian)n(t)33 b(of)h(the)523
+1069 y(formal)c(de\014nition)h(giv)n(en)f(b)n(y)g([)p
+0 1 0 TeXcolorrgb 1520 1069 a
SDict begin H.S end
- 3002 1177 a 0 1 0 TeXcolorrgb Fx(8)p 0 1 0
-TeXcolorrgb 3043 1123 a
+ 1520 1069 a 0 1 0 TeXcolorrgb
+Fx(21)p 0 1 0 TeXcolorrgb 1603 1016 a
SDict begin H.R end
- 3043 1123 a 3043 1177 a
+ 1603 1016 a 1603
+1069 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.dingledine02mixminion) cvn H.B /ANN pdfmark end
- 3043
-1177 a Black Fx(,)p 0 1 0 TeXcolorrgb 3066 1177 a
+(cite.perng2005csr) cvn H.B /ANN pdfmark end
+ 1603 1069 a Black Fx(],)h(in)g(whic)n(h)g(censorship)e
+(resistance)h(is)h(de\014ned)g(as)f(the)523 1169 y(inabilit)n(y)e(of)g
+(a)g(censor)e(to)i(restrict)g(a)f(targeted)h(do)r(cumen)n(t)g(while)g
+(allo)n(wing)f(at)h(least)f(one)523 1268 y(other)g(do)r(cumen)n(t)h(to)
+g(b)r(e)h(retriev)n(ed.)d(In)i(the)h(con)n(text)e(of)h([)p
+0 1 0 TeXcolorrgb 2369 1268 a
SDict begin H.S end
- 3066
-1177 a 0 1 0 TeXcolorrgb Fx(28)p 0 1 0 TeXcolorrgb 3150
-1123 a
+ 2369 1268 a 0 1 0 TeXcolorrgb
+Fx(21)p 0 1 0 TeXcolorrgb 2452 1215 a
SDict begin H.R end
- 3150 1123 a 3150 1177 a
+ 2452 1215 a 2452
+1268 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.syverson97anonymous) cvn H.B /ANN pdfmark end
- 3150 1177 a Black Fx(].)g(As)g(a)523
-1276 y(con)n(ten)n(t)23 b(enco)r(ding)h(mec)n(hanism,)f(ECRS)g(could)h
-(b)r(e)g(in)n(tegrated)f(in)n(to)g(almost)g(an)n(y)g(generic)523
-1376 y(p)r(eer-to-p)r(eer)30 b(infrastructure)h(to)h(enhance)f(its)h
-(resistance)e(to)i(censorship.)e(Sp)r(eci\014c)i(de-)523
-1475 y(tails)26 b(on)f(ho)n(w)g(p)r(eers)h(comm)n(unicate)f(or)g(route)
-g(data)h(are)f(therefore)g(outside)g(of)h(the)g(scop)r(e)523
-1575 y(of)i(this)f(pap)r(er.)648 1705 y(The)37 b(de\014nition)h(of)f
-(censorship)f(resistance)g(used)i(in)f(this)h(w)n(ork)e(is)h(similar)f
-(to)i(the)523 1805 y(formal)30 b(de\014nition)h(giv)n(en)f(b)n(y)g([)p
-0 1 0 TeXcolorrgb 1520 1805 a
-SDict begin H.S end
- 1520 1805 a 0 1 0 TeXcolorrgb
-Fx(22)p 0 1 0 TeXcolorrgb 1603 1752 a
-SDict begin H.R end
- 1603 1752 a 1603
-1805 a
-SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.perng2005csr) cvn H.B /ANN pdfmark end
- 1603 1805 a Black Fx(],)h(in)g(whic)n(h)g(censorship)e
-(resistance)h(is)h(de\014ned)g(as)f(the)523 1905 y(inabilit)n(y)41
-b(of)f(a)h(censor)e(to)i(restrict)f(a)h(targeted)e(do)r(cumen)n(t)i
-(while)g(allo)n(wing)f(at)g(least)523 2004 y(one)f(other)g(do)r(cumen)n
-(t)h(to)f(b)r(e)h(retriev)n(ed.)e(In)i(the)f(con)n(text)h(of)f([)p
-0 1 0 TeXcolorrgb 2637 2004 a
+ 2452 1268 a Black Fx(],)g(the)g(adv)n(ersary)d(is)j(gran)n(ted)
+523 1368 y(extensiv)n(e)35 b(capabilities.)g(In)h(particular,)f(the)h
+(adv)n(ersary)d(is)i(allo)n(w)n(ed)f(to)i(insp)r(ect)g(ev)n(ery)523
+1468 y(request)g(or)f(resp)r(onse,)h(transcript)g(the)g(pro)r(cessing)f
+(steps)i(of)f(all)g(the)h(p)r(eers)f(and)g(then)523 1567
+y(decide)31 b(whether)f(to)h(\014lter)f(\(drop\))h(a)f(giv)n(en)g(resp)
+r(onse.)f(The)i(primary)e(di\013erence)i(in)g(the)523
+1667 y(adv)n(ersary)h(mo)r(del)j(for)g(ECRS)g(when)g(compared)f(to)g([)
+p 0 1 0 TeXcolorrgb 2296 1667 a
SDict begin H.S end
- 2637 2004 a 0 1 0 TeXcolorrgb
-Fx(22)p 0 1 0 TeXcolorrgb 2720 1951 a
+ 2296 1667 a 0 1 0 TeXcolorrgb
+Fx(21)p 0 1 0 TeXcolorrgb 2379 1613 a
SDict begin H.R end
- 2720 1951 a 2720
-2004 a
+ 2379 1613 a 2379
+1667 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.perng2005csr) cvn H.B /ANN pdfmark end
- 2720 2004 a Black Fx(],)h(the)f(adv)n(ersary)e(is)523
-2104 y(gran)n(ted)26 b(extensiv)n(e)h(capabilities.)g(In)g(particular,)
-g(the)g(adv)n(ersary)e(is)i(allo)n(w)n(ed)f(to)h(insp)r(ect)523
-2204 y(ev)n(ery)33 b(request)g(or)g(resp)r(onse,)g(transcript)g(the)h
-(pro)r(cessing)f(steps)h(of)g(all)f(the)i(p)r(eers)e(and)523
-2303 y(then)27 b(decide)g(whether)g(to)f(\014lter)h(\(drop\))g(a)f(giv)
-n(en)g(resp)r(onse.)g(Av)-5 b(ailabilit)n(y)26 b(of)h(the)g(service)523
-2403 y(and)38 b(anon)n(ymit)n(y)f(of)h(the)h(participan)n(ts)e(are)g
-(sp)r(eci\014cally)h(decoupled)g(from)g(censorship)523
-2502 y(resistance.)32 b(F)-7 b(or)33 b(ECRS,)g(an)g(almost)g(iden)n
-(tical)g(adv)n(ersary)e(mo)r(del)i(is)h(selected)f({)g(while)523
-2602 y(anon)n(ymit)n(y)j(and)h(a)n(v)-5 b(ailabilit)n(y)35
-b(can)i(certainly)f(b)r(e)h(additional)g(\(and)g(often)g(imp)r(ortan)n
-(t\))523 2702 y(goals,)27 b(ECRS)h(is)h(an)f(orthogonal)e(mec)n
-(hanism.)j(The)f(primary)f(di\013erence)i(in)g(the)g(adv)n(er-)523
-2801 y(sary)d(mo)r(del)i(for)f(ECRS)h(is)f(that)h(the)g(attac)n(k)n(er)
-e(is)i(not)f(allo)n(w)n(ed)f(to)i(b)r(e)g(able)f(to)h(guess)f(the)523
-2901 y(exact)c(con)n(ten)n(t)g(that)g(is)h(to)f(b)r(e)h(censored.)e
-(This)h(is)h(an)f(imp)r(ortan)n(t)g(restriction)f(in)i(practice.)523
-3001 y(In)d(the)g(absence)f(of)h(suc)n(h)f(a)g(restriction,)g([)p
-0 1 0 TeXcolorrgb 1821 3001 a
+ 2379 1667 a Black Fx(])i(is)e(that)i(the)f(attac)n(k)n(er)e(is)i
+(not)523 1767 y(allo)n(w)n(ed)28 b(to)g(b)r(e)i(able)e(to)h(guess)f
+(the)i(exact)e(con)n(ten)n(t)h(that)g(is)g(to)f(b)r(e)i(censored.)e
+(This)g(is)h(an)523 1866 y(imp)r(ortan)n(t)c(restriction)e(in)j
+(practice.)e(In)h(the)g(absence)f(of)h(suc)n(h)g(a)f(restriction,)g([)p
+0 1 0 TeXcolorrgb 3063 1866 a
SDict begin H.S end
- 1821 3001 a 0 1 0 TeXcolorrgb
-Fx(22)p 0 1 0 TeXcolorrgb 1904 2947 a
+ 3063 1866 a 0 1 0 TeXcolorrgb
+Fx(21)p 0 1 0 TeXcolorrgb 3146 1813 a
SDict begin H.R end
- 1904 2947 a 1904
-3001 a
+ 3146 1813 a 3146
+1866 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.perng2005csr) cvn H.B /ANN pdfmark end
- 1904 3001 a Black Fx(])h(sho)n(ws)e(that)i(censorship)f
-(resistance)f(requires)523 3100 y(a)27 b(form)h(of)f(priv)-5
-b(ate)28 b(information)f(retriev)-5 b(al)27 b(for)g(whic)n(h)h(eac)n(h)
-f(op)r(eration)f(has)i(complexit)n(y)523 3200 y Fp(O)r
-Fx(\()p Fp(n)p Fx(\),)h(where)e Fp(n)g Fx(is)g(the)h(size)f(of)h(the)f
-(datastore.)f(In)i(return)f(for)g(restricting)f(the)i(guessing)523
-3300 y(capabilities)i(of)h(the)g(adv)n(ersary)-7 b(,)27
-b(ECRS)k(can)f(ac)n(hiev)n(e)f Fp(O)r Fx(\(1\))j(complexit)n(y)e(for)g
-(its)g(op)r(era-)523 3399 y(tions.)24 b(Considering)f(that)h
-(scalabilit)n(y)g(is)g(also)f(an)h(imp)r(ortan)n(t)f(goal,)g(w)n(e)h(b)
-r(eliev)n(e)g(that)h(this)523 3499 y(is)j(a)f(reasonable)e
-(trade-o\013.)648 3629 y(As)35 b(an)h(enco)r(ding)f(sc)n(heme,)g(ECRS)g
-(has)g(to)h(address)e(t)n(w)n(o)h(imp)r(ortan)n(t)g(issues.)g(First)523
-3729 y(of)c(all,)g(users)f(m)n(ust)i(b)r(e)f(able)g(to)g(\014nd)h(con)n
-(ten)n(t,)f(preferably)f(b)n(y)h(searc)n(hing)e(with)j(simple,)523
-3828 y(natural)e(language)e(k)n(eyw)n(ords.)g(Metadata)i(related)g(to)g
-(the)g(con)n(ten)n(ts)g(of)g(the)h(\014le)f(should)523
-3928 y(b)r(e)39 b(made)g(a)n(v)-5 b(ailable)37 b(as)h(part)g(of)h(the)g
-(searc)n(h)e(result)i(and)f(prior)g(to)h(the)g(do)n(wnload)e(of)523
-4028 y(the)c(actual)g(\014le.)g(Metadata)f(can)h(include)g(an)n(ything)
-f(from)h(user-pro)n(vided)e(con)n(ten)n(t)h(de-)523 4127
-y(scriptions)i(to)g(th)n(um)n(bnails)g(\(for)g(images\))g(and)g
-(automatically)f(detected)i(mime-t)n(yp)r(es.)523 4227
-y(Secondly)-7 b(,)24 b(the)g(enco)r(ding)f(sc)n(heme)g(should)h(supp)r
-(ort)f(sw)n(arming)f({)i(that)g(is,)f(the)h(do)n(wnload)523
-4327 y(of)j(a)g(\014le)g(from)g(m)n(ultiple)h(p)r(eers.)f(Since)g(it)h
-(is)f(p)r(ossible)g(that)h(iden)n(tical)f(data)f(could)h(b)r(e)h(in-)
-523 4426 y(serted)h(b)n(y)h(man)n(y)f(indep)r(enden)n(t)h(parties,)f
-(the)h(enco)r(ding)g(sc)n(heme)f(should)h(alw)n(a)n(ys)d(result)523
-4526 y(in)j(iden)n(tical)g(enco)r(dings)g(for)g(iden)n(tical)g(source)f
-(\014les.)h(This)g(sp)r(ecial)g(form)f(of)i(encryption)523
-4625 y(w)n(as)d(probably)f(\014rst)i(describ)r(ed)f(in)h([)p
-0 1 0 TeXcolorrgb 1695 4625 a
+ 3146 1866 a Black Fx(])h(sho)n(ws)523 1966 y(that)37
+b(censorship)f(resistance)g(requires)f(a)i(form)g(of)g(priv)-5
+b(ate)36 b(information)h(retriev)-5 b(al)36 b(for)523
+2065 y(whic)n(h)26 b(eac)n(h)g(op)r(eration)g(has)g(complexit)n(y)g
+Fp(O)r Fx(\()p Fp(n)p Fx(\),)h(where)f Fp(n)h Fx(is)f(the)h(size)f(of)h
+(the)f(datastore.)523 2165 y(In)36 b(return)f(for)g(restricting)f(the)i
+(guessing)f(capabilities)g(of)g(the)h(adv)n(ersary)-7
+b(,)33 b(ECRS)i(can)523 2265 y(ac)n(hiev)n(e)c Fp(O)r
+Fx(\(1\))j(complexit)n(y)e(for)g(its)h(op)r(erations.)e(Considering)g
+(that)i(scalabilit)n(y)f(is)g(also)523 2364 y(an)26 b(imp)r(ortan)n(t)h
+(goal,)e(in)i(particular)f(since)g(censorship-resistance)e(for)i(small)
+h(collections)523 2464 y(w)n(ould)g(b)r(e)h(of)g(limited)g(utilit)n(y)
+-7 b(,)28 b(w)n(e)g(b)r(eliev)n(e)f(that)h(this)g(is)f(a)g(reasonable)f
+(trade-o\013.)648 2587 y(As)36 b(a)f(con)n(ten)n(t)h(enco)r(ding)f(mec)
+n(hanism,)g(ECRS)h(could)g(b)r(e)g(in)n(tegrated)f(in)n(to)h(almost)523
+2686 y(an)n(y)31 b(generic)g(p)r(eer-to-p)r(eer)g(infrastructure)f(to)i
+(enhance)g(its)g(resistance)e(to)i(censorship.)523 2786
+y(Sp)r(eci\014c)19 b(details)g(on)g(ho)n(w)f(p)r(eers)h(comm)n(unicate)
+f(or)g(route)g(data)h({)f(ev)n(en)h(though)f(imp)r(ortan)n(t)523
+2886 y(for)37 b(the)h(a)n(v)-5 b(ailabilit)n(y)36 b(of)h(the)h(service)
+e(and)h(the)h(priv)-5 b(acy)36 b(of)i(its)f(users)g({)g(are)f
+(therefore)523 2985 y(orthogonal)25 b(issues)i(outside)h(of)f(the)h
+(scop)r(e)g(of)f(this)h(pap)r(er.)648 3108 y(As)f(an)f(enco)r(ding)h
+(sc)n(heme,)g(ECRS)g(has)f(to)h(address)f(t)n(w)n(o)g(imp)r(ortan)n(t)h
+(issues.)f(First)h(of)523 3208 y(all,)e(users)f(m)n(ust)h(b)r(e)g(able)
+g(to)g(\014nd)g(con)n(ten)n(t,)g(preferably)f(b)n(y)h(searc)n(hing)e
+(with)i(simple,)g(nat-)523 3307 y(ural)30 b(language)f(k)n(eyw)n(ords.)
+f(Metadata)i(related)g(to)h(the)g(con)n(ten)n(ts)f(of)g(the)h(\014le)g
+(should)g(b)r(e)523 3407 y(made)19 b(a)n(v)-5 b(ailable)18
+b(as)h(part)g(of)g(the)h(searc)n(h)e(result)h(and)g(prior)f(to)i(the)f
+(do)n(wnload)f(of)i(the)g(actual)523 3506 y(\014le.)31
+b(Metadata)e(can)h(include)h(an)n(ything)e(from)h(user-pro)n(vided)f
+(con)n(ten)n(t)h(descriptions)f(to)523 3606 y(th)n(um)n(bnails)h(\(for)
+h(images\))e(and)i(automatically)e(detected)i(mime-t)n(yp)r(es.)f
+(Secondly)-7 b(,)31 b(the)523 3706 y(enco)r(ding)25 b(sc)n(heme)g
+(should)g(supp)r(ort)g(sw)n(arming)f({)h(that)h(is,)f(the)h(do)n
+(wnload)e(of)h(a)g(\014le)g(from)523 3805 y(m)n(ultiple)g(p)r(eers.)f
+(Since)g(it)h(is)f(p)r(ossible)g(that)h(iden)n(tical)f(data)g(could)g
+(b)r(e)h(inserted)f(b)n(y)g(man)n(y)523 3905 y(indep)r(enden)n(t)32
+b(parties,)f(the)h(enco)r(ding)f(sc)n(heme)g(should)g(alw)n(a)n(ys)e
+(result)i(in)h(iden)n(tical)f(en-)523 4005 y(co)r(dings)f(for)g(iden)n
+(tical)h(source)e(\014les.)i(This)g(sp)r(ecial)f(form)h(of)f
+(encryption)g(w)n(as)g(probably)523 4104 y(\014rst)21
+b(describ)r(ed)g(in)h([)p 0 1 0 TeXcolorrgb 1163 4104
+a
SDict begin H.S end
- 1695 4625 a 0 1 0 TeXcolorrgb
-Fx(5)p 0 1 0 TeXcolorrgb 1737 4572 a
+ 1163 4104 a 0 1 0 TeXcolorrgb Fx(5)p 0 1 0 TeXcolorrgb
+1205 4051 a
SDict begin H.R end
- 1737 4572 a 1737
-4625 a
+ 1205 4051 a 1205 4104 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.clark99distributed) cvn H.B /ANN pdfmark end
- 1737 4625 a Black Fx(])g(and)f(later)h(termed)f
-Fq(c)l(onver)l(gent)j(encryption)f Fx([)p 0 1 0 TeXcolorrgb
-3276 4625 a
+ 1205 4104 a Black
+Fx(])f(and)g(later)g(termed)h Fq(c)l(onver)l(gent)h(encryption)g
+Fx([)p 0 1 0 TeXcolorrgb 2700 4104 a
SDict begin H.S end
- 3276 4625 a 0 1 0 TeXcolorrgb Fx(10)p 0 1 0
-TeXcolorrgb 3359 4572 a
+ 2700 4104 a 0 1 0
+TeXcolorrgb Fx(9)p 0 1 0 TeXcolorrgb 2741 4051 a
SDict begin H.R end
- 3359 4572 a 3359 4625 a
+ 2741
+4051 a 2741 4104 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.farsite) cvn H.B /ANN pdfmark end
- 3359
-4625 a Black Fx(].)523 4725 y(With)k(con)n(v)n(ergen)n(t)c(encryption,)
-j(the)g(existence)f(of)h(m)n(ultiple)g(copies)g(of)f(the)h(same)g(con-)
-523 4825 y(ten)n(t)21 b(can)g(b)r(e)g(detected;)g(this)g(kno)n(wledge)f
-(can)g(then)i(b)r(e)f(used)g(to)g(increase)e(fault-tolerance,)523
-4924 y(p)r(erformance)27 b(and)g(a)n(v)-5 b(ailabilit)n(y)e(.)p
+ 2741 4104 a Black Fx(].)f(With)g(con)n(v)n(ergen)n
+(t)523 4204 y(encryption,)h(the)h(existence)f(of)h(m)n(ultiple)g
+(copies)f(of)g(the)h(same)f(con)n(ten)n(t)g(can)g(b)r(e)h(detected;)523
+4303 y(this)35 b(kno)n(wledge)f(can)h(then)h(b)r(e)f(used)g(to)g
+(increase)f(fault-tolerance,)g(p)r(erformance)g(and)523
+4403 y(a)n(v)-5 b(ailabilit)n(y)e(.)648 4526 y(Unfortunately)g(,)26
+b(it)g(is)g(not)g(enough)g(to)g(just)g(meet)h(requiremen)n(ts)e
+(related)g(to)h(e\016cien)n(t)523 4625 y(storage)c(and)h(retriev)-5
+b(al)22 b(of)i(the)g(con)n(ten)n(t.)f(A)h(public)g(\014lesharing)e(net)
+n(w)n(ork)g(should)h(b)r(e)h(op)r(en)523 4725 y(to)33
+b(new)g(participan)n(ts)g(without)g(an)n(y)g(restrictiv)n(e)f(form)h
+(of)g(access)f(con)n(trol.)g(This)h(op)r(ens)523 4825
+y(the)c(net)n(w)n(ork)f(to)g(malicious)g(participan)n(ts.)g(Th)n(us,)h
+(the)g(enco)r(ding)g(sc)n(heme)f(should)h(guar-)523 4924
+y(an)n(tee)24 b(the)g Fq(inte)l(grity)h Fx(of)f(the)h(con)n(ten)n(t,)f
+(ev)n(en)g(in)g(the)h(presence)e(of)h(malicious)g(participan)n(ts.)p
Black Black eop end
%%Page: 3 3
TeXDict begin 3 2 bop 0 0 a
@@ -5536,211 +5532,236 @@
end
523 232 a Black 1036 w Fu(An)25
b(Enco)r(ding)h(for)h(Censorship-Resistan)n(t)f(Sharing)238
-b(3)p Black 648 448 a Fx(Unfortunately)-7 b(,)26 b(it)g(is)g(not)g
-(enough)g(to)g(just)g(meet)h(requiremen)n(ts)e(related)g(to)h
-(e\016cien)n(t)523 548 y(storage)c(and)h(retriev)-5 b(al)22
-b(of)i(the)g(con)n(ten)n(t.)f(A)h(public)g(\014lesharing)e(net)n(w)n
-(ork)g(should)h(b)r(e)h(op)r(en)523 648 y(to)33 b(new)g(participan)n
-(ts)g(without)g(an)n(y)g(restrictiv)n(e)f(form)h(of)g(access)f(con)n
-(trol.)g(This)h(op)r(ens)523 747 y(the)c(net)n(w)n(ork)f(to)g
-(malicious)g(participan)n(ts.)g(Th)n(us,)h(the)g(enco)r(ding)g(sc)n
-(heme)f(should)h(guar-)523 847 y(an)n(tee)24 b(the)g
-Fq(inte)l(grity)h Fx(of)f(the)h(con)n(ten)n(t,)f(ev)n(en)g(in)g(the)h
-(presence)e(of)h(malicious)g(participan)n(ts.)523 946
-y(The)i(enco)r(ding)f(mec)n(hanism)h(m)n(ust)g(ensure)f(that)h(in)n(v)
--5 b(alid)26 b(replies)f(are)g(detected)h(and)g(that)523
-1046 y(p)r(eers)35 b(can)h(distinguish)g(v)-5 b(aluable)35
-b(con)n(ten)n(t)h(from)f(maliciously)g(generated)g(noise.)g(This)523
-1146 y(is)30 b(particularly)e(imp)r(ortan)n(t)h(in)h(three)g(cases.)e
-(First,)i(if)g(large)e(\014les)i(are)f(assem)n(bled)f(using)523
-1245 y(blo)r(c)n(ks)35 b(from)h(m)n(ultiple)h(p)r(eers,)f(some)f(of)h
-(these)g(p)r(eers)g(ma)n(y)f(b)r(e)i(malicious)e(and)h(try)g(to)523
-1345 y(corrupt)g(the)g(\014le.)h(These)f(corruptions)f(should)h(b)r(e)h
-(detected)g(on)f(a)g(small)g(gran)n(ularit)n(y)523 1445
+b(3)p Black 523 448 a Fx(The)26 b(enco)r(ding)f(mec)n(hanism)h(m)n(ust)
+g(ensure)f(that)h(in)n(v)-5 b(alid)26 b(replies)f(are)g(detected)h(and)
+g(that)523 548 y(p)r(eers)35 b(can)h(distinguish)g(v)-5
+b(aluable)35 b(con)n(ten)n(t)h(from)f(maliciously)g(generated)g(noise.)
+g(This)523 648 y(is)30 b(particularly)e(imp)r(ortan)n(t)h(in)h(three)g
+(cases.)e(First,)i(if)g(large)e(\014les)i(are)f(assem)n(bled)f(using)
+523 747 y(blo)r(c)n(ks)35 b(from)h(m)n(ultiple)h(p)r(eers,)f(some)f(of)
+h(these)g(p)r(eers)g(ma)n(y)f(b)r(e)i(malicious)e(and)h(try)g(to)523
+847 y(corrupt)g(the)g(\014le.)h(These)f(corruptions)f(should)h(b)r(e)h
+(detected)g(on)f(a)g(small)g(gran)n(ularit)n(y)523 946
y(lev)n(el)f(and)g(repaired)f(with)i(correct)e(data)h(from)g(other)f(p)
-r(eers.)h(Second,)g(for)g(searc)n(hes)f(it)523 1544 y(should)i(b)r(e)h
+r(eers.)h(Second,)g(for)g(searc)n(hes)f(it)523 1046 y(should)i(b)r(e)h
(di\016cult)h(for)e(p)r(eers)g(to)g(spam)h(the)f(result)h(set;)f
-(otherwise,)g(the)h(users)f(ma)n(y)523 1644 y(dro)n(wn)i(in)h(useless)g
+(otherwise,)g(the)h(users)f(ma)n(y)523 1146 y(dro)n(wn)i(in)h(useless)g
(information.)f(Finally)-7 b(,)39 b(in)n(termediaries)f(that)h(are)f
-(merely)h(routing)523 1743 y(the)32 b(con)n(ten)n(t)e(should)h(b)r(e)h
+(merely)h(routing)523 1245 y(the)32 b(con)n(ten)n(t)e(should)h(b)r(e)h
(able)f(to)g(detect)g(in)n(v)-5 b(alid)31 b(replies.)g(This)g(enables)g
-(the)g(existence)523 1843 y(of)h(lo)r(cal)g(economies)f(\(suc)n(h)h(as)
-f(those)h(in)h([)p 0 1 0 TeXcolorrgb 1897 1843 a
+(the)g(existence)523 1345 y(of)h(lo)r(cal)g(economies)f(\(suc)n(h)h(as)
+f(those)h(in)h([)p 0 1 0 TeXcolorrgb 1897 1345 a
SDict begin H.S end
1897
-1843 a 0 1 0 TeXcolorrgb Fx(12)p 0 1 0 TeXcolorrgb 1980
-1790 a
+1345 a 0 1 0 TeXcolorrgb Fx(11)p 0 1 0 TeXcolorrgb 1980
+1291 a
SDict begin H.R end
- 1980 1790 a 1980 1843 a
+ 1980 1291 a 1980 1345 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.ebe2003) cvn H.B /ANN pdfmark end
- 1980 1843 a Black Fx(]\))f(and)g(prev)n
-(en)n(ts)f(the)i(retransmission)d(and)523 1943 y(replication)d(of)g
+ 1980 1345 a Black Fx(]\))f(and)g(prev)n
+(en)n(ts)f(the)i(retransmission)d(and)523 1445 y(replication)d(of)g
(corrupted)g(data)g(b)n(y)g(non-malicious)g(p)r(eers.)648
-2053 y(This)20 b(pap)r(er)h(in)n(tro)r(duces)f(the)h(primitiv)n(es)g
+1544 y(This)20 b(pap)r(er)h(in)n(tro)r(duces)f(the)h(primitiv)n(es)g
(that)g(ECRS)f(uses)h(to)g(ac)n(hiev)n(e)e(these)i(goals:)e(a)523
-2152 y(sp)r(eci\014c)26 b(altered)e(v)-5 b(arian)n(t)25
+1644 y(sp)r(eci\014c)26 b(altered)e(v)-5 b(arian)n(t)25
b(of)g(the)h(Con)n(ten)n(t)f(Hash)g(Key)g(\(CHK\),)h(a)f(primitiv)n(e)g
-(used)h(in)f([)p 0 1 0 TeXcolorrgb 3317 2152 a
+(used)h(in)f([)p 0 1 0 TeXcolorrgb 3317 1644 a
SDict begin H.S end
- 3317 2152
-a 0 1 0 TeXcolorrgb Fx(5)p 0 1 0 TeXcolorrgb 3359 2099
+ 3317 1644
+a 0 1 0 TeXcolorrgb Fx(5)p 0 1 0 TeXcolorrgb 3359 1590
a
SDict begin H.R end
- 3359 2099 a 3359 2152 a
+ 3359 1590 a 3359 1644 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.clark99distributed) cvn H.B /ANN pdfmark end
- 3359 2152 a Black Fx(],)523
-2252 y(and)e Fq(KBlo)l(cks)p Fx(,)h(a)e(no)n(v)n(el)g(construction)g
+ 3359 1644 a Black Fx(],)523
+1743 y(and)e Fq(KBlo)l(cks)p Fx(,)h(a)e(no)n(v)n(el)g(construction)g
(whic)n(h)h(adds)f(functionalit)n(y)h(to)g(the)g(ECRS)f(sc)n(heme)523
-2352 y(while)27 b(a)n(v)n(oiding)e(a)i(prop)r(osed)f(attac)n(k)g(on)g
+1843 y(while)27 b(a)n(v)n(oiding)e(a)i(prop)r(osed)f(attac)n(k)g(on)g
(the)i(triple-hash)e(primitiv)n(e)g(used)h(in)h([)p 0 1 0
-TeXcolorrgb 3078 2352 a
+TeXcolorrgb 3078 1843 a
SDict begin H.S end
- 3078 2352 a 0 1 0 TeXcolorrgb
-Fx(3)p 0 1 0 TeXcolorrgb 3119 2298 a
+ 3078 1843 a 0 1 0 TeXcolorrgb
+Fx(3)p 0 1 0 TeXcolorrgb 3119 1790 a
SDict begin H.R end
- 3119 2298 a 3119
-2352 a
+ 3119 1790 a 3119
+1843 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.esed) cvn H.B /ANN pdfmark end
- 3119 2352 a Black Fx(].)f(These)523 2451 y(primitiv)n(es)k(allo)
+ 3119 1843 a Black Fx(].)f(These)523 1943 y(primitiv)n(es)k(allo)
n(w)f(data)g(to)h(b)r(e)h(inserted)e(under)h(m)n(ultiple)h
-(natural-language)c(k)n(eyw)n(ords)523 2551 y(at)g(minimal)h(cost)f(in)
+(natural-language)c(k)n(eyw)n(ords)523 2042 y(at)g(minimal)h(cost)f(in)
h(space,)f(and)g(queried)g(using)g(natural)g(language)f(b)r(o)r(olean)h
-(searc)n(hes.)523 2651 y(F)-7 b(urthermore,)27 b(the)i(primitiv)n(es)f
+(searc)n(hes.)523 2142 y(F)-7 b(urthermore,)27 b(the)i(primitiv)n(es)f
(giv)n(e)f(ECRS)h(the)h(means)f(to)g(iden)n(tify)-7 b(,)29
-b(encrypt,)f(decrypt)523 2750 y(and)33 b(v)n(erify)f(data,)g(all)h
+b(encrypt,)f(decrypt)523 2242 y(and)33 b(v)n(erify)f(data,)g(all)h
(while)g(a)n(v)n(oiding)e(attac)n(ks)g(b)n(y)i(a)f(non-guessing)f(in)n
-(termediate)i(ad-)523 2850 y(v)n(ersary)-7 b(.)29 b(V)-7
+(termediate)i(ad-)523 2341 y(v)n(ersary)-7 b(.)29 b(V)-7
b(eri\014cation)30 b(of)h(con)n(ten)n(t)g(b)n(y)g(in)n(termediate)f
-(hosts)h(is)g(made)g(p)r(ossible)g(without)523 2949 y(rev)n(ealing)i
+(hosts)h(is)g(made)g(p)r(ossible)g(without)523 2441 y(rev)n(ealing)i
(the)i(k)n(eys)f(necessary)f(to)i(decrypt)f(con)n(ten)n(t,)h(and)g(the)
-g(amoun)n(t)f(of)h(data)f(cor-)523 3049 y(ruption)28
+g(amoun)n(t)f(of)h(data)f(cor-)523 2540 y(ruption)28
b(an)f(adv)n(ersary)e(can)j(inject)g(b)r(efore)g(b)r(eing)g(detected)g
-(is)g(limited)h(to)e(a)h(small)f(size.)523 3149 y(Additionally)-7
+(is)g(limited)h(to)e(a)h(small)f(size.)523 2640 y(Additionally)-7
b(,)34 b(the)g(construction)f(of)h(these)g(primitiv)n(es)g(mak)n(es)e
-(ECRS)i(quite)g(scalable,)523 3248 y(and)24 b(assists)f(the)h(enco)r
+(ECRS)i(quite)g(scalable,)523 2740 y(and)24 b(assists)f(the)h(enco)r
(ding)g(sc)n(heme)g(in)g(encouraging)e(load-balancing,)g(distribution)i
-(and)523 3348 y(replication)i(of)g(con)n(ten)n(t,)g(and)h(sw)n(arming.)
+(and)523 2839 y(replication)i(of)g(con)n(ten)n(t,)g(and)h(sw)n(arming.)
d(These)j(primitiv)n(es)f(\(and)g(their)h(functionalit)n(y\))523
-3448 y(are)g(describ)r(ed)g(in)h(greater)e(detail)h(later)g(in)h(the)g
-(pap)r(er.)648 3558 y(The)e(rest)f(of)i(the)f(pap)r(er)g(is)g
+2939 y(are)g(describ)r(ed)g(in)h(greater)e(detail)h(later)g(in)h(the)g
+(pap)r(er.)648 3039 y(The)e(rest)f(of)i(the)f(pap)r(er)g(is)g
(organized)e(as)i(follo)n(ws.)f(Section)p 1 0 0 TeXcolorrgb
-2582 3558 a
+2582 3039 a
SDict begin H.S end
- 2582 3558 a 1 0 0 TeXcolorrgb Fx(2)p 1 0 0
-TeXcolorrgb 2624 3504 a
+ 2582 3039 a 1 0 0 TeXcolorrgb Fx(2)p 1 0 0
+TeXcolorrgb 2624 2985 a
SDict begin H.R end
- 2624 3504 a 2624 3558 a
+ 2624 2985 a 2624 3039 a
SDict begin [ /Color [1 0 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(section.1.2) cvn H.B /ANN pdfmark end
2624
-3558 a Black 26 w Fx(con)n(trasts)f(the)j(curren)n(t)523
-3657 y(w)n(ork)e(with)i(mec)n(hanisms)e(used)h(in)h(other)f
+3039 a Black 26 w Fx(con)n(trasts)f(the)j(curren)n(t)523
+3138 y(w)n(ork)e(with)i(mec)n(hanisms)e(used)h(in)h(other)f
(censorship-resistan)n(t)d(systems.)j(Section)p 1 0 0
-TeXcolorrgb 3226 3657 a
+TeXcolorrgb 3226 3138 a
SDict begin H.S end
- 3226 3657 a 1 0 0 TeXcolorrgb
-Fx(3)p 1 0 0 TeXcolorrgb 3268 3604 a
+ 3226 3138 a 1 0 0 TeXcolorrgb
+Fx(3)p 1 0 0 TeXcolorrgb 3268 3085 a
SDict begin H.R end
- 3268 3604 a 3268
-3657 a
+ 3268 3085 a 3268
+3138 a
SDict begin [ /Color [1 0 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(section.1.3) cvn H.B /ANN pdfmark end
- 3268 3657 a Black 26 w Fx(de-)523 3757 y(scrib)r(es)e(the)h
+ 3268 3138 a Black 26 w Fx(de-)523 3238 y(scrib)r(es)e(the)h
(ECRS)g(enco)r(ding)f(sc)n(heme)h(in)g(detail.)f(Finally)-7
-b(,)25 b(Section)p 1 0 0 TeXcolorrgb 2735 3757 a
+b(,)25 b(Section)p 1 0 0 TeXcolorrgb 2735 3238 a
SDict begin H.S end
2735
-3757 a 1 0 0 TeXcolorrgb Fx(4)p 1 0 0 TeXcolorrgb 2776
-3703 a
+3238 a 1 0 0 TeXcolorrgb Fx(4)p 1 0 0 TeXcolorrgb 2776
+3184 a
SDict begin H.R end
- 2776 3703 a 2776 3757 a
+ 2776 3184 a 2776 3238 a
SDict begin [ /Color [1 0 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(section.1.4) cvn H.B /ANN pdfmark end
- 2776 3757 a Black 25 w
-Fx(discusses)f(attac)n(ks)523 3857 y(on)j(ECRS)h(and)f(con)n(trasts)f
-(it)i(with)g(previous)f(w)n(ork.)523 4064 y
+ 2776 3238 a Black 25 w
+Fx(discusses)f(attac)n(ks)523 3337 y(on)j(ECRS)h(and)f(con)n(trasts)f
+(it)i(with)g(previous)f(w)n(ork.)523 3481 y
SDict begin H.S end
- 523 4064
-a 523 4064 a
+ 523 3481
+a 523 3481 a
SDict begin 12 H.A end
- 523 4064 a 523 4064 a
+ 523 3481 a 523 3481 a
SDict begin [ /View [/XYZ H.V] /Dest (section.1.2) cvn H.B /DEST pdfmark
end
- 523 4064 a 111 x Fr(2)112
-b(Related)38 b(W)-9 b(ork)523 4426 y Fx(A)23 b(large)d(n)n(um)n(b)r(er)
+ 523 3481 a 100 x Fr(2)112
+b(Related)38 b(W)-9 b(ork)523 3757 y Fx(A)23 b(large)d(n)n(um)n(b)r(er)
i(of)g(censorship-resistan)n(t)e(\(or)h(at)h(least)g(fault-toleran)n
-(t\))g(publishing)g(sys-)523 4526 y(tems)g(ha)n(v)n(e)f(b)r(een)i(prop)
+(t\))g(publishing)g(sys-)523 3857 y(tems)g(ha)n(v)n(e)f(b)r(een)i(prop)
r(osed)e(in)h(recen)n(t)g(y)n(ears)e([)p 0 1 0 TeXcolorrgb
-2004 4526 a
+2004 3857 a
SDict begin H.S end
- 2004 4526 a 0 1 0 TeXcolorrgb Fx(1)p 0 1 0
-TeXcolorrgb 2046 4472 a
+ 2004 3857 a 0 1 0 TeXcolorrgb Fx(1)p 0 1 0
+TeXcolorrgb 2046 3803 a
SDict begin H.R end
- 2046 4472 a 2046 4526 a
+ 2046 3803 a 2046 3857 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.anderson96eternity) cvn H.B /ANN pdfmark end
2046
-4526 a Black Fx(,)p 0 1 0 TeXcolorrgb 2069 4526 a
+3857 a Black Fx(,)p 0 1 0 TeXcolorrgb 2069 3857 a
SDict begin H.S end
2069
-4526 a 0 1 0 TeXcolorrgb Fx(4)p 0 1 0 TeXcolorrgb 2110
-4472 a
+3857 a 0 1 0 TeXcolorrgb Fx(4)p 0 1 0 TeXcolorrgb 2110
+3803 a
SDict begin H.R end
- 2110 4472 a 2110 4526 a
+ 2110 3803 a 2110 3857 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.chen99prototype) cvn H.B /ANN pdfmark end
- 2110 4526 a Black Fx(,)p
-0 1 0 TeXcolorrgb 2133 4526 a
+ 2110 3857 a Black Fx(,)p
+0 1 0 TeXcolorrgb 2133 3857 a
SDict begin H.S end
- 2133 4526 a 0 1 0 TeXcolorrgb
-Fx(5)p 0 1 0 TeXcolorrgb 2175 4472 a
+ 2133 3857 a 0 1 0 TeXcolorrgb
+Fx(5)p 0 1 0 TeXcolorrgb 2175 3803 a
SDict begin H.R end
- 2175 4472 a 2175
-4526 a
+ 2175 3803 a 2175
+3857 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.clark99distributed) cvn H.B /ANN pdfmark end
- 2175 4526 a Black Fx(,)p 0 1 0 TeXcolorrgb 2198
-4526 a
+ 2175 3857 a Black Fx(,)p 0 1 0 TeXcolorrgb 2198
+3857 a
SDict begin H.S end
- 2198 4526 a 0 1 0 TeXcolorrgb Fx(14)p 0 1 0 TeXcolorrgb
-2281 4472 a
+ 2198 3857 a 0 1 0 TeXcolorrgb Fx(13)p 0 1 0 TeXcolorrgb
+2281 3803 a
SDict begin H.R end
- 2281 4472 a 2281 4526 a
+ 2281 3803 a 2281 3857 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.herlihy87how) cvn H.B /ANN pdfmark end
- 2281 4526 a Black
-Fx(,)p 0 1 0 TeXcolorrgb 2304 4526 a
+ 2281 3857 a Black
+Fx(,)p 0 1 0 TeXcolorrgb 2304 3857 a
SDict begin H.S end
- 2304 4526 a 0 1 0
-TeXcolorrgb Fx(29)p 0 1 0 TeXcolorrgb 2387 4472 a
+ 2304 3857 a 0 1 0
+TeXcolorrgb Fx(27)p 0 1 0 TeXcolorrgb 2387 3803 a
SDict begin H.R end
2387
-4472 a 2387 4526 a
+3803 a 2387 3857 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.waldman2001tangler) cvn H.B /ANN pdfmark end
- 2387 4526 a Black Fx(,)p 0 1 0 TeXcolorrgb
-2410 4526 a
+ 2387 3857 a Black Fx(,)p 0 1 0 TeXcolorrgb
+2410 3857 a
SDict begin H.S end
- 2410 4526 a 0 1 0 TeXcolorrgb Fx(30)p 0 1 0
-TeXcolorrgb 2493 4472 a
+ 2410 3857 a 0 1 0 TeXcolorrgb Fx(28)p 0 1 0
+TeXcolorrgb 2493 3803 a
SDict begin H.R end
- 2493 4472 a 2493 4526 a
+ 2493 3803 a 2493 3857 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.pub00) cvn H.B /ANN pdfmark end
2493
-4526 a Black Fx(].)i(The)g(prop)r(osed)f(proto)r(cols)523
-4625 y(di\013er)33 b(in)f(v)-5 b(arious)32 b(asp)r(ects)g(unrelated)g
+3857 a Black Fx(].)i(The)g(prop)r(osed)f(proto)r(cols)523
+3957 y(di\013er)33 b(in)f(v)-5 b(arious)32 b(asp)r(ects)g(unrelated)g
(to)g(the)h(sp)r(eci\014cs)f(of)h(the)f(enco)r(ding)g(mec)n(hanism,)523
-4725 y(suc)n(h)23 b(as)g(con)n(ten)n(t)f(replication)h(and)g(the)h(use)
+4056 y(suc)n(h)23 b(as)g(con)n(ten)n(t)f(replication)h(and)g(the)h(use)
f(of)g(anon)n(ymous)f(or)g(steganographic)f(comm)n(u-)523
-4825 y(nication.)29 b(Characteristic)g(of)g(all)h(of)f(these)h(systems)
-f(is)h(the)g(use)g(of)f(replication)g(and)h(the)523 4924
+4156 y(nication.)29 b(Characteristic)g(of)g(all)h(of)f(these)h(systems)
+f(is)h(the)g(use)g(of)f(replication)g(and)h(the)523 4255
y(need)h(to)g(ensure)g(data)g(in)n(tegrit)n(y)-7 b(.)30
b(F)-7 b(or)30 b(an)h(o)n(v)n(erview)e(of)i(con)n(ten)n(t)g
-(replication)f(strategies)p Black Black eop end
+(replication)f(strategies)523 4355 y(see)f([)p 0 1 0
+TeXcolorrgb 682 4355 a
+SDict begin H.S end
+ 682 4355 a 0 1 0 TeXcolorrgb Fx(6)p
+0 1 0 TeXcolorrgb 724 4302 a
+SDict begin H.R end
+ 724 4302 a 724 4355 a
+SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
+(cite.cohen02replication) cvn H.B /ANN pdfmark end
+ 724
+4355 a Black Fx(].)g(The)h(censorship-resistan)n(t)c(systems)j(all)g
+(use)g(some)g(form)g(of)g(con)n(ten)n(t)g(enco)r(ding)523
+4455 y(to)f(hide)f(the)h(sp)r(eci\014cs)g(of)f(the)h(con)n(ten)n(t)g
+(from)f(the)h(serv)n(ers.)523 4598 y
+SDict begin H.S end
+ 523 4598 a 523 4598
+a
+SDict begin 12 H.A end
+ 523 4598 a 523 4598 a
+SDict begin [ /View [/XYZ H.V] /Dest (subsection.1.2.1) cvn H.B /DEST
+pdfmark end
+ 523 4598 a 83 x Fo(2.1)95 b(F)-8
+b(reenet)523 4825 y Fx(The)30 b(main)f(con)n(ten)n(t)h(enco)r(ding)f
+(sc)n(heme)g(used)h(in)g(F)-7 b(reenet)30 b([)p 0 1 0
+TeXcolorrgb 2452 4825 a
+SDict begin H.S end
+ 2452 4825 a 0 1 0 TeXcolorrgb
+Fx(5)p 0 1 0 TeXcolorrgb 2493 4771 a
+SDict begin H.R end
+ 2493 4771 a 2493
+4825 a
+SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
+(cite.clark99distributed) cvn H.B /ANN pdfmark end
+ 2493 4825 a Black Fx(])g(uses)f(CHKs:)h(the)g(hash)f(of)523
+4924 y(the)e(con)n(ten)n(t)f(is)g(used)g(as)g(the)g(k)n(ey)-7
+b(.)26 b(F)-7 b(reenet)26 b(has)g(sev)n(eral)e(other)i(t)n(yp)r(es)g
+(of)g(k)n(eys)g(whic)n(h)g(are)p Black Black eop end
%%Page: 4 4
TeXDict begin 4 3 bop 0 0 a
SDict begin /product where{pop product(Distiller)search{pop pop pop
@@ -5758,117 +5779,109 @@
end
523 232 a Black Fu(4)237 b(C.)27
b(Grotho\013,)f(K.)g(Grotho\013,)g(T.)h(Horozo)n(v,)f(J.T.)h(Lindgren)p
-Black 523 448 a Fx(see)i([)p 0 1 0 TeXcolorrgb 682 448
-a
-SDict begin H.S end
- 682 448 a 0 1 0 TeXcolorrgb Fx(6)p 0 1 0 TeXcolorrgb
-724 395 a
-SDict begin H.R end
- 724 395 a 724 448 a
-SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.cohen02replication) cvn H.B /ANN pdfmark end
- 724 448 a Black Fx(].)g(The)h
-(censorship-resistan)n(t)c(systems)j(all)g(use)g(some)g(form)g(of)g
-(con)n(ten)n(t)g(enco)r(ding)523 548 y(to)f(hide)f(the)h(sp)r
-(eci\014cs)g(of)f(the)h(con)n(ten)n(t)g(from)f(the)h(serv)n(ers.)523
-735 y
-SDict begin H.S end
- 523 735 a 523 735 a
-SDict begin 12 H.A end
- 523 735 a 523 735 a
-SDict begin [ /View [/XYZ H.V] /Dest (subsection.1.2.1) cvn H.B /DEST
-pdfmark end
- 523 735
-a 89 x Fo(2.1)95 b(F)-8 b(reenet)523 1017 y Fx(The)30
-b(main)f(con)n(ten)n(t)h(enco)r(ding)f(sc)n(heme)g(used)h(in)g(F)-7
-b(reenet)30 b([)p 0 1 0 TeXcolorrgb 2452 1017 a
-SDict begin H.S end
- 2452
-1017 a 0 1 0 TeXcolorrgb Fx(5)p 0 1 0 TeXcolorrgb 2493
-964 a
-SDict begin H.R end
- 2493 964 a 2493 1017 a
-SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.clark99distributed) cvn H.B /ANN pdfmark end
- 2493 1017 a Black Fx(])g(uses)f(CHKs:)h
-(the)g(hash)f(of)523 1117 y(the)e(con)n(ten)n(t)f(is)g(used)g(as)g(the)
-g(k)n(ey)-7 b(.)26 b(F)-7 b(reenet)26 b(has)g(sev)n(eral)e(other)i(t)n
-(yp)r(es)g(of)g(k)n(eys)g(whic)n(h)g(are)523 1216 y(used)e(to)f(refer)g
-(the)h(user)f(to)g(con)n(ten)n(t-hash)g(k)n(eys.)f(These)i(di\013eren)n
-(t)f(k)n(ey)g(t)n(yp)r(es)h(are)f(used)g(to)523 1316
-y(allo)n(w)e(additional)h(features)g(suc)n(h)g(as)g(con)n(ten)n(t)g
-(signing,)g(p)r(ersonal)f(namespaces)h(and)g(split-)523
-1416 y(ting)28 b(of)g(con)n(ten)n(t.)f(F)-7 b(reenet's)28
-b(CHK)g(yields)f(the)i(same)e(encrypted)g(data)h(for)f(indep)r(enden)n
-(t)523 1515 y(encryptions.)g(Ho)n(w)n(ev)n(er,)f(it)i(has)f(sev)n(eral)
-e(disadv)-5 b(an)n(tages.)648 1620 y(One)31 b(dra)n(wbac)n(k)g(of)h(F)
--7 b(reenet's)32 b(CHK)g(is)g(that)g(it)h(do)r(es)f(not)g(allo)n(w)f
-(direct)h(sharing)f(of)523 1720 y(\014les)c(from)f(the)h(lo)r(cal)g
-(driv)n(e)e(without)j(encrypting)e(and)g(inserting)h(them)g(\014rst.)g
-(Th)n(us,)f(if)h(a)523 1820 y(no)r(de)22 b(op)r(erator)f(wishes)h(to)g
-(k)n(eep)g(con)n(ten)n(t)g(directly)g(accessible)f(on)h(the)h(host,)f
-(a)g(lo)r(cal)g(cop)n(y)523 1919 y(of)h(the)g(plain)n(text)g(m)n(ust)g
-(b)r(e)g(k)n(ept)f(in)h(addition)g(to)g(the)g(encrypted)f(con)n(ten)n
-(t)h(in)g(the)g(F)-7 b(reenet)523 2019 y(database.)27
-b(Also,)h(F)-7 b(reenet)29 b(do)r(es)f(not)g(supp)r(ort)g(sw)n(arming.)
-f(One)h(reason)f(for)h(this)g(is)h(that)523 2119 y(F)-7
-b(reenet's)30 b(CHK)h(enco)r(ding)f(can)g(only)g(v)n(erify)g(a)g
-(\014le)h(in)f(its)h(en)n(tiret)n(y)f(and)g(not)h(pin-p)r(oin)n(t)523
-2218 y(corruptions)26 b(on)h(a)h(smaller)e(scale.)648
-2323 y(One)33 b(w)n(a)n(y)f(to)i(obtain)f(the)i(CHK)e(k)n(ey)g(of)h(a)f
-(\014le)h(in)g(F)-7 b(reenet)34 b(is)f(to)h(searc)n(h)e(a)h(priv)-5
-b(ate)523 2423 y(subspace.)27 b(A)h(subspace)f(con)n(tains)f(a)i(set)f
-(of)h(CHK)f(k)n(eys)g(that)h(ha)n(v)n(e)e(b)r(een)i(cryptographi-)523
-2522 y(cally)e(signed)h(b)n(y)g(the)g(o)n(wner)f(of)h(the)g(subspace)g
-(and)f(placed)h(in)n(to)g(the)g(subspace)g(under)f(a)523
-2622 y(certain)e(k)n(eyw)n(ord.)g(These)g(signed)h(references)f(are)f
-(called)i(subspace-signed)e(k)n(eys)h(\(SSK\).)523 2722
-y(Giv)n(en)i(the)g(subspace-pre\014x)e(and)h(the)i(k)n(eyw)n(ord,)c
-(users)i(can)h(obtain)f(the)h(CHK)g(k)n(ey)-7 b(.)25
-b(The)523 2821 y(form)d(of)g(the)g(k)n(eyw)n(ords)e(can)i(b)r(e)h
+Black 523 448 a Fx(used)d(to)f(refer)g(the)h(user)f(to)g(con)n(ten)n
+(t-hash)g(k)n(eys.)f(These)i(di\013eren)n(t)f(k)n(ey)g(t)n(yp)r(es)h
+(are)f(used)g(to)523 548 y(allo)n(w)e(additional)h(features)g(suc)n(h)g
+(as)g(con)n(ten)n(t)g(signing,)g(p)r(ersonal)f(namespaces)h(and)g
+(split-)523 648 y(ting)28 b(of)g(con)n(ten)n(t.)f(F)-7
+b(reenet's)28 b(CHK)g(yields)f(the)i(same)e(encrypted)g(data)h(for)f
+(indep)r(enden)n(t)523 747 y(encryptions.)g(Ho)n(w)n(ev)n(er,)f(it)i
+(has)f(sev)n(eral)e(disadv)-5 b(an)n(tages.)648 847 y(One)31
+b(dra)n(wbac)n(k)g(of)h(F)-7 b(reenet's)32 b(CHK)g(is)g(that)g(it)h(do)
+r(es)f(not)g(allo)n(w)f(direct)h(sharing)f(of)523 946
+y(\014les)c(from)f(the)h(lo)r(cal)g(driv)n(e)e(without)j(encrypting)e
+(and)g(inserting)h(them)g(\014rst.)g(Th)n(us,)f(if)h(a)523
+1046 y(no)r(de)22 b(op)r(erator)f(wishes)h(to)g(k)n(eep)g(con)n(ten)n
+(t)g(directly)g(accessible)f(on)h(the)h(host,)f(a)g(lo)r(cal)g(cop)n(y)
+523 1146 y(of)h(the)g(plain)n(text)g(m)n(ust)g(b)r(e)g(k)n(ept)f(in)h
+(addition)g(to)g(the)g(encrypted)f(con)n(ten)n(t)h(in)g(the)g(F)-7
+b(reenet)523 1245 y(database.)27 b(Also,)h(F)-7 b(reenet)29
+b(do)r(es)f(not)g(supp)r(ort)g(sw)n(arming.)f(One)h(reason)f(for)h
+(this)g(is)h(that)523 1345 y(F)-7 b(reenet's)30 b(CHK)h(enco)r(ding)f
+(can)g(only)g(v)n(erify)g(a)g(\014le)h(in)f(its)h(en)n(tiret)n(y)f(and)
+g(not)h(pin-p)r(oin)n(t)523 1445 y(corruptions)26 b(on)h(a)h(smaller)e
+(scale.)648 1544 y(One)33 b(w)n(a)n(y)f(to)i(obtain)f(the)i(CHK)e(k)n
+(ey)g(of)h(a)f(\014le)h(in)g(F)-7 b(reenet)34 b(is)f(to)h(searc)n(h)e
+(a)h(priv)-5 b(ate)523 1644 y(subspace.)27 b(A)h(subspace)f(con)n
+(tains)f(a)i(set)f(of)h(CHK)f(k)n(eys)g(that)h(ha)n(v)n(e)e(b)r(een)i
+(cryptographi-)523 1743 y(cally)e(signed)h(b)n(y)g(the)g(o)n(wner)f(of)
+h(the)g(subspace)g(and)f(placed)h(in)n(to)g(the)g(subspace)g(under)f(a)
+523 1843 y(certain)e(k)n(eyw)n(ord.)g(These)g(signed)h(references)f
+(are)f(called)i(subspace-signed)e(k)n(eys)h(\(SSK\).)523
+1943 y(Giv)n(en)i(the)g(subspace-pre\014x)e(and)h(the)i(k)n(eyw)n(ord,)
+c(users)i(can)h(obtain)f(the)h(CHK)g(k)n(ey)-7 b(.)25
+b(The)523 2042 y(form)d(of)g(the)g(k)n(eyw)n(ords)e(can)i(b)r(e)h
(freely)e(c)n(hosen,)h(allo)n(wing)e(for)i(con)n(v)n(en)n(tions)e(suc)n
-(h)i(as)f(dates)523 2921 y(in)j(the)h(k)n(eyw)n(ord)d(to)i(b)r(e)h
+(h)i(as)f(dates)523 2142 y(in)j(the)h(k)n(eyw)n(ord)d(to)i(b)r(e)h
(used)f(for)g(up)r(dates)g(\(in)h(F)-7 b(reenet's)24
-b(terminology)-7 b(,)23 b(these)h(are)f(called)523 3021
+b(terminology)-7 b(,)23 b(these)h(are)f(called)523 2242
y Fq(date)30 b(b)l(ase)l(d)h(r)l(e)l(dir)l(e)l(cts)p
-Fx(\).)648 3126 y(In)c(addition)h(to)f(CHK)g(and)g(SSK)h(k)n(eys,)e(F)
+Fx(\).)648 2341 y(In)c(addition)h(to)f(CHK)g(and)g(SSK)h(k)n(eys,)e(F)
-7 b(reenet)28 b(supp)r(orts)f(KSK)g(k)n(eys.)f(A)i(KSK)f(k)n(ey)523
-3225 y(is)j(essen)n(tially)f(a)g(CHK)h(k)n(ey)g(stored)f(in)h(plain)n
+2441 y(is)j(essen)n(tially)f(a)g(CHK)h(k)n(ey)g(stored)f(in)h(plain)n
(text)g(\(!\))h(under)e(a)h(k)n(eyw)n(ord.)e(The)i(proto)r(col)523
-3325 y(attempts)25 b(to)f(ensure)g(that)g(there)h(cannot)e(b)r(e)i(t)n
+2540 y(attempts)25 b(to)f(ensure)g(that)g(there)h(cannot)e(b)r(e)i(t)n
(w)n(o)f(di\013eren)n(t)g(CHK)h(k)n(eys)e(a)n(v)-5 b(ailable)23
-b(in)i(the)523 3425 y(net)n(w)n(ork)g(under)h(the)h(same)f(k)n(eyw)n
+b(in)i(the)523 2640 y(net)n(w)n(ork)g(under)h(the)h(same)f(k)n(eyw)n
(ord.)e(While)j(collisions)e(for)h(KSK)g(k)n(eys)f(are)g(supp)r(osedly)
-523 3524 y(not)36 b(allo)n(w)n(ed,)e(the)i(proto)r(col)e(cannot)h(prev)
+523 2740 y(not)36 b(allo)n(w)n(ed,)e(the)i(proto)r(col)e(cannot)h(prev)
n(en)n(t)g(them)h(from)f(o)r(ccurring.)g(If)h(an)f(attac)n(k)n(er)523
-3624 y(inserts)27 b(meaningless)f(data)h(under)g(a)g(common)g(k)n(eyw)n
+2839 y(inserts)27 b(meaningless)f(data)h(under)g(a)g(common)g(k)n(eyw)n
(ord,)e(F)-7 b(reenet)27 b(will)h(try)f(to)g(preserv)n(e)523
-3723 y(that)g(con)n(ten)n(t)g(b)r(ecause)f(it)h(is)g(frequen)n(tly)f
+2939 y(that)g(con)n(ten)n(t)g(b)r(ecause)f(it)h(is)g(frequen)n(tly)f
(requested.)h(Subsequen)n(tly)-7 b(,)26 b(that)h(k)n(eyw)n(ord)e(can)
-523 3823 y(no)h(longer)f(b)r(e)i(used)f(for)g(an)n(y)f(useful)i(data)f
+523 3039 y(no)h(longer)f(b)r(e)i(used)f(for)g(an)n(y)f(useful)i(data)f
(since)g(the)g(p)r(eers)g(attempt)h(to)f(enforce)g(the)h(no-)523
-3923 y(collisions)j(rule.)h(Note)g(that)g(the)h(no-collision)d(rule)i
-(cannot)f(b)r(e)i(enforced)e(for)h(malicious)523 4022
+3138 y(collisions)j(rule.)h(Note)g(that)g(the)h(no-collision)d(rule)i
+(cannot)f(b)r(e)i(enforced)e(for)h(malicious)523 3238
y(p)r(eers.)h(F)-7 b(or)32 b(these)h(reasons,)e(the)i(F)-7
b(reenet)33 b(dev)n(elop)r(ers)e(consider)h(the)h(use)f(of)h(KSK)f(k)n
-(eys)523 4122 y(insecure)27 b(and)g(recommend)g(against)g(using)g
-(them.)648 4227 y(As)i(a)f(result,)h(F)-7 b(reenet)29
+(eys)523 3337 y(insecure)27 b(and)g(recommend)g(against)g(using)g
+(them.)648 3437 y(As)i(a)f(result,)h(F)-7 b(reenet)29
b(e\013ectiv)n(ely)g(do)r(es)g(not)g(supp)r(ort)f(an)n(y)h(t)n(yp)r(e)g
-(of)g(k)n(eyw)n(ord-based)523 4327 y(searc)n(h.)22 b(The)i(CHK)g(k)n
+(of)g(k)n(eyw)n(ord-based)523 3537 y(searc)n(h.)22 b(The)i(CHK)g(k)n
(eys)e(m)n(ust)i(b)r(e)g(found)g(b)n(y)g(using)f(k)n(eyserv)n(ers)e(or)
-i(ad-ho)r(c)g(applications)523 4426 y(built)h(up)r(on)g(the)f(basic)g
+i(ad-ho)r(c)g(applications)523 3636 y(built)h(up)r(on)g(the)f(basic)g
(solution)g(b)n(y)g(using)g(incremen)n(tal)g(n)n(um)n(b)r(ers)g(as)f
-(parts)h(of)g(k)n(eyw)n(ords)523 4526 y(in)f(signed)f(namespaces.)f
+(parts)h(of)g(k)n(eyw)n(ords)523 3736 y(in)f(signed)f(namespaces.)f
(The)i(disadv)-5 b(an)n(tage)20 b(of)i(k)n(eyserv)n(ers)c(is)k(that)g
-(they)g(m)n(ust)f(b)r(e)h(main-)523 4625 y(tained)31
+(they)g(m)n(ust)f(b)r(e)h(main-)523 3836 y(tained)31
b(if)g(the)g(indexed)g(k)n(eys)f(are)g(to)h(b)r(e)g(k)n(ept)f
(up-to-date.)h(F)-7 b(reenet)30 b(do)r(es)h(not)g(seem)f(to)523
-4725 y(use)g(an)n(y)f(encryption)h(for)f(the)i(data)f(stored)f(in)h
+3935 y(use)g(an)n(y)f(encryption)h(for)f(the)i(data)f(stored)f(in)h
(KSK)g(or)f(SKS)h(k)n(eys)f(and)h(therefore)f(fails)523
-4825 y(to)36 b(prev)n(en)n(t)f(in)n(termediaries)g(from)g(learning)g
+4035 y(to)36 b(prev)n(en)n(t)f(in)n(termediaries)g(from)g(learning)g
(the)h(CHK)g(k)n(eys,)f(making)h(censorship)e(b)n(y)523
-4924 y(in)n(termediaries)26 b(easier.)p Black Black eop
-end
+4134 y(in)n(termediaries)26 b(easier.)523 4272 y
+SDict begin H.S end
+ 523
+4272 a 523 4272 a
+SDict begin 12 H.A end
+ 523 4272 a 523 4272 a
+SDict begin [ /View [/XYZ H.V] /Dest (subsection.1.2.2) cvn H.B /DEST
+pdfmark end
+ 523 4272 a 100
+x Fo(2.2)95 b(T)-8 b(angler)523 4526 y Fx(The)31 b(T)-7
+b(angler)30 b(net)n(w)n(ork)f([)p 0 1 0 TeXcolorrgb 1345
+4526 a
+SDict begin H.S end
+ 1345 4526 a 0 1 0 TeXcolorrgb Fx(27)p 0 1 0 TeXcolorrgb
+1428 4472 a
+SDict begin H.R end
+ 1428 4472 a 1428 4526 a
+SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
+(cite.waldman2001tangler) cvn H.B /ANN pdfmark end
+ 1428 4526 a Black
+Fx(])i(is)g(a)f(system)h(where)f(new)h(con)n(ten)n(t)g(is)g(en)n
+(tangled)f(with)h(old)523 4625 y(con)n(ten)n(t.)26 b(This)h(en)n
+(tanglemen)n(t)f(in)n(tro)r(duces)g(a)h(dep)r(endency)g(whic)n(h)f(mak)
+n(es)g(it)h(imp)r(ossible)523 4725 y(to)19 b(retriev)n(e)e(a)h(piece)h
+(of)g(con)n(ten)n(t)f(if)i(the)f(other)f(con)n(ten)n(t)g(that)h(it)g(w)
+n(as)f(en)n(tangled)g(with)i(is)e(lost.)523 4825 y(While)i(this)h(mak)n
+(es)d(it)j(imp)r(ossible)e(to)h(censor)f(sp)r(eci\014c)h(con)n(ten)n(t)
+f(without)h(losing)f(unrelated)523 4924 y(con)n(ten)n(t)j(\(since)h
+(the)g(en)n(tanglemen)n(t)e(pairs)h(are)g(c)n(hosen)f(randomly\),)h
+(this)h(pro)r(cess)e Fq(doubles)p Black Black eop end
%%Page: 5 5
TeXDict begin 5 4 bop 0 0 a
SDict begin /product where{pop product(Distiller)search{pop pop pop
@@ -5886,204 +5899,221 @@
end
523 232 a Black 1036 w Fu(An)25
b(Enco)r(ding)h(for)h(Censorship-Resistan)n(t)f(Sharing)238
-b(5)p Black 523 365 a
-SDict begin H.S end
- 523 365 a 523 365 a
-SDict begin 12 H.A end
- 523 365 a 523
-365 a
-SDict begin [ /View [/XYZ H.V] /Dest (subsection.1.2.2) cvn H.B /DEST
-pdfmark end
- 523 365 a 83 x Fo(2.2)95 b(T)-8 b(angler)523 584
-y Fx(The)31 b(T)-7 b(angler)30 b(net)n(w)n(ork)f([)p
-0 1 0 TeXcolorrgb 1345 584 a
-SDict begin H.S end
- 1345 584 a 0 1 0 TeXcolorrgb
-Fx(29)p 0 1 0 TeXcolorrgb 1428 530 a
-SDict begin H.R end
- 1428 530 a 1428
-584 a
-SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.waldman2001tangler) cvn H.B /ANN pdfmark end
- 1428 584 a Black Fx(])i(is)g(a)f(system)h(where)f(new)h(con)n
-(ten)n(t)g(is)g(en)n(tangled)f(with)h(old)523 683 y(con)n(ten)n(t.)26
-b(This)h(en)n(tanglemen)n(t)f(in)n(tro)r(duces)g(a)h(dep)r(endency)g
-(whic)n(h)f(mak)n(es)g(it)h(imp)r(ossible)523 783 y(to)19
-b(retriev)n(e)e(a)h(piece)h(of)g(con)n(ten)n(t)f(if)i(the)f(other)f
-(con)n(ten)n(t)g(that)h(it)g(w)n(as)f(en)n(tangled)g(with)i(is)e(lost.)
-523 883 y(While)i(this)h(mak)n(es)d(it)j(imp)r(ossible)e(to)h(censor)f
-(sp)r(eci\014c)h(con)n(ten)n(t)f(without)h(losing)f(unrelated)523
-982 y(con)n(ten)n(t)j(\(since)h(the)g(en)n(tanglemen)n(t)e(pairs)h(are)
-g(c)n(hosen)f(randomly\),)h(this)h(pro)r(cess)e Fq(doubles)523
-1082 y Fx(the)f(amoun)n(t)f(of)g(data)g(that)h(m)n(ust)f(b)r(e)h
-(transp)r(orted)f(b)n(y)g(the)h(net)n(w)n(ork.)e(This)h(sc)n(heme)g
-(fails)g(to)523 1181 y(address)29 b(the)i(fact)f(that)h(an)f(adv)n
-(ersary)d(ma)n(y)j(not)g(care)g(ab)r(out)g(losing)f(other)h(data)g
-(when)523 1281 y(attempting)35 b(to)g(censor)f(con)n(ten)n(t.)h(Also,)f
+b(5)p Black 523 448 a Fx(the)20 b(amoun)n(t)f(of)g(data)g(that)h(m)n
+(ust)f(b)r(e)h(transp)r(orted)f(b)n(y)g(the)h(net)n(w)n(ork.)e(This)h
+(sc)n(heme)g(fails)g(to)523 548 y(address)29 b(the)i(fact)f(that)h(an)f
+(adv)n(ersary)d(ma)n(y)j(not)g(care)g(ab)r(out)g(losing)f(other)h(data)
+g(when)523 648 y(attempting)35 b(to)g(censor)f(con)n(ten)n(t.)h(Also,)f
(nothing)h(prev)n(en)n(ts)f(the)h(adv)n(ersary)e(from)h(\014rst)523
-1381 y(making)e(a)g(cop)n(y)f(of)h(imp)r(ortan)n(t)g(do)r(cumen)n(ts)h
+747 y(making)e(a)g(cop)n(y)f(of)h(imp)r(ortan)n(t)g(do)r(cumen)n(ts)h
(and)f(re-inserting)f(them)h(in)n(to)h(the)f(system)523
-1480 y(after)27 b(the)h(censorship)f(op)r(eration.)648
-1580 y(T)-7 b(angler)33 b(has)h(some)h(similarities)f(with)h(ECRS.)g
-(In)g(particular,)e(it)j(uses)e(hash)h(trees)523 1680
-y(for)40 b(in)n(tegrit)n(y)f(c)n(hec)n(ks)g(on)h(\014xed-size)g(blo)r
-(c)n(ks)g(of)g(data.)g(Ho)n(w)n(ev)n(er,)e(unlik)n(e)i(ECRS,)h(the)523
-1779 y(T)-7 b(angler)33 b(enco)r(ding)h(uses)g(Shamir's)g(secret)g
-(sharing)f([)p 0 1 0 TeXcolorrgb 2283 1779 a
+847 y(after)27 b(the)h(censorship)f(op)r(eration.)648
+950 y(T)-7 b(angler)33 b(has)h(some)h(similarities)f(with)h(ECRS.)g(In)
+g(particular,)e(it)j(uses)e(hash)h(trees)523 1050 y(for)40
+b(in)n(tegrit)n(y)f(c)n(hec)n(ks)g(on)h(\014xed-size)g(blo)r(c)n(ks)g
+(of)g(data.)g(Ho)n(w)n(ev)n(er,)e(unlik)n(e)i(ECRS,)h(the)523
+1150 y(T)-7 b(angler)33 b(enco)r(ding)h(uses)g(Shamir's)g(secret)g
+(sharing)f([)p 0 1 0 TeXcolorrgb 2283 1150 a
SDict begin H.S end
- 2283 1779
-a 0 1 0 TeXcolorrgb Fx(25)p 0 1 0 TeXcolorrgb 2366 1726
+ 2283 1150
+a 0 1 0 TeXcolorrgb Fx(24)p 0 1 0 TeXcolorrgb 2366 1096
a
SDict begin H.R end
- 2366 1726 a 2366 1779 a
+ 2366 1096 a 2366 1150 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.shamir) cvn H.B /ANN pdfmark end
- 2366 1779 a Black Fx(])h(to)g(en)n(tangle)g
-(the)h(blo)r(c)n(k)e(with)523 1879 y(other,)d(pre-existing)g(blo)r(c)n
+ 2366 1150 a Black Fx(])h(to)g(en)n(tangle)g
+(the)h(blo)r(c)n(k)e(with)523 1249 y(other,)d(pre-existing)g(blo)r(c)n
(ks,)g(preferably)g(from)h(other)f(do)r(cumen)n(ts.)h(Both)g(T)-7
-b(angler)29 b(and)523 1979 y(ECRS)21 b(\(as)g(w)n(ell)g(as)g(F)-7
+b(angler)29 b(and)523 1349 y(ECRS)21 b(\(as)g(w)n(ell)g(as)g(F)-7
b(reenet\))21 b(use)g(cryptographically)e(signed)i(data,)f(whic)n(h)i
-(T)-7 b(angler)20 b(calls)523 2078 y(collections.)27
+(T)-7 b(angler)20 b(calls)523 1449 y(collections.)27
b(ECRS)h(has)f(analogous)e(constructions)i(to)h(T)-7
-b(angler's)26 b(collections,)h(referred)523 2178 y(to)39
+b(angler's)26 b(collections,)h(referred)523 1548 y(to)39
b(in)h(our)f(tec)n(hnical)g(rep)r(ort)g([)p 0 1 0 TeXcolorrgb
-1552 2178 a
+1552 1548 a
SDict begin H.S end
- 1552 2178 a 0 1 0 TeXcolorrgb Fx(2)p 0 1 0
-TeXcolorrgb 1593 2124 a
+ 1552 1548 a 0 1 0 TeXcolorrgb Fx(2)p 0 1 0
+TeXcolorrgb 1593 1495 a
SDict begin H.R end
- 1593 2124 a 1593 2178 a
+ 1593 1495 a 1593 1548 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.ecrstechreport) cvn H.B /ANN pdfmark end
1593
-2178 a Black Fx(])h(as)f Fq(dir)l(e)l(ctories)i Fx(and)e
+1548 a Black Fx(])h(as)f Fq(dir)l(e)l(ctories)i Fx(and)e
Fq(namesp)l(ac)l(es)p Fx(;)i(ho)n(w)n(ev)n(er,)c(unlik)n(e)523
-2277 y(ECRS,)28 b(a)h(T)-7 b(angler)27 b(collection)h(has)g(a)g(v)n
+1648 y(ECRS,)28 b(a)h(T)-7 b(angler)27 b(collection)h(has)g(a)g(v)n
(ersioned)f(ro)r(ot)h(whic)n(h)g(explicitly)h(lists)g(all)f(of)h(the)
-523 2377 y(con)n(ten)n(ts)34 b(in)g(the)h(collection,)e(resulting)h(in)
+523 1747 y(con)n(ten)n(ts)34 b(in)g(the)h(collection,)e(resulting)h(in)
g(one)g(of)g(T)-7 b(angler's)33 b(global)g(sync)n(hronization)523
-2477 y(problems.)h(do)r(cumen)n(t)i(in)f(a)g(F)-7 b(reenet)35
+1847 y(problems.)h(do)r(cumen)n(t)i(in)f(a)g(F)-7 b(reenet)35
b(subspace)f(or)h(ECRS)g(namespace)f(only)g(requires)523
-2576 y(that)28 b(it)g(b)r(e)g(adequately)f(signed.)523
-2711 y
+1947 y(that)28 b(it)g(b)r(e)g(adequately)f(signed.)523
+2128 y
SDict begin H.S end
- 523 2711 a 523 2711 a
+ 523 2128 a 523 2128 a
SDict begin 12 H.A end
- 523 2711 a 523 2711 a
+ 523 2128 a 523 2128 a
SDict begin [ /View [/XYZ H.V] /Dest (subsection.1.2.3) cvn H.B /DEST
pdfmark end
523
-2711 a 84 x Fo(2.3)95 b(Gn)m(utella)31 b(and)h(F)-8 b(astT)g(rac)m(k)
-523 2930 y Fx(The)31 b(F)-7 b(astT)g(rac)n(k)28 b(net)n(w)n(ork)p
-1 0 0 TeXcolorrgb 1376 2930 a
+2128 a 87 x Fo(2.3)95 b(Gn)m(utella)31 b(and)h(F)-8 b(astT)g(rac)m(k)
+523 2401 y Fx(The)31 b(F)-7 b(astT)g(rac)n(k)28 b(net)n(w)n(ork)p
+1 0 0 TeXcolorrgb 1376 2401 a
SDict begin H.S end
- 1376 2930 a -30 x Fw(1)1412
-2930 y
+ 1376 2401 a -30 x Fw(1)1412
+2401 y
SDict begin 12 H.L end
- 1412 2930 a 1412 2930 a
+ 1412 2401 a 1412 2401 a
SDict begin [ /Subtype /Link /Dest (Hfootnote.1) cvn /H /I /Border
[0 0 0] /Color [1 0 0] H.B /ANN pdfmark end
- 1412 2930 a Black 31 w
+ 1412 2401 a Black 31 w
Fx(and)i(mo)r(dern)g(v)-5 b(arian)n(ts)29 b(of)i(the)g(Gn)n(utella)f
-(proto)r(col)f(use)i(the)523 3030 y(SHA-1)f(hash)f(co)r(de)g(of)h(the)g
+(proto)r(col)f(use)i(the)523 2501 y(SHA-1)f(hash)f(co)r(de)g(of)h(the)g
(shared)f(\014les)g(to)h(uniquely)f(iden)n(tify)i(\014les.)e(The)h
-(SHA-1)f(hash)523 3129 y(co)r(des)d(are)f(used)i(to)f(iden)n(tify)h
+(SHA-1)f(hash)523 2600 y(co)r(des)d(are)f(used)i(to)f(iden)n(tify)h
(iden)n(tical)f(\014les)g(stored)g(on)g(di\013eren)n(t)g(p)r(eers.)g
-(The)g(p)r(eers)g(can)523 3229 y(then)d(use)g(this)g(information)f(to)h
+(The)g(p)r(eers)g(can)523 2700 y(then)d(use)g(this)g(information)f(to)h
(do)n(wnload)f(the)h(\014le)g(from)f(m)n(ultiple)i(sources)d(\(sw)n
-(arming\).)523 3329 y(The)41 b(problem)f(with)h(this)f(approac)n(h)f
+(arming\).)523 2799 y(The)41 b(problem)f(with)h(this)f(approac)n(h)f
(is)h(that)h(the)g(SHA-1)f(hash)g(co)r(des)g(can)h(only)f(b)r(e)523
-3428 y(v)n(eri\014ed)23 b(once)h(the)h(en)n(tire)f(\014le)g(has)g(b)r
+2899 y(v)n(eri\014ed)23 b(once)h(the)h(en)n(tire)f(\014le)g(has)g(b)r
(een)g(retriev)n(ed.)f(T)-7 b(o)24 b(ruin)g(a)g(do)n(wnload,)f(it)i
-(su\016ces)f(for)523 3528 y(a)29 b(malicious)f(p)r(eer)i(to)f(con)n
+(su\016ces)f(for)523 2999 y(a)29 b(malicious)f(p)r(eer)i(to)f(con)n
(tribute)g(just)h(one)e(single)h(in)n(v)-5 b(alid)29
-b(blo)r(c)n(k.)g(The)h(presence)e(of)h(an)523 3628 y(in)n(v)-5
+b(blo)r(c)n(k.)g(The)h(presence)e(of)h(an)523 3098 y(in)n(v)-5
b(alid)22 b(blo)r(c)n(k)f(could)g(only)h(b)r(e)g(detected)g(after)f
(the)h(en)n(tire)g(\014le)f(w)n(as)g(retriev)n(ed.)g(W)-7
-b(orse,)21 b(the)523 3727 y(simplistic)28 b(SHA-1)g(approac)n(h)f(do)r
+b(orse,)21 b(the)523 3198 y(simplistic)28 b(SHA-1)g(approac)n(h)f(do)r
(es)g(not)i(giv)n(e)e(p)r(eers)g(an)n(y)h(w)n(a)n(y)f(to)h(iden)n(tify)
-g(the)h(lo)r(cation)523 3827 y(of)f(the)g(in)n(v)-5 b(alid)27
-b(blo)r(c)n(k)g(or)g(the)h(malicious)f(p)r(eer.)648 3926
+g(the)h(lo)r(cation)523 3298 y(of)f(the)g(in)n(v)-5 b(alid)27
+b(blo)r(c)n(k)g(or)g(the)h(malicious)f(p)r(eer.)648 3401
y(Neither)19 b(F)-7 b(astT)g(rac)n(k)18 b(nor)h(Gn)n(utella)g(use)h
(\014le)f(encryption.)g(Consequen)n(tly)-7 b(,)19 b(they)h(do)f(not)523
-4026 y(pro)n(vide)h(an)n(y)h(protection)f(from)h(censorship)f(b)r(ey)n
+3501 y(pro)n(vide)h(an)n(y)h(protection)f(from)h(censorship)f(b)r(ey)n
(ond)h(decen)n(tralized)f(routing)h(of)g(requests.)523
-4161 y
+3682 y
SDict begin H.S end
- 523 4161 a 523 4161 a
+ 523 3682 a 523 3682 a
SDict begin 12 H.A end
- 523 4161 a 523 4161 a
+ 523 3682 a 523 3682 a
SDict begin [ /View [/XYZ H.V] /Dest (subsection.1.2.4) cvn H.B /DEST
pdfmark end
523
-4161 a 83 x Fo(2.4)95 b(Distributed)31 b(File)f(Systems)523
-4380 y Fx(V)-7 b(arious)21 b(distributed)i(\014le)g(systems)f(based)g
+3682 a 87 x Fo(2.4)95 b(Distributed)31 b(File)f(Systems)523
+3955 y Fx(V)-7 b(arious)21 b(distributed)i(\014le)g(systems)f(based)g
(on)g(a)g(p)r(eer-to-p)r(eer)f(infrastructure)g(ha)n(v)n(e)h(b)r(een)
-523 4480 y(built)32 b(in)g(recen)n(t)e(y)n(ears)g([)p
-0 1 0 TeXcolorrgb 1316 4480 a
+523 4055 y(built)32 b(in)g(recen)n(t)e(y)n(ears)g([)p
+0 1 0 TeXcolorrgb 1316 4055 a
SDict begin H.S end
- 1316 4480 a 0 1 0 TeXcolorrgb
-Fx(7)p 0 1 0 TeXcolorrgb 1357 4426 a
+ 1316 4055 a 0 1 0 TeXcolorrgb
+Fx(7)p 0 1 0 TeXcolorrgb 1357 4001 a
SDict begin H.R end
- 1357 4426 a 1357
-4480 a
+ 1357 4001 a 1357
+4055 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.cfs:sosp01) cvn H.B /ANN pdfmark end
- 1357 4480 a Black Fx(,)p 0 1 0 TeXcolorrgb 1380
-4480 a
+ 1357 4055 a Black Fx(,)p 0 1 0 TeXcolorrgb 1380
+4055 a
SDict begin H.S end
- 1380 4480 a 0 1 0 TeXcolorrgb Fx(18)p 0 1 0 TeXcolorrgb
-1464 4426 a
+ 1380 4055 a 0 1 0 TeXcolorrgb Fx(17)p 0 1 0 TeXcolorrgb
+1464 4001 a
SDict begin H.R end
- 1464 4426 a 1464 4480 a
+ 1464 4001 a 1464 4055 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.mazieres02building) cvn H.B /ANN pdfmark end
- 1464 4480 a Black
-Fx(,)p 0 1 0 TeXcolorrgb 1487 4480 a
+ 1464 4055 a Black
+Fx(,)p 0 1 0 TeXcolorrgb 1487 4055 a
SDict begin H.S end
- 1487 4480 a 0 1 0
-TeXcolorrgb Fx(21)p 0 1 0 TeXcolorrgb 1570 4426 a
+ 1487 4055 a 0 1 0
+TeXcolorrgb Fx(20)p 0 1 0 TeXcolorrgb 1570 4001 a
SDict begin H.R end
1570
-4426 a 1570 4480 a
+4001 a 1570 4055 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.muthitacharoen02ivy) cvn H.B /ANN pdfmark end
- 1570 4480 a Black Fx(,)p 0 1 0 TeXcolorrgb
-1593 4480 a
+ 1570 4055 a Black Fx(,)p 0 1 0 TeXcolorrgb
+1593 4055 a
SDict begin H.S end
- 1593 4480 a 0 1 0 TeXcolorrgb Fx(24)p 0 1 0
-TeXcolorrgb 1676 4426 a
+ 1593 4055 a 0 1 0 TeXcolorrgb Fx(23)p 0 1 0
+TeXcolorrgb 1676 4001 a
SDict begin H.R end
- 1676 4426 a 1676 4480 a
+ 1676 4001 a 1676 4055 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.rowstron01storage) cvn H.B /ANN pdfmark end
1676
-4480 a Black Fx(].)h(These)g(systems)g(t)n(ypically)g(do)g(not)g(fo)r
-(cus)g(on)g(cen-)p Black 523 4538 473 4 v 546 4592 a
-Fv(1)p 0 TeXcolorgray 606 4532 a
+4055 a Black Fx(].)h(These)g(systems)g(t)n(ypically)g(do)g(not)g(fo)r
+(cus)g(on)g(cen-)523 4154 y(sorship)i(resistance)f(and)i(consequen)n
+(tly)f(do)g(not)h(encrypt)f(the)h(con)n(ten)n(ts.)g(Mo)r(dern)f(sys-)
+523 4254 y(tems)k(lik)n(e)e([)p 0 1 0 TeXcolorrgb 914
+4254 a
SDict begin H.S end
- 606 4532 a 0 TeXcolorgray
-0 TeXcolorgray 606 4532 a
+ 914 4254 a 0 1 0 TeXcolorrgb Fx(7)p 0 1 0 TeXcolorrgb
+956 4200 a
SDict begin H.R end
- 606 4532 a 606 4532 a
+ 956 4200 a 956 4254 a
+SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
+(cite.cfs:sosp01) cvn H.B /ANN pdfmark end
+ 956 4254 a Black Fx(,)p
+0 1 0 TeXcolorrgb 979 4254 a
+SDict begin H.S end
+ 979 4254 a 0 1 0 TeXcolorrgb
+Fx(23)p 0 1 0 TeXcolorrgb 1062 4200 a
+SDict begin H.R end
+ 1062 4200 a 1062
+4254 a
+SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
+(cite.rowstron01storage) cvn H.B /ANN pdfmark end
+ 1062 4254 a Black Fx(])h(route)g(con)n(ten)n(t)g(using)g
+(distributed)h(hash)f(tables)g([)p 0 1 0 TeXcolorrgb
+2786 4254 a
+SDict begin H.S end
+ 2786 4254 a 0 1 0 TeXcolorrgb Fx(15)p 0 1 0
+TeXcolorrgb 2869 4200 a
+SDict begin H.R end
+ 2869 4200 a 2869 4254 a
+SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
+(cite.maymounkov02kademlia) cvn H.B /ANN pdfmark end
+ 2869
+4254 a Black Fx(,)p 0 1 0 TeXcolorrgb 2892 4254 a
+SDict begin H.S end
+ 2892
+4254 a 0 1 0 TeXcolorrgb Fx(25)p 0 1 0 TeXcolorrgb 2975
+4200 a
+SDict begin H.R end
+ 2975 4200 a 2975 4254 a
+SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
+(cite.stoica01chord) cvn H.B /ANN pdfmark end
+ 2975 4254 a Black Fx(])g(to)g(ac)n(hiev)
+n(e)523 4354 y Fp(O)r Fx(\(log)15 b Fp(n)p Fx(\))32 b(scalabilit)n(y)-7
+b(.)30 b(W)-7 b(ritable)32 b(distributed)g(\014le)f(systems)g(t)n
+(ypically)g(require)g(users)f(to)523 4453 y(authen)n(ticate)25
+b(themselv)n(es)g(b)r(efore)f(b)r(eing)i(gran)n(ted)e(access)f(to)i
+(the)h(system)f(b)n(y)g(one)g(of)g(the)p Black 523 4538
+473 4 v 546 4592 a Fv(1)p 0 TeXcolorgray 606 4532 a
+SDict begin H.S end
+ 606
+4532 a 0 TeXcolorgray 0 TeXcolorgray 606 4532 a
+SDict begin H.R end
+ 606 4532
+a 606 4532 a
SDict begin [ /View [/XYZ H.V] /Dest (Hfootnote.1) cvn H.B /DEST pdfmark
end
- 606 4532
-a Black 92 x Fu(Proto)r(col)d(description)e(from)g(the)g(giFT-F)-6
-b(astT)g(rac)n(k)26 b(pro)t(ject)h(is)f(a)n(v)l(ailable)h(at)p
-0 1 0 0 TeXcolorcmyk 689 4802 a
+ 606 4532 a Black 92 x Fu(Proto)r(col)j(description)e(from)
+g(the)g(giFT-F)-6 b(astT)g(rac)n(k)26 b(pro)t(ject)h(is)f(a)n(v)l
+(ailable)h(at)p 0 1 0 0 TeXcolorcmyk 689 4802 a
SDict begin H.S end
- 689 4802 a 0 1 0 0 TeXcolorcmyk
--16 x Ft(http://gnunet.org/papers/FAST)q(-)t(TR)q(ACK-)5
-b(PROTO)q(COL)p 0 1 0 0 TeXcolorcmyk 2423 4734 a
+ 689 4802
+a 0 1 0 0 TeXcolorcmyk -16 x Ft(http://gnunet.org/papers/FAST)q(-)t(TR)
+q(ACK-)5 b(PROTO)q(COL)p 0 1 0 0 TeXcolorcmyk 2423 4734
+a
SDict begin H.R end
- 2423
-4734 a 2423 4786 a
+ 2423 4734 a 2423 4786 a
SDict begin [ /H /I /Border [0 0 0] /Color [0 1 1] /Action << /Subtype
/URI /URI (http://gnunet.org/papers/FAST-TRACK-PROTOCOL) >> /Subtype
/Link H.B /ANN pdfmark end
- 2423 4786 a Black Fu(.)p Black Black
-Black eop end
+ 2423 4786 a Black Fu(.)p Black
+Black Black eop end
%%Page: 6 6
TeXDict begin 6 5 bop 0 0 a
SDict begin /product where{pop product(Distiller)search{pop pop pop
@@ -6101,184 +6131,165 @@
end
523 232 a Black Fu(6)237 b(C.)27
b(Grotho\013,)f(K.)g(Grotho\013,)g(T.)h(Horozo)n(v,)f(J.T.)h(Lindgren)p
-Black 523 448 a Fx(sorship)33 b(resistance)f(and)i(consequen)n(tly)f
-(do)g(not)h(encrypt)f(the)h(con)n(ten)n(ts.)g(Mo)r(dern)f(sys-)523
-548 y(tems)k(lik)n(e)e([)p 0 1 0 TeXcolorrgb 914 548
-a
+Black 523 448 a Fx(serv)n(ers)19 b([)p 0 1 0 TeXcolorrgb
+813 448 a
SDict begin H.S end
- 914 548 a 0 1 0 TeXcolorrgb Fx(7)p 0 1 0 TeXcolorrgb
-956 494 a
+ 813 448 a 0 1 0 TeXcolorrgb Fx(16)p 0 1 0 TeXcolorrgb
+896 395 a
SDict begin H.R end
- 956 494 a 956 548 a
+ 896 395 a 896 448 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.cfs:sosp01) cvn H.B /ANN pdfmark end
- 956 548 a Black Fx(,)p
-0 1 0 TeXcolorrgb 979 548 a
+(cite.mazires00sfs) cvn H.B /ANN pdfmark end
+ 896 448 a Black Fx(].)i(ECRS)f(fo)r
+(cuses)g(on)h(encrypting)f(shared)f(data)i(while)f(allo)n(wing)g(p)r
+(eers)g(to)g(v)n(er-)523 548 y(ify)30 b(the)g(in)n(tegrit)n(y)f(of)g
+(the)h(encrypted)g(data)f(that)h(they)f(are)g(routing.)g(In)h(SUNDR)h
+([)p 0 1 0 TeXcolorrgb 3228 548 a
SDict begin H.S end
- 979 548 a 0 1 0 TeXcolorrgb
-Fx(24)p 0 1 0 TeXcolorrgb 1062 494 a
+ 3228 548 a 0 1 0 TeXcolorrgb
+Fx(17)p 0 1 0 TeXcolorrgb 3311 494 a
SDict begin H.R end
- 1062 494 a 1062
+ 3311 494 a 3311
548 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.rowstron01storage) cvn H.B /ANN pdfmark end
- 1062 548 a Black Fx(])h(route)g(con)n(ten)n(t)g(using)g
-(distributed)h(hash)f(tables)g([)p 0 1 0 TeXcolorrgb
-2786 548 a
-SDict begin H.S end
- 2786 548 a 0 1 0 TeXcolorrgb Fx(16)p 0 1 0
-TeXcolorrgb 2869 494 a
-SDict begin H.R end
- 2869 494 a 2869 548 a
-SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.maymounkov02kademlia) cvn H.B /ANN pdfmark end
- 2869 548
-a Black Fx(,)p 0 1 0 TeXcolorrgb 2892 548 a
-SDict begin H.S end
- 2892 548
-a 0 1 0 TeXcolorrgb Fx(26)p 0 1 0 TeXcolorrgb 2975 494
-a
-SDict begin H.R end
- 2975 494 a 2975 548 a
-SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.stoica01chord) cvn H.B /ANN pdfmark end
- 2975 548 a Black Fx(])g(to)g(ac)n(hiev)n(e)523
-648 y Fp(O)r Fx(\(log)15 b Fp(n)p Fx(\))32 b(scalabilit)n(y)-7
-b(.)30 b(W)-7 b(ritable)32 b(distributed)g(\014le)f(systems)g(t)n
-(ypically)g(require)g(users)f(to)523 747 y(authen)n(ticate)25
-b(themselv)n(es)g(b)r(efore)f(b)r(eing)i(gran)n(ted)e(access)f(to)i
-(the)h(system)f(b)n(y)g(one)g(of)g(the)523 847 y(serv)n(ers)19
-b([)p 0 1 0 TeXcolorrgb 813 847 a
-SDict begin H.S end
- 813 847 a 0 1 0 TeXcolorrgb
-Fx(17)p 0 1 0 TeXcolorrgb 896 793 a
-SDict begin H.R end
- 896 793 a 896 847
-a
-SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.mazires00sfs) cvn H.B /ANN pdfmark end
- 896 847 a Black Fx(].)i(ECRS)f(fo)r(cuses)g(on)h(encrypting)f(shared)
-f(data)i(while)f(allo)n(wing)g(p)r(eers)g(to)g(v)n(er-)523
-946 y(ify)30 b(the)g(in)n(tegrit)n(y)f(of)g(the)h(encrypted)g(data)f
-(that)h(they)f(are)g(routing.)g(In)h(SUNDR)h([)p 0 1 0
-TeXcolorrgb 3228 946 a
-SDict begin H.S end
- 3228 946 a 0 1 0 TeXcolorrgb Fx(18)p
-0 1 0 TeXcolorrgb 3311 893 a
-SDict begin H.R end
- 3311 893 a 3311 946 a
-SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.mazieres02building) cvn H.B /ANN pdfmark end
- 3311
-946 a Black Fx(])e(a)523 1046 y(similar)21 b(problem)h(is)g(addressed;)
-f(here)g(users)g(can)h(detect)h(tamp)r(ering)e(b)n(y)h(the)g(\(un)n
-(trusted\))523 1146 y(serv)n(er)g(that)i(is)g(storing)f(the)h(data)g
-(in)g(a)g(setting)f(where)h(m)n(ultiple)g(users)f(are)g(up)r(dating)i
-(the)523 1245 y(same)h(data.)g(SUNDR)h(ac)n(hiev)n(es)e(what)h(is)g
-(called)g Fq(fork)k(c)l(onsistency)p Fx(,)d(a)e(guaran)n(tee)g(that)h
-(if)523 1345 y(the)h(serv)n(er)e(passes)h(a)h(v)n(ersion)e(that)i(lac)n
-(ks)f(the)h(c)n(hanges)f(of)h(one)f(clien)n(t)h(to)g(another)f(clien)n
-(t)523 1445 y(at)31 b(one)g(p)r(oin)n(t)g(in)h(time,)f(it)h(can)f(nev)n
-(er)f(again)g(mak)n(e)g(the)i(c)n(hanges)d(of)i(either)g(clien)n(t)h
-(visi-)523 1544 y(ble)e(to)g(the)h(others.)e(This)h(is)g(a)g(w)n(eak)n
-(er)e(guaran)n(tee)h(than)h(the)h(optimal)f(situation)g(where)523
-1644 y(an)n(y)e(misb)r(eha)n(vior)f(is)i(detected;)g(ho)n(w)n(ev)n(er,)
+ 3311 548 a Black Fx(])e(a)523 648 y(similar)21
+b(problem)h(is)g(addressed;)f(here)g(users)g(can)h(detect)h(tamp)r
+(ering)e(b)n(y)h(the)g(\(un)n(trusted\))523 747 y(serv)n(er)g(that)i
+(is)g(storing)f(the)h(data)g(in)g(a)g(setting)f(where)h(m)n(ultiple)g
+(users)f(are)g(up)r(dating)i(the)523 847 y(same)h(data.)g(SUNDR)h(ac)n
+(hiev)n(es)e(what)h(is)g(called)g Fq(fork)k(c)l(onsistency)p
+Fx(,)d(a)e(guaran)n(tee)g(that)h(if)523 946 y(the)h(serv)n(er)e(passes)
+h(a)h(v)n(ersion)e(that)i(lac)n(ks)f(the)h(c)n(hanges)f(of)h(one)f
+(clien)n(t)h(to)g(another)f(clien)n(t)523 1046 y(at)31
+b(one)g(p)r(oin)n(t)g(in)h(time,)f(it)h(can)f(nev)n(er)f(again)g(mak)n
+(e)g(the)i(c)n(hanges)d(of)i(either)g(clien)n(t)h(visi-)523
+1146 y(ble)e(to)g(the)h(others.)e(This)h(is)g(a)g(w)n(eak)n(er)e
+(guaran)n(tee)h(than)h(the)h(optimal)f(situation)g(where)523
+1245 y(an)n(y)e(misb)r(eha)n(vior)f(is)i(detected;)g(ho)n(w)n(ev)n(er,)
d(it)j(is)g(the)g(strongest)e(p)r(ossible)h(prop)r(ert)n(y)g(that)523
-1743 y(can)e(b)r(e)h(ac)n(hiev)n(ed)e(giv)n(en)g(the)i(securit)n(y)e
+1345 y(can)e(b)r(e)h(ac)n(hiev)n(ed)e(giv)n(en)g(the)i(securit)n(y)e
(mo)r(del)i(used.)f(ECRS)g(do)r(es)g(not)g(allo)n(w)f(users)g(with)523
-1843 y(distinct)38 b(pseudon)n(yms)f(to)h(up)r(date)g(the)g(same)f(con)
-n(ten)n(t)g(without)h(essen)n(tially)f(creating)523 1943
+1445 y(distinct)38 b(pseudon)n(yms)f(to)h(up)r(date)g(the)g(same)f(con)
+n(ten)n(t)g(without)h(essen)n(tially)f(creating)523 1544
y(t)n(w)n(o)26 b(\014les.)g(This)h(allo)n(ws)e(ECRS)h(to)g(guaran)n
(tee)f(that)h(p)r(eers)g(can)g(nev)n(er)g(return)g(an)g
-Fq(invalid)523 2042 y Fx(result)h(since)h(ev)n(ery)e(cop)n(y)h(can)g(b)
+Fq(invalid)523 1644 y Fx(result)h(since)h(ev)n(ery)e(cop)n(y)h(can)g(b)
r(e)h(uniquely)g(iden)n(ti\014ed)g(at)f(all)h(times.)523
-2211 y
+1813 y
SDict begin H.S end
- 523 2211 a 523 2211 a
+ 523 1813 a 523 1813 a
SDict begin 12 H.A end
- 523 2211 a 523 2211 a
+ 523 1813 a 523 1813 a
SDict begin [ /View [/XYZ H.V] /Dest (section.1.3) cvn H.B /DEST pdfmark
end
523
-2211 a 101 x Fr(3)112 b(ECRS)37 b(enco)s(ding)523 2516
+1813 a 101 x Fr(3)112 b(ECRS)37 b(enco)s(ding)523 2117
y Fx(The)30 b(primary)e(requiremen)n(ts)h(for)g(the)h(ECRS)f(enco)r
(ding)g(are)g Fq(plausible)k(deniability)f Fx(and)523
-2615 y Fq(r)l(obustness)p Fx(.)22 b(Plausible)f(deniabilit)n(y)h
+2217 y Fq(r)l(obustness)p Fx(.)22 b(Plausible)f(deniabilit)n(y)h
(describ)r(es)g(the)g(abilit)n(y)g(of)g(the)h(participan)n(ts)e(to)h
-(claim)523 2715 y(ignorance)k(of)i(the)g(nature)f(of)h(transferred)e
+(claim)523 2316 y(ignorance)k(of)i(the)g(nature)f(of)h(transferred)e
(con)n(ten)n(t.)h(The)h(idea)f(here)h(is)f(that)h(b)n(y)g(making)523
-2814 y(it)g(hard)f(for)g(in)n(termediaries)g(to)g(determine)h(the)g
+2416 y(it)g(hard)f(for)g(in)n(termediaries)g(to)g(determine)h(the)g
(con)n(ten)n(ts)f(that)h(they)g(are)f(routing,)g(they)523
-2914 y(are)h(less)h(lik)n(ely)f(to)i(casually)d(infringe)i(on)g(the)h
+2516 y(are)h(less)h(lik)n(ely)f(to)i(casually)d(infringe)i(on)g(the)h
(priv)-5 b(acy)28 b(of)h(other)g(users,)f(to)h(b)r(e)h(forced)e(to)523
-3014 y(do)k(so)f(b)n(y)h(an)g(adv)n(ersary)-7 b(,)30
+2615 y(do)k(so)f(b)n(y)h(an)g(adv)n(ersary)-7 b(,)30
b(or)h(to)h(b)r(e)h(held)f(resp)r(onsible)g(for)f(the)i(actions)e(of)h
-(others)g(that)523 3113 y(they)c(w)n(ere)f(un)n(wittingly)h
-(facilitating.)p 1 0 0 TeXcolorrgb 1758 3113 a
+(others)g(that)523 2715 y(they)c(w)n(ere)f(un)n(wittingly)h
+(facilitating.)p 1 0 0 TeXcolorrgb 1758 2715 a
SDict begin H.S end
- 1758 3113
-a -30 x Fw(2)1795 3113 y
+ 1758 2715
+a -30 x Fw(2)1795 2715 y
SDict begin 12 H.L end
- 1795 3113 a 1795 3113 a
+ 1795 2715 a 1795 2715 a
SDict begin [ /Subtype /Link /Dest (Hfootnote.2) cvn /H /I /Border
[0 0 0] /Color [1 0 0] H.B /ANN pdfmark end
1795
-3113 a Black 28 w Fx(Robustness)f(is)h(the)g(abilit)n(y)g(of)f(the)i
-(enco)r(ding)e(to)523 3213 y(resist)35 b(attac)n(ks)f(suc)n(h)h(as)f
+2715 a Black 28 w Fx(Robustness)f(is)h(the)g(abilit)n(y)g(of)f(the)i
+(enco)r(ding)e(to)523 2814 y(resist)35 b(attac)n(ks)f(suc)n(h)h(as)f
(data)h(corruption)f(and)h(spam.)g(Spam)g(is)g(di\013eren)n(t)h(from)e
-(data)523 3313 y(corruption)29 b(in)h(that)h(the)f(goal)f(of)h(the)g
+(data)523 2914 y(corruption)29 b(in)h(that)h(the)f(goal)f(of)h(the)g
(spammer)g(is)g(to)g(direct)g(the)g(user)g(to)g(undesirable)523
-3412 y(con)n(ten)n(t,)d(p)r(ossibly)h(hiding)f(useful)i(information)e
+3014 y(con)n(ten)n(t,)d(p)r(ossibly)h(hiding)f(useful)i(information)e
(in)h(a)f(sea)g(of)h(useless)f(results.)g(Naturally)523
-3512 y(the)h(enco)r(ding)e(should)h(not)g(signi\014can)n(tly)g
+3113 y(the)h(enco)r(ding)e(should)h(not)g(signi\014can)n(tly)g
(increase)f(the)h(amoun)n(t)g(of)g(data)g(that)g(needs)g(to)523
-3611 y(b)r(e)h(transferred.)648 3712 y(The)34 b(ECRS)g(enco)r(ding)g
+3213 y(b)r(e)h(transferred.)648 3313 y(The)34 b(ECRS)g(enco)r(ding)g
(sc)n(heme)g(addresses)f(these)i(requiremen)n(ts.)e(ECRS)h(pro)n(vides)
-523 3812 y(plausible)40 b(deniabilit)n(y)f(b)n(y)h(hiding)g(the)g
+523 3413 y(plausible)40 b(deniabilit)n(y)f(b)n(y)h(hiding)g(the)g
(nature)f(of)h(the)g(queries)f(and)h(resp)r(onses)e(from)523
-3911 y(in)n(termediaries)29 b(through)h(encryption.)g(Despite)h(the)g
-(fact)g(that)f(queries)g(and)g(resp)r(onses)523 4011
+3513 y(in)n(termediaries)29 b(through)h(encryption.)g(Despite)h(the)g
+(fact)g(that)f(queries)g(and)g(resp)r(onses)523 3612
y(are)21 b(encrypted,)h(in)n(termediaries)e(can)i Fq(verify)i
Fx(that)e(the)g(resp)r(onses)f(are)g(v)-5 b(alid)22 b(with)g(resp)r
-(ect)523 4110 y(to)f(a)g(particular)e(query)-7 b(.)21
+(ect)523 3712 y(to)f(a)g(particular)e(query)-7 b(.)21
b(Th)n(us,)g(the)g(enco)r(ding)g(mec)n(hanism)g(pro)n(vides)e
-(robustness)h(against)523 4210 y(tamp)r(ering)g(and)g(false)h(replies.)
+(robustness)h(against)523 3812 y(tamp)r(ering)g(and)g(false)h(replies.)
e(Additional)i(robustness)e(is)i(gained)f(in)g(ECRS)g(b)n(y)h
-(splitting)523 4310 y(\014les)j(in)n(to)g(blo)r(c)n(ks)f(that)i(can)f
+(splitting)523 3911 y(\014les)j(in)n(to)g(blo)r(c)n(ks)f(that)i(can)f
(b)r(e)g Fq(indep)l(endently)i Fx(v)n(eri\014ed,)d(stored)g(and)h
-(distributed)h(across)p Black 523 4382 473 4 v 546 4436
-a Fv(2)p 0 TeXcolorgray 606 4376 a
+(distributed)h(across)523 4011 y(the)c(net)n(w)n(ork.)e(This)h(mak)n
+(es)g(it)h(easy)e(for)h(proto)r(cols)f(using)h(ECRS)g(to)h(incorp)r
+(orate)e(features)523 4110 y(suc)n(h)27 b(as)f(sw)n(arm)g(distribution)
+h([)p 0 1 0 TeXcolorrgb 1547 4110 a
SDict begin H.S end
- 606 4376 a 0 TeXcolorgray
-0 TeXcolorgray 606 4376 a
+ 1547 4110 a 0 1 0
+TeXcolorrgb Fx(12)p 0 1 0 TeXcolorrgb 1630 4057 a
SDict begin H.R end
- 606 4376 a 606 4376 a
+ 1630
+4057 a 1630 4110 a
+SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
+(cite.hartman99swarm) cvn H.B /ANN pdfmark end
+ 1630 4110 a Black Fx(],)g(load)f(balancing)g(and)h
+(micro)r(economics)e([)p 0 1 0 TeXcolorrgb 3036 4110
+a
+SDict begin H.S end
+ 3036 4110 a 0 1 0 TeXcolorrgb Fx(11)p 0 1 0 TeXcolorrgb
+3119 4057 a
+SDict begin H.R end
+ 3119 4057 a 3119 4110 a
+SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
+(cite.ebe2003) cvn H.B /ANN pdfmark end
+ 3119 4110 a Black
+Fx(].)i(These)523 4210 y(features)g(are)g(also)g(signi\014can)n(t)g
+(from)h(the)g(viewp)r(oin)n(t)g(of)g(scalabilit)n(y)-7
+b(.)27 b(When)h(all)g(handled)523 4310 y(blo)r(c)n(ks)d(are)g(small,)h
+(no)r(des)g(can)f(participate)g(in)i(the)f(net)n(w)n(ork)e(activit)n(y)
+i(ev)n(en)f(if)i(their)f(o)n(wn)p Black 523 4382 473
+4 v 546 4436 a Fv(2)p 0 TeXcolorgray 606 4376 a
+SDict begin H.S end
+ 606 4376
+a 0 TeXcolorgray 0 TeXcolorgray 606 4376 a
+SDict begin H.R end
+ 606 4376 a
+606 4376 a
SDict begin [ /View [/XYZ H.V] /Dest (Hfootnote.2) cvn H.B /DEST pdfmark
end
- 606 4376
-a Black 92 x Fu(If)19 b(the)g(data)g(cannot)g(b)r(e)f(iden)n(ti\014ed,)
-h(editorial)h(con)n(trol)g(is)f(tec)n(hnically)g(imp)r(ossible.)i(In)d
-Fn(Str)l(atton)606 4559 y(Oakmont)36 b(v.)g(Pr)l(o)l(digy)p
-Fu(,)g(an)e(In)n(ternet)f(pro)n(vider)h(w)n(as)i(found)e(liable)i(for)f
-(hosting)g(a)g(bulletin)606 4650 y(b)r(oard)29 b(on)h(whic)n(h)f
-(o\013ensiv)n(e)g(messages)i(had)e(b)r(een)g(p)r(osted.)h(This)g
-(\014nding)e(resulted)h(b)r(ecause)606 4742 y(the)g(pro)n(vider)g(had)g
-(hired)g(individuals)h(to)f(exercise)i(editorial)f(con)n(trol)g(o)n(v)n
-(er)g(con)n(ten)n(t.)f(If)g(the)606 4833 y(pro)n(vider)17
-b(had)g(merely)h(published)f(messages)j(from)e(users)g(without)g(in)n
-(terference,)g(the)f(pro)n(vider)606 4924 y(w)n(ould)26
-b(p)r(oten)n(tially)g(not)g(ha)n(v)n(e)f(b)r(een)g(held)h(accoun)n
-(table)g([)p 0 1 0 TeXcolorrgb 2319 4924 a
-SDict begin H.S end
- 2319 4924
-a 0 1 0 TeXcolorrgb Fu(27)p 0 1 0 TeXcolorrgb 2396 4876
+ 606 4376 a Black 92 x Fu(If)19 b(the)g(data)g(cannot)g(b)r
+(e)f(iden)n(ti\014ed,)h(editorial)h(con)n(trol)g(is)f(tec)n(hnically)g
+(imp)r(ossible.)i(In)d Fn(Str)l(atton)606 4559 y(Oakmont)36
+b(v.)g(Pr)l(o)l(digy)p Fu(,)g(an)e(In)n(ternet)f(pro)n(vider)h(w)n(as)i
+(found)e(liable)i(for)f(hosting)g(a)g(bulletin)606 4650
+y(b)r(oard)29 b(on)h(whic)n(h)f(o\013ensiv)n(e)g(messages)i(had)e(b)r
+(een)g(p)r(osted.)h(This)g(\014nding)e(resulted)h(b)r(ecause)606
+4742 y(the)g(pro)n(vider)g(had)g(hired)g(individuals)h(to)f(exercise)i
+(editorial)f(con)n(trol)g(o)n(v)n(er)g(con)n(ten)n(t.)f(If)g(the)606
+4833 y(pro)n(vider)17 b(had)g(merely)h(published)f(messages)j(from)e
+(users)g(without)g(in)n(terference,)g(the)f(pro)n(vider)606
+4924 y(w)n(ould)26 b(p)r(oten)n(tially)g(not)g(ha)n(v)n(e)f(b)r(een)g
+(held)h(accoun)n(table)g([)p 0 1 0 TeXcolorrgb 2319 4924
a
+SDict begin H.S end
+ 2319 4924 a 0 1 0 TeXcolorrgb Fu(26)p 0 1 0 TeXcolorrgb
+2396 4876 a
SDict begin H.R end
2396 4876 a 2396 4924 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.stratton_oakmont) cvn H.B /ANN pdfmark end
- 2396 4924 a Black Fu(].)p Black
-Black Black eop end
+ 2396 4924 a Black
+Fu(].)p Black Black Black eop end
%%Page: 7 7
TeXDict begin 7 6 bop 0 0 a
SDict begin /product where{pop product(Distiller)search{pop pop pop
@@ -6296,173 +6307,150 @@
end
523 232 a Black 1036 w Fu(An)25
b(Enco)r(ding)h(for)h(Censorship-Resistan)n(t)f(Sharing)238
-b(7)p Black 523 448 a Fx(the)21 b(net)n(w)n(ork.)e(This)h(mak)n(es)g
-(it)h(easy)e(for)h(proto)r(cols)f(using)h(ECRS)g(to)h(incorp)r(orate)e
-(features)523 548 y(suc)n(h)27 b(as)f(sw)n(arm)g(distribution)h([)p
-0 1 0 TeXcolorrgb 1547 548 a
-SDict begin H.S end
- 1547 548 a 0 1 0 TeXcolorrgb
-Fx(13)p 0 1 0 TeXcolorrgb 1630 494 a
-SDict begin H.R end
- 1630 494 a 1630
-548 a
-SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.hartman99swarm) cvn H.B /ANN pdfmark end
- 1630 548 a Black Fx(],)g(load)f(balancing)g(and)h(micro)r
-(economics)e([)p 0 1 0 TeXcolorrgb 3036 548 a
-SDict begin H.S end
- 3036 548
-a 0 1 0 TeXcolorrgb Fx(12)p 0 1 0 TeXcolorrgb 3119 494
+b(7)p Black 523 448 a Fx(resources)36 b(are)h(limited.)i(Also,)f
+(storing)f(small,)h(individually)g(unin)n(telligible)g(pieces)g(of)523
+548 y(p)r(oten)n(tially)19 b(ob)5 b(jectionable)18 b(con)n(ten)n(t)h
+(is)g(lik)n(ely)f(to)h(further)g(supp)r(ort)g(plausible)g(deniabilit)n
+(y)-7 b(.)648 721 y(ECRS)27 b(uses)g(t)n(w)n(o)g(fundamen)n(tal)h
+(primitiv)n(es)g(in)g(the)g(o)n(v)n(erall)d(enco)r(ding)j(sc)n(heme.)f
+(The)523 820 y(ma)5 b(jorit)n(y)25 b(of)i(the)g(data)f(is)g(encrypted)h
+(with)g(a)f(v)-5 b(arian)n(t)26 b(of)g(F)-7 b(reenet's)27
+b(CHK)f(enco)r(ding)g([)p 0 1 0 TeXcolorrgb 3317 820
a
-SDict begin H.R end
- 3119 494 a 3119 548 a
-SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.ebe2003) cvn H.B /ANN pdfmark end
- 3119 548 a Black Fx(].)i(These)523
-648 y(features)g(are)g(also)g(signi\014can)n(t)g(from)h(the)g(viewp)r
-(oin)n(t)g(of)g(scalabilit)n(y)-7 b(.)27 b(When)h(all)g(handled)523
-747 y(blo)r(c)n(ks)d(are)g(small,)h(no)r(des)g(can)f(participate)g(in)i
-(the)f(net)n(w)n(ork)e(activit)n(y)i(ev)n(en)f(if)i(their)f(o)n(wn)523
-847 y(resources)36 b(are)h(limited.)i(Also,)f(storing)f(small,)h
-(individually)g(unin)n(telligible)g(pieces)g(of)523 946
-y(p)r(oten)n(tially)19 b(ob)5 b(jectionable)18 b(con)n(ten)n(t)h(is)g
-(lik)n(ely)f(to)h(further)g(supp)r(ort)g(plausible)g(deniabilit)n(y)-7
-b(.)648 1069 y(ECRS)27 b(uses)g(t)n(w)n(o)g(fundamen)n(tal)h(primitiv)n
-(es)g(in)g(the)g(o)n(v)n(erall)d(enco)r(ding)j(sc)n(heme.)f(The)523
-1169 y(ma)5 b(jorit)n(y)25 b(of)i(the)g(data)f(is)g(encrypted)h(with)g
-(a)f(v)-5 b(arian)n(t)26 b(of)g(F)-7 b(reenet's)27 b(CHK)f(enco)r(ding)
-g([)p 0 1 0 TeXcolorrgb 3317 1169 a
SDict begin H.S end
- 3317 1169 a 0 1 0
-TeXcolorrgb Fx(5)p 0 1 0 TeXcolorrgb 3359 1115 a
+ 3317 820 a 0 1 0 TeXcolorrgb Fx(5)p 0 1 0 TeXcolorrgb
+3359 767 a
SDict begin H.R end
- 3359
-1115 a 3359 1169 a
+ 3359 767 a 3359 820 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.clark99distributed) cvn H.B /ANN pdfmark end
- 3359 1169 a Black Fx(],)523 1268 y(where)35
-b(CHK)h(stands)g(for)f(Con)n(ten)n(t)h(Hash)g(Key)-7
+ 3359 820 a Black Fx(],)523
+920 y(where)35 b(CHK)h(stands)g(for)f(Con)n(ten)n(t)h(Hash)g(Key)-7
b(.)35 b(In)h(other)g(w)n(ords,)e(the)j(con)n(ten)n(t)e(is)h(en-)523
-1368 y(crypted)31 b(with)g(a)g(k)n(ey)g(that)g(is)g(deriv)n(ed)f(from)h
+1019 y(crypted)31 b(with)g(a)g(k)n(ey)g(that)g(is)g(deriv)n(ed)f(from)h
(a)g(cryptographic)e(hash)h(of)i(the)f(plain)n(text.)523
-1468 y(The)23 b(encrypted)g(con)n(ten)n(t)g(is)g(hashed)f(again)g(to)h
+1119 y(The)23 b(encrypted)g(con)n(ten)n(t)g(is)g(hashed)f(again)g(to)h
(obtain)g(the)g(query)g(hash)f(whic)n(h)h(is)g(used)g(to)523
-1567 y(request)i(the)i(con)n(ten)n(t.)e(This)h(k)n(ey-query)e(pair)h
+1219 y(request)i(the)i(con)n(ten)n(t.)e(This)h(k)n(ey-query)e(pair)h
(is)h(what)g(the)g(receiv)n(er)f(needs)h(to)f(do)n(wnload)523
-1667 y(and)i(decrypt)h(the)g(con)n(ten)n(t.)648 1790
+1318 y(and)i(decrypt)h(the)g(con)n(ten)n(t.)648 1491
y(The)38 b(primary)g(di\013erence)g(b)r(et)n(w)n(een)g(the)h(use)g(of)f
-(CHK)h(in)g(ECRS)f(and)g(that)h(used)523 1889 y(in)29
-b([)p 0 1 0 TeXcolorrgb 644 1889 a
+(CHK)h(in)g(ECRS)f(and)g(that)h(used)523 1590 y(in)29
+b([)p 0 1 0 TeXcolorrgb 644 1590 a
SDict begin H.S end
- 644 1889 a 0 1 0 TeXcolorrgb
-Fx(5)p 0 1 0 TeXcolorrgb 685 1836 a
+ 644 1590 a 0 1 0 TeXcolorrgb
+Fx(5)p 0 1 0 TeXcolorrgb 685 1537 a
SDict begin H.R end
- 685 1836 a 685 1889
+ 685 1537 a 685 1590
a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.clark99distributed) cvn H.B /ANN pdfmark end
- 685 1889 a Black Fx(])g(is)f(that)h(ECRS)g(do)r(es)f(not)g(sub)5
+ 685 1590 a Black Fx(])g(is)f(that)h(ECRS)g(do)r(es)f(not)g(sub)5
b(ject)29 b(en)n(tire)f(\014les)g(to)h(the)g(CHK)f(enco)r(ding.)g
-(Instead,)523 1989 y(\014les)f(are)g(split)h(in)n(to)f(\014xed-size)g
+(Instead,)523 1690 y(\014les)f(are)g(split)h(in)n(to)f(\014xed-size)g
(blo)r(c)n(ks)g(whic)n(h)g(could)g(then)h(b)r(e)g(individually)g
-(distributed)523 2089 y(\(and)34 b(replicated\))g(across)e(p)r(eers)i
+(distributed)523 1790 y(\(and)34 b(replicated\))g(across)e(p)r(eers)i
(in)h(the)f(net)n(w)n(ork;)f(this)i(is)f(a)f(natural)h(w)n(a)n(y)f(to)h
-(balance)523 2188 y(the)f(load)e(and)i(to)f(enable)g(sw)n(arming.)f
+(balance)523 1889 y(the)f(load)e(and)i(to)f(enable)g(sw)n(arming.)f
(These)h(\014xed-sized)g(blo)r(c)n(ks)f(can)h(b)r(e)h(individually)523
-2288 y(iden)n(ti\014ed,)d(encrypted,)e(decrypted)h(and)g(v)n
+1989 y(iden)n(ti\014ed,)d(encrypted,)e(decrypted)h(and)g(v)n
(eri\014ed.)f(Eac)n(h)g(blo)r(c)n(k)g(is)h(iden)n(ti\014ed)h(b)n(y)e
-(one)h(or)523 2387 y(t)n(w)n(o)24 b(hash)h(co)r(des,)g(and)g(the)h(blo)
+(one)h(or)523 2089 y(t)n(w)n(o)24 b(hash)h(co)r(des,)g(and)g(the)h(blo)
r(c)n(ks)e(are)g(encrypted)h(using)g(a)g(k)n(ey)f(that)i(is)f(indep)r
-(enden)n(t)h(of)523 2487 y(the)g(hashes)e(used)i(for)f(iden)n
+(enden)n(t)h(of)523 2188 y(the)g(hashes)e(used)i(for)f(iden)n
(ti\014cation.)g(V)-7 b(eri\014cation)25 b(only)g(requires)f(the)h
-(encrypted)h(blo)r(c)n(k)523 2587 y(and)k(the)g(query;)g(it)g(do)r(es)g
+(encrypted)h(blo)r(c)n(k)523 2288 y(and)k(the)g(query;)g(it)g(do)r(es)g
(not)g(rev)n(eal)f(the)h(k)n(ey)f(required)g(to)h(decrypt)g(the)h(blo)r
-(c)n(k.)e(ECRS)523 2686 y(guaran)n(tees)23 b(that)j(it)g(is)g(hard)f
+(c)n(k.)e(ECRS)523 2387 y(guaran)n(tees)23 b(that)j(it)g(is)g(hard)f
(to)g(forge)g(a)g(resp)r(onse)f(that)i(passes)e(v)n(eri\014cation)h
-(for)g(a)g(giv)n(en)523 2786 y(query)-7 b(,)29 b(and)h(splitting)g
+(for)g(a)g(giv)n(en)523 2487 y(query)-7 b(,)29 b(and)h(splitting)g
(\014les)g(in)n(to)f(blo)r(c)n(ks)g(allo)n(ws)g(ECRS)g(to)h(detect)g
-(data)g(corruption)e(on)523 2886 y(the)34 b(blo)r(c)n(k)f(lev)n(el.)g
+(data)g(corruption)e(on)523 2587 y(the)34 b(blo)r(c)n(k)f(lev)n(el.)g
(Malicious)g(p)r(eers)g(cannot)g(transmit)h(more)e(than)i(the)g
-(selected)g(blo)r(c)n(k)523 2985 y(size)27 b(of)h(in)n(v)-5
+(selected)g(blo)r(c)n(k)523 2686 y(size)27 b(of)h(in)n(v)-5
b(alid)27 b(data)g(b)r(efore)h(b)r(eing)f(detected.)648
-3108 y(The)18 b(second)h(primitiv)n(e)f(used)h(b)n(y)f(ECRS,)h(the)g
+2859 y(The)18 b(second)h(primitiv)n(e)f(used)h(b)n(y)f(ECRS,)h(the)g
Fq(KBlo)l(ck)p Fx(,)h(is)f(completely)f(no)n(v)n(el.)g
-Fq(KBlo)l(ck)p Fx(s)523 3208 y(allo)n(w)24 b(users)h(to)g(securely)f
+Fq(KBlo)l(ck)p Fx(s)523 2959 y(allo)n(w)24 b(users)h(to)g(securely)f
(obtain)i(the)f(k)n(ey-query)f(pair)g(b)n(y)i(en)n(tering)e(a)h
-(natural)g(language)523 3307 y(k)n(eyw)n(ord)35 b(selected)i(b)n(y)f
+(natural)g(language)523 3058 y(k)n(eyw)n(ord)35 b(selected)i(b)n(y)f
(the)h(con)n(ten)n(t)f(pro)n(vider.)g(The)g(primitiv)n(e)h(used)g(to)f
-(ac)n(hiev)n(e)g(this)523 3407 y(in)e([)p 0 1 0 TeXcolorrgb
-649 3407 a
+(ac)n(hiev)n(e)g(this)523 3158 y(in)e([)p 0 1 0 TeXcolorrgb
+649 3158 a
SDict begin H.S end
- 649 3407 a 0 1 0 TeXcolorrgb Fx(3)p 0 1 0
-TeXcolorrgb 691 3353 a
+ 649 3158 a 0 1 0 TeXcolorrgb Fx(3)p 0 1 0
+TeXcolorrgb 691 3104 a
SDict begin H.R end
- 691 3353 a 691 3407 a
+ 691 3104 a 691 3158 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.esed) cvn H.B /ANN pdfmark end
- 691 3407
+ 691 3158
a Black Fx(],)g(the)g(triple)g(hash,)f(is)h(impro)n(v)n(ed)f(on)g(in)h
(this)h(w)n(ork)d(in)i(that)g Fq(KBlo)l(ck)p Fx(s)h Fq(c)l(annot)f
-Fx(b)r(e)523 3506 y(attac)n(k)n(ed)19 b(successfully)g(b)n(y)g(a)g
+Fx(b)r(e)523 3257 y(attac)n(k)n(ed)19 b(successfully)g(b)n(y)g(a)g
(non-guessing)f(in)n(termediary)-7 b(.)19 b(The)h(triple)g(hash)f(sc)n
-(heme)g(w)n(as)523 3606 y(vulnerable)37 b(to)g(p)r(ossibile)g
+(heme)g(w)n(as)523 3357 y(vulnerable)37 b(to)g(p)r(ossibile)g
(substitution)h(attac)n(ks)e(b)n(y)h(in)n(termediaries.)g
-Fq(KBlo)l(ck)p Fx(s)h(defeat)523 3706 y(this)29 b(attac)n(k)f(b)n(y)h
+Fq(KBlo)l(ck)p Fx(s)h(defeat)523 3457 y(this)29 b(attac)n(k)f(b)n(y)h
(signing)f(con)n(ten)n(t)g(adv)n(ertisemen)n(ts)f(using)i
-(deterministically)f(generated)523 3805 y(public)34 b(k)n(eys.)e
+(deterministically)f(generated)523 3556 y(public)34 b(k)n(eys.)e
(Additionally)-7 b(,)33 b(b)n(y)g(using)f Fq(KBlo)l(ck)p
Fx(s,)i(do)r(cumen)n(ts)f(can)g(b)r(e)g(inserted)g(under)523
-3905 y(m)n(ultiple)h(k)n(eys)e(at)g(a)h(minimal)g(cost)f(in)i(terms)e
+3656 y(m)n(ultiple)h(k)n(eys)e(at)g(a)h(minimal)g(cost)f(in)i(terms)e
(of)h(space.)f(Users)h(can)f(p)r(erform)h(b)r(o)r(olean)523
-4005 y(searc)n(hes)c(of)i(the)g(form)g(\\a)f(AND)i(b")f(whic)n(h)g
+3756 y(searc)n(hes)c(of)i(the)g(form)g(\\a)f(AND)i(b")f(whic)n(h)g
(then)g(return)g(the)g(do)r(cumen)n(ts)g(whic)n(h)g(w)n(ere)523
-4104 y(inserted)h(under)g(a)f(matc)n(hing)h(set)g(of)g(k)n(eyw)n(ords.)
+3855 y(inserted)h(under)g(a)f(matc)n(hing)h(set)g(of)g(k)n(eyw)n(ords.)
d(Before)j(the)g(do)n(wnload,)f(the)h(user)f(can)523
-4204 y(re\014ne)c(the)h(searc)n(h)e(results)h(using)h(the)g(metadata)f
-(asso)r(ciated)f(with)i(the)g(\014le.)648 4327 y(The)23
+3955 y(re\014ne)c(the)h(searc)n(h)e(results)h(using)h(the)g(metadata)f
+(asso)r(ciated)f(with)i(the)g(\014le.)648 4127 y(The)23
b(rest)g(of)h(this)g(Section)f(giv)n(es)g(a)g(b)r(ottom-up)h
-(description)f(of)g(ECRS.)h(After)g(a)f(brief)523 4426
+(description)f(of)g(ECRS.)h(After)g(a)f(brief)523 4227
y(o)n(v)n(erview,)29 b(P)n(art)p 1 0 0 TeXcolorrgb 1083
-4426 a
+4227 a
SDict begin H.S end
- 1083 4426 a 1 0 0 TeXcolorrgb Fx(3.2)p 1 0 0 TeXcolorrgb
-1189 4373 a
+ 1083 4227 a 1 0 0 TeXcolorrgb Fx(3.2)p 1 0 0 TeXcolorrgb
+1189 4173 a
SDict begin H.R end
- 1189 4373 a 1189 4426 a
+ 1189 4173 a 1189 4227 a
SDict begin [ /Color [1 0 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(subsection.1.3.2) cvn H.B /ANN pdfmark end
- 1189 4426 a Black
+ 1189 4227 a Black
31 w Fx(sho)n(ws)h(ho)n(w)g(individual)h(data)g(blo)r(c)n(ks)f(are)g
-(encrypted)h(in)g(order)f(to)523 4526 y(mak)n(e)c(it)i(imp)r(ossible)f
+(encrypted)h(in)g(order)f(to)523 4327 y(mak)n(e)c(it)i(imp)r(ossible)f
(for)g(the)h(in)n(termediaries)e(to)h(determine)g(what)g(they)h(are)e
-(storing)g(or)523 4625 y(transmitting.)k(P)n(art)p 1 0 0
-TeXcolorrgb 1219 4625 a
+(storing)g(or)523 4426 y(transmitting.)k(P)n(art)p 1 0 0
+TeXcolorrgb 1219 4426 a
SDict begin H.S end
- 1219 4625 a 1 0 0 TeXcolorrgb
-Fx(3.3)p 1 0 0 TeXcolorrgb 1325 4572 a
+ 1219 4426 a 1 0 0 TeXcolorrgb
+Fx(3.3)p 1 0 0 TeXcolorrgb 1325 4373 a
SDict begin H.R end
- 1325 4572 a 1325
-4625 a
+ 1325 4373 a 1325
+4426 a
SDict begin [ /Color [1 0 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(subsection.1.3.3) cvn H.B /ANN pdfmark end
- 1325 4625 a Black 31 w Fx(then)g(describ)r(es)f(ho)n(w)h
+ 1325 4426 a Black 31 w Fx(then)g(describ)r(es)f(ho)n(w)h
(\014les)g(are)f(split)h(in)n(to)g(those)f(data)h(blo)r(c)n(ks.)523
-4725 y(P)n(art)p 1 0 0 TeXcolorrgb 714 4725 a
+4526 y(P)n(art)p 1 0 0 TeXcolorrgb 714 4526 a
SDict begin H.S end
- 714 4725
-a 1 0 0 TeXcolorrgb Fx(3.4)p 1 0 0 TeXcolorrgb 820 4672
+ 714 4526
+a 1 0 0 TeXcolorrgb Fx(3.4)p 1 0 0 TeXcolorrgb 820 4472
a
SDict begin H.R end
- 820 4672 a 820 4725 a
+ 820 4472 a 820 4526 a
SDict begin [ /Color [1 0 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(subsection.1.3.4) cvn H.B /ANN pdfmark end
- 820 4725 a Black 30 w Fx(motiv)-5
+ 820 4526 a Black 30 w Fx(motiv)-5
b(ates)30 b(and)f(explains)h(ho)n(w)f(ECRS)h(enables)f(users)h(to)f
-(searc)n(h)g(for)g(con)n(ten)n(t)523 4825 y(without)41
+(searc)n(h)g(for)g(con)n(ten)n(t)523 4625 y(without)41
b(exp)r(osing)e(the)i(plain)n(text)f(of)g(the)h(k)n(eyw)n(ord)d(or)h
-(the)i(corresp)r(onding)d(con)n(ten)n(t)523 4924 y(and)h(ho)n(w)g(in)n
+(the)i(corresp)r(onding)d(con)n(ten)n(t)523 4725 y(and)h(ho)n(w)g(in)n
(termediaries)f(can)h(v)n(erify)f(that)i(a)f(giv)n(en)f(encrypted)h
-(reply)g(matc)n(hes)g(the)p Black Black eop end
+(reply)g(matc)n(hes)g(the)523 4825 y(\(encrypted\))30
+b(query)-7 b(.)30 b(Finally)-7 b(,)30 b(the)g(core)f(of)h(ECRS)f(is)h
+(summarized)g(in)g(the)g(form)g(of)g(the)523 4924 y(enco)r(ding)d
+(algorithm)g(and)g(a)g(proto)r(col)g(example.)p Black
+Black eop end
%%Page: 8 8
TeXDict begin 8 7 bop 0 0 a
SDict begin /product where{pop product(Distiller)search{pop pop pop
@@ -6537,120 +6525,131 @@
Fp(D)r(B)t(l)r(ock)s Fx(s)g(and)523 1301 y Fp(I)7 b(B)t(l)r(ock)s
Fx(s)41 b(are)f(CHK)i(enco)r(ded\))f(with)h(one)g Fp(K)6
b(B)t(l)r(ock)43 b Fx(to)e(allo)n(w)g(for)g(a)g(k)n(eyw)n(ord-based)523
-1400 y(searc)n(h.)p Black Black Black 523 1852 a(\(encrypted\))30
-b(query)-7 b(.)30 b(Finally)-7 b(,)30 b(the)g(core)f(of)h(ECRS)f(is)h
-(summarized)g(in)g(the)g(form)g(of)g(the)523 1951 y(enco)r(ding)d
-(algorithm)g(and)g(a)g(proto)r(col)g(example.)523 2127
-y
+1400 y(searc)n(h.)p Black Black Black 523 1788 a
SDict begin H.S end
- 523 2127 a 523 2127 a
+ 523
+1788 a 523 1788 a
SDict begin 12 H.A end
- 523 2127 a 523 2127 a
+ 523 1788 a 523 1788 a
SDict begin [ /View [/XYZ H.V] /Dest (subsection.1.3.1) cvn H.B /DEST
pdfmark end
- 523 2127
-a 86 x Fo(3.1)95 b(Ov)m(erview)523 2392 y Fx(In)25 b(ECRS,)f(the)h
-(enco)r(ded)g(represen)n(tation)e(of)h(a)g(\014le)h(is)f(a)h
-(collection)f(of)g(blo)r(c)n(ks.)g(There)g(are)523 2491
-y(four)h(t)n(yp)r(es)g(of)g(blo)r(c)n(ks:)f Fq(DBlo)l(cks)p
-Fx(,)i Fq(IBlo)l(cks)p Fx(,)h Fq(SBlo)l(cks)f Fx(and)f
-Fq(KBlo)l(cks)p Fx(.)h(The)f(maxim)n(um)g(size)523 2591
-y(of)f(all)g(blo)r(c)n(ks)g(in)h(ECRS)f(is)g(supp)r(osed)g(to)h(b)r(e)f
-(\014xed)h(as)f(some)f(small)h(n)n(um)n(b)r(er)h(\(e.g.)f(32Kb\).)523
-2691 y(The)i(blo)r(c)n(ks)f(are)g(used)h(to)g(create)f(a)h(tree)g
-(structure)f(of)h(the)h(enco)r(ded)f(\014le)g(\(see)g(Figure)p
-1 0 0 TeXcolorrgb 3308 2691 a
+ 523 1788 a 83
+x Fo(3.1)95 b(Ov)m(erview)523 2097 y Fx(In)25 b(ECRS,)f(the)h(enco)r
+(ded)g(represen)n(tation)e(of)h(a)g(\014le)h(is)f(a)h(collection)f(of)g
+(blo)r(c)n(ks.)g(There)g(are)523 2197 y(four)h(t)n(yp)r(es)g(of)g(blo)r
+(c)n(ks:)f Fq(DBlo)l(cks)p Fx(,)i Fq(IBlo)l(cks)p Fx(,)h
+Fq(SBlo)l(cks)f Fx(and)f Fq(KBlo)l(cks)p Fx(.)h(The)f(maxim)n(um)g
+(size)523 2296 y(of)f(all)g(blo)r(c)n(ks)g(in)h(ECRS)f(is)g(supp)r
+(osed)g(to)h(b)r(e)f(\014xed)h(as)f(some)f(small)h(n)n(um)n(b)r(er)h
+(\(e.g.)f(32Kb\).)523 2396 y(The)i(blo)r(c)n(ks)f(are)g(used)h(to)g
+(create)f(a)h(tree)g(structure)f(of)h(the)h(enco)r(ded)f(\014le)g
+(\(see)g(Figure)p 1 0 0 TeXcolorrgb 3308 2396 a
SDict begin H.S end
- 3308 2691 a 1 0 0 TeXcolorrgb
-Fx(1)p 1 0 0 TeXcolorrgb 3350 2637 a
+ 3308
+2396 a 1 0 0 TeXcolorrgb Fx(1)p 1 0 0 TeXcolorrgb 3350
+2343 a
SDict begin H.R end
- 3350 2637 a 3350
-2691 a
+ 3350 2343 a 3350 2396 a
SDict begin [ /Color [1 0 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(figure.1.1) cvn H.B /ANN pdfmark end
- 3350 2691 a Black Fx(\).)523 2790 y(The)39 b(actual)f(\014le)g
-(data)g(is)g(enco)r(ded)h(in)g Fq(DBlo)l(cks)g Fx(whic)n(h)f(are)g
-(organized)f(b)n(y)h(a)g(tree)g(of)523 2890 y Fq(IBlo)l(cks)p
-Fx(.)j(The)f Fq(IBlo)l(cks)p Fx(,)h(whic)n(h)e(are)g(similar)f(to)i
-(UNIX)g(ino)r(des)g([)p 0 1 0 TeXcolorrgb 2698 2890 a
+ 3350 2396 a Black Fx(\).)523
+2496 y(The)39 b(actual)f(\014le)g(data)g(is)g(enco)r(ded)h(in)g
+Fq(DBlo)l(cks)g Fx(whic)n(h)f(are)g(organized)f(b)n(y)h(a)g(tree)g(of)
+523 2595 y Fq(IBlo)l(cks)p Fx(.)j(The)f Fq(IBlo)l(cks)p
+Fx(,)h(whic)n(h)e(are)g(similar)f(to)i(UNIX)g(ino)r(des)g([)p
+0 1 0 TeXcolorrgb 2698 2595 a
SDict begin H.S end
-
-2698 2890 a 0 1 0 TeXcolorrgb Fx(19)p 0 1 0 TeXcolorrgb
-2781 2836 a
+ 2698 2595 a 0 1 0 TeXcolorrgb
+Fx(18)p 0 1 0 TeXcolorrgb 2781 2542 a
SDict begin H.R end
- 2781 2836 a 2781 2890 a
+ 2781 2542 a 2781
+2595 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.mckusick84fast) cvn H.B /ANN pdfmark end
- 2781 2890 a Black
-Fx(],)g(are)e(indirection)523 2990 y(blo)r(c)n(ks)27
-b(whic)n(h)h(enco)r(de)f(ho)n(w)g(the)h(leaf)g(no)r(des)f(of)h(the)g
-(tree)g(can)f(b)r(e)h(reassem)n(bled)e(in)n(to)i(the)523
-3089 y(original)35 b(\014le.)h(Ev)n(ery)f Fq(IBlo)l(ck)j
+ 2781 2595 a Black Fx(],)g(are)e(indirection)523
+2695 y(blo)r(c)n(ks)27 b(whic)n(h)h(enco)r(de)f(ho)n(w)g(the)h(leaf)g
+(no)r(des)f(of)h(the)g(tree)g(can)f(b)r(e)h(reassem)n(bled)e(in)n(to)i
+(the)523 2795 y(original)35 b(\014le.)h(Ev)n(ery)f Fq(IBlo)l(ck)j
Fx(pro)n(vides)d(the)i(data)f(required)f(to)h(request,)g(decrypt)g(and)
-523 3189 y(v)n(erify)c(the)h(con)n(ten)n(ts)f(of)h(its)g(direct)g(c)n
+523 2894 y(v)n(erify)c(the)h(con)n(ten)n(ts)f(of)h(its)g(direct)g(c)n
(hildren.)f(V)-7 b(eri\014cation)32 b(is)h(done)g(using)f(hash)g(co)r
-(des)523 3288 y(of)h(the)h(c)n(hildren,)f(similar)f(to)h(the)h(w)n(a)n
-(y)d(a)i(Merkle)g(tree)g([)p 0 1 0 TeXcolorrgb 2377 3288
+(des)523 2994 y(of)h(the)h(c)n(hildren,)f(similar)f(to)h(the)h(w)n(a)n
+(y)d(a)i(Merkle)g(tree)g([)p 0 1 0 TeXcolorrgb 2377 2994
a
SDict begin H.S end
- 2377 3288 a 0 1 0 TeXcolorrgb Fx(20)p 0 1 0 TeXcolorrgb
-2460 3235 a
+ 2377 2994 a 0 1 0 TeXcolorrgb Fx(19)p 0 1 0 TeXcolorrgb
+2460 2940 a
SDict begin H.R end
- 2460 3235 a 2460 3288 a
+ 2460 2940 a 2460 2994 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.merkle89tree) cvn H.B /ANN pdfmark end
- 2460 3288 a Black
-Fx(])g(w)n(orks.)f(Giv)n(en)h(the)g(size)g(of)523 3388
+ 2460 2994 a Black
+Fx(])g(w)n(orks.)f(Giv)n(en)h(the)g(size)g(of)523 3093
y(the)25 b(\014le,)g(the)g(top)g Fq(IBlo)l(ck)h Fx(uniquely)e(iden)n
(ti\014es)h(the)g(con)n(ten)n(ts)f(of)h(the)g(en)n(tire)f(\014le.)h
-Fq(KBlo)l(cks)523 3488 y Fx(and)32 b Fq(SBlo)l(cks)i
+Fq(KBlo)l(cks)523 3193 y Fx(and)32 b Fq(SBlo)l(cks)i
Fx(facilitate)e(obtaining)g(the)g(k)n(ey)g(hash)g(\(to)h(decrypt\))f
-(and)g(query)g(hash)g(\(to)523 3587 y(request\))27 b(for)g(the)h(top)g
-Fq(IBlo)l(ck)p Fx(.)523 3768 y
+(and)g(query)g(hash)g(\(to)523 3293 y(request\))27 b(for)g(the)h(top)g
+Fq(IBlo)l(ck)p Fx(.)523 3511 y
SDict begin H.S end
- 523 3768 a 523 3768 a
+ 523 3511 a 523 3511 a
SDict begin 12 H.A end
-523 3768 a 523 3768 a
+523 3511 a 523 3511 a
SDict begin [ /View [/XYZ H.V] /Dest (subsection.1.3.2) cvn H.B /DEST
pdfmark end
- 523 3768 a 81 x Fo(3.2)95 b Fg(DBlo)-5
-b(cks)523 4028 y Fx(Ev)n(ery)33 b Fq(DBlo)l(ck)j Fx(corresp)r(onds)c
+ 523 3511 a 91 x Fo(3.2)95 b Fg(DBlo)-5
+b(cks)523 3828 y Fx(Ev)n(ery)33 b Fq(DBlo)l(ck)j Fx(corresp)r(onds)c
(to)j(32Kb)e(of)i(the)g(original)e(\014le)i(\(the)g(last)g(blo)r(c)n(k)
-f(ma)n(y)g(b)r(e)523 4127 y(padded)g(with)g(zeros)e(if)i(the)g(\014le)g
+f(ma)n(y)g(b)r(e)523 3928 y(padded)g(with)g(zeros)e(if)i(the)g(\014le)g
(end)g(do)r(es)f(not)h(fall)f(on)h(a)f(32Kb)f(b)r(oundary\).)h
-Fq(DBlo)l(ck)p Fx(s)523 4227 y(are)d(encrypted)h(using)f(a)h(symmetric)
+Fq(DBlo)l(ck)p Fx(s)523 4028 y(are)d(encrypted)h(using)f(a)h(symmetric)
f(cipher.)h(F)-7 b(or)30 b(the)i Fq(DBlo)l(ck)f Fx(that)h(corresp)r
-(onds)d(to)h(a)523 4327 y(plain)n(text)e(blo)r(c)n(k)f
-Fp(B)1156 4339 y Ff(i)1184 4327 y Fx(,)h(the)h(k)n(ey)e(for)g(the)i
-(cipher)f(is)f Fp(K)2204 4339 y Ff(i)2255 4327 y Fx(:=)d
-Fp(H)7 b Fx(\()p Fp(B)2538 4339 y Ff(i)2565 4327 y Fx(\).)29
-b(This)f(guaran)n(tees)e(that)523 4426 y(the)d(same)f(blo)r(c)n(k)g
+(onds)d(to)h(a)523 4127 y(plain)n(text)e(blo)r(c)n(k)f
+Fp(B)1156 4139 y Ff(i)1184 4127 y Fx(,)h(the)h(k)n(ey)e(for)g(the)i
+(cipher)f(is)f Fp(K)2204 4139 y Ff(i)2255 4127 y Fx(:=)d
+Fp(H)7 b Fx(\()p Fp(B)2538 4139 y Ff(i)2565 4127 y Fx(\).)29
+b(This)f(guaran)n(tees)e(that)523 4227 y(the)d(same)f(blo)r(c)n(k)g
(will)h(alw)n(a)n(ys)e(b)r(e)i(encrypted)f(with)h(the)g(same)f(k)n(ey)
--7 b(.)22 b(Also,)g(the)h(in)n(tegrit)n(y)f(of)523 4526
+-7 b(.)22 b(Also,)g(the)h(in)n(tegrit)n(y)f(of)523 4327
y(the)g(decrypted)f(blo)r(c)n(k)f(can)h(b)r(e)h(v)n(eri\014ed)e(b)n(y)h
-(c)n(hec)n(king)f(that)i Fp(K)2470 4538 y Ff(i)2520 4526
-y Fx(=)h Fp(H)7 b Fx(\()p Fp(B)2779 4538 y Ff(i)2806
-4526 y Fx(\).)22 b(The)f(encrypted)523 4625 y(blo)r(c)n(k)k
-Fp(E)801 4637 y Ff(K)857 4645 y Fe(i)888 4625 y Fx(\()p
-Fp(B)983 4637 y Ff(i)1011 4625 y Fx(\))g(can)h(b)r(e)g(uniquely)f(iden)
-n(ti\014ed)h(b)n(y)g(its)f(hash)g Fp(Q)2509 4637 y Ff(i)2560
-4625 y Fx(:=)e Fp(H)7 b Fx(\()p Fp(E)2840 4637 y Ff(K)2896
-4645 y Fe(i)2926 4625 y Fx(\()p Fp(B)3021 4637 y Ff(i)3049
-4625 y Fx(\)\).)26 b(A)g(p)r(eer)523 4725 y(can)34 b(query)g(for)g
-Fp(E)1115 4737 y Ff(K)1171 4745 y Fe(i)1201 4725 y Fx(\()p
-Fp(B)1296 4737 y Ff(i)1324 4725 y Fx(\))h(using)f(the)h(query)e(hash)h
-Fp(Q)2269 4737 y Ff(i)2331 4725 y Fx(without)h(rev)n(ealing)d
-Fp(K)3075 4737 y Ff(i)3102 4725 y Fx(.)j(Conse-)523 4825
+(c)n(hec)n(king)f(that)i Fp(K)2470 4339 y Ff(i)2520 4327
+y Fx(=)h Fp(H)7 b Fx(\()p Fp(B)2779 4339 y Ff(i)2806
+4327 y Fx(\).)22 b(The)f(encrypted)523 4426 y(blo)r(c)n(k)k
+Fp(E)801 4438 y Ff(K)857 4446 y Fe(i)888 4426 y Fx(\()p
+Fp(B)983 4438 y Ff(i)1011 4426 y Fx(\))g(can)h(b)r(e)g(uniquely)f(iden)
+n(ti\014ed)h(b)n(y)g(its)f(hash)g Fp(Q)2509 4438 y Ff(i)2560
+4426 y Fx(:=)e Fp(H)7 b Fx(\()p Fp(E)2840 4438 y Ff(K)2896
+4446 y Fe(i)2926 4426 y Fx(\()p Fp(B)3021 4438 y Ff(i)3049
+4426 y Fx(\)\).)26 b(A)g(p)r(eer)523 4526 y(can)34 b(query)g(for)g
+Fp(E)1115 4538 y Ff(K)1171 4546 y Fe(i)1201 4526 y Fx(\()p
+Fp(B)1296 4538 y Ff(i)1324 4526 y Fx(\))h(using)f(the)h(query)e(hash)h
+Fp(Q)2269 4538 y Ff(i)2331 4526 y Fx(without)h(rev)n(ealing)d
+Fp(K)3075 4538 y Ff(i)3102 4526 y Fx(.)j(Conse-)523 4625
y(quen)n(tly)-7 b(,)24 b(the)g(pair)f(\()p Fp(K)1242
-4837 y Ff(i)1270 4825 y Fp(;)14 b(Q)1373 4837 y Ff(i)1400
-4825 y Fx(\))24 b(can)f(b)r(e)i(used)e(to)h(retriev)n(e)f(and)g
-(decrypt)h Fp(B)2813 4837 y Ff(i)2840 4825 y Fx(.)g(In)n(termediaries)
-523 4924 y(can)30 b(v)n(erify)h(that)g(a)f(resp)r(onse)g
-Fp(E)1568 4936 y Ff(K)1624 4944 y Fe(i)1654 4924 y Fx(\()p
-Fp(B)1749 4936 y Ff(i)1777 4924 y Fx(\))i(matc)n(hes)e(a)g(query)g
-(hash)h Fp(Q)2735 4936 y Ff(i)2793 4924 y Fx(without)g(kno)n(wing)p
-Black Black eop end
+4637 y Ff(i)1270 4625 y Fp(;)14 b(Q)1373 4637 y Ff(i)1400
+4625 y Fx(\))24 b(can)f(b)r(e)i(used)e(to)h(retriev)n(e)f(and)g
+(decrypt)h Fp(B)2813 4637 y Ff(i)2840 4625 y Fx(.)g(In)n(termediaries)
+523 4725 y(can)30 b(v)n(erify)h(that)g(a)f(resp)r(onse)g
+Fp(E)1568 4737 y Ff(K)1624 4745 y Fe(i)1654 4725 y Fx(\()p
+Fp(B)1749 4737 y Ff(i)1777 4725 y Fx(\))i(matc)n(hes)e(a)g(query)g
+(hash)h Fp(Q)2735 4737 y Ff(i)2793 4725 y Fx(without)g(kno)n(wing)523
+4825 y Fp(K)594 4837 y Ff(i)621 4825 y Fx(.)24 b(F)-7
+b(reenet)24 b([)p 0 1 0 TeXcolorrgb 984 4825 a
+SDict begin H.S end
+ 984 4825
+a 0 1 0 TeXcolorrgb Fx(5)p 0 1 0 TeXcolorrgb 1025 4771
+a
+SDict begin H.R end
+ 1025 4771 a 1025 4825 a
+SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
+(cite.clark99distributed) cvn H.B /ANN pdfmark end
+ 1025 4825 a Black Fx(])g(uses)f(the)h(same)f
+(sc)n(heme)g(to)h(encrypt)f(en)n(tire)g(\014les)h(\(not)g(just)g(blo)r
+(c)n(ks\))f(and)523 4924 y(the)28 b(authors)f(call)g(the)h(pair)f(\()p
+Fp(K)1536 4936 y Ff(i)1563 4924 y Fp(;)14 b(Q)1666 4936
+y Ff(i)1693 4924 y Fx(\))28 b(a)f(con)n(ten)n(t)h(hash)f(k)n(ey)g
+(\(CHK\).)p Black Black eop end
%%Page: 9 9
TeXDict begin 9 8 bop 0 0 a
SDict begin /product where{pop product(Distiller)search{pop pop pop
@@ -6668,127 +6667,118 @@
end
523 232 a Black 1036 w Fu(An)25
b(Enco)r(ding)h(for)h(Censorship-Resistan)n(t)f(Sharing)238
-b(9)p Black 523 448 a Fp(K)594 460 y Ff(i)621 448 y Fx(.)24
-b(F)-7 b(reenet)24 b([)p 0 1 0 TeXcolorrgb 984 448 a
+b(9)p Black 523 365 a
SDict begin H.S end
-
-984 448 a 0 1 0 TeXcolorrgb Fx(5)p 0 1 0 TeXcolorrgb
-1025 395 a
-SDict begin H.R end
- 1025 395 a 1025 448 a
-SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
-(cite.clark99distributed) cvn H.B /ANN pdfmark end
- 1025 448 a Black Fx(])g(uses)f(the)h
-(same)f(sc)n(heme)g(to)h(encrypt)f(en)n(tire)g(\014les)h(\(not)g(just)g
-(blo)r(c)n(ks\))f(and)523 548 y(the)28 b(authors)f(call)g(the)h(pair)f
-(\()p Fp(K)1536 560 y Ff(i)1563 548 y Fp(;)14 b(Q)1666
-560 y Ff(i)1693 548 y Fx(\))28 b(a)f(con)n(ten)n(t)h(hash)f(k)n(ey)g
-(\(CHK\).)523 708 y
-SDict begin H.S end
- 523 708 a 523 708 a
+ 523 365 a 523 365 a
SDict begin 12 H.A end
- 523 708 a 523
-708 a
+ 523 365 a 523
+365 a
SDict begin [ /View [/XYZ H.V] /Dest (subsection.1.3.3) cvn H.B /DEST
pdfmark end
- 523 708 a 79 x Fo(3.3)95 b Fg(IBlo)-5 b(cks)523
-943 y Fx(F)e(or)32 b(\014les)h(larger)e(than)h(the)i(blo)r(c)n(ksize,)e
+ 523 365 a 83 x Fo(3.3)95 b Fg(IBlo)-5 b(cks)523
+617 y Fx(F)e(or)32 b(\014les)h(larger)e(than)h(the)i(blo)r(c)n(ksize,)e
(m)n(ultiple)h(CHK)f(k)n(eys)g(are)g(required)g(to)g(retriev)n(e)523
-1043 y(the)i(con)n(ten)n(t.)f(F)-7 b(or)33 b(example,)g(with)g(a)g(blo)
-r(c)n(ksize)g(of)g(32Kb)f(and)h(512-bit)g(hash)f(co)r(des,)h(a)523
-1142 y(32Mb)26 b(\014le)g(w)n(ould)g(b)r(e)h(split)f(in)n(to)h(1024)d
-Fq(DBlo)l(cks)p Fx(,)j Fp(B)2186 1154 y Fw(1)2223 1142
-y Fp(;)14 b(:)g(:)g(:)g(;)g(B)2471 1154 y Fw(1024)2607
-1142 y Fx(,)27 b(of)f(length)h(32Kb)e(eac)n(h.)523 1242
+717 y(the)i(con)n(ten)n(t.)f(F)-7 b(or)33 b(example,)g(with)g(a)g(blo)r
+(c)n(ksize)g(of)g(32Kb)f(and)h(512-bit)g(hash)f(co)r(des,)h(a)523
+816 y(32Mb)26 b(\014le)g(w)n(ould)g(b)r(e)h(split)f(in)n(to)h(1024)d
+Fq(DBlo)l(cks)p Fx(,)j Fp(B)2186 828 y Fw(1)2223 816
+y Fp(;)14 b(:)g(:)g(:)g(;)g(B)2471 828 y Fw(1024)2607
+816 y Fx(,)27 b(of)f(length)h(32Kb)e(eac)n(h.)523 916
y(Groups)e(of)g(up)h(to)f(256)f(CHKs)h(are)g(assem)n(bled)f(in)n(to)i
(one)f(32Kb)f Fq(IBlo)l(ck)p Fx(,)j(resulting)e(in)g(four)523
-1341 y Fq(IBlo)l(ck)p Fx(s)j(for)f(the)g(32Mb)f(\014le.)i(The)f
+1016 y Fq(IBlo)l(ck)p Fx(s)j(for)f(the)g(32Mb)f(\014le.)i(The)f
(resulting)f Fq(IBlo)l(ck)p Fx(s)i(are)e(CHK)h(encrypted)g(in)g(the)h
-(exact)523 1441 y(same)c(manner)h(as)f(the)h Fq(DBlo)l(cks)h
+(exact)523 1115 y(same)c(manner)h(as)f(the)h Fq(DBlo)l(cks)h
Fx(and)f(their)g(CHK-k)n(eys)e(are)h(again)g(group)r(ed)g(in)n(to)h
-Fq(IBlo)l(cks)523 1541 y Fx(un)n(til)j(only)e(one)h(CHK)g(k)n(ey)g(is)g
+Fq(IBlo)l(cks)523 1215 y Fx(un)n(til)j(only)e(one)h(CHK)g(k)n(ey)g(is)g
(left.)h(F)-7 b(or)24 b(the)i(32Mb)e(\014le,)i(the)f(CHKs)g(for)g(the)g
-(four)g Fq(IBlo)l(ck)p Fx(s)523 1640 y(are)g(th)n(us)h(collected)g(in)h
+(four)g Fq(IBlo)l(ck)p Fx(s)523 1315 y(are)g(th)n(us)h(collected)g(in)h
(one)f(\014nal)g(top)g Fq(IBlo)l(ck)p Fx(.)h(The)f(additional)g(space)g
-(requiremen)n(ts)f(for)523 1740 y(enco)r(ding)i(the)h(\014le)g(are)f(t)
+(requiremen)n(ts)f(for)523 1414 y(enco)r(ding)i(the)h(\014le)g(are)f(t)
n(ypically)g(less)g(than)g(1\045)h(of)f(the)h(original)e(\014le)i
-(size.)523 1895 y
+(size.)523 1582 y
SDict begin H.S end
- 523 1895 a 523 1895 a
+ 523 1582 a 523 1582 a
SDict begin 12 H.A end
- 523 1895 a 523
-1895 a
+ 523 1582 a 523
+1582 a
SDict begin [ /View [/XYZ H.V] /Dest (subsection.1.3.4) cvn H.B /DEST
pdfmark end
- 523 1895 a 84 x Fo(3.4)95 b(Finding)30 b(\014les)523
-2135 y Fx(The)35 b(CHK)h(enco)r(ding)e(describ)r(ed)i(so)e(far)h(is)g
+ 523 1582 a 84 x Fo(3.4)95 b(Finding)30 b(\014les)523
+1835 y Fx(The)35 b(CHK)h(enco)r(ding)e(describ)r(ed)i(so)e(far)h(is)g
(useful)h(for)f(transmitting)g(con)n(ten)n(t)g(that)g(is)523
-2234 y(enco)r(ded)e(and)h(y)n(et)f(v)n(eri\014able)f(for)h(in)n
+1934 y(enco)r(ded)e(and)h(y)n(et)f(v)n(eri\014able)f(for)h(in)n
(termediaries.)f(Ho)n(w)n(ev)n(er,)f(a)i(practical)g(\014le-sharing)523
-2334 y(sc)n(heme)28 b(needs)h(to)f(pro)n(vide)g(functionalit)n(y)g(suc)
+2034 y(sc)n(heme)28 b(needs)h(to)f(pro)n(vide)g(functionalit)n(y)g(suc)
n(h)h(that)f(the)h(users)f(can)g(obtain)h(the)g(query)523
-2434 y(hash)k(and)g(the)h(k)n(ey)e(that)i(are)e(no)n(w)h(necessary)e
+2134 y(hash)k(and)g(the)h(k)n(ey)e(that)i(are)e(no)n(w)h(necessary)e
(in)j(order)d(to)j(retriev)n(e)e(and)h(decrypt)g(the)523
-2533 y(enco)r(ded)f(con)n(ten)n(t.)g(While)h(out-of-band)e(comm)n
+2233 y(enco)r(ded)f(con)n(ten)n(t.)g(While)h(out-of-band)e(comm)n
(unication)h(of)g(those)g(CHK)g(k)n(eys)f(is)h(cer-)523
-2633 y(tainly)22 b(feasible,)g(an)g(in)n(tegrated)f(solution)g(is)h
+2333 y(tainly)22 b(feasible,)g(an)g(in)n(tegrated)f(solution)g(is)h
(clearly)f(desirable.)g(Related)h(w)n(ork)f(on)h(secure)523
-2733 y(indexing)28 b([)p 0 1 0 TeXcolorrgb 881 2733 a
+2433 y(indexing)28 b([)p 0 1 0 TeXcolorrgb 881 2433 a
SDict begin H.S end
-881 2733 a 0 1 0 TeXcolorrgb Fx(11)p 0 1 0 TeXcolorrgb
-964 2679 a
+881 2433 a 0 1 0 TeXcolorrgb Fx(10)p 0 1 0 TeXcolorrgb
+964 2379 a
SDict begin H.R end
- 964 2679 a 964 2733 a
+ 964 2379 a 964 2433 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.secure2004goh) cvn H.B /ANN pdfmark end
- 964 2733 a Black Fx(])h(allo)n(ws)e
+ 964 2433 a Black Fx(])h(allo)n(ws)e
(serv)n(ers)g(to)h(retriev)n(e)g(do)r(cumen)n(ts)g(b)n(y)g(k)n(eyw)n
-(ord)f(without)i(learning)523 2832 y(ab)r(out)g(the)g(rest)g(of)g(the)g
+(ord)f(without)i(learning)523 2532 y(ab)r(out)g(the)g(rest)g(of)g(the)g
(do)r(cumen)n(t.)g(The)g(sc)n(heme)g(describ)r(ed)g(in)g(this)g
-(section)g(impro)n(v)n(es)523 2932 y(on)h(this)g(b)n(y)g(k)n(eeping)g
+(section)g(impro)n(v)n(es)523 2632 y(on)h(this)g(b)n(y)g(k)n(eeping)g
(the)g(k)n(eyw)n(ord)f(itself)h(priv)-5 b(ate.)30 b(Additionally)-7
-b(,)31 b(it)f(still)h(allo)n(ws)e(in)n(ter-)523 3031
+b(,)31 b(it)f(still)h(allo)n(ws)e(in)n(ter-)523 2731
y(mediaries)23 b(to)g(v)n(erify)g(the)h(correct)e(op)r(eration)g(of)i
(the)f(serv)n(er.)f(It)i(also)e(a)n(v)n(oids)g(the)i(need)g(for)523
-3131 y(the)i(publisher)f(to)g(encrypt)h(the)f(do)r(cumen)n(t)h(with)g
+2831 y(the)i(publisher)f(to)g(encrypt)h(the)f(do)r(cumen)n(t)h(with)g
(the)g(public)g(k)n(ey)e(of)i(a)f Fq(sp)l(e)l(ci\014c)h
-Fx(receiv)n(er,)523 3231 y(thereb)n(y)d(theoretically)f(p)r(ermitting)i
+Fx(receiv)n(er,)523 2931 y(thereb)n(y)d(theoretically)f(p)r(ermitting)i
(arbitrary)d(participan)n(ts)h(to)h(access)g(same)f(encrypted)523
-3330 y(con)n(ten)n(t)27 b(\(as)g(long)g(as)g(they)h(are)f(able)g(to)g
+3030 y(con)n(ten)n(t)27 b(\(as)g(long)g(as)g(they)h(are)f(able)g(to)g
(obtain)h(or)e(guess)h(the)h(necessary)e(k)n(eyw)n(ord\).)648
-3430 y(The)e(k)n(ey)g(problem)g(for)g(the)h(searc)n(h)e(is)h(that)h
+3131 y(The)e(k)n(ey)g(problem)g(for)g(the)h(searc)n(h)e(is)h(that)h
(simply)f(publishing)h(CHK)f(k)n(eys)g(in)g(plain-)523
-3530 y(text)36 b(under)g(certain)f(k)n(eyw)n(ords)f(\(as)h(done)h(in)g
+3230 y(text)36 b(under)g(certain)f(k)n(eyw)n(ords)f(\(as)h(done)h(in)g
(F)-7 b(reenet)35 b(with)i(KSK)e(k)n(eys\))g(has)g(v)-5
-b(arious)523 3629 y(dra)n(wbac)n(ks.)24 b(First,)i(in)n(termediaries)f
+b(arious)523 3330 y(dra)n(wbac)n(ks.)24 b(First,)i(in)n(termediaries)f
(w)n(ould)h(learn)g(ab)r(out)g(the)g(CHK)h(k)n(eys)e(that)i(they)f(are)
-523 3729 y(storing)i(or)g(transmitting,)h(whic)n(h)h(could)f(allo)n(w)f
+523 3429 y(storing)i(or)g(transmitting,)h(whic)n(h)h(could)f(allo)n(w)f
(them)h(to)g(easily)g(censor)f(searc)n(h)f(results.)523
-3828 y(Second,)36 b(the)g(k)n(eyw)n(ords)d(are)i(directly)h(exp)r(osed)
+3529 y(Second,)36 b(the)g(k)n(eyw)n(ords)d(are)i(directly)h(exp)r(osed)
f(to)h(the)g(in)n(termediaries,)e(whic)n(h)i(again)523
-3928 y(w)n(ould)31 b(facilitate)f(censorship.)g(Finally)-7
+3629 y(w)n(ould)31 b(facilitate)f(censorship.)g(Finally)-7
b(,)31 b(p)r(eers)g(w)n(ould)f(b)r(e)i(able)e(to)h(send)g(in)n(v)-5
-b(alid)31 b(replies)523 4028 y(that)37 b(refer)f(to)h(inappropriate)e
+b(alid)31 b(replies)523 3728 y(that)37 b(refer)f(to)h(inappropriate)e
(con)n(ten)n(t.)h(This)h(ma)n(y)f(b)r(e)h(just)g(a)g(n)n(uisance)f(if)h
-(malicious)523 4127 y(p)r(eers)c(use)g(this)h(for)f(adv)n(ertising)f
+(malicious)523 3828 y(p)r(eers)c(use)g(this)h(for)f(adv)n(ertising)f
(\(a)h(kind)h(of)f(b)r(eha)n(vior)g(can)g(b)r(e)h(observ)n(ed)d(on)j
-(gn)n(utella)523 4227 y(from)c(time)h(to)g(time\).)h(P)n(ossibly)c(w)n
+(gn)n(utella)523 3928 y(from)c(time)h(to)g(time\).)h(P)n(ossibly)c(w)n
(orse,)i(if)h(a)f(net)n(w)n(ork)f(w)n(an)n(ts)h(to)g(economically)g
-(rew)n(ard)523 4327 y(p)r(eers)24 b(for)f(returning)h(searc)n(h)e
+(rew)n(ard)523 4027 y(p)r(eers)24 b(for)f(returning)h(searc)n(h)e
(results,)i(the)g(p)r(ossibilit)n(y)g(of)g(returning)g(arbitrary)e
-(nonsense)523 4426 y(migh)n(t)28 b(mak)n(e)e(suc)n(h)i(incen)n(tiv)n(e)
-f(sc)n(hemes)g(impractical.)648 4526 y(W)-7 b(e)32 b(will)g(no)n(w)f
+(nonsense)523 4127 y(migh)n(t)28 b(mak)n(e)e(suc)n(h)i(incen)n(tiv)n(e)
+f(sc)n(hemes)g(impractical.)648 4227 y(W)-7 b(e)32 b(will)g(no)n(w)f
(describ)r(e)h(ho)n(w)f(information)g(ab)r(out)h(CHK)g(k)n(eys)f(that)h
-(are)f(necessary)523 4625 y(to)24 b(retriev)n(e)e(a)h(\014le)h(can)f(b)
+(are)f(necessary)523 4327 y(to)24 b(retriev)n(e)e(a)h(\014le)h(can)f(b)
r(e)h(obtained)f(b)n(y)h(searc)n(hing)d(using)j(natural)e(language)g
-Fq(keywor)l(ds)j Fx({)523 4725 y(without)e(rev)n(ealing)e(the)i(k)n
+Fq(keywor)l(ds)j Fx({)523 4426 y(without)e(rev)n(ealing)e(the)i(k)n
(eyw)n(ords)e(to)i(in)n(termediaries.)e(Searc)n(hing)h(requires)f(the)i
-(con)n(ten)n(t)523 4825 y(pro)n(vider)30 b(to)h(supply)g(metadata)f(ab)
+(con)n(ten)n(t)523 4526 y(pro)n(vider)30 b(to)h(supply)g(metadata)f(ab)
r(out)h(the)h(\014le;)f(in)h(particular,)d(the)j(con)n(ten)n(t)f(pro)n
-(vider)523 4924 y(m)n(ust)e(supply)g(a)g(list)g(of)g(k)n(eyw)n(ords.)e
-(While)j(the)g(metadata)e(is)h(published)h(as)e(part)h(of)g(the)p
-Black Black eop end
+(vider)523 4625 y(m)n(ust)e(supply)g(a)g(list)g(of)g(k)n(eyw)n(ords.)e
+(While)j(the)g(metadata)e(is)h(published)h(as)e(part)h(of)g(the)523
+4725 y Fq(KBlo)l(ck)g Fx(and)e(made)g(a)n(v)-5 b(ailable)26
+b(to)i(the)f(recipien)n(t)g(the)h(k)n(eyw)n(ords)e(are)g(only)h(used)g
+(to)h(com-)523 4825 y(pute)j(the)g Fq(KBlo)l(ck)p Fx(s)g(and)f(not)g
+(made)g(a)n(v)-5 b(ailable)29 b(to)h(other)g(users)g(directly)-7
+b(.)30 b(It)g(is)h(assumed)523 4924 y(that)e(the)g(user)f(searc)n(hing)
+f(for)h(data)g(is)h(able)f(to)h Fq(guess)g Fx(at)f(least)g(one)h(of)f
+(these)h(k)n(eyw)n(ords.)p Black Black eop end
%%Page: 10 10
TeXDict begin 10 9 bop 0 0 a
SDict begin /product where{pop product(Distiller)search{pop pop pop
@@ -6806,113 +6796,114 @@
end
523 232 a Black Fu(10)199 b(C.)27
b(Grotho\013,)f(K.)g(Grotho\013,)g(T.)h(Horozo)n(v,)f(J.T.)h(Lindgren)p
-Black 523 448 a Fq(KBlo)l(ck)i Fx(and)e(made)g(a)n(v)-5
-b(ailable)26 b(to)i(the)f(recipien)n(t)g(the)h(k)n(eyw)n(ords)e(are)g
-(only)h(used)g(to)h(com-)523 548 y(pute)j(the)g Fq(KBlo)l(ck)p
-Fx(s)g(and)f(not)g(made)g(a)n(v)-5 b(ailable)29 b(to)h(other)g(users)g
-(directly)-7 b(.)30 b(It)g(is)h(assumed)523 648 y(that)e(the)g(user)f
-(searc)n(hing)f(for)h(data)g(is)h(able)f(to)h Fq(guess)g
-Fx(at)f(least)g(one)h(of)f(these)h(k)n(eyw)n(ords.)523
-747 y(The)24 b(nature)g(of)g(the)h(searc)n(h)d(implies)j(that)f(there)g
-(is)g(no)g(direct,)h(cryptographically)c(v)n(eri\014-)523
-847 y(able)h(relation)f(b)r(et)n(w)n(een)h(the)g(k)n(eyw)n(ord)e(and)i
-(the)g(con)n(ten)n(t.)g(Man)n(y)f(\014les)h(can)g(matc)n(h)f(a)h(giv)n
-(en)523 946 y(k)n(eyw)n(ord.)h(Di\013eren)n(t)j(users)e(ma)n(y)h
+Black 523 448 a Fx(The)d(nature)g(of)g(the)h(searc)n(h)d(implies)j
+(that)f(there)g(is)g(no)g(direct,)h(cryptographically)c(v)n(eri\014-)
+523 548 y(able)h(relation)f(b)r(et)n(w)n(een)h(the)g(k)n(eyw)n(ord)e
+(and)i(the)g(con)n(ten)n(t.)g(Man)n(y)f(\014les)h(can)g(matc)n(h)f(a)h
+(giv)n(en)523 648 y(k)n(eyw)n(ord.)h(Di\013eren)n(t)j(users)e(ma)n(y)h
(sometimes)g(ha)n(v)n(e)f(a)h(di\013eren)n(t)g(p)r(erception)g(of)g
-(what)g(is)g(a)523 1046 y(correct)i(seman)n(tic)g(matc)n(h.)h(Th)n(us,)
-g(a)f(k)n(eyw)n(ord)g(searc)n(h)f(alw)n(a)n(ys)g(has)i(the)g(p)r(oten)n
-(tial)g(of)g(re-)523 1146 y(sulting)21 b(in)h(searc)n(h)e(results)h
+(what)g(is)g(a)523 747 y(correct)i(seman)n(tic)g(matc)n(h.)h(Th)n(us,)g
+(a)f(k)n(eyw)n(ord)g(searc)n(h)f(alw)n(a)n(ys)g(has)i(the)g(p)r(oten)n
+(tial)g(of)g(re-)523 847 y(sulting)21 b(in)h(searc)n(h)e(results)h
(that)g(a)g(user)g(ma)n(y)g(\014nd)h(inappropriate.)e(It)h(is)h(also)e
-(not)h(p)r(ossible)523 1245 y(to)28 b(prev)n(en)n(t)g(a)f(user)h(from)g
+(not)h(p)r(ossible)523 946 y(to)28 b(prev)n(en)n(t)g(a)f(user)h(from)g
(supplying)g(k)n(eyw)n(ords)e(that)i(ha)n(v)n(e)g(no)f(seman)n(tic)h
-(relation)f(with)523 1345 y(the)f(con)n(ten)n(t)e(and)h(thereb)n(y)g
+(relation)f(with)523 1046 y(the)f(con)n(ten)n(t)e(and)h(thereb)n(y)g
(increasing)f(the)h(c)n(hance)g(of)g(other)f(users)g(\014nding)i
-(undesirable)523 1445 y(results)h(for)g(those)g(k)n(eyw)n(ords.)648
-1608 y(Despite)38 b(these)g(fundamen)n(tal)h(dra)n(wbac)n(ks,)c(ECRS)j
-(should)g(\(and)g(can\))g(giv)n(e)g(some)523 1708 y(un)n(usual)e
+(undesirable)523 1146 y(results)h(for)g(those)g(k)n(eyw)n(ords.)648
+1268 y(Despite)38 b(these)g(fundamen)n(tal)h(dra)n(wbac)n(ks,)c(ECRS)j
+(should)g(\(and)g(can\))g(giv)n(e)g(some)523 1368 y(un)n(usual)e
Fq(guar)l(ante)l(es)f Fx(for)h(k)n(eyw)n(ord-based)d(searc)n(hes.)h
-(First,)i(the)g(k)n(eyw)n(ord)e(used)i(for)f(a)523 1807
+(First,)i(the)g(k)n(eyw)n(ord)e(used)i(for)f(a)523 1468
y(searc)n(h)28 b(is)h(not)g(exp)r(osed)f(to)h(in)n(termediaries)f(in)i
(a)e(w)n(a)n(y)g(that)i(w)n(ould)e(allo)n(w)g(them)i(to)f(eas-)523
-1907 y(ily)g(exercise)g(editorial)f(con)n(trol)g(\(i.e.)i(to)f(censor)f
+1567 y(ily)g(exercise)g(editorial)f(con)n(trol)g(\(i.e.)i(to)f(censor)f
(queries\).)h(Note)g(again)g(that)g(a)g(guessing)523
-2007 y(attac)n(k)35 b(in)h(whic)n(h)g(the)h(in)n(termediary)d(guesses)h
+1667 y(attac)n(k)35 b(in)h(whic)n(h)g(the)h(in)n(termediary)d(guesses)h
(a)h(k)n(eyw)n(ord,)e(computes)h(the)i(resp)r(ectiv)n(e)523
-2106 y(query)d(hash,)h(and)g(attempts)h(to)f(matc)n(h)g(the)g(query)g
+1767 y(query)d(hash,)h(and)g(attempts)h(to)f(matc)n(h)g(the)g(query)g
(hash)f(to)h(the)h(incoming)f(query)-7 b(,)34 b(is)523
-2206 y(considered)c(acceptable;)g(plausible)h(deniabilit)n(y)g(for)f
-(the)h(in)n(termediaries)f(is)h(una\013ected)523 2306
+1866 y(considered)c(acceptable;)g(plausible)h(deniabilit)n(y)g(for)f
+(the)h(in)n(termediaries)f(is)h(una\013ected)523 1966
y(b)n(y)c(this)g(attac)n(k.)f(Secondly)-7 b(,)26 b(only)h(p)r(eers)f
(that)h(ha)n(v)n(e)f(con)n(ten)n(t)g(a)n(v)-5 b(ailable)26
-b(under)h(the)g(giv)n(en)523 2405 y(k)n(eyw)n(ord)32
+b(under)h(the)g(giv)n(en)523 2065 y(k)n(eyw)n(ord)32
b(should)h(b)r(e)h(able)g(to)f(pro)r(duce)h(a)f(v)-5
b(alid)34 b(resp)r(onse.)e(In)i(other)f(w)n(ords,)g(the)h(ulti-)523
-2505 y(mate)24 b(resp)r(onder)e(m)n(ust)i(ha)n(v)n(e)e(succeeded)h(in)h
+2165 y(mate)24 b(resp)r(onder)e(m)n(ust)i(ha)n(v)n(e)e(succeeded)h(in)h
(guessing)f(the)h(k)n(eyw)n(ord.)d(This)j(is)f(imp)r(ortan)n(t)523
-2605 y(since)f(it)g(prev)n(en)n(ts)f(p)r(eers)g(from)h(making)f(up)i
+2265 y(since)f(it)g(prev)n(en)n(ts)f(p)r(eers)g(from)h(making)f(up)i
(replies)e(for)g(arbitrary)f(requests)h(on-the-\015y)-7
-b(.)22 b(If)523 2704 y(p)r(eers)e(w)n(ere)g(able)h(to)g(resp)r(ond)f
+b(.)22 b(If)523 2364 y(p)r(eers)e(w)n(ere)g(able)h(to)g(resp)r(ond)f
(to)h(an)n(y)f(k)n(eyw)n(ord)f(query)h(without)h(ha)n(ving)f(to)h(at)f
-(least)h(guess)523 2804 y(the)33 b(k)n(eyw)n(ord,)f(they)h(could)f(use)
+(least)h(guess)523 2464 y(the)33 b(k)n(eyw)n(ord,)f(they)h(could)f(use)
h(this)h(to)e(spam)h(ev)n(ery)f(p)r(ossible)g(searc)n(h,)g(rendering)g
-(the)523 2903 y(k)n(eyw)n(ord)e(searc)n(h)g(mostly)i(useless.)f(F)-7
+(the)523 2564 y(k)n(eyw)n(ord)e(searc)n(h)g(mostly)i(useless.)f(F)-7
b(orcing)31 b(resp)r(onders)f(to)i(guess)f(k)n(eyw)n(ords)f(do)r(es)h
-(not)523 3003 y(eliminate)c(the)g(problem)f(completely;)h(ho)n(w)n(ev)n
+(not)523 2663 y(eliminate)c(the)g(problem)f(completely;)h(ho)n(w)n(ev)n
(er,)d(it)j(do)r(es)g(limit)g(the)g(attac)n(k)f(to)h(the)g(com-)523
-3103 y(mon,)33 b(easily-guessed)d(k)n(eyw)n(ords.)g(Finally)-7
+2763 y(mon,)33 b(easily-guessed)d(k)n(eyw)n(ords.)g(Finally)-7
b(,)33 b(the)g(v)n(eri\014cation)e(that)i(a)f(resp)r(onse)g(is)g(v)-5
-b(alid)523 3202 y(should)27 b(b)r(e)h(p)r(ossible)g(not)f(only)g(for)h
+b(alid)523 2862 y(should)27 b(b)r(e)h(p)r(ossible)g(not)f(only)g(for)h
(the)f(\014nal)h(recipien)n(t,)f(but)h(also)f(for)g(in)n(termediaries.)
-648 3366 y(ECRS)43 b(ac)n(hiev)n(es)g(all)h(of)g(this)g(with)h(a)f
+648 2985 y(ECRS)43 b(ac)n(hiev)n(es)g(all)h(of)g(this)g(with)h(a)f
Fq(new)h(crypto)l(gr)l(aphic)i(primitive)f Fx(called)e
-Fp(K)6 b Fq(-)523 3466 y(deterministic)40 b(keys)f Fx(whic)n(h)f(is)g
-(a)g(k)n(ey)f(pair)g(\()p Fp(P)12 b(ub)2167 3481 y Ff(H)t
-Fw(\()p Ff(K)t Fw(\))2341 3466 y Fp(;)i(P)e(r)r(v)2522
-3481 y Ff(H)t Fw(\()p Ff(K)t Fw(\))2698 3466 y Fx(\))38
-b(generated)f(from)g(a)523 3565 y(k)n(eyw)n(ord)32 b
+Fp(K)6 b Fq(-)523 3085 y(deterministic)40 b(keys)f Fx(whic)n(h)f(is)g
+(a)g(k)n(ey)f(pair)g(\()p Fp(P)12 b(ub)2167 3100 y Ff(H)t
+Fw(\()p Ff(K)t Fw(\))2341 3085 y Fp(;)i(P)e(r)r(v)2522
+3100 y Ff(H)t Fw(\()p Ff(K)t Fw(\))2698 3085 y Fx(\))38
+b(generated)f(from)g(a)523 3184 y(k)n(eyw)n(ord)32 b
Fp(K)6 b Fx(.)34 b(The)g(hash)f Fp(H)7 b Fx(\()p Fp(K)f
Fx(\))34 b(of)g(the)g(k)n(eyw)n(ord)e(is)i(used)g(as)f(the)i(seed)e
-(and)h(the)g(only)523 3665 y(input)26 b(to)e(the)h(pseudo-random)e(n)n
+(and)h(the)g(only)523 3284 y(input)26 b(to)e(the)h(pseudo-random)e(n)n
(um)n(b)r(er)i(generator)d(that)j(generates)e(the)i(public-priv)-5
-b(ate)523 3764 y(k)n(ey)23 b(pair.)f(The)i(authors)e(are)g(not)i(a)n(w)
+b(ate)523 3384 y(k)n(ey)23 b(pair.)f(The)i(authors)e(are)g(not)i(a)n(w)
n(are)d(of)i(an)n(y)g(previous)f(use)h(of)g Fp(K)6 b
-Fx(-deterministic)23 b(k)n(eys.)523 3864 y(Giv)n(en)g(suc)n(h)g(a)g(k)n
+Fx(-deterministic)23 b(k)n(eys.)523 3483 y(Giv)n(en)g(suc)n(h)g(a)g(k)n
(ey)f(pair,)h(the)g(inserting)g(p)r(eer)g(generates)e
Fq(KBlo)l(ck)p Fx(s)k(b)n(y)d(signing)h(the)g(meta-)523
-3964 y(data)30 b(necessary)g(to)h(do)n(wnload)e(the)i(\014le)h(with)f
-Fp(P)12 b(r)r(v)2186 3979 y Ff(H)t Fw(\()p Ff(K)t Fw(\))2362
-3964 y Fx(.)31 b Fq(KBlo)l(ck)p Fx(s)h(are)d(essen)n(tially)h(lik)n(e)
-523 4063 y Fq(SBlo)l(ck)p Fx(s)k(with)g(the)g(di\013erence)f(that)h
+3583 y(data)30 b(necessary)g(to)h(do)n(wnload)e(the)i(\014le)h(with)f
+Fp(P)12 b(r)r(v)2186 3598 y Ff(H)t Fw(\()p Ff(K)t Fw(\))2362
+3583 y Fx(.)31 b Fq(KBlo)l(ck)p Fx(s)h(are)d(essen)n(tially)h(lik)n(e)
+523 3683 y Fq(SBlo)l(ck)p Fx(s)k(with)g(the)g(di\013erence)f(that)h
(the)f Fp(K)6 b Fx(-determinate)33 b(k)n(ey)g(is)g(used)g(instead)g(of)
-h(the)523 4163 y(pseudon)n(ym.)27 b(The)h(construction)f(of)g(a)g
+h(the)523 3782 y(pseudon)n(ym.)27 b(The)h(construction)f(of)g(a)g
Fq(KBlo)l(ck)i Fx(is)e(sho)n(wn)g(in)h(Figure)p 1 0 0
-TeXcolorrgb 2770 4163 a
+TeXcolorrgb 2770 3782 a
SDict begin H.S end
- 2770 4163 a 1 0 0 TeXcolorrgb
-Fx(2)p 1 0 0 TeXcolorrgb 2812 4109 a
+ 2770 3782 a 1 0 0 TeXcolorrgb
+Fx(2)p 1 0 0 TeXcolorrgb 2812 3729 a
SDict begin H.R end
- 2812 4109 a 2812
-4163 a
+ 2812 3729 a 2812
+3782 a
SDict begin [ /Color [1 0 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(figure.1.2) cvn H.B /ANN pdfmark end
- 2812 4163 a Black Fx(.)648 4327 y(A)c(p)r(eer)h(searc)n(hing)d
+ 2812 3782 a Black Fx(.)648 3905 y(A)c(p)r(eer)h(searc)n(hing)d
(for)i Fp(K)30 b Fx(also)23 b(computes)i Fp(P)12 b(ub)2177
-4342 y Ff(H)t Fw(\()p Ff(K)t Fw(\))2375 4327 y Fx(using)24
-b(the)h(same)f(deterministic)523 4426 y(k)n(ey-generation)32
-b(algorithm)g(\()p Fp(P)12 b(r)r(v)1646 4441 y Ff(H)t
-Fw(\()p Ff(K)t Fw(\))1857 4426 y Fx(is)33 b(also)g(computed)i(but)g
-(not)f(used\).)g(The)g(p)r(eer)523 4526 y(then)k(uses)f
-Fp(H)7 b Fx(\()p Fp(P)12 b(ub)1165 4541 y Ff(H)t Fw(\()p
-Ff(K)t Fw(\))1339 4526 y Fx(\))38 b(as)f(the)h(query)f(hash.)g(In)n
-(termediaries)f(can)h(v)n(erify)g(that)h(the)523 4625
+3920 y Ff(H)t Fw(\()p Ff(K)t Fw(\))2375 3905 y Fx(using)24
+b(the)h(same)f(deterministic)523 4005 y(k)n(ey-generation)32
+b(algorithm)g(\()p Fp(P)12 b(r)r(v)1646 4020 y Ff(H)t
+Fw(\()p Ff(K)t Fw(\))1857 4005 y Fx(is)33 b(also)g(computed)i(but)g
+(not)f(used\).)g(The)g(p)r(eer)523 4104 y(then)k(uses)f
+Fp(H)7 b Fx(\()p Fp(P)12 b(ub)1165 4119 y Ff(H)t Fw(\()p
+Ff(K)t Fw(\))1339 4104 y Fx(\))38 b(as)f(the)h(query)f(hash.)g(In)n
+(termediaries)f(can)h(v)n(erify)g(that)h(the)523 4204
y(resp)r(onse)30 b(is)h(v)-5 b(alid)31 b(b)n(y)f(c)n(hec)n(king)g(the)h
Fq(KBlo)l(ck)p Fx(s)h(signature)e(against)f(its)i(public)h(k)n(ey)-7
-b(,)30 b(and)523 4725 y(c)n(hec)n(king)i(that)i(the)f(public)h(k)n(ey)f
+b(,)30 b(and)523 4303 y(c)n(hec)n(king)i(that)i(the)f(public)h(k)n(ey)f
(hashes)f(to)h(the)h(query)e(hash.)h(Y)-7 b(et)34 b(in)n(termediaries)e
-(are)523 4825 y(unable)21 b(to)h(decrypt)f(the)g(resp)r(onse)g(or)f
+(are)523 4403 y(unable)21 b(to)h(decrypt)f(the)g(resp)r(onse)g(or)f
(learn)h(the)g(k)n(eyw)n(ord)f Fp(K)27 b Fx(that)21 b(w)n(as)g(used)g
-(to)g(generate)523 4924 y(the)28 b(public)g(k)n(ey)f(without)h
-(guessing.)p Black Black eop end
+(to)g(generate)523 4503 y(the)28 b(public)g(k)n(ey)f(without)h
+(guessing.)648 4625 y(In)20 b(conclusion,)g(using)g Fq(KBlo)l(ck)p
+Fx(s)h(it)f(is)h(p)r(ossible)f(to)g(allo)n(w)f(in)n(termediaries)g(to)h
+(v)n(erify)g(the)523 4725 y(in)n(tegrit)n(y)h(of)h(replies)f(without)i
+(learning)d(the)j(plain)n(text)e(of)h(the)h(k)n(eyw)n(ord)d(or)h(the)h
+(resp)r(onse.)523 4825 y Fq(KBlo)l(ck)p Fx(s)f(require)e(a)h(k)n(eyw)n
+(ord)f(guess,)g(making)h(it)h(it)f(harder)f(to)i(reply)e(to)i
+(arbitrary)d(queries)523 4924 y(with)36 b(random)f(data;)g(they)h
+(cannot)f(prev)n(en)n(t)g(users)f(from)i(inserting)f(suc)n(h)g(data)g
+(under)p Black Black eop end
%%Page: 11 11
TeXDict begin 11 10 bop 0 0 a
SDict begin /product where{pop product(Distiller)search{pop pop pop
@@ -6986,164 +6977,168 @@
1638 y(k)n(ey)i Fp(P)12 b(ub)822 1653 y Ff(H)t Fw(\()p
Ff(K)t Fw(\))1023 1638 y Fx(is)28 b(app)r(ended)g(to)f(the)h(signed)f
(data)g(to)h(form)f(the)h Fq(KBlo)l(ck)p Fx(.)p Black
-Black Black Black 523 1942 2882 4 v 523 2013 a
+Black Black Black 523 1917 2882 4 v 523 1988 a
SDict begin H.S end
- 523 2013
-a 523 2013 a
+ 523 1988
+a 523 1988 a
SDict begin 11 H.A end
- 523 2013 a 523 2013 a
+ 523 1988 a 523 1988 a
SDict begin [ /View [/XYZ H.V] /Dest (Item.1) cvn H.B /DEST pdfmark
end
- 523 2013 a Black 563
-2069 a Fu(1.)p Black 42 w(Input:)d(Con)n(ten)n(t)g Fm(C)5
+ 523 1988 a Black 563
+2044 a Fu(1.)p Black 42 w(Input:)d(Con)n(ten)n(t)g Fm(C)5
b Fu(,)26 b(a)g(list)h(of)f(k)n(eyw)n(ords)f Fb(f)p Fm(K)2014
-2077 y Fv(1)2049 2069 y Fm(;)14 b(:::)p Fb(g)27 b Fu(and)e(metadata)h
-Fm(D)r Fu(.)523 2088 y
+2052 y Fv(1)2049 2044 y Fm(;)14 b(:::)p Fb(g)27 b Fu(and)e(metadata)h
+Fm(D)r Fu(.)523 2063 y
SDict begin H.S end
- 523 2088 a 523 2088 a
+ 523 2063 a 523 2063 a
SDict begin 11 H.A end
- 523 2088
-a 523 2088 a
+ 523 2063
+a 523 2063 a
SDict begin [ /View [/XYZ H.V] /Dest (Item.2) cvn H.B /DEST pdfmark
end
- 523 2088 a Black 563 2160 a Fu(2.)p Black
+ 523 2063 a Black 563 2135 a Fu(2.)p Black
42 w(Split)g(con)n(ten)n(t)f Fm(C)30 b Fu(in)n(to)c(blo)r(c)n(ks)g
-Fm(B)1653 2168 y Fh(i)1680 2160 y Fu(,)f(eac)n(h)h(of)h(size)f(32Kb.)g
-(Call)i(these)d Fn(DBlo)l(cks)p Fu(.)523 2175 y
+Fm(B)1653 2143 y Fh(i)1680 2135 y Fu(,)f(eac)n(h)h(of)h(size)f(32Kb.)g
+(Call)i(these)d Fn(DBlo)l(cks)p Fu(.)523 2150 y
SDict begin H.S end
- 523 2175
-a 523 2175 a
+ 523 2150
+a 523 2150 a
SDict begin 11 H.A end
- 523 2175 a 523 2175 a
+ 523 2150 a 523 2150 a
SDict begin [ /View [/XYZ H.V] /Dest (Item.3) cvn H.B /DEST pdfmark
end
- 523 2175 a Black 563
-2252 a Fu(3.)p Black 42 w(Compute)f(hash)f(v)l(alues)h
-Fm(H)1469 2216 y Fh(k)q(ey)1463 2272 y(i)1590 2252 y
-Fu(=)d Fm(H)6 b Fu(\()p Fm(B)1829 2260 y Fh(i)1855 2252
-y Fu(\),)23 b Fm(E)1986 2260 y Fh(i)2034 2252 y Fu(=)e
-Fm(E)2172 2260 y Fh(H)2222 2272 y Fe(k)q(ey)2321 2252
-y Fu(\()p Fm(B)2409 2260 y Fh(i)2436 2252 y Fu(\))i(and)g
-Fm(H)2706 2216 y Fh(q)r(uer)r(y)2700 2272 y(i)2891 2252
-y Fu(=)e Fm(H)6 b Fu(\()p Fm(E)3129 2260 y Fh(i)3154
-2252 y Fu(\).)24 b(F)-6 b(orm)664 2358 y Fn(CHK)835 2366
-y Fh(i)887 2358 y Fu(from)26 b(\()p Fm(H)1168 2323 y
-Fh(q)r(uer)r(y)1162 2378 y(i)1332 2358 y Fm(;)13 b(H)1436
-2323 y Fh(k)q(ey)1430 2378 y(i)1536 2358 y Fu(\).)26
+ 523 2150 a Black 563
+2227 a Fu(3.)p Black 42 w(Compute)f(hash)f(v)l(alues)h
+Fm(H)1469 2191 y Fh(k)q(ey)1463 2247 y(i)1590 2227 y
+Fu(=)d Fm(H)6 b Fu(\()p Fm(B)1829 2235 y Fh(i)1855 2227
+y Fu(\),)23 b Fm(E)1986 2235 y Fh(i)2034 2227 y Fu(=)e
+Fm(E)2172 2235 y Fh(H)2222 2247 y Fe(k)q(ey)2321 2227
+y Fu(\()p Fm(B)2409 2235 y Fh(i)2436 2227 y Fu(\))i(and)g
+Fm(H)2706 2191 y Fh(q)r(uer)r(y)2700 2247 y(i)2891 2227
+y Fu(=)e Fm(H)6 b Fu(\()p Fm(E)3129 2235 y Fh(i)3154
+2227 y Fu(\).)24 b(F)-6 b(orm)664 2333 y Fn(CHK)835 2341
+y Fh(i)887 2333 y Fu(from)26 b(\()p Fm(H)1168 2298 y
+Fh(q)r(uer)r(y)1162 2353 y(i)1332 2333 y Fm(;)13 b(H)1436
+2298 y Fh(k)q(ey)1430 2353 y(i)1536 2333 y Fu(\).)26
b(P)n(ad)g(con)n(ten)n(t)f(\(with)h(zeros\))g(if)h(needed.)523
-2378 y
+2353 y
SDict begin H.S end
- 523 2378 a 523 2378 a
+ 523 2353 a 523 2353 a
SDict begin 11 H.A end
- 523 2378 a 523 2378 a
+ 523 2353 a 523 2353 a
SDict begin [ /View [/XYZ H.V] /Dest (Item.4) cvn H.B /DEST pdfmark
end
523
-2378 a Black 563 2449 a Fu(4.)p Black 42 w(Store)f Fm(E)922
-2457 y Fh(i)973 2449 y Fu(under)f(the)g(name)h Fm(H)1598
-2414 y Fh(q)r(uer)r(y)1592 2469 y(i)1762 2449 y Fu(.)523
-2469 y
+2353 a Black 563 2424 a Fu(4.)p Black 42 w(Store)f Fm(E)922
+2432 y Fh(i)973 2424 y Fu(under)f(the)g(name)h Fm(H)1598
+2389 y Fh(q)r(uer)r(y)1592 2444 y(i)1762 2424 y Fu(.)523
+2444 y
SDict begin H.S end
- 523 2469 a 523 2469 a
+ 523 2444 a 523 2444 a
SDict begin 11 H.A end
- 523 2469 a 523 2469 a
+ 523 2444 a 523 2444 a
SDict begin [ /View [/XYZ H.V] /Dest (Item.5) cvn H.B /DEST pdfmark
end
523
-2469 a Black 563 2541 a Fu(5.)p Black 42 w(If)g(there)f(is)g(more)h
+2444 a Black 563 2516 a Fu(5.)p Black 42 w(If)g(there)f(is)g(more)h
(than)f(one)g(blo)r(c)n(k,)h(group)f(the)g(blo)r(c)n(ks)g(in)n(to)h
-(disjoin)n(t)g(sets)g Fm(I)2942 2549 y Fh(j)2999 2541
-y Fu(of)g(up)e(to)i(256)664 2632 y(mem)n(b)r(ers.)e(F)-6
-b(or)23 b(eac)n(h)h Fm(I)1348 2640 y Fh(j)1380 2632 y
-Fu(,)f(create)h Fn(Iblo)l(ck)1838 2640 y Fh(j)1894 2632
+(disjoin)n(t)g(sets)g Fm(I)2942 2524 y Fh(j)2999 2516
+y Fu(of)g(up)e(to)i(256)664 2607 y(mem)n(b)r(ers.)e(F)-6
+b(or)23 b(eac)n(h)h Fm(I)1348 2615 y Fh(j)1380 2607 y
+Fu(,)f(create)h Fn(Iblo)l(ck)1838 2615 y Fh(j)1894 2607
y Fu(con)n(taining)g(the)f Fn(CHK)p Fu(s)g(of)h(the)f(blo)r(c)n(ks)g
-(in)g Fm(I)3185 2640 y Fh(j)3218 2632 y Fu(.)g(Add)664
-2723 y(zero)k(padding)e(if)h(needed.)g(Pro)r(cess)h(eac)n(h)f(new)g
+(in)g Fm(I)3185 2615 y Fh(j)3218 2607 y Fu(.)g(Add)664
+2698 y(zero)k(padding)e(if)h(needed.)g(Pro)r(cess)h(eac)n(h)f(new)g
(32Kb)f(blo)r(c)n(k)h(obtained)g(as)g(in)g(step)p 1 0 0
-TeXcolorrgb 3146 2723 a
+TeXcolorrgb 3146 2698 a
SDict begin H.S end
- 3146 2723 a 1 0 0 TeXcolorrgb
-Fu(3)p 1 0 0 TeXcolorrgb 3185 2675 a
+ 3146 2698 a 1 0 0 TeXcolorrgb
+Fu(3)p 1 0 0 TeXcolorrgb 3185 2650 a
SDict begin H.R end
- 3185 2675 a 3185
-2723 a
+ 3185 2650 a 3185
+2698 a
SDict begin [ /Color [1 0 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(Item.3) cvn H.B /ANN pdfmark end
- 3185 2723 a Black Fu(.)523 2738 y
+ 3185 2698 a Black Fu(.)523 2713 y
SDict begin H.S end
- 523 2738 a 523
-2738 a
+ 523 2713 a 523
+2713 a
SDict begin 11 H.A end
- 523 2738 a 523 2738 a
+ 523 2713 a 523 2713 a
SDict begin [ /View [/XYZ H.V] /Dest (Item.6) cvn H.B /DEST pdfmark
end
- 523 2738 a Black 563 2815
+ 523 2713 a Black 563 2790
a Fu(6.)p Black 42 w(If)20 b(the)g(size)h(of)g Fm(C)k
Fu(w)n(as)c(smaller)g(than)f(32Kb)g(\(and)f(th)n(us)h(there)f(is)i
-(only)f(one)g(pair)g(of)h(hashco)r(des)664 2906 y Fn(CHK)835
-2914 y Fv(0)870 2906 y Fu(\),)k(create)h Fn(SBlo)l(ck)p
+(only)f(one)g(pair)g(of)h(hashco)r(des)664 2881 y Fn(CHK)835
+2889 y Fv(0)870 2881 y Fu(\),)k(create)h Fn(SBlo)l(ck)p
Fu(s)f(and)g Fn(KBlo)l(ck)p Fu(s)h(con)n(taining)g Fn(CHK)2436
-2914 y Fv(0)2470 2906 y Fu(,)f(the)g(metadata)h Fm(D)h
-Fu(ab)r(out)e(the)664 2997 y(con)n(ten)n(t)i(and)g(the)g(original)i
+2889 y Fv(0)2470 2881 y Fu(,)f(the)g(metadata)h Fm(D)h
+Fu(ab)r(out)e(the)664 2972 y(con)n(ten)n(t)i(and)g(the)g(original)i
(length)f(of)g Fm(C)5 b Fu(.)28 b(Encrypt)f(and)g(sign)h(the)f
-(resulting)h Fn(SBlo)l(ck)p Fu(s)g(and)664 3089 y Fn(KBlo)l(ck)p
-Fu(s.)p 523 3222 2882 4 v Black 1253 3363 a Fo(Fig.)14
-b(3.)p 0 TeXcolorgray 1531 3263 a
+(resulting)h Fn(SBlo)l(ck)p Fu(s)g(and)664 3064 y Fn(KBlo)l(ck)p
+Fu(s.)p 523 3197 2882 4 v Black 1253 3338 a Fo(Fig.)14
+b(3.)p 0 TeXcolorgray 1531 3238 a
SDict begin H.S end
- 1531 3263 a 0 TeXcolorgray
-0 TeXcolorgray 1531 3263 a
+ 1531 3238 a 0 TeXcolorgray
+0 TeXcolorgray 1531 3238 a
SDict begin H.R end
- 1531 3263 a 1531 3263 a
+ 1531 3238 a 1531 3238 a
SDict begin [ /View [/XYZ H.V] /Dest (figure.1.3) cvn H.B /DEST pdfmark
end
1531
-3263 a Black 100 x Fx(The)28 b(ECRS)f(enco)r(ding)h(algorithm.)p
-Black Black 648 3678 a(In)20 b(conclusion,)g(using)g
-Fq(KBlo)l(ck)p Fx(s)h(it)f(is)h(p)r(ossible)f(to)g(allo)n(w)f(in)n
-(termediaries)g(to)h(v)n(erify)g(the)523 3777 y(in)n(tegrit)n(y)h(of)h
-(replies)f(without)i(learning)d(the)j(plain)n(text)e(of)h(the)h(k)n
-(eyw)n(ord)d(or)h(the)h(resp)r(onse.)523 3877 y Fq(KBlo)l(ck)p
-Fx(s)f(require)e(a)h(k)n(eyw)n(ord)f(guess,)g(making)h(it)h(it)f
-(harder)f(to)i(reply)e(to)i(arbitrary)d(queries)523 3977
-y(with)36 b(random)f(data;)g(they)h(cannot)f(prev)n(en)n(t)g(users)f
-(from)i(inserting)f(suc)n(h)g(data)g(under)523 4076 y(p)r(opular)f(k)n
-(eyw)n(ords.)f(The)h(receiv)n(er)f(of)i(the)g Fq(KBlo)l(ck)h
-Fx(can)e(retriev)n(e)f(the)i(rest)f(of)h(the)g(\014le)523
-4176 y(tree)27 b(using)h(CHK)f(queries)g(in)h(the)g(same)f(w)n(a)n(y)f
-(as)h(it)h(is)f(done)h(for)f Fq(SBlo)l(ck)p Fx(s.)523
-4395 y
+3238 a Black 100 x Fx(The)28 b(ECRS)f(enco)r(ding)h(algorithm.)p
+Black Black 523 3628 a(p)r(opular)34 b(k)n(eyw)n(ords.)f(The)h(receiv)n
+(er)f(of)i(the)g Fq(KBlo)l(ck)h Fx(can)e(retriev)n(e)f(the)i(rest)f(of)
+h(the)g(\014le)523 3727 y(tree)27 b(using)h(CHK)f(queries)g(in)h(the)g
+(same)f(w)n(a)n(y)f(as)h(it)h(is)f(done)h(for)f Fq(SBlo)l(ck)p
+Fx(s.)523 3897 y
SDict begin H.S end
- 523 4395 a 523 4395 a
+ 523 3897 a 523 3897 a
SDict begin 12 H.A end
- 523 4395 a 523 4395 a
+ 523 3897 a 523
+3897 a
SDict begin [ /View [/XYZ H.V] /Dest (subsection.1.3.5) cvn H.B /DEST
pdfmark end
- 523
-4395 a 97 x Fo(3.5)95 b(Summary)523 4725 y Fx(The)32
-b(ECRS)g(enco)r(ding)f(algorithm)g(is)h(summarized)f(in)h(Figure)p
-1 0 0 TeXcolorrgb 2610 4725 a
+ 523 3897 a 84 x Fo(3.5)95 b(Summary)523 4152 y
+Fx(The)32 b(ECRS)g(enco)r(ding)f(algorithm)g(is)h(summarized)f(in)h
+(Figure)p 1 0 0 TeXcolorrgb 2610 4152 a
SDict begin H.S end
- 2610 4725 a 1 0 0 TeXcolorrgb
-Fx(3)p 1 0 0 TeXcolorrgb 2652 4672 a
+ 2610 4152 a 1 0 0
+TeXcolorrgb Fx(3)p 1 0 0 TeXcolorrgb 2652 4098 a
SDict begin H.R end
- 2652 4672 a 2652
-4725 a
+ 2652
+4098 a 2652 4152 a
SDict begin [ /Color [1 0 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(figure.1.3) cvn H.B /ANN pdfmark end
- 2652 4725 a Black Fx(.)g(Figure)p 1 0 0 TeXcolorrgb
-2973 4725 a
+ 2652 4152 a Black Fx(.)g(Figure)p
+1 0 0 TeXcolorrgb 2973 4152 a
SDict begin H.S end
- 2973 4725 a 1 0 0 TeXcolorrgb Fx(4)p 1 0 0
-TeXcolorrgb 3015 4672 a
+ 2973 4152 a 1 0 0 TeXcolorrgb
+Fx(4)p 1 0 0 TeXcolorrgb 3015 4098 a
SDict begin H.R end
- 3015 4672 a 3015 4725 a
+ 3015 4098 a 3015
+4152 a
SDict begin [ /Color [1 0 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(figure.1.4) cvn H.B /ANN pdfmark end
- 3015
-4725 a Black 32 w Fx(sho)n(ws)f(the)523 4825 y(sequence)26
-b(of)h(messages)e(exc)n(hanged)h(b)n(y)h(p)r(eers)f(to)h(do)n(wnload)e
-(a)i(64Kb)e(\014le)i(starting)f(with)523 4924 y(a)h(k)n(eyw)n(ord.)p
-Black Black eop end
+ 3015 4152 a Black 32 w Fx(sho)n(ws)f(the)523 4251
+y(sequence)26 b(of)h(messages)e(exc)n(hanged)h(b)n(y)h(p)r(eers)f(to)h
+(do)n(wnload)e(a)i(64Kb)e(\014le)i(starting)f(with)523
+4351 y(a)h(k)n(eyw)n(ord.)523 4520 y
+SDict begin H.S end
+ 523 4520 a 523 4520
+a
+SDict begin 12 H.A end
+ 523 4520 a 523 4520 a
+SDict begin [ /View [/XYZ H.V] /Dest (section.1.4) cvn H.B /DEST pdfmark
+end
+ 523 4520 a 101 x Fr(4)112 b(Discussion)523
+4825 y Fx(The)23 b(fact)g(that)h(eac)n(h)e Fq(DBlo)l(ck)i
+Fx(can)f(b)r(e)g(enco)r(ded)h(indep)r(enden)n(tly)f(from)g(an)n(y)g
+(other)f Fq(DBlo)l(ck)523 4924 y Fx(results)35 b(in)g(an)g(imp)r(ortan)
+n(t)g(feature)f(of)h(ECRS)g(called)g Fq(on-demand)i(enc)l(o)l(ding)p
+Fx(.)f(Giv)n(en)f(a)p Black Black eop end
%%Page: 12 12
TeXDict begin 12 11 bop 0 0 a
SDict begin /product where{pop product(Distiller)search{pop pop pop
@@ -7206,106 +7201,98 @@
Fp(Q)2524 1399 y Ff(i)2551 1387 y Fp(;)14 b(K)2659 1399
y Ff(i)2686 1387 y Fx(\))38 b(is)e(a)h(CHK)g(pair)f(to)523
1486 y(request)27 b(and)g(decrypt)h(blo)r(c)n(k)f Fp(i)p
-Fx(.)p Black 523 1705 a
-SDict begin H.S end
- 523 1705 a 523 1705 a
-SDict begin 12 H.A end
- 523 1705
-a 523 1705 a
-SDict begin [ /View [/XYZ H.V] /Dest (section.1.4) cvn H.B /DEST pdfmark
-end
- 523 1705 a 83 x Fr(4)112 b(Discussion)523
-2022 y Fx(The)23 b(fact)g(that)h(eac)n(h)e Fq(DBlo)l(ck)i
-Fx(can)f(b)r(e)g(enco)r(ded)h(indep)r(enden)n(tly)f(from)g(an)n(y)g
-(other)f Fq(DBlo)l(ck)523 2121 y Fx(results)35 b(in)g(an)g(imp)r(ortan)
-n(t)g(feature)f(of)h(ECRS)g(called)g Fq(on-demand)i(enc)l(o)l(ding)p
-Fx(.)f(Giv)n(en)f(a)523 2221 y(plain)n(text)c(\014le)h(and)f(an)f
-(index)i(that)f(maps)g(a)g(query)f(hash)h(to)g(an)g(o\013set)g(in)h
-(the)f(\014le,)h(the)523 2320 y(resulting)f Fq(DBlo)l(ck)i
+Fx(.)p Black 523 1855 a(plain)n(text)k(\014le)h(and)f(an)f(index)i
+(that)f(maps)g(a)g(query)f(hash)h(to)g(an)g(o\013set)g(in)h(the)f
+(\014le,)h(the)523 1955 y(resulting)f Fq(DBlo)l(ck)i
Fx(can)e(b)r(e)i(enco)r(ded)e(on-the-\015y)-7 b(,)32
b(without)g(pro)r(cessing)e(an)n(y)h(other)g(part)523
-2420 y(of)e(the)h(\014le.)g(This)f(can)g(b)r(e)g(an)g(imp)r(ortan)n(t)g
+2054 y(of)e(the)h(\014le.)g(This)f(can)g(b)r(e)g(an)g(imp)r(ortan)n(t)g
(b)r(ene\014t)i(if)e(the)h(user)f(in)n(tends)g(to)g(k)n(eep)g(the)h
-(\014le)523 2520 y(in)i(plain)n(text)g(on)f(the)h(lo)r(cal)f(driv)n(e.)
+(\014le)523 2154 y(in)i(plain)n(text)g(on)f(the)h(lo)r(cal)f(driv)n(e.)
g(In)h(this)g(case,)f(the)h(system)f(can)g(index)h(the)g
-Fq(DBlo)l(cks)523 2619 y Fx(without)22 b(replicating)f(the)i(actual)e
+Fq(DBlo)l(cks)523 2254 y Fx(without)22 b(replicating)f(the)i(actual)e
(data)g(completely)-7 b(,)22 b(storing)f(only)g(the)h(resulting)g
-Fq(IBlo)l(cks)523 2719 y Fx(\(and)j Fq(SBlo)l(cks)g Fx(and)f
+Fq(IBlo)l(cks)523 2353 y Fx(\(and)j Fq(SBlo)l(cks)g Fx(and)f
Fq(KBlo)l(cks)p Fx(\))i(and)e(then)h(later)f(pro)r(ducing)f(the)i
-Fq(DBlo)l(cks)h Fx(only)e(using)g(the)523 2819 y(index)31
+Fq(DBlo)l(cks)h Fx(only)e(using)g(the)523 2453 y(index)31
b(and)h(the)f(original)f(\014le.)i(This)f(can)g(result)g(in)h(rather)e
-(dramatic)h(sa)n(vings)e(in)j(space)523 2918 y(\(no)c(replication)e(of)
-i(enco)r(ded)f(con)n(ten)n(t\).)648 3025 y(Splitting)k(\014les)g(in)n
+(dramatic)h(sa)n(vings)e(in)j(space)523 2552 y(\(no)c(replication)e(of)
+i(enco)r(ded)f(con)n(ten)n(t\).)648 2692 y(Splitting)k(\014les)g(in)n
(to)g(blo)r(c)n(ks)f(migh)n(t)g(b)r(e)i(p)r(erceiv)n(ed)e(as)g(ha)n
-(ving)g(a)g(negativ)n(e)g(e\013ect)h(on)523 3124 y(the)38
+(ving)g(a)g(negativ)n(e)g(e\013ect)h(on)523 2792 y(the)38
b(preserv)-5 b(ation)37 b(of)h(data.)f(If)i(only)e(one)h(of)g(the)g
(blo)r(c)n(ks)f(is)h(lost,)g(the)g(larger)e(\014le)i(can)523
-3224 y(no)30 b(longer)g(b)r(e)h(reconstructed.)f(Man)n(y)g(other)g
-(systems)g([)p 0 1 0 TeXcolorrgb 2344 3224 a
+2892 y(no)30 b(longer)g(b)r(e)h(reconstructed.)f(Man)n(y)g(other)g
+(systems)g([)p 0 1 0 TeXcolorrgb 2344 2892 a
SDict begin H.S end
- 2344 3224
-a 0 1 0 TeXcolorrgb Fx(9)p 0 1 0 TeXcolorrgb 2385 3170
+ 2344 2892
+a 0 1 0 TeXcolorrgb Fx(8)p 0 1 0 TeXcolorrgb 2385 2838
a
SDict begin H.R end
- 2385 3170 a 2385 3224 a
+ 2385 2838 a 2385 2892 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.freehaven-berk) cvn H.B /ANN pdfmark end
- 2385 3224 a Black Fx(,)p 0 1 0
-TeXcolorrgb 2408 3224 a
+ 2385 2892 a Black Fx(,)p 0 1 0
+TeXcolorrgb 2408 2892 a
SDict begin H.S end
- 2408 3224 a 0 1 0 TeXcolorrgb
-Fx(31)p 0 1 0 TeXcolorrgb 2492 3170 a
+ 2408 2892 a 0 1 0 TeXcolorrgb
+Fx(29)p 0 1 0 TeXcolorrgb 2492 2838 a
SDict begin H.R end
- 2492 3170 a 2492
-3224 a
+ 2492 2838 a 2492
+2892 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.mojotech) cvn H.B /ANN pdfmark end
- 2492 3224 a Black Fx(])g(attempt)i(to)e(address)g(this)523
-3323 y(problem)c(b)n(y)g(either)h(attempting)g(to)f(k)n(eep)g(\014les)h
+ 2492 2892 a Black Fx(])g(attempt)i(to)e(address)g(this)523
+2991 y(problem)c(b)n(y)g(either)h(attempting)g(to)f(k)n(eep)g(\014les)h
(in)n(tact,)g(or)e(b)n(y)i(using)f(erasure)f(co)r(des)h([)p
-0 1 0 TeXcolorrgb 3299 3323 a
+0 1 0 TeXcolorrgb 3299 2991 a
SDict begin H.S end
- 3299 3323 a 0 1 0 TeXcolorrgb
-Fx(23)p 0 1 0 TeXcolorrgb 3382 3270 a
+ 3299 2991 a 0 1 0 TeXcolorrgb
+Fx(22)p 0 1 0 TeXcolorrgb 3382 2938 a
SDict begin H.R end
- 3382 3270 a 3382
-3323 a
+ 3382 2938 a 3382
+2991 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.rabin89efficient) cvn H.B /ANN pdfmark end
- 3382 3323 a Black Fx(])523 3423 y(to)e(patc)n(h)f(missing)g
+ 3382 2991 a Black Fx(])523 3091 y(to)e(patc)n(h)f(missing)g
(pieces.)g(While)h(erasure)e(co)r(des)h(could)h(b)r(e)g(used)f
-(together)g(with)h(ECRS,)523 3523 y(they)i(w)n(ould)e(con\015ict)i
+(together)g(with)h(ECRS,)523 3190 y(they)i(w)n(ould)e(con\015ict)i
(with)g(the)f(p)r(erformance)g(b)r(ene\014ts)h(of)f(on-demand)g(enco)r
-(ding.)g(Con-)523 3622 y(sequen)n(tly)-7 b(,)23 b(the)g(primary)f(mec)n
+(ding.)g(Con-)523 3290 y(sequen)n(tly)-7 b(,)23 b(the)g(primary)f(mec)n
(hanism)g(to)h(guard)f(against)g(the)h(loss)g(of)g(\014les)g(enco)r
-(ded)f(with)523 3722 y(ECRS)31 b(should)f(b)r(e)i(data)e(replication.)g
+(ded)f(with)523 3390 y(ECRS)31 b(should)f(b)r(e)i(data)e(replication.)g
(Since)h(ECRS)g(splits)g(\014les)g(in)n(to)g(blo)r(c)n(ks)f(it)h
-(should)523 3822 y(b)r(e)k(p)r(ossible)f(for)f(the)i(net)n(w)n(ork)e
+(should)523 3489 y(b)r(e)k(p)r(ossible)f(for)f(the)i(net)n(w)n(ork)e
(to)h(duplicate)g(blo)r(c)n(ks)g(at)g(a)g(negligible)f(cost)h(p)r(er)g
-(blo)r(c)n(k.)523 3921 y(Duplicating)27 b(a)f(complete)h(\014le)g(of)f
+(blo)r(c)n(k.)523 3589 y(Duplicating)27 b(a)f(complete)h(\014le)g(of)f
(sev)n(eral)f(gigab)n(ytes)g(w)n(ould)i(b)r(e)g(m)n(uc)n(h)f(more)g
-(costly)g(and)523 4021 y(more)e(lik)n(ely)h(to)g(fail.)g(F)-7
+(costly)g(and)523 3689 y(more)e(lik)n(ely)h(to)g(fail.)g(F)-7
b(or)24 b(large)g(\014les,)h(it)h(ma)n(y)e(b)r(e)h(di\016cult)h(for)f
-(a)g(p)r(eer)f(to)h(\014nd)h(individual)523 4121 y(hosts)c(that)h(are)e
+(a)g(p)r(eer)f(to)h(\014nd)h(individual)523 3788 y(hosts)c(that)h(are)e
(willing)h(\(or)g(able\))g(to)h(pro)n(vide)e(enough)h(space)f(to)i
-(replicate)e(the)i(complete)523 4220 y(\014le)30 b(in)g(its)g(en)n
+(replicate)e(the)i(complete)523 3888 y(\014le)30 b(in)g(its)g(en)n
(tiret)n(y)-7 b(.)30 b(Also,)f(the)i(tra\016c)e(burst)h(that)g(a)g
-(large)e(transfer)h(w)n(ould)g(imp)r(ose)h(on)523 4320
+(large)e(transfer)h(w)n(ould)g(imp)r(ose)h(on)523 3987
y(the)35 b(net)n(w)n(ork)d(migh)n(t)i(k)n(eep)g(the)h(participating)e
(no)r(des)h(busy)g(for)g(to)r(o)g(long.)f(Blo)r(c)n(ks,)g(on)523
-4419 y(the)c(other)f(hand,)g(can)g(migrate)g(quic)n(kly)g(from)g(host)g
+4087 y(the)c(other)f(hand,)g(can)g(migrate)g(quic)n(kly)g(from)g(host)g
(to)g(host.)h(Storing)e(a)i(large)e(\014le)h(on)g(a)523
-4519 y(single)f(host)g(also)g(fails)g(to)h(facilitate)f(distribution)h
+4187 y(single)f(host)g(also)g(fails)g(to)h(facilitate)f(distribution)h
(of)g(load)f(for)g(do)n(wnloading)f(purp)r(oses.)648
-4625 y(ECRS)e(is)g(op)r(en)g(to)g(t)n(w)n(o)g(t)n(yp)r(es)g(of)g(attac)
+4327 y(ECRS)e(is)g(op)r(en)g(to)g(t)n(w)n(o)g(t)n(yp)r(es)g(of)g(attac)
n(ks)f(from)h(censors.)f(The)h(most)g(ob)n(vious)f(attac)n(k)523
-4725 y(is)40 b(to)g(guess)f(k)n(eyw)n(ords)f(and)i(use)g(those)f(to)h
+4426 y(is)40 b(to)g(guess)f(k)n(eyw)n(ords)f(and)i(use)g(those)f(to)h
(compute)g(queries)f(for)h(sp)r(eci\014c)g Fq(KBlo)l(ck)p
-Fx(s.)523 4825 y(The)28 b(adv)n(ersary)c(can)j(then)h(try)f(to)h
+Fx(s.)523 4526 y(The)28 b(adv)n(ersary)c(can)j(then)h(try)f(to)h
(censor)e(these)h(queries.)g(Since)h(the)f(same)g(con)n(ten)n(t)g(can)
-523 4924 y(b)r(e)36 b(a)n(v)-5 b(ailable)33 b(under)i(man)n(y)g(k)n
+523 4625 y(b)r(e)36 b(a)n(v)-5 b(ailable)33 b(under)i(man)n(y)g(k)n
(eyw)n(ords,)e(this)j(tec)n(hnique)f(is)g(not)g(necessary)e
-(successful.)p Black Black eop end
+(successful.)523 4725 y(Ho)n(w)n(ev)n(er,)25 b(this)i(guessing)f(attac)
+n(k)f(do)r(es)i(pro)n(vide)f(the)h(opp)r(ortunit)n(y)f(for)g(limited)i
+(forms)e(of)523 4825 y(censorship.)g(An)h(adv)n(ersary)c(could)k
+(create)e(a)i(\\blac)n(klist")e(of)h(k)n(eyw)n(ords)e(and)j(attempt)g
+(to)523 4924 y(legally)g(force)g(op)r(erators)e(to)j(\014lter)f(matc)n
+(hing)g(queries)g(or)g(replies.)p Black Black eop end
%%Page: 13 13
TeXDict begin 13 12 bop 0 0 a
SDict begin /product where{pop product(Distiller)search{pop pop pop
@@ -7323,120 +7310,118 @@
end
523 232 a Black 1036 w Fu(An)25
b(Enco)r(ding)h(for)h(Censorship-Resistan)n(t)f(Sharing)199
-b(13)p Black 523 448 a Fx(Ho)n(w)n(ev)n(er,)25 b(this)i(guessing)f
-(attac)n(k)f(do)r(es)i(pro)n(vide)f(the)h(opp)r(ortunit)n(y)f(for)g
-(limited)i(forms)e(of)523 548 y(censorship.)g(An)h(adv)n(ersary)c
-(could)k(create)e(a)i(\\blac)n(klist")e(of)h(k)n(eyw)n(ords)e(and)j
-(attempt)g(to)523 648 y(legally)g(force)g(op)r(erators)e(to)j(\014lter)
-f(matc)n(hing)g(queries)g(or)g(replies.)648 747 y(Instead)e(of)h
-(predicting)g(k)n(eyw)n(ords,)e(the)i(attac)n(k)n(er)e(can)i(also)f
-(try)h(to)f(obtain)h(the)h(exact)523 847 y(con)n(ten)n(ts)37
-b(of)h(the)g(\014le)g(\(or)f(at)h(least)g(the)g(exact)f(con)n(ten)n(ts)
-g(of)h(an)g(incriminating)f(part\).)523 946 y(This)d(ma)n(yb)r(e)f(ac)n
-(hiev)n(ed)g(b)n(y)g(searc)n(hing)f(the)i(net)n(w)n(ork)f(for)g
-(certain)g(k)n(eyw)n(ords)f(and)h(then)523 1046 y(do)n(wnloading)21
-b(the)j(resulting)e(con)n(ten)n(t.)h(This)g(w)n(a)n(y)f(the)h(attac)n
-(k)n(er)e(can)i(again)f(compute)h(the)523 1146 y(query)28
-b(hash)h(for)f(the)i Fq(DBlo)l(ck)p Fx(s)g(and)e Fq(IBlo)l(ck)p
-Fx(s)j(and)d(also)g(obtain)h(the)g(encrypted)g Fq(DBlo)l(ck)p
-Fx(s)523 1245 y(and)h Fq(IBlo)l(ck)p Fx(s)h(themselv)n(es.)f(Again,)f
-(the)i(adv)n(ersary)c(can)j(then)g(try)g(to)g(censor)f(this)h(data.)523
-1345 y(Note)25 b(that)g(this)h(attac)n(k)e(requires)g(the)h(adv)n
-(ersary)d(to)j(obtain)g(a)g(cop)n(y)f(of)h(the)h(con)n(ten)n(t)e(and)
-523 1445 y(then)g(exercise)f(a)g(certain)g(amoun)n(t)g(of)h(con)n(trol)
-e(o)n(v)n(er)g(the)i(p)r(eers)f(in)h(the)g(net)n(w)n(ork.)e(As)i(users)
-523 1544 y(m)n(ust)e(ha)n(v)n(e)f(a)h(w)n(a)n(y)f(to)h(decrypt)g(the)g
-(\014le)g(solely)g(b)n(y)f(means)h(of)g(guessing)f(the)h(k)n(eyw)n
-(ord,)f(this)523 1644 y(attac)n(k)j(cannot)g(b)r(e)i(a)n(v)n(oided.)d
-(A)i(fault-toleran)n(t)f(p)r(eer-to-p)r(eer)g(routing)g(proto)r(col)f
-(ma)n(y)i(b)r(e)523 1743 y(able)i(to)h(route)f(the)h(con)n(ten)n(t)f
-(around)g(the)h(censoring)e(p)r(eers.)648 1843 y(If)39
-b(suc)n(h)f(an)g(activ)n(e)g(censorship)f(attac)n(k)h(is)g(kno)n(wn)g
-(to)g(o)r(ccur)g(on)g(a)h(large)e(scale,)g(a)523 1943
-y(p)r(ossible)26 b(defense)g(w)n(ould)g(b)r(e)h(to)f(publish)h(the)g
-(con)n(ten)n(t)e(with)i(sligh)n(t)f(alterations)f(for)h(eac)n(h)523
-2042 y(k)n(eyw)n(ord.)20 b(A)h(single)g(space)g(inserted)g(at)g(the)h
-(b)r(eginning)f(of)g(a)g(text-do)r(cumen)n(t)h(is)f(su\016cien)n(t)523
-2142 y(to)34 b(c)n(hange)g Fq(al)t(l)h Fx(blo)r(c)n(ks)f(of)g(the)h
-(ECRS)f(enco)r(ding.)p 1 0 0 TeXcolorrgb 2148 2142 a
+b(13)p Black 648 448 a Fx(Instead)25 b(of)h(predicting)g(k)n(eyw)n
+(ords,)e(the)i(attac)n(k)n(er)e(can)i(also)f(try)h(to)f(obtain)h(the)h
+(exact)523 548 y(con)n(ten)n(ts)37 b(of)h(the)g(\014le)g(\(or)f(at)h
+(least)g(the)g(exact)f(con)n(ten)n(ts)g(of)h(an)g(incriminating)f
+(part\).)523 648 y(This)d(ma)n(yb)r(e)f(ac)n(hiev)n(ed)g(b)n(y)g(searc)
+n(hing)f(the)i(net)n(w)n(ork)f(for)g(certain)g(k)n(eyw)n(ords)f(and)h
+(then)523 747 y(do)n(wnloading)21 b(the)j(resulting)e(con)n(ten)n(t.)h
+(This)g(w)n(a)n(y)f(the)h(attac)n(k)n(er)e(can)i(again)f(compute)h(the)
+523 847 y(query)28 b(hash)h(for)f(the)i Fq(DBlo)l(ck)p
+Fx(s)g(and)e Fq(IBlo)l(ck)p Fx(s)j(and)d(also)g(obtain)h(the)g
+(encrypted)g Fq(DBlo)l(ck)p Fx(s)523 946 y(and)h Fq(IBlo)l(ck)p
+Fx(s)h(themselv)n(es.)f(Again,)f(the)i(adv)n(ersary)c(can)j(then)g(try)
+g(to)g(censor)f(this)h(data.)523 1046 y(Note)25 b(that)g(this)h(attac)n
+(k)e(requires)g(the)h(adv)n(ersary)d(to)j(obtain)g(a)g(cop)n(y)f(of)h
+(the)h(con)n(ten)n(t)e(and)523 1146 y(then)g(exercise)f(a)g(certain)g
+(amoun)n(t)g(of)h(con)n(trol)e(o)n(v)n(er)g(the)i(p)r(eers)f(in)h(the)g
+(net)n(w)n(ork.)e(As)i(users)523 1245 y(m)n(ust)e(ha)n(v)n(e)f(a)h(w)n
+(a)n(y)f(to)h(decrypt)g(the)g(\014le)g(solely)g(b)n(y)f(means)h(of)g
+(guessing)f(the)h(k)n(eyw)n(ord,)f(this)523 1345 y(attac)n(k)j(cannot)g
+(b)r(e)i(a)n(v)n(oided.)d(A)i(fault-toleran)n(t)f(p)r(eer-to-p)r(eer)g
+(routing)g(proto)r(col)f(ma)n(y)i(b)r(e)523 1445 y(able)i(to)h(route)f
+(the)h(con)n(ten)n(t)f(around)g(the)h(censoring)e(p)r(eers.)648
+1549 y(If)39 b(suc)n(h)f(an)g(activ)n(e)g(censorship)f(attac)n(k)h(is)g
+(kno)n(wn)g(to)g(o)r(ccur)g(on)g(a)h(large)e(scale,)g(a)523
+1648 y(p)r(ossible)26 b(defense)g(w)n(ould)g(b)r(e)h(to)f(publish)h
+(the)g(con)n(ten)n(t)e(with)i(sligh)n(t)f(alterations)f(for)h(eac)n(h)
+523 1748 y(k)n(eyw)n(ord.)20 b(A)h(single)g(space)g(inserted)g(at)g
+(the)h(b)r(eginning)f(of)g(a)g(text-do)r(cumen)n(t)h(is)f(su\016cien)n
+(t)523 1848 y(to)34 b(c)n(hange)g Fq(al)t(l)h Fx(blo)r(c)n(ks)f(of)g
+(the)h(ECRS)f(enco)r(ding.)p 1 0 0 TeXcolorrgb 2148 1848
+a
SDict begin H.S end
-
-2148 2142 a -30 x Fw(3)2185 2142 y
+ 2148 1848 a -30 x Fw(3)2185 1848 y
SDict begin 12 H.L end
- 2185 2142 a 2185 2142
-a
+ 2185 1848 a 2185
+1848 a
SDict begin [ /Subtype /Link /Dest (Hfootnote.3) cvn /H /I /Border
[0 0 0] /Color [1 0 0] H.B /ANN pdfmark end
- 2185 2142 a Black 34 w Fx(While)h(this)g(w)n(ould)f(defeat)g(the)h
-(use)523 2242 y(of)26 b(con)n(v)n(ergen)n(t)e(encryption)i(and)g
+ 2185 1848 a Black 34 w Fx(While)h(this)g(w)n(ould)f(defeat)g
+(the)h(use)523 1947 y(of)26 b(con)n(v)n(ergen)n(t)e(encryption)i(and)g
(increase)f(the)h(storage)e(and)i(bandwidth)h(requiremen)n(ts,)523
-2341 y(this)20 b(w)n(ould)f(mak)n(e)f(it)i(infeasible)f(for)g(the)h
+2047 y(this)20 b(w)n(ould)f(mak)n(e)f(it)i(infeasible)f(for)g(the)h
(censor)e(to)i(e\013ectiv)n(ely)f(censor)f(all)h(of)g(the)h(v)-5
-b(arian)n(ts.)523 2441 y(Since)33 b(suc)n(h)f(a)g(p)r(o)n(w)n(erful)g
+b(arian)n(ts.)523 2147 y(Since)33 b(suc)n(h)f(a)g(p)r(o)n(w)n(erful)g
(activ)n(e)g(attac)n(k)n(er)f(is)h(lik)n(ely)g(to)h(b)r(e)g(uncommon,)f
-(the)h Fq(default)h Fx(in)523 2540 y(ECRS)27 b(is)h(to)f(use)h(con)n(v)
-n(ergen)n(t)d(encryption.)648 2640 y(Both)33 b(attac)n(ks)f(fail)i(to)f
+(the)h Fq(default)h Fx(in)523 2246 y(ECRS)27 b(is)h(to)f(use)h(con)n(v)
+n(ergen)n(t)d(encryption.)648 2350 y(Both)33 b(attac)n(ks)f(fail)i(to)f
(enable)h(in)n(termediaries)e(to)h(exercise)g(editorial)g(con)n(trol)f
-(o)n(v)n(er)523 2740 y(con)n(ten)n(t)25 b(in)g(general.)f(While)i(p)r
+(o)n(v)n(er)523 2450 y(con)n(ten)n(t)25 b(in)g(general.)f(While)i(p)r
(eers)f(can)g(theoretically)f(b)r(e)i(forced)e(to)h(censor)f(w)n
-(ell-kno)n(wn)523 2839 y(k)n(eyw)n(ords)d(and)h(\014les,)h(they)g(are)f
+(ell-kno)n(wn)523 2550 y(k)n(eyw)n(ords)d(and)h(\014les,)h(they)g(are)f
(unable)h(to)g(censor)e(new)i(k)n(eyw)n(ords)e(or)h(unkno)n(wn)g(con)n
-(ten)n(t.)523 2939 y(As)38 b(small)g(c)n(hanges)f(to)h(the)h(con)n(ten)
+(ten)n(t.)523 2649 y(As)38 b(small)g(c)n(hanges)f(to)h(the)h(con)n(ten)
n(t)f(or)f(k)n(eyw)n(ord)g(are)g(su\016cien)n(t)h(to)g(mak)n(e)g
-(detection)523 3039 y(imp)r(ossible,)28 b(these)f(t)n(yp)r(es)h(of)f
-(censorship)g(should)g(b)r(e)h(impractical.)648 3138
+(detection)523 2749 y(imp)r(ossible,)28 b(these)f(t)n(yp)r(es)h(of)f
+(censorship)g(should)g(b)r(e)h(impractical.)648 2853
y(Another)j(serious)f(t)n(yp)r(e)i(of)g(attac)n(k)f(is)g(spamming)g
-(the)h(global)f(k)n(eyw)n(ord)f(space)g(with)523 3238
+(the)h(global)f(k)n(eyw)n(ord)f(space)g(with)523 2953
y(useless)i(con)n(ten)n(t.)g(P)n(opular)f(k)n(eyw)n(ords)g(are)g(an)i
(easy)e(target)h(since)h(they)f(are)g(b)n(y)g(nature)523
-3337 y(easily)g(guessed.)g(Directories)g(and)g(namespaces)g([)p
-0 1 0 TeXcolorrgb 2154 3337 a
+3053 y(easily)g(guessed.)g(Directories)g(and)g(namespaces)g([)p
+0 1 0 TeXcolorrgb 2154 3053 a
SDict begin H.S end
- 2154 3337 a 0 1 0 TeXcolorrgb
-Fx(2)p 0 1 0 TeXcolorrgb 2195 3284 a
+ 2154 3053 a 0 1 0 TeXcolorrgb
+Fx(2)p 0 1 0 TeXcolorrgb 2195 2999 a
SDict begin H.R end
- 2195 3284 a 2195
-3337 a
+ 2195 2999 a 2195
+3053 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.ecrstechreport) cvn H.B /ANN pdfmark end
- 2195 3337 a Black Fx(])h(are)f(additional)g(constructs)g(whic)n
-(h)523 3437 y(can)k(help)h(with)h(this)f(problem,)f(esp)r(ecially)g(in)
-h(com)n(bination)f(with)i(secure)d(reputation)523 3537
+ 2195 3053 a Black Fx(])h(are)f(additional)g(constructs)g(whic)n
+(h)523 3152 y(can)k(help)h(with)h(this)f(problem,)f(esp)r(ecially)g(in)
+h(com)n(bination)f(with)i(secure)d(reputation)523 3252
y(systems,)27 b(suc)n(h)g(as)g(Adv)n(ogato)f([)p 0 1 0
-TeXcolorrgb 1542 3537 a
+TeXcolorrgb 1542 3252 a
SDict begin H.S end
- 1542 3537 a 0 1 0 TeXcolorrgb
-Fx(15)p 0 1 0 TeXcolorrgb 1625 3483 a
+ 1542 3252 a 0 1 0 TeXcolorrgb
+Fx(14)p 0 1 0 TeXcolorrgb 1625 3198 a
SDict begin H.R end
- 1625 3483 a 1625
-3537 a
+ 1625 3198 a 1625
+3252 a
SDict begin [ /Color [0 1 0] /H /I /Border [0 0 0] /Subtype /Link /Dest
(cite.levien03advogato) cvn H.B /ANN pdfmark end
- 1625 3537 a Black Fx(].)i(Ho)n(w)n(ev)n(er,)e(these)h(tec)n
-(hnical)h(solutions)e(lea)n(v)n(e)h(an)g(im-)523 3636
+ 1625 3252 a Black Fx(].)i(Ho)n(w)n(ev)n(er,)e(these)h(tec)n
+(hnical)h(solutions)e(lea)n(v)n(e)h(an)g(im-)523 3351
y(p)r(ortan)n(t)c(c)n(hallenge)e(for)i(future)g(w)n(ork,)f(whic)n(h)h
(is)g(making)f(suc)n(h)h(complex)g(solutions)f(easily)523
-3736 y(accessible)27 b(for)g(the)h(a)n(v)n(erage)c(user.)523
-3893 y
+3451 y(accessible)27 b(for)g(the)h(a)n(v)n(erage)c(user.)523
+3635 y
SDict begin H.S end
- 523 3893 a 523 3893 a
+ 523 3635 a 523 3635 a
SDict begin 12 H.A end
- 523 3893 a 523 3893 a
+ 523 3635 a 523 3635 a
SDict begin [ /View [/XYZ H.V] /Dest (section.1.5) cvn H.B /DEST pdfmark
end
523
-3893 a 100 x Fr(5)112 b(Conclusion)523 4184 y Fx(This)39
+3635 a 105 x Fr(5)112 b(Conclusion)523 3962 y Fx(This)39
b(pap)r(er)f(has)h(describ)r(ed)g(an)f(enco)r(ding)h(sc)n(heme)f(whic)n
-(h)h(hides)g(shared)f(data)g(from)523 4284 y(in)n(termediaries.)29
+(h)h(hides)g(shared)f(data)g(from)523 4062 y(in)n(termediaries.)29
b(The)h(enco)r(ding)g(uses)g(con)n(v)n(ergen)n(t)e(encryption,)i(allo)n
-(ws)f(sw)n(arming)f(and)523 4384 y(pro)r(duces)34 b(a)g(ciphertext)h
+(ws)f(sw)n(arming)f(and)523 4162 y(pro)r(duces)34 b(a)g(ciphertext)h
(that)g(is)f(not)h(signi\014can)n(tly)f(larger)f(than)h(the)h(plain)n
-(text.)g(Indi-)523 4483 y(vidual)26 b(blo)r(c)n(ks)e(of)i(the)g
+(text.)g(Indi-)523 4261 y(vidual)26 b(blo)r(c)n(ks)e(of)i(the)g
(ciphertext)g(can)f(b)r(e)h(generated)f(from)g(plain)n(text)h(without)g
-(reading)523 4583 y(unrelated)38 b(parts)h(of)f(the)h(original.)f
+(reading)523 4361 y(unrelated)38 b(parts)h(of)f(the)h(original.)f
(While)h(dictionary)f(attac)n(ks)g(on)g(the)h(k)n(eyw)n(ords)e(or)523
-4682 y(kno)n(wn)24 b(plain)n(text)g(attac)n(ks)g(on)g(the)h(con)n(ten)n
-(t)f(are)g(still)h(p)r(ossible,)f(they)h(are)e(harmless)g(with)p
+4460 y(kno)n(wn)24 b(plain)n(text)g(attac)n(ks)g(on)g(the)h(con)n(ten)n
+(t)f(are)g(still)h(p)r(ossible,)f(they)h(are)e(harmless)g(with)523
+4560 y(resp)r(ect)k(to)h(the)g(goal)e(of)i(deniabilit)n(y)g(for)f(in)n
+(termediaries.)f(The)i(basic)f(enco)r(ding)g(sc)n(heme)523
+4660 y(can)21 b(b)r(e)h(extended)g(with)g(directories)e(and)i
+(namespaces.)e(Namespaces)g(allo)n(w)h(for)g(\014les)g(and)p
Black 523 4748 473 4 v 546 4801 a Fv(3)p 0 TeXcolorgray
606 4742 a
SDict begin H.S end
@@ -7446,11 +7431,11 @@
606 4742 a 606 4742 a
SDict begin [ /View [/XYZ H.V] /Dest (Hfootnote.3) cvn H.B /DEST pdfmark
end
- 606 4742 a Black 91 x Fu(Note)k(that)f
-(only)g(op)r(erations)i(causing)g(global)g(shifts)f(in)g(the)f(data)h
-(ha)n(v)n(e)f(this)h(prop)r(ert)n(y)-6 b(.)25 b(One)606
-4924 y(single-c)n(haracter)d(replacemen)n(t)g(c)n(hanges)f(only)g(one)g
-(ro)r(ot-to-leaf)i(path)d(in)h(the)g(enco)r(ding)g(tree.)p
+ 606 4742 a Black 91 x Fu(Note)27
+b(that)f(only)g(op)r(erations)i(causing)g(global)g(shifts)f(in)g(the)f
+(data)h(ha)n(v)n(e)f(this)h(prop)r(ert)n(y)-6 b(.)25
+b(One)606 4924 y(single-c)n(haracter)d(replacemen)n(t)g(c)n(hanges)f
+(only)g(one)g(ro)r(ot-to-leaf)i(path)d(in)h(the)g(enco)r(ding)g(tree.)p
Black Black Black eop end
%%Page: 14 14
TeXDict begin 14 13 bop 0 0 a
@@ -7469,207 +7454,213 @@
end
523 232 a Black Fu(14)199 b(C.)27
b(Grotho\013,)f(K.)g(Grotho\013,)g(T.)h(Horozo)n(v,)f(J.T.)h(Lindgren)p
-Black 523 448 a Fx(resp)r(ect)g(to)h(the)g(goal)e(of)i(deniabilit)n(y)g
-(for)f(in)n(termediaries.)f(The)i(basic)f(enco)r(ding)g(sc)n(heme)523
-548 y(can)21 b(b)r(e)h(extended)g(with)g(directories)e(and)i
-(namespaces.)e(Namespaces)g(allo)n(w)h(for)g(\014les)g(and)523
-648 y(directories)k(to)h(b)r(e)h(up)r(dated.)g(Using)f
+Black 523 448 a Fx(directories)e(to)h(b)r(e)h(up)r(dated.)g(Using)f
Fp(K)6 b Fx(-deterministic)26 b(public-priv)-5 b(ate)26
-b(k)n(eys)f(for)h(signing)523 747 y(con)n(ten)n(t)h(it)h(is)g(p)r
+b(k)n(eys)f(for)h(signing)523 548 y(con)n(ten)n(t)h(it)h(is)g(p)r
(ossible)f(to)g(v)n(erify)g(searc)n(h)f(results)h(in)h(a)f(global)g(k)n
-(eyw)n(ord)f(space.)648 847 y(ECRS)35 b(is)g(implemen)n(ted)h(as)f(a)g
+(eyw)n(ord)f(space.)648 648 y(ECRS)35 b(is)g(implemen)n(ted)h(as)f(a)g
(part)g(of)h Fa(gnu)p Fx(net,)g(a)f(secure)g(platform)g(for)g(p)r
-(eer-to-)523 946 y(p)r(eer)i(net)n(w)n(orking.)f(In)i
+(eer-to-)523 747 y(p)r(eer)i(net)n(w)n(orking.)f(In)i
Fa(gnu)p Fx(net,)g(ECRS)f(w)n(orks)f(to)n(w)n(ards)g(implemen)n(ting)i
-(anon)n(ymous,)523 1046 y(censorship-resistan)n(t)31
-b(\014le-sharing.)h Fa(gnu)p Fx(net)i(is)g(free)f(soft)n(w)n(are)f(and)
-i(part)f(of)g(the)h(GNU)523 1146 y(pro)5 b(ject.)25 b(The)g
-Fa(gnu)p Fx(net)h(co)r(de)f(is)h(appro)n(ximately)d(100,000)g(lines)i
-(of)h(C)f(co)r(de.)g(ECRS)h(itself)523 1245 y(is)20 b(implemen)n(ted)h
-(in)g(ab)r(out)f(8,000)f(LOC.)h(The)g(co)r(de)g(is)h(freely)f(a)n(v)-5
-b(ailable)19 b(from)h(the)h Fa(gnu)p Fx(net)523 1345
-y(w)n(ebpage)p 1 0 0 TeXcolorrgb 831 1345 a
+(anon)n(ymous,)523 847 y(censorship-resistan)n(t)31 b(\014le-sharing.)h
+Fa(gnu)p Fx(net)i(is)g(free)f(soft)n(w)n(are)f(and)i(part)f(of)g(the)h
+(GNU)523 947 y(pro)5 b(ject.)25 b(The)g Fa(gnu)p Fx(net)h(co)r(de)f(is)
+h(appro)n(ximately)d(100,000)g(lines)i(of)h(C)f(co)r(de.)g(ECRS)h
+(itself)523 1046 y(is)20 b(implemen)n(ted)h(in)g(ab)r(out)f(8,000)f
+(LOC.)h(The)g(co)r(de)g(is)h(freely)f(a)n(v)-5 b(ailable)19
+b(from)h(the)h Fa(gnu)p Fx(net)523 1146 y(w)n(ebpage)p
+1 0 0 TeXcolorrgb 831 1146 a
SDict begin H.S end
- 831 1345
-a -30 x Fw(4)867 1345 y
+ 831 1146 a -30 x Fw(4)867
+1146 y
SDict begin 12 H.L end
- 867 1345 a 867 1345 a
+ 867 1146 a 867 1146 a
SDict begin [ /Subtype /Link /Dest (Hfootnote.4) cvn /H /I /Border
[0 0 0] /Color [1 0 0] H.B /ANN pdfmark end
- 867 1345
-a Black Fx(.)523 1579 y Fo(Ac)m(kno)m(wledgemen)m(ts)523
-1646 y
+ 867 1146 a Black Fx(.)523
+1396 y Fo(Ac)m(kno)m(wledgemen)m(ts)523 1479 y
SDict begin H.S end
- 523 1646 a 523 1646 a
+ 523 1479
+a 523 1479 a
SDict begin 12 H.A end
- 523 1646 a 523 1646 a
+ 523 1479 a 523 1479 a
SDict begin [ /View [/XYZ H.V] /Dest (section*.1) cvn H.B /DEST pdfmark
end
- 523
-1646 a 84 x Fx(The)k(authors)f(thank)h(Roger)f(Dingledine)h(for)g
-(helpful)g(commen)n(ts)g(on)g(an)g(earlier)e(draft)i(of)523
-1829 y(this)j(pap)r(er.)523 2080 y Fr(References)523
-2164 y
+ 523 1479 a 84 x Fx(The)k(authors)f
+(thank)h(Roger)f(Dingledine)h(for)g(helpful)g(commen)n(ts)g(on)g(an)g
+(earlier)e(draft)i(of)523 1662 y(this)j(pap)r(er.)523
+1929 y Fr(References)523 2029 y
SDict begin H.S end
- 523 2164 a 523 2164 a
+ 523 2029 a 523 2029 a
SDict begin 11 H.A end
- 523 2164 a 523 2164 a
+
+523 2029 a 523 2029 a
SDict begin [ /View [/XYZ H.V] /Dest (section*.2) cvn H.B /DEST pdfmark
end
- 523
-2164 a 523 2164 a
+ 523 2029 a 523 2029 a
SDict begin H.S end
- 523 2164 a 523 2164 a
+ 523 2029
+a 523 2029 a
SDict begin 11 H.A end
- 523 2164 a 523
-2164 a
+ 523 2029 a 523 2029 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.anderson96eternity) cvn
H.B /DEST pdfmark end
- 523 2164 a Black 561 2252 a Fu(1.)p Black 43 w(Ross)e(Anderson.)
-34 b(The)26 b(Eternit)n(y)f(Service.)34 b(In)25 b Fn(Pr)l(o)l(c)l(e)l
-(e)l(dings)30 b(of)d(Pr)l(ago)l(crypt)j(1996)p Fu(,)d(1996.)523
-2267 y
+ 523 2029 a Black 561
+2121 a Fu(1.)p Black 43 w(Ross)e(Anderson.)34 b(The)26
+b(Eternit)n(y)f(Service.)34 b(In)25 b Fn(Pr)l(o)l(c)l(e)l(e)l(dings)30
+b(of)d(Pr)l(ago)l(crypt)j(1996)p Fu(,)d(1996.)523 2136
+y
SDict begin H.S end
- 523 2267 a 523 2267 a
+ 523 2136 a 523 2136 a
SDict begin 11 H.A end
- 523 2267 a 523 2267 a
+ 523 2136 a 523 2136 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.ecrstechreport) cvn H.B
/DEST pdfmark end
- 523
-2267 a Black 561 2339 a Fu(2.)p Black 43 w(Krista)35
-b(Bennett,)g(Christian)g(Grotho\013,)h(Tzv)n(etan)f(Horozo)n(v,)g(and)f
-(J.)i(T.)f(Lindgren.)62 b(An)663 2431 y(Enco)r(ding)30
-b(for)h(Censorship-Resistan)n(t)g(Sharing.)48 b(T)-6
-b(ec)n(hnical)31 b(rep)r(ort,)g(2003.)49 b(a)n(v)l(ailable)32
-b(at)663 2522 y(h)n(ttp://gn)n(unet.org/do)n(wnload/ecrs.ps.)523
-2541 y
+ 523 2136
+a Black 561 2212 a Fu(2.)p Black 43 w(Krista)35 b(Bennett,)g(Christian)
+g(Grotho\013,)h(Tzv)n(etan)f(Horozo)n(v,)g(and)f(J.)i(T.)f(Lindgren.)62
+b(An)663 2303 y(Enco)r(ding)30 b(for)h(Censorship-Resistan)n(t)g
+(Sharing.)48 b(T)-6 b(ec)n(hnical)31 b(rep)r(ort,)g(2003.)49
+b(a)n(v)l(ailable)32 b(at)663 2395 y(h)n(ttp://gn)n(unet.org/do)n
+(wnload/ecrs.ps.)523 2413 y
SDict begin H.S end
- 523 2541 a 523 2541 a
+ 523 2413 a 523 2413 a
SDict begin 11 H.A end
- 523 2541 a 523 2541 a
+ 523
+2413 a 523 2413 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.esed) cvn H.B /DEST pdfmark
end
- 523
-2541 a Black 561 2610 a Fu(3.)p Black 43 w(Krista)i(Bennett,)g
-(Christian)h(Grotho\013,)g(Tzv)n(etan)f(Horozo)n(v,)g(and)g(Ioana)h(P)n
-(atrascu.)60 b(Ef-)663 2701 y(\014cien)n(t)31 b(Sharing)h(of)h
-(Encrypted)e(Data.)54 b(In)31 b Fn(ASCIP)p Fu(,)h(v)n(olume)g(2384)h
-(of)g Fn(L)l(e)l(ctur)l(e)j(Notes)e(in)663 2792 y(Computer)28
-b(Scienc)l(e)p Fu(,)f(pages)g(107{120.)i(Springer-V)-6
-b(erlag)25 b(Inc.,)h(2002.)523 2807 y
+ 523 2413 a Black 561 2486 a Fu(3.)p
+Black 43 w(Krista)i(Bennett,)g(Christian)h(Grotho\013,)g(Tzv)n(etan)f
+(Horozo)n(v,)g(and)g(Ioana)h(P)n(atrascu.)60 b(Ef-)663
+2578 y(\014cien)n(t)31 b(Sharing)h(of)h(Encrypted)e(Data.)54
+b(In)31 b Fn(ASCIP)p Fu(,)h(v)n(olume)g(2384)h(of)g Fn(L)l(e)l(ctur)l
+(e)j(Notes)e(in)663 2669 y(Computer)28 b(Scienc)l(e)p
+Fu(,)f(pages)g(107{120.)i(Springer-V)-6 b(erlag)25 b(Inc.,)h(2002.)523
+2684 y
SDict begin H.S end
- 523 2807 a 523
-2807 a
+ 523 2684 a 523 2684 a
SDict begin 11 H.A end
- 523 2807 a 523 2807 a
+ 523 2684 a 523 2684 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.chen99prototype) cvn H.B
/DEST pdfmark end
- 523 2807 a Black 561 2880
-a Fu(4.)p Black 43 w(Y)-6 b(uan)19 b(Chen,)i(Jan)h(Edler,)f(Andrew)g
-(Goldb)r(erg,)h(Allan)f(Gottlieb,)h(Sumeet)e(Sobti,)h(and)g(P)n(eter)
-663 2971 y(Yianilos.)39 b(A)26 b(protot)n(yp)r(e)g(implemen)n(tation)h
-(of)h(arc)n(hiv)l(al)f(in)n(termemory)-6 b(.)37 b(In)26
-b Fn(Pr)l(o)l(c)l(e)l(e)l(dings)31 b(of)663 3063 y(the)d(F)-6
-b(ourth)29 b(A)n(CM)e(International)i(Confer)l(enc)l(e)g(on)f(Digital)f
-(Libr)l(aries)p Fu(,)g(1999.)523 3078 y
+ 523
+2684 a Black 561 2760 a Fu(4.)p Black 43 w(Y)-6 b(uan)19
+b(Chen,)i(Jan)h(Edler,)f(Andrew)g(Goldb)r(erg,)h(Allan)f(Gottlieb,)h
+(Sumeet)e(Sobti,)h(and)g(P)n(eter)663 2852 y(Yianilos.)39
+b(A)26 b(protot)n(yp)r(e)g(implemen)n(tation)h(of)h(arc)n(hiv)l(al)f
+(in)n(termemory)-6 b(.)37 b(In)26 b Fn(Pr)l(o)l(c)l(e)l(e)l(dings)31
+b(of)663 2943 y(the)d(F)-6 b(ourth)29 b(A)n(CM)e(International)i
+(Confer)l(enc)l(e)g(on)f(Digital)f(Libr)l(aries)p Fu(,)g(1999.)523
+2958 y
SDict begin H.S end
- 523 3078 a 523
-3078 a
+ 523 2958 a 523 2958 a
SDict begin 11 H.A end
- 523 3078 a 523 3078 a
+ 523 2958 a 523 2958 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.clark99distributed) cvn
H.B /DEST pdfmark end
- 523 3078 a Black 561 3150
-a Fu(5.)p Black 43 w(Ian)h(Clark)n(e,)h(Osk)l(ar)g(Sandb)r(erg,)f
-(Brandon)h(Wiley)-6 b(,)28 b(and)g(Theo)r(dorew)i(W.)f(Hong.)43
-b(F)-6 b(reenet:)663 3241 y(A)35 b(distributed)f(anon)n(ymous)i
-(information)g(storage)h(and)e(retriev)l(al)h(system.)63
-b(In)35 b(Hannes)663 3333 y(F)-6 b(ederrath,)28 b(editor,)g
+ 523
+2958 a Black 561 3035 a Fu(5.)p Black 43 w(Ian)h(Clark)n(e,)h(Osk)l(ar)
+g(Sandb)r(erg,)f(Brandon)h(Wiley)-6 b(,)28 b(and)g(Theo)r(dorew)i(W.)f
+(Hong.)43 b(F)-6 b(reenet:)663 3126 y(A)35 b(distributed)f(anon)n
+(ymous)i(information)g(storage)h(and)e(retriev)l(al)h(system.)63
+b(In)35 b(Hannes)663 3217 y(F)-6 b(ederrath,)28 b(editor,)g
Fn(Designing)i(privacy)h(enhancing)f(te)l(chnolo)l(gies:)h
-(International)g(Work-)663 3424 y(shop)38 b(on)f(Design)g(Issues)h(in)f
+(International)g(Work-)663 3308 y(shop)38 b(on)f(Design)g(Issues)h(in)f
(A)n(nonymity)g(and)h(Unobservability,)g(Berkeley,)g(CA,)e(USA,)663
-3515 y(July)25 b(25{26,)g(2000:)g(pr)l(o)l(c)l(e)l(e)l(dings)p
+3400 y(July)25 b(25{26,)g(2000:)g(pr)l(o)l(c)l(e)l(e)l(dings)p
Fu(,)h(v)n(olume)c(2009)j(of)e Fn(L)l(e)l(ctur)l(e)k(Notes)f(in)f
-(Computer)h(Scienc)l(e)p Fu(.)663 3607 y(Springer-V)-6
-b(erlag)25 b(Inc.,)h(2001.)523 3622 y
+(Computer)h(Scienc)l(e)p Fu(.)663 3491 y(Springer-V)-6
+b(erlag)25 b(Inc.,)h(2001.)523 3506 y
SDict begin H.S end
- 523 3622 a 523
-3622 a
+ 523 3506 a 523
+3506 a
SDict begin 11 H.A end
- 523 3622 a 523 3622 a
+ 523 3506 a 523 3506 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.cohen02replication) cvn
H.B /DEST pdfmark end
- 523 3622 a Black 561 3694
+ 523 3506 a Black 561 3583
a Fu(6.)p Black 43 w(Edith)31 b(Cohen)g(and)g(Scott)g(Shenk)n(er.)50
b(Replication)31 b(strategies)i(in)e(unstructured)f(p)r(eer-to-)663
-3786 y(p)r(eer)25 b(net)n(w)n(orks.)35 b(In)25 b Fn(The)j(A)n(CM)f
+3674 y(p)r(eer)25 b(net)n(w)n(orks.)35 b(In)25 b Fn(The)j(A)n(CM)f
(SIGCOMM'02)g(Confer)l(enc)l(e)p Fu(,)g(August)e(2002.)523
-3801 y
+3689 y
SDict begin H.S end
- 523 3801 a 523 3801 a
+ 523 3689 a 523 3689 a
SDict begin 11 H.A end
- 523 3801 a 523 3801 a
+ 523 3689 a 523 3689 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.cfs:sosp01) cvn H.B /DEST
pdfmark end
523
-3801 a Black 561 3873 a Fu(7.)p Black 43 w(F)-6 b(rank)26
+3689 a Black 561 3765 a Fu(7.)p Black 43 w(F)-6 b(rank)26
b(Dab)r(ek,)i(M.)g(F)-6 b(rans)27 b(Kaasho)r(ek,)h(Da)n(vid)f(Karger,)h
-(Rob)r(ert)g(Morris,)h(and)e(Ion)g(Stoica.)663 3964 y(Wide-area)j(co)r
+(Rob)r(ert)g(Morris,)h(and)e(Ion)g(Stoica.)663 3857 y(Wide-area)j(co)r
(op)r(erativ)n(e)h(storage)g(with)e(CFS.)47 b(In)28 b
Fn(Pr)l(o)l(c)l(e)l(e)l(dings)34 b(of)d(the)h(18th)g(A)n(CM)e(Sym-)663
-4056 y(p)l(osium)25 b(on)g(Op)l(er)l(ating)h(Systems)g(Principles)f
+3948 y(p)l(osium)25 b(on)g(Op)l(er)l(ating)h(Systems)g(Principles)f
(\(SOSP)g('01\))p Fu(,)f(Chateau)f(Lak)n(e)g(Louise,)g(Ban\013,)663
-4147 y(Canada,)k(Octob)r(er)e(2001.)523 4162 y
+4039 y(Canada,)k(Octob)r(er)e(2001.)523 4054 y
SDict begin H.S end
- 523 4162
-a 523 4162 a
+ 523 4054
+a 523 4054 a
SDict begin 11 H.A end
- 523 4162 a 523 4162 a
-SDict begin [ /View [/XYZ H.V] /Dest (cite.dingledine02mixminion) cvn
-H.B /DEST pdfmark end
- 523 4162 a Black 561
-4235 a Fu(8.)p Black 43 w(George)32 b(Danezis,)g(Roger)g(Dingledine,)g
-(and)f(Nic)n(k)f(Mathewson.)52 b(Mixminion:)32 b(Design)g(of)663
-4326 y(a)d(T)n(yp)r(e)f(I)r(I)r(I)g(Anon)n(ymous)g(Remailer)i(Proto)r
-(col.)45 b(In)28 b Fn(IEEE)i(Symp)l(osium)h(on)g(Se)l(curity)g(and)663
-4417 y(Privacy)p Fu(,)c(2003.)523 4432 y
-SDict begin H.S end
- 523 4432 a 523
-4432 a
-SDict begin 11 H.A end
- 523 4432 a 523 4432 a
+ 523 4054 a 523 4054 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.freehaven-berk) cvn H.B
/DEST pdfmark end
- 523 4432 a Black 561 4505
-a Fu(9.)p Black 43 w(Roger)18 b(Dingledine,)h(Mic)n(hael)g(J.)g(F)-6
-b(reedman,)18 b(and)g(Da)n(vid)f(Molnar.)23 b(The)c(free)f(ha)n(v)n(en)
-g(pro)t(ject:)663 4596 y(Distributed)37 b(anon)n(ymous)i(storage)g
+ 523 4054 a Black 561
+4131 a Fu(8.)p Black 43 w(Roger)18 b(Dingledine,)h(Mic)n(hael)g(J.)g(F)
+-6 b(reedman,)18 b(and)g(Da)n(vid)f(Molnar.)23 b(The)c(free)f(ha)n(v)n
+(en)g(pro)t(ject:)663 4222 y(Distributed)37 b(anon)n(ymous)i(storage)g
(service.)73 b(In)38 b(Hannes)g(F)-6 b(ederrath,)38 b(editor,)h
-Fn(Pr)l(o)l(c)l(e)l(e)l(d-)663 4687 y(ings)26 b(of)g(Designing)g
+Fn(Pr)l(o)l(c)l(e)l(e)l(d-)663 4314 y(ings)26 b(of)g(Designing)g
(Privacy)h(Enhancing)g(T)-6 b(e)l(chnolo)l(gies:)27 b(Workshop)g(on)g
-(Design)f(Issues)h(in)663 4779 y(A)n(nonymity)h(and)g(Unobservability)p
-Fu(.)g(Springer-V)-6 b(erlag,)26 b(LNCS)f(2009,)i(July)f(2000.)p
-Black 523 4839 473 4 v 546 4893 a Fv(4)p 0 TeXcolorgray
-606 4833 a
+(Design)f(Issues)h(in)663 4405 y(A)n(nonymity)h(and)g(Unobservability)p
+Fu(.)g(Springer-V)-6 b(erlag,)26 b(LNCS)f(2009,)i(July)f(2000.)523
+4420 y
SDict begin H.S end
- 606 4833 a 0 TeXcolorgray 0 TeXcolorgray 606
-4833 a
+ 523 4420 a 523 4420 a
+SDict begin 11 H.A end
+ 523 4420 a 523 4420 a
+SDict begin [ /View [/XYZ H.V] /Dest (cite.farsite) cvn H.B /DEST pdfmark
+end
+ 523
+4420 a Black 561 4496 a Fu(9.)p Black 43 w(John)19 b(R.)f(Douceur,)h(A)
+n(tul)f(Ady)n(a,)h(Wiliam)h(J.)g(Bolosky)-6 b(,)19 b(Dan)g(Simon,)g
+(and)g(Marvin)g(Theimer.)663 4588 y(Reclaiming)26 b(space)g(from)g
+(duplicate)f(\014les)g(in)g(a)h(serv)n(erless)g(distributed)f(\014le)g
+(system.)33 b(T)-6 b(ec)n(h-)663 4679 y(nical)26 b(rep)r(ort,)g
+(Microsoft)i(Researc)n(h,)e(2002.)523 4694 y
+SDict begin H.S end
+ 523 4694
+a 523 4694 a
+SDict begin 11 H.A end
+ 523 4694 a 523 4694 a
+SDict begin [ /View [/XYZ H.V] /Dest (cite.secure2004goh) cvn H.B /DEST
+pdfmark end
+ 523 4694 a Black 77
+x Fu(10.)p Black 43 w(Eu-Jin)f(Goh.)35 b(Secure)25 b(indexes.)35
+b(In)25 b Fn(Cryptolo)l(gy)k(ePrint)f(A)n(r)l(chive)p
+Fu(,)f(Oct)e(2003.)p Black 523 4839 473 4 v 546 4893
+a Fv(4)p 0 TeXcolorgray 606 4833 a
+SDict begin H.S end
+ 606 4833 a 0 TeXcolorgray
+0 TeXcolorgray 606 4833 a
SDict begin H.R end
606 4833 a 606 4833 a
SDict begin [ /View [/XYZ H.V] /Dest (Hfootnote.4) cvn H.B /DEST pdfmark
end
- 606 4833 a Black 0 1 0 0
-TeXcolorcmyk 606 4941 a
+ 606 4833
+a Black 0 1 0 0 TeXcolorcmyk 606 4941 a
SDict begin H.S end
- 606 4941 a 0 1 0 0 TeXcolorcmyk
--17 x Ft(http://gnunet.org/)p 0 1 0 0 TeXcolorcmyk 1312
-4872 a
+ 606 4941 a 0 1 0 0
+TeXcolorcmyk -17 x Ft(http://gnunet.org/)p 0 1 0 0 TeXcolorcmyk
+1312 4872 a
SDict begin H.R end
1312 4872 a 1312 4924 a
SDict begin [ /H /I /Border [0 0 0] /Color [0 1 1] /Action << /Subtype
/URI /URI (http://gnunet.org/) >> /Subtype /Link H.B /ANN pdfmark end
- 1312 4924 a Black Black
-Black Black eop end
+ 1312 4924 a Black
+Black Black Black eop end
%%Page: 15 15
TeXDict begin 15 14 bop 0 0 a
SDict begin /product where{pop product(Distiller)search{pop pop pop
@@ -7693,305 +7684,250 @@
SDict begin 11 H.A end
523 365 a
523 365 a
-SDict begin [ /View [/XYZ H.V] /Dest (cite.farsite) cvn H.B /DEST pdfmark
-end
- 523 365 a Black 83 x Fu(10.)p Black 43 w(John)19
-b(R.)f(Douceur,)h(A)n(tul)f(Ady)n(a,)h(Wiliam)h(J.)g(Bolosky)-6
-b(,)19 b(Dan)g(Simon,)g(and)g(Marvin)g(Theimer.)663 540
-y(Reclaiming)26 b(space)g(from)g(duplicate)f(\014les)g(in)g(a)h(serv)n
-(erless)g(distributed)f(\014le)g(system.)33 b(T)-6 b(ec)n(h-)663
-631 y(nical)26 b(rep)r(ort,)g(Microsoft)i(Researc)n(h,)e(2002.)523
-646 y
-SDict begin H.S end
- 523 646 a 523 646 a
-SDict begin 11 H.A end
- 523 646 a 523 646 a
-SDict begin [ /View [/XYZ H.V] /Dest (cite.secure2004goh) cvn H.B /DEST
-pdfmark end
- 523 646
-a Black 76 x Fu(11.)p Black 43 w(Eu-Jin)f(Goh.)35 b(Secure)25
-b(indexes.)35 b(In)25 b Fn(Cryptolo)l(gy)k(ePrint)f(A)n(r)l(chive)p
-Fu(,)f(Oct)e(2003.)523 737 y
-SDict begin H.S end
- 523 737 a 523 737 a
-SDict begin 11 H.A end
- 523
-737 a 523 737 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.ebe2003) cvn H.B /DEST pdfmark
end
- 523 737 a Black 77 x Fu(12.)p Black 43
-w(Christian)i(Grotho\013.)35 b(An)25 b(Excess-Based)i(Economic)g(Mo)r
-(del)g(for)f(Resource)h(Allo)r(cation)g(in)663 905 y(P)n(eer-to-P)n
-(eer)f(Net)n(w)n(orks.)34 b Fn(Wirtschaftsinformatik)p
-Fu(,)27 b(3-2003,)h(June)d(2003.)523 920 y
+ 523 365 a Black 83 x Fu(11.)p Black 43 w(Christian)27
+b(Grotho\013.)35 b(An)25 b(Excess-Based)i(Economic)g(Mo)r(del)g(for)f
+(Resource)h(Allo)r(cation)g(in)663 540 y(P)n(eer-to-P)n(eer)f(Net)n(w)n
+(orks.)34 b Fn(Wirtschaftsinformatik)p Fu(,)27 b(3-2003,)h(June)d
+(2003.)523 555 y
SDict begin H.S end
- 523 920 a
-523 920 a
+ 523 555 a 523 555 a
SDict begin 11 H.A end
- 523 920 a 523 920 a
+ 523 555 a 523 555
+a
SDict begin [ /View [/XYZ H.V] /Dest (cite.hartman99swarm) cvn H.B
/DEST pdfmark end
- 523 920 a Black 76 x Fu(13.)p
-Black 43 w(John)d(H.)g(Hartman,)h(Ian)f(Murdo)r(c)n(k,)h(and)f(T)-6
-b(ammo)23 b(Spalink.)28 b(The)23 b(sw)n(arm)g(scalable)h(storage)663
-1088 y(system.)67 b(In)36 b Fn(International)j(Confer)l(enc)l(e)g(on)f
-(Distribute)l(d)h(Computing)f(Systems)p Fu(,)h(pages)663
-1179 y(74{81,)28 b(1999.)523 1194 y
+ 523 555 a Black 76 x Fu(12.)p Black 43 w(John)d(H.)g(Hartman,)h(Ian)f
+(Murdo)r(c)n(k,)h(and)f(T)-6 b(ammo)23 b(Spalink.)28
+b(The)23 b(sw)n(arm)g(scalable)h(storage)663 722 y(system.)67
+b(In)36 b Fn(International)j(Confer)l(enc)l(e)g(on)f(Distribute)l(d)h
+(Computing)f(Systems)p Fu(,)h(pages)663 813 y(74{81,)28
+b(1999.)523 828 y
SDict begin H.S end
- 523 1194 a 523 1194
-a
+ 523 828 a 523 828 a
SDict begin 11 H.A end
- 523 1194 a 523 1194 a
+ 523 828 a 523 828
+a
SDict begin [ /View [/XYZ H.V] /Dest (cite.herlihy87how) cvn H.B /DEST
pdfmark end
- 523 1194 a Black 76 x Fu(14.)p
-Black 43 w(Maurice)42 b(Herlih)n(y)e(and)h(J.)h(D.)f(T)n(ygar.)81
-b(Ho)n(w)42 b(to)f(mak)n(e)g(replicated)h(data)g(secure.)81
-b(In)663 1362 y Fn(CR)-6 b(YPTO)p Fu(,)25 b(pages)i(379{391,)i(1987.)
-523 1377 y
+ 523 828 a Black 76 x Fu(13.)p Black 43 w(Maurice)42
+b(Herlih)n(y)e(and)h(J.)h(D.)f(T)n(ygar.)81 b(Ho)n(w)42
+b(to)f(mak)n(e)g(replicated)h(data)g(secure.)81 b(In)663
+996 y Fn(CR)-6 b(YPTO)p Fu(,)25 b(pages)i(379{391,)i(1987.)523
+1011 y
SDict begin H.S end
- 523 1377 a 523 1377 a
+ 523 1011 a 523 1011 a
SDict begin 11 H.A end
- 523 1377 a 523 1377
-a
+ 523 1011 a 523 1011 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.levien03advogato) cvn H.B
/DEST pdfmark end
- 523 1377 a Black 76 x Fu(15.)p Black 43 w(Raph)76 b(Levien.)189
+ 523
+1011 a Black 76 x Fu(14.)p Black 43 w(Raph)76 b(Levien.)189
b(A)n(ttac)n(k)77 b(resistan)n(t)h(trust)f(metrics.)190
-b(Draft)78 b(a)n(v)l(ailable)h(at)663 1545 y(h)n
+b(Draft)78 b(a)n(v)l(ailable)h(at)663 1178 y(h)n
(ttp://www.levien.com/thesis/compact.p)r(df,)31 b(2003.)523
-1563 y
+1197 y
SDict begin H.S end
- 523 1563 a 523 1563 a
+ 523 1197 a 523 1197 a
SDict begin 11 H.A end
- 523 1563 a 523 1563 a
+ 523 1197 a 523 1197 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.maymounkov02kademlia) cvn
H.B /DEST pdfmark end
523
-1563 a Black 73 x Fu(16.)p Black 43 w(P)n(etar)h(Ma)n(ymounk)n(o)n(v)f
+1197 a Black 72 x Fu(15.)p Black 43 w(P)n(etar)h(Ma)n(ymounk)n(o)n(v)f
(and)h(Da)n(vid)f(Mazi)n(\022)-36 b(eres.)56 b(Kademlia:)33
-b(A)f(p)r(eer-to-p)r(eer)f(information)663 1727 y(system)f(based)g(on)g
+b(A)f(p)r(eer-to-p)r(eer)f(information)663 1361 y(system)f(based)g(on)g
(the)g(xor)g(metric.)48 b(In)29 b Fn(Pr)l(o)l(c)l(e)l(e)l(dings)34
-b(of)d(IPTPS02,)g(Cambridge)p Fu(,)g(Marc)n(h)663 1819
-y(2002.)523 1819 y
+b(of)d(IPTPS02,)g(Cambridge)p Fu(,)g(Marc)n(h)663 1452
+y(2002.)523 1452 y
SDict begin H.S end
- 523 1819 a 523 1819 a
+ 523 1452 a 523 1452 a
SDict begin 11 H.A end
- 523 1819 a 523
-1819 a
+ 523 1452 a 523
+1452 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.mazires00sfs) cvn H.B /DEST
pdfmark end
- 523 1819 a Black 91 x Fu(17.)p Black 43 w(Da)n(vid)25
+ 523 1452 a Black 91 x Fu(16.)p Black 43 w(Da)n(vid)25
b(Mazi)n(\022)-36 b(eres.)36 b Fn(Self-c)l(ertifying)28
b(\014le)g(system)p Fu(.)35 b(PhD)26 b(thesis,)g(MIT,)h(2000.)523
-1925 y
+1558 y
SDict begin H.S end
- 523 1925 a 523 1925 a
+ 523 1558 a 523 1558 a
SDict begin 11 H.A end
- 523 1925 a 523 1925 a
+ 523 1558 a 523 1558 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.mazieres02building) cvn
H.B /DEST pdfmark end
523
-1925 a Black 76 x Fu(18.)p Black 43 w(Da)n(vid)e(Mazi)n(\022)-36
+1558 a Black 76 x Fu(17.)p Black 43 w(Da)n(vid)e(Mazi)n(\022)-36
b(eres)28 b(and)e(Dennis)g(Shasha.)36 b(Building)27 b(secure)g(\014le)f
-(systems)h(out)f(of)h(b)n(yzan)n(tine)663 2093 y(storage.)66
+(systems)h(out)f(of)h(b)n(yzan)n(tine)663 1726 y(storage.)66
b(In)35 b Fn(Pr)l(o)l(c)l(e)l(e)l(dings)k(of)d(the)i(Twenty-First)h(A)n
-(CM)d(Symp)l(osium)h(on)g(Principles)g(of)663 2184 y(Distribute)l(d)29
-b(Computing)f(\(PODC)f(2002\))p Fu(,)g(2002.)523 2203
+(CM)d(Symp)l(osium)h(on)g(Principles)g(of)663 1817 y(Distribute)l(d)29
+b(Computing)f(\(PODC)f(2002\))p Fu(,)g(2002.)523 1836
y
SDict begin H.S end
- 523 2203 a 523 2203 a
+ 523 1836 a 523 1836 a
SDict begin 11 H.A end
- 523 2203 a 523 2203 a
+ 523 1836 a 523 1836 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.mckusick84fast) cvn H.B
/DEST pdfmark end
- 523 2203
-a Black 72 x Fu(19.)p Black 43 w(Marshall)e(K.)f(McKusic)n(k,)g
+ 523 1836
+a Black 72 x Fu(18.)p Black 43 w(Marshall)e(K.)f(McKusic)n(k,)g
(William)i(N.)d(Jo)n(y)-6 b(,)24 b(Sam)n(uel)g(J.)h(Le\017er,)f(and)g
-(Rob)r(ert)f(S.)h(F)-6 b(abry)g(.)30 b(A)663 2367 y(fast)c(\014le)g
+(Rob)r(ert)f(S.)h(F)-6 b(abry)g(.)30 b(A)663 1999 y(fast)c(\014le)g
(system)g(for)g(UNIX.)33 b Fn(Computer)c(Systems)p Fu(,)e
-(2\(3\):181{197,)j(1984.)523 2385 y
+(2\(3\):181{197,)j(1984.)523 2018 y
SDict begin H.S end
- 523 2385 a 523 2385
+ 523 2018 a 523 2018
a
SDict begin 11 H.A end
- 523 2385 a 523 2385 a
+ 523 2018 a 523 2018 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.merkle89tree) cvn H.B /DEST
pdfmark end
- 523 2385 a Black 73 x Fu(20.)p
+ 523 2018 a Black 72 x Fu(19.)p
Black 43 w(Ralph)e(C.)i(Merkle.)45 b(A)28 b(certi\014ed)h(digital)h
(signature.)45 b(In)28 b Fn(G.)j(Br)l(assar)l(d,)h(e)l(ditor,)f(A)l
-(dvanc)l(es)663 2549 y(in)e(Cryptolo)l(gy|CR)-6 b(YPTO)32
+(dvanc)l(es)663 2182 y(in)e(Cryptolo)l(gy|CR)-6 b(YPTO)32
b('89)p Fu(,)d(pages)g(218{238.)j(Springer-V)-6 b(erlag,)29
-b(1990.)44 b(v)n(olume)29 b(435)663 2641 y(of)d(Lecture)g(Notes)g(in)f
-(Computer)h(Science.)523 2656 y
+b(1990.)44 b(v)n(olume)29 b(435)663 2273 y(of)d(Lecture)g(Notes)g(in)f
+(Computer)h(Science.)523 2288 y
SDict begin H.S end
- 523 2656 a 523 2656 a
+ 523 2288 a 523 2288 a
SDict begin 11 H.A end
-523 2656 a 523 2656 a
+523 2288 a 523 2288 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.muthitacharoen02ivy) cvn
H.B /DEST pdfmark end
- 523 2656 a Black 76 x Fu(21.)p
+ 523 2288 a Black 76 x Fu(20.)p
Black 43 w(A)n(thic)n(ha)21 b(Muthitac)n(haro)r(en,)i(Rob)r(ert)f
(Morris,)i(Thomer)f(M.)f(Gil,)i(and)d(Benjie)j(Chen.)k(Ivy:)21
-b(A)663 2823 y(read/write)i(p)r(eer-to-p)r(eer)e(\014le)g(system.)28
+b(A)663 2455 y(read/write)i(p)r(eer-to-p)r(eer)e(\014le)g(system.)28
b(In)21 b Fn(Pr)l(o)l(c)l(e)l(e)l(dings)26 b(of)d(5th)i(Symp)l(osium)f
-(on)g(Op)l(er)l(ating)663 2915 y(Systems)29 b(Design)f(and)g
-(Implementation)p Fu(,)e(2002.)523 2930 y
+(on)g(Op)l(er)l(ating)663 2547 y(Systems)29 b(Design)f(and)g
+(Implementation)p Fu(,)e(2002.)523 2562 y
SDict begin H.S end
- 523 2930 a
-523 2930 a
+ 523 2562 a
+523 2562 a
SDict begin 11 H.A end
- 523 2930 a 523 2930 a
+ 523 2562 a 523 2562 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.perng2005csr) cvn H.B /DEST
pdfmark end
- 523 2930 a Black 76
-x Fu(22.)p Black 43 w(Ginger)h(P)n(erng,)h(Mic)n(hael)g(K.)f(Reiter,)h
+ 523 2562 a Black 76
+x Fu(21.)p Black 43 w(Ginger)h(P)n(erng,)h(Mic)n(hael)g(K.)f(Reiter,)h
(and)f(Chenxi)f(W)-6 b(ang.)39 b(Censorship)28 b(resistance)g(revis-)
-663 3097 y(ited.)c(In)18 b(Jordi)i(Herrera-Joancomarti,)i(editor,)e
+663 2729 y(ited.)c(In)18 b(Jordi)i(Herrera-Joancomarti,)i(editor,)e
Fn(Pr)l(e-Pr)l(o)l(c)l(e)l(e)l(dings)25 b(of)c(the)h(7th)h
-(International)663 3189 y(Workshop)29 b(on)e(Information)h(Hiding)p
-Fu(,)d(pages)i(279{293,)i(2005.)523 3204 y
+(International)663 2821 y(Workshop)29 b(on)e(Information)h(Hiding)p
+Fu(,)d(pages)i(279{293,)i(2005.)523 2836 y
SDict begin H.S end
- 523 3204 a
-523 3204 a
+ 523 2836 a
+523 2836 a
SDict begin 11 H.A end
- 523 3204 a 523 3204 a
+ 523 2836 a 523 2836 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.rabin89efficient) cvn H.B
/DEST pdfmark end
- 523 3204 a Black 76
-x Fu(23.)p Black 43 w(Mic)n(hael)h(O.)f(Rabin.)45 b(E\016cien)n(t)29
+ 523 2836 a Black 76
+x Fu(22.)p Black 43 w(Mic)n(hael)h(O.)f(Rabin.)45 b(E\016cien)n(t)29
b(disp)r(ersal)h(of)g(information)h(for)f(securit)n(y)-6
-b(,)29 b(load)h(balancing,)663 3371 y(and)25 b(fault)h(tolerance.)36
+b(,)29 b(load)h(balancing,)663 3003 y(and)25 b(fault)h(tolerance.)36
b Fn(Journal)28 b(of)f(the)i(A)n(CM)p Fu(,)c(36\(2\):335{348,)30
-b(1989.)523 3390 y
+b(1989.)523 3022 y
SDict begin H.S end
- 523 3390 a 523 3390 a
+ 523 3022 a 523 3022 a
SDict begin 11 H.A end
- 523 3390 a 523
-3390 a
+ 523 3022 a 523
+3022 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.rowstron01storage) cvn H.B
/DEST pdfmark end
- 523 3390 a Black 73 x Fu(24.)p Black 43 w(An)n(ton)n(y)k(I.)h
+ 523 3022 a Black 72 x Fu(23.)p Black 43 w(An)n(ton)n(y)k(I.)h
(T.)i(Ro)n(wstron)f(and)f(P)n(eter)h(Drusc)n(hel.)64
-b(Storage)37 b(managemen)n(t)f(and)f(cac)n(hing)663 3554
+b(Storage)37 b(managemen)n(t)f(and)f(cac)n(hing)663 3185
y(in)c(P)-6 b(AST,)30 b(a)i(large-scale,)h(p)r(ersisten)n(t)f(p)r
(eer-to-p)r(eer)e(storage)j(utilit)n(y)-6 b(.)50 b(In)30
-b Fn(Symp)l(osium)j(on)663 3646 y(Op)l(er)l(ating)c(Systems)g
-(Principles)p Fu(,)d(pages)g(188{201,)j(2001.)523 3661
+b Fn(Symp)l(osium)j(on)663 3277 y(Op)l(er)l(ating)c(Systems)g
+(Principles)p Fu(,)d(pages)g(188{201,)j(2001.)523 3292
y
SDict begin H.S end
- 523 3661 a 523 3661 a
+ 523 3292 a 523 3292 a
SDict begin 11 H.A end
- 523 3661 a 523 3661 a
+ 523 3292 a 523 3292 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.shamir) cvn H.B /DEST pdfmark
end
- 523 3661
-a Black 76 x Fu(25.)p Black 43 w(A.)g(Shamir.)48 b(Ho)n(w)30
+ 523 3292
+a Black 76 x Fu(24.)p Black 43 w(A.)g(Shamir.)48 b(Ho)n(w)30
b(to)g(share)g(a)h(secret.)47 b(In)30 b Fn(Communic)l(ations)i(of)f
-(the)h(A)n(CM)p Fu(,)e(v)n(olume)g(22,)663 3828 y(pages)c(612{613.)j(A)
-n(CM,)d(1979.)523 3843 y
+(the)h(A)n(CM)p Fu(,)e(v)n(olume)g(22,)663 3459 y(pages)c(612{613.)j(A)
+n(CM,)d(1979.)523 3474 y
SDict begin H.S end
- 523 3843 a 523 3843 a
+ 523 3474 a 523 3474 a
SDict begin 11 H.A end
- 523 3843
-a 523 3843 a
+ 523 3474
+a 523 3474 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.stoica01chord) cvn H.B /DEST
pdfmark end
- 523 3843 a Black 77 x Fu(26.)p Black 43
+ 523 3474 a Black 76 x Fu(25.)p Black 43
w(Ion)k(Stoica,)i(Rob)r(ert)e(Morris,)j(Da)n(vid)d(Karger,)i(M.)f(F)-6
-b(rans)31 b(Kaasho)r(ek,)h(and)e(Hari)h(Balakr-)663 4011
+b(rans)31 b(Kaasho)r(ek,)h(and)e(Hari)h(Balakr-)663 3642
y(ishnan.)g(Chord:)24 b(A)f(scalable)i(p)r(eer-to-p)r(eer)f(lo)r(okup)f
(service)h(for)h(in)n(ternet)e(applications.)33 b(In)663
-4102 y Fn(Pr)l(o)l(c)l(e)l(e)l(dings)26 b(of)d(the)i(2001)f(c)l(onfer)l
+3733 y Fn(Pr)l(o)l(c)l(e)l(e)l(dings)26 b(of)d(the)i(2001)f(c)l(onfer)l
(enc)l(e)i(on)d(applic)l(ations,)i(te)l(chnolo)l(gies,)g(ar)l(chite)l
-(ctur)l(es,)h(and)663 4194 y(pr)l(oto)l(c)l(ols)j(for)f(c)l(omputer)h
+(ctur)l(es,)h(and)663 3824 y(pr)l(oto)l(c)l(ols)j(for)f(c)l(omputer)h
(c)l(ommunic)l(ations)p Fu(,)e(pages)g(149{160.)h(A)n(CM)e(Press,)h
-(2001.)523 4209 y
+(2001.)523 3839 y
SDict begin H.S end
- 523 4209 a 523 4209 a
+ 523 3839 a 523 3839 a
SDict begin 11 H.A end
- 523 4209 a 523
-4209 a
+ 523 3839 a 523
+3839 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.stratton_oakmont) cvn H.B
/DEST pdfmark end
- 523 4209 a Black 76 x Fu(27.)p Black 43 w(Stratton)19
+ 523 3839 a Black 76 x Fu(26.)p Black 43 w(Stratton)19
b(Oakmon)n(t)g(vs)h(Pro)r(digy)g(Services)g(Compan)n(y,)g(1995)h(N.Y.)f
-(Misc.)h(Lexis)f(229,)h(\(N.Y.)663 4376 y(Sup.)k(Ct.)h(Nassau)g(Co.,)h
-(1995\).)523 4395 y
+(Misc.)h(Lexis)f(229,)h(\(N.Y.)663 4007 y(Sup.)k(Ct.)h(Nassau)g(Co.,)h
+(1995\).)523 4025 y
SDict begin H.S end
- 523 4395 a 523 4395 a
+ 523 4025 a 523 4025 a
SDict begin 11 H.A end
- 523 4395 a
-523 4395 a
-SDict begin [ /View [/XYZ H.V] /Dest (cite.syverson97anonymous) cvn
-H.B /DEST pdfmark end
- 523 4395 a Black 73 x Fu(28.)p Black 43 w(P)n(aul)35
-b(Syv)n(erson,)g(Da)n(vid)f(Goldsc)n(hlag,)j(and)e(Mic)n(hael)h(Reed.)
-62 b(Anon)n(ymous)34 b(Connections)663 4559 y(and)29
-b(Onion)f(Routing.)45 b(In)29 b Fn(IEEE)h(Symp)l(osium)h(on)g(Se)l
-(curity)h(and)f(Privacy)p Fu(,)g(pages)f(44{54,)663 4650
-y(Oakland,)25 b(California,)k(4{7)e(1997.)523 4665 y
-SDict begin H.S end
-
-523 4665 a 523 4665 a
-SDict begin 11 H.A end
- 523 4665 a 523 4665 a
+ 523 4025 a
+523 4025 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.waldman2001tangler) cvn
H.B /DEST pdfmark end
- 523 4665
-a Black 77 x Fu(29.)p Black 43 w(Marc)36 b(W)-6 b(aldman)34
-b(and)h(Da)n(vid)f(Mazi)n(\022)-36 b(eres.)64 b(T)-6
-b(angler:)37 b(A)d(censorhip-resistan)n(t)i(publishing)663
-4833 y(system)25 b(based)f(on)h(do)r(cumen)n(t)g(en)n(tanglemen)n(ts.)
-33 b(In)24 b Fn(A)n(CM)i(Confer)l(enc)l(e)i(on)f(Computer)h(and)663
-4924 y(Communic)l(ations)g(Se)l(curity)p Fu(,)f(pages)g(126{135,)h
-(2001.)p Black Black eop end
-%%Page: 16 16
-TeXDict begin 16 15 bop 0 0 a
-SDict begin /product where{pop product(Distiller)search{pop pop pop
-version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto
-closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show
-grestore}if}{pop}ifelse}{pop}ifelse}if end
- 0 0 a Black 0 TeXcolorgray
-523 232 a
+ 523 4025 a Black 73 x Fu(27.)p Black 43 w(Marc)36
+b(W)-6 b(aldman)34 b(and)h(Da)n(vid)f(Mazi)n(\022)-36
+b(eres.)64 b(T)-6 b(angler:)37 b(A)d(censorhip-resistan)n(t)i
+(publishing)663 4189 y(system)25 b(based)f(on)h(do)r(cumen)n(t)g(en)n
+(tanglemen)n(ts.)33 b(In)24 b Fn(A)n(CM)i(Confer)l(enc)l(e)i(on)f
+(Computer)h(and)663 4280 y(Communic)l(ations)g(Se)l(curity)p
+Fu(,)f(pages)g(126{135,)h(2001.)523 4295 y
SDict begin H.S end
- 523 232 a 0 TeXcolorgray 0 TeXcolorgray 523
-232 a
-SDict begin H.R end
- 523 232 a 523 232 a
-SDict begin [ /View [/XYZ H.V] /Dest (page.16) cvn H.B /DEST pdfmark
-end
- 523 232 a Black Fu(16)199 b(C.)27
-b(Grotho\013,)f(K.)g(Grotho\013,)g(T.)h(Horozo)n(v,)f(J.T.)h(Lindgren)p
-Black 523 365 a
-SDict begin H.S end
- 523 365 a 523 365 a
+ 523 4295 a
+523 4295 a
SDict begin 11 H.A end
- 523 365 a 523 365
-a
+ 523 4295 a 523 4295 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.pub00) cvn H.B /DEST pdfmark
end
- 523 365 a Black 83 x Fu(30.)p Black 43 w(Marc)36 b(W)-6
-b(aldman,)36 b(Aviel)g(D.)f(Rubin,)g(and)h(Lorrie)g(F)-6
-b(aith)36 b(Cranor.)65 b(Publius:)36 b(A)g(robust,)663
-540 y(tamp)r(er-eviden)n(t,)18 b(censorship-resistan)n(t,)i(w)n(eb)g
-(publishing)f(system.)24 b(In)18 b Fn(Pr)l(o)l(c.)k(9th)g(USENIX)663
-631 y(Se)l(curity)29 b(Symp)l(osium)p Fu(,)d(pages)g(59{72,)i(August)d
-(2000.)523 646 y
+ 523 4295 a Black 77
+x Fu(28.)p Black 43 w(Marc)36 b(W)-6 b(aldman,)36 b(Aviel)g(D.)f
+(Rubin,)g(and)h(Lorrie)g(F)-6 b(aith)36 b(Cranor.)65
+b(Publius:)36 b(A)g(robust,)663 4463 y(tamp)r(er-eviden)n(t,)18
+b(censorship-resistan)n(t,)i(w)n(eb)g(publishing)f(system.)24
+b(In)18 b Fn(Pr)l(o)l(c.)k(9th)g(USENIX)663 4554 y(Se)l(curity)29
+b(Symp)l(osium)p Fu(,)d(pages)g(59{72,)i(August)d(2000.)523
+4569 y
SDict begin H.S end
- 523 646 a 523 646 a
+ 523 4569 a 523 4569 a
SDict begin 11 H.A end
- 523 646 a 523 646
-a
+ 523 4569 a 523 4569 a
SDict begin [ /View [/XYZ H.V] /Dest (cite.mojotech) cvn H.B /DEST
pdfmark end
- 523 646 a Black 76 x Fu(31.)p Black 43 w(Bryce)i(Wilco)n(x-O'Hearn.)
-39 b(Exp)r(eriences)27 b(Deplo)n(ying)h(a)f(Large-Scale)h(Emergen)n(t)g
-(Net)n(w)n(ork.)663 814 y(In)e Fn(Pe)l(er-to-Pe)l(er)32
+ 523
+4569 a Black 76 x Fu(29.)p Black 43 w(Bryce)i(Wilco)n(x-O'Hearn.)39
+b(Exp)r(eriences)27 b(Deplo)n(ying)h(a)f(Large-Scale)h(Emergen)n(t)g
+(Net)n(w)n(ork.)663 4737 y(In)e Fn(Pe)l(er-to-Pe)l(er)32
b(Systems:)e(First)g(International)g(Workshop,)f(ITPTS)f(2002)p
-Fu(,)g(pages)g(104{)663 905 y(110.)f(Springer-V)-6 b(erlag)25
+Fu(,)g(pages)g(104{)663 4828 y(110.)f(Springer-V)-6 b(erlag)25
b(Heidelb)r(erg,)i(Jan)n(uary)f(2002.)p Black Black eop
end
%%Trailer
Modified: GNUnet-docs/papers/ecrs/main.tex
===================================================================
--- GNUnet-docs/papers/ecrs/main.tex 2006-11-06 20:51:03 UTC (rev 3653)
+++ GNUnet-docs/papers/ecrs/main.tex 2006-11-06 21:11:04 UTC (rev 3654)
@@ -114,54 +114,50 @@
% the big goal and how it relates
The goal of the encoding scheme presented in this paper is to make it
difficult to identify information stored or transmitted in a open {\em
-decentralized} wide-area network where many {\em untrusted}
-peers want to share data. The proposed encoding scheme, called ECRS,
-allows both content and queries to be encrypted while being
-transmitted or stored on the network. This ensures that
-intermediaries remain oblivious to the data they are
-handling, reducing the chance that they can be singled out
-for an attack or held liable. It is important to note that the
-primary goal is {\em deniability} for the peers storing and
+decentralized} wide-area network where many {\em untrusted} peers want
+to share data. The proposed encoding scheme, called ECRS, allows both
+content and queries to be encrypted while being transmitted or stored
+on the network. This ensures that intermediaries remain oblivious to
+the data they are handling, reducing the chance that they can be
+singled out for an attack or held liable. It is important to note
+that the primary goal is {\em deniability} for the peers storing and
transmitting the information. These peers must be able to claim that
-decrypting the information is infeasible {\em for them}.
-
-We find it acceptable if a censor who knows precisely which content to
-censor is able to match a request or response against that particular
+decrypting the information is infeasible {\em for them}. For ECRS, it
+is acceptable if a censor who knows precisely which content to censor
+is able to match a request or response against that particular
content. ECRS is supposed to protect intermediaries that merely
transmit information and that need to be able to show that they are
unable to recognize objectionable information for their own
-protection. The ultimate senders and receivers of the data should be
-protected by other means, such as anonymous
-routing~\cite{dingledine02mixminion,syverson97anonymous}. As a
-content encoding mechanism, ECRS could be integrated into almost any
-generic peer-to-peer infrastructure to enhance its resistance to
-censorship. Specific details on how peers communicate or route data
-are therefore outside of the scope of this paper.
+protection.
-The definition of censorship resistance used in this work is similar
-to the formal definition given by~\cite{perng2005csr}, in which
+The meaning of censorship resistance used in this work is a variant
+of the formal definition given by~\cite{perng2005csr}, in which
censorship resistance is defined as the inability of a censor to
restrict a targeted document while allowing at least one other
document to be retrieved. In the context of~\cite{perng2005csr}, the
adversary is granted extensive capabilities. In particular, the
adversary is allowed to inspect every request or response, transcript
the processing steps of all the peers and then decide whether to
-filter (drop) a given response. Availability of the service and
-anonymity of the participants are specifically decoupled from
-censorship resistance. For ECRS, an almost identical adversary model
-is selected -- while anonymity and availability can certainly be
-additional (and often important) goals, ECRS is an orthogonal
-mechanism. The primary difference in the adversary model for ECRS is
-that the attacker is not allowed to be able to guess the exact content
-that is to be censored. This is an important restriction in practice.
-In the absence of such a restriction,~\cite{perng2005csr} shows that
+filter (drop) a given response. The primary difference in the
+adversary model for ECRS when compared to~\cite{perng2005csr} is that
+the attacker is not allowed to be able to guess the exact content that
+is to be censored. This is an important restriction in practice. In
+the absence of such a restriction,~\cite{perng2005csr} shows that
censorship resistance requires a form of private information retrieval
for which each operation has complexity $O(n)$, where $n$ is the size
of the datastore. In return for restricting the guessing capabilities
of the adversary, ECRS can achieve $O(1)$ complexity for its
operations. Considering that scalability is also an important goal,
-we believe that this is a reasonable trade-off.
+in particular since censorship-resistance for small collections would
+be of limited utility, we believe that this is a reasonable trade-off.
+As a content encoding mechanism, ECRS could be integrated into almost
+any generic peer-to-peer infrastructure to enhance its resistance to
+censorship. Specific details on how peers communicate or route data
+-- even though important for the availability of the service and the
+privacy of its users -- are therefore orthogonal issues outside of the
+scope of this paper.
+
As an encoding scheme, ECRS has to address two important issues.
First of all, users must be able to find content, preferably by
searching with simple, natural language keywords. Metadata related to
| [Prev in Thread] |
Current Thread |
[Next in Thread] |
- [GNUnet-SVN] r3654 - GNUnet-docs/papers/ecrs,
grothoff <=