Re: Designing a Secret Handshake: Authenticated Key Exchange as a Capability System

I'm a bit confused: can the secret handshakes be built in a pure object 
capability model (e.g., E language) without cryptography or not? I mean 
can you build all the functions (signatures, public keys, etc.) of the 
protocol without dealing with cryptography, but instead relying on 
sealers/unsealers or something similar? 

I can be missing something, but I would be grateful for comments. I do 
see the need for implementing authentication and secure channels in a 
capability system, as I've seen scenarios when multiple isolated domains 
constructed by an untrusted party want to establish a secure 
communication with each other (i.e., they do trust each other, but don't 
trust the environment). How do we solve such cases in capabilities? 

Anton

On Fri, Jul 10, 2015 at 01:11:06PM -0700, Tony Arcieri wrote:
> Apologies if this has been posted before, but it seems rather interesting:
> establishing secure channels based on capabilities.
> 
> https://dominictarr.github.io/secret-handshake-paper/shs.pdf
> 
> -- 
> Tony Arcieri

> _______________________________________________
> cap-talk mailing list
> [email protected]
> http://www.eros-os.org/mailman/listinfo/cap-talk