#52555 - [RFC PATCH 0/3] Decentralized substitute distribution with ERIS

Package	Source(s)		Maintainer(s)
guix-patches		PTS Buildd Popcon

Message #82 received at 52555@debbugs.gnu.org (full text, mbox, reply):

Received: (at 52555) by debbugs.gnu.org; 29 Jan 2022 22:18:10 +0000
From debbugs-submit-bounces@debbugs.gnu.org Sat Jan 29 17:18:10 2022
Received: from localhost ([127.0.0.1]:35091 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1nDw2r-0006Rp-SD
	for submit@debbugs.gnu.org; Sat, 29 Jan 2022 17:18:10 -0500
Received: from baptiste.telenet-ops.be ([195.130.132.51]:34448)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <maximedevos@telenet.be>) id 1nDw2o-0006Rd-Ts
 for 52555@debbugs.gnu.org; Sat, 29 Jan 2022 17:18:07 -0500
Received: from [172.20.10.5] ([5.23.227.239])
 by baptiste.telenet-ops.be with bizsmtp
 id omJ22600E5AYamV01mJ2w6; Sat, 29 Jan 2022 23:18:05 +0100
Message-ID: <73b50ffdca94407ef9fd7ef4875985a3b1c3c568.camel@telenet.be>
Subject: Re: [bug#52555] [RFC PATCH v2 0/5] Decentralized substitute
 distribution with ERIS
From: Maxime Devos <maximedevos@telenet.be>
To: pukkamustard <pukkamustard@posteo.net>, 52555@debbugs.gnu.org
In-Reply-To: <20220125192201.7582-1-pukkamustard@posteo.net>
References: <20211216161724.547-1-pukkamustard@posteo.net>
 <20220125192201.7582-1-pukkamustard@posteo.net>
Content-Type: multipart/signed; micalg="pgp-sha512";
 protocol="application/pgp-signature"; boundary="=-SwekApwKll48sZBJcCBy"
Date: Sat, 29 Jan 2022 22:52:49 +0100
MIME-Version: 1.0
User-Agent: Evolution 3.38.3-1 
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r22;
 t=1643494685; bh=IyDH6w3YbsS24u/d8ZJUzQq9ZEAoSyK3ObVp/Dvz80Y=;
 h=Subject:From:To:Cc:In-Reply-To:References:Date;
 b=U/WM71znY+1K3HGxcl0s5aFDGvZNJmpIwdctEE+bUs2+hKjQH90LZ3bc1eySUOvjX
 Fp0nW8MPpOaj1vo6UpwIYc8Dl3FAqUQPsq6KTq0Oerw5DzeBtKPpK3PpEzb076XoP0
 JvCpVkfuLBwh7AwLRhtfi+y5tNdfbXfc4Co3t81wnYXRi8rAd87ePkLxkl75kL4zKU
 e2igzjn3f05BAR8lhiM5u19aODOkaOQTXE8kmmOzQpyd68Ndl28FtroSaH6QMet1nC
 XgMnExEEh1ahfBIjbqHW5vyXOgDLx5/396HLVfOoKaETc30oKFbMU2FgVGzsi/iwTL
 ZCqdD13PHuviw==
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 52555
Cc: ~pukkamustard/eris@lists.sr.ht
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

[Message part 1 (text/plain, inline)]

Hi,

Is it possible for the following situation to happen?
If so, why not?

  1. server A is authentic
  2. server M is malicious, it tries to trick the client into
     installing an incorrect substitute
  3. (key of) server A is authorised
  4. (key of) server M is _not_ authorised
  5. server A and M are both in substitute-urls
  6. server A only serves ‘classical’ substitutes, server B also serves
     via ERIS+ipfs
  7. Both A and M set the same FileHash, References, etc. in the
     narinfo
  8. However, M set an ERIS URN pointing to a backdoored substitute.
  9. The client trusts A, and A and B have the same FileHash etc.,
     so the client considers the narinfo of B to be authentic
     because it has the same FileHash.
 10. The client prefers ERIS above HTTP(S), so it downloads via M.
 11. The client now installed a backdoored substitute!

Greetings,
Maxime.

[signature.asc (application/pgp-signature, inline)]

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Tue Sep 9 03:28:10 2025; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#52555 [RFC PATCH 0/3] Decentralized substitute distribution with ERIS