通过分散的证人共同签名保持当局“诚实或破产”
Keeping Authorities "Honest or Bust" with Decentralized Witness Cosigning
摘要：
关键网络机构的密钥（如时间、名称、证书和软件更新服务）是黑客、犯罪分子和间谍机构的高价值目标，他们希望秘密使用这些密钥来危害其他主机。为了保护当局和他们的客户主动从未被发现的漏洞和滥用，我们介绍了CoSi，一个可扩展的证人共同签署协议，确保每一个权威的声明是有效的，并公开记录由一个不同的证人组之前，任何客户端将接受it.A声明S集体签署W证人向客户端保证，S已经看到，而不是立即发现错误的，由那些W观察员。即使S以一种不容易被目击者发现的方式被破坏，CoSi仍然保证S暴露在公众监督之下，迫使具有秘密意识的攻击者冒着妥协很快就会被W目击者发现的风险。由于客户端可以有效地验证集体签名而无需通信，CoSi保护了客户端的隐私，并提供了第一个有效的透明机制，以对抗持续的中间人攻击者，这些攻击者控制受害者的Internet访问，权威机构的秘密密钥和几个证人的秘密密钥。CoSi建立在现有的加密多重签名方法的基础上，通过有效的通信树上的签名聚合来扩展它们以支持数千个证人。一个工作原型在时间戳和记录当局的背景下演示了CoSi，使8,000多名分散的证人能够在两秒钟内共同签署权威声明。
英文摘要：
The secret keys of critical network authorities - such as time, name, certificate, and software update services - represent high-value targets for hackers, criminals, and spy agencies wishing to use these keys secretly to compromise other hosts. To protect authorities and their clients proactively from undetected exploits and misuse, we introduce CoSi, a scalable witness cosigning protocol ensuring that every authoritative statement is validated and publicly logged by a diverse group of witnesses before any client will accept it. A statement S collectively signed by W witnesses assures clients that S has been seen, and not immediately found erroneous, by those W observers. Even if S is compromised in a fashion not readily detectable by the witnesses, CoSi still guarantees S's exposure to public scrutiny, forcing secrecy-minded attackers to risk that the compromise will soon be detected by one of the W witnesses. Because clients can verify collective signatures efficiently without communication, CoSi protects clients' privacy, and offers the first transparency mechanism effective against persistent man-in-the-middle attackers who control a victim's Internet access, the authority's secret key, and several witnesses' secret keys. CoSi builds on existing cryptographic multisignature methods, scaling them to support thousands of witnesses via signature aggregation over efficient communication trees. A working prototype demonstrates CoSi in the context of timestamping and logging authorities, enabling groups of over 8,000 distributed witnesses to cosign authoritative statements in under two seconds.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
