ofs | hex dump | ascii |
---|
0000 | 62 30 56 49 4d 20 38 2e 31 00 00 00 00 10 00 00 16 f6 62 61 7e 39 02 01 04 4b 00 00 72 67 64 64 | b0VIM.8.1.........ba~9...K..rgdd |
0020 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0040 | 00 00 00 00 69 7a 7a 79 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....izzy........................ |
0060 | 00 00 00 00 00 00 00 00 00 00 00 00 7e 72 67 64 64 2f 67 69 74 2f 73 69 67 73 75 6d 2f 73 69 67 | ............~rgdd/git/sigsum/sig |
0080 | 73 75 6d 2f 64 6f 63 2f 64 65 73 69 67 6e 2e 6d 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | sum/doc/design.md............... |
00a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
00c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
00e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0100 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0120 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0140 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0160 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0180 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
01a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
01c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
01e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0200 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0220 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0240 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0260 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0280 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
02a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
02c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
02e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0300 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0320 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0340 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0360 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0380 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
03a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
03c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
03e0 | 00 00 00 00 00 00 00 00 00 75 74 66 2d 38 0d 00 33 32 31 30 00 00 00 00 23 22 21 20 13 12 55 00 | .........utf-8..3210....#"!...U. |
0400 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0420 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0440 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0460 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0480 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
04a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
04c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
04e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0500 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0520 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0540 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0560 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0580 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
05a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
05c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
05e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0600 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0620 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0640 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0660 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0680 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
06a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
06c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
06e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0700 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0720 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0740 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0760 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0780 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
07a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
07c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
07e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0800 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0820 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0840 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0860 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0880 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
08a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
08c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
08e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0900 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0920 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0940 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0960 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0980 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
09a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
09c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
09e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0a00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0a20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0a40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0a60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0a80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0aa0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0ac0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0ae0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0b00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0b20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0b40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0b60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0b80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0ba0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0bc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0be0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0c00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0c20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0c40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0c60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0c80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0ca0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0cc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0ce0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0d00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0d20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0d40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0d60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0d80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0da0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0dc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0de0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0e00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0e20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0e40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0e60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0e80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0ea0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0ec0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0ee0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0f00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0f20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0f40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0f60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0f80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0fa0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0fc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0fe0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1000 | 74 70 07 00 7f 00 00 00 02 00 00 00 00 00 00 00 47 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 | tp..............G............... |
1020 | 01 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 37 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 | ................7.......H....... |
1040 | 01 00 00 00 00 00 00 00 07 00 00 00 00 00 00 00 43 00 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 | ................C............... |
1060 | 01 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 c2 00 00 00 00 00 00 00 | ................................ |
1080 | 01 00 00 00 00 00 00 00 08 00 00 00 00 00 00 00 3e 00 00 00 00 00 00 00 c7 00 00 00 00 00 00 00 | ................>............... |
10a0 | 01 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 43 00 00 00 00 00 00 00 06 01 00 00 00 00 00 00 | ................C............... |
10c0 | 01 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 31 00 00 00 00 00 00 00 49 01 00 00 00 00 00 00 | ................1.......I....... |
10e0 | 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1100 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1120 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1140 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1160 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1180 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
11a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
11c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
11e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1200 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1220 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1240 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1260 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1280 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
12a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
12c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
12e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1300 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1320 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1340 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1360 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1380 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
13a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
13c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
13e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1400 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1420 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1440 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1460 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1480 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
14a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
14c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
14e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1500 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1520 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1540 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1560 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1580 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
15a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
15c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
15e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1600 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1620 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1640 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1660 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1680 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
16a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
16c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
16e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1700 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1720 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1740 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1760 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1780 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
17a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
17c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
17e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1800 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1820 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1840 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1860 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1880 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
18a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
18c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
18e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1900 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1920 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1940 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1960 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1980 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
19a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
19c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
19e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1a00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1a20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1a40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1a60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1a80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1aa0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1ac0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1ae0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1b00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1b20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1b40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1b60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1b80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1ba0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1bc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1be0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1c00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1c20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1c40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1c60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1c80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1ca0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1cc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1ce0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1d00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1d20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1d40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1d60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1d80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1da0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1dc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1de0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1e00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1e20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1e40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1e60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1e80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1ea0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1ec0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1ee0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1f00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1f20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1f40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1f60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1f80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1fa0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1fc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1fe0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
2000 | 61 64 00 00 12 00 00 00 4a 01 00 00 00 10 00 00 47 00 00 00 00 00 00 00 e5 0f 00 00 96 0f 00 00 | ad......J.......G............... |
2020 | 48 0f 00 00 00 0f 00 00 b0 0e 00 00 65 0e 00 00 1d 0e 00 00 ce 0d 00 00 ac 0d 00 00 ab 0d 00 00 | H...........e................... |
2040 | 98 0d 00 00 50 0d 00 00 03 0d 00 00 da 0c 00 00 d9 0c 00 00 cc 0c 00 00 7f 0c 00 00 41 0c 00 00 | ....P.......................A... |
2060 | 40 0c 00 00 13 0c 00 00 12 0c 00 00 fe 0b 00 00 b2 0b 00 00 86 0b 00 00 56 0b 00 00 21 0b 00 00 | @.......................V...!... |
2080 | c9 0a 00 00 90 0a 00 00 25 0a 00 00 24 0a 00 00 d4 09 00 00 94 09 00 00 6c 09 00 00 38 09 00 00 | ........%...$...........l...8... |
20a0 | 37 09 00 00 e4 08 00 00 97 08 00 00 5a 08 00 00 13 08 00 00 c8 07 00 00 c7 07 00 00 7a 07 00 00 | 7...........Z...............z... |
20c0 | 29 07 00 00 e0 06 00 00 df 06 00 00 cd 06 00 00 a0 06 00 00 5f 06 00 00 2c 06 00 00 d4 05 00 00 | )..................._...,....... |
20e0 | 93 05 00 00 92 05 00 00 42 05 00 00 0b 05 00 00 bb 04 00 00 b1 04 00 00 47 04 00 00 20 04 00 00 | ........B...............G....... |
2100 | 1f 04 00 00 01 04 00 00 b7 03 00 00 6c 03 00 00 20 03 00 00 1f 03 00 00 d1 02 00 00 86 02 00 00 | ............l................... |
2120 | 36 02 00 00 e8 01 00 00 e7 01 00 00 98 01 00 00 4a 01 00 00 49 01 00 00 00 00 00 00 00 00 00 00 | 6...............J...I........... |
2140 | 00 00 00 00 00 00 00 00 00 00 73 74 6f 72 61 67 65 20 6f 66 20 61 72 62 69 74 72 61 72 79 20 63 | ..........storage.of.arbitrary.c |
2160 | 65 72 74 69 66 69 63 61 74 65 20 66 69 65 6c 64 73 2c 20 72 65 61 63 74 69 76 65 20 61 75 64 69 | ertificate.fields,.reactive.audi |
2180 | 74 69 6e 67 20 6f 66 20 63 6f 6d 70 6c 69 63 61 74 65 64 20 6c 6f 67 00 54 68 69 73 20 69 73 20 | ting.of.complicated.log.This.is. |
21a0 | 69 6e 20 63 6f 6e 74 72 61 73 74 20 74 6f 20 43 65 72 74 69 66 69 63 61 74 65 20 54 72 61 6e 73 | in.contrast.to.Certificate.Trans |
21c0 | 70 61 72 65 6e 63 79 2c 20 77 68 69 63 68 20 72 65 71 75 69 72 65 73 20 41 53 4e 2e 31 20 70 61 | parency,.which.requires.ASN.1.pa |
21e0 | 72 73 69 6e 67 2c 00 00 70 6f 69 73 6f 6e 69 6e 67 2c 20 61 6e 64 20 61 20 77 65 6c 6c 2d 64 65 | rsing,..poisoning,.and.a.well-de |
2200 | 66 69 6e 65 64 20 67 6f 73 73 69 70 20 70 72 6f 74 6f 63 6f 6c 20 77 69 74 68 6f 75 74 20 63 6f | fined.gossip.protocol.without.co |
2220 | 6d 70 6c 65 78 20 61 75 64 69 74 69 6e 67 20 6c 6f 67 69 63 2e 00 69 6e 63 6c 75 64 65 73 20 63 | mplex.auditing.logic..includes.c |
2240 | 6f 6e 73 69 64 65 72 61 74 69 6f 6e 73 20 73 75 63 68 20 61 73 20 73 69 6d 70 6c 65 20 70 61 72 | onsiderations.such.as.simple.par |
2260 | 73 69 6e 67 2c 20 70 72 6f 74 65 63 74 69 6f 6e 20 61 67 61 69 6e 73 74 20 6c 6f 67 20 73 70 61 | sing,.protection.against.log.spa |
2280 | 6d 20 61 6e 64 00 65 78 61 6d 70 6c 65 20 6c 6f 67 20 6f 70 65 72 61 74 69 6f 6e 73 20 61 6e 64 | m.and.example.log.operations.and |
22a0 | 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 69 6e 20 63 6f 6e 73 74 72 61 69 6e 65 64 20 65 6e 76 | .verification.in.constrained.env |
22c0 | 69 72 6f 6e 6d 65 6e 74 73 2e 20 20 54 68 69 73 00 57 65 20 77 61 6e 74 20 74 68 65 20 72 65 73 | ironments...This.We.want.the.res |
22e0 | 75 6c 74 69 6e 67 20 64 65 73 69 67 6e 20 74 6f 20 62 65 20 65 61 73 79 20 66 72 6f 6d 20 6d 61 | ulting.design.to.be.easy.from.ma |
2300 | 6e 79 20 64 69 66 66 65 72 65 6e 74 20 70 65 72 73 70 65 63 74 69 76 65 73 2c 20 66 6f 72 00 00 | ny.different.perspectives,.for.. |
2320 | 6d 69 6e 69 6d 61 6c 6c 79 20 72 65 71 75 69 72 65 64 20 6d 65 74 61 64 61 74 61 2e 20 20 53 74 | minimally.required.metadata...St |
2340 | 6f 72 69 6e 67 20 64 61 74 61 20 61 6e 64 20 72 69 63 68 20 6d 65 74 61 64 61 74 61 20 69 73 20 | oring.data.and.rich.metadata.is. |
2360 | 61 20 6e 6f 6e 2d 67 6f 61 6c 2e 00 67 65 6e 65 72 61 6c 2e 20 20 54 68 65 72 65 66 6f 72 65 2c | a.non-goal..general...Therefore, |
2380 | 20 73 69 67 73 75 6d 20 6c 6f 67 73 20 61 6c 6c 6f 77 20 6c 6f 67 67 69 6e 67 20 6f 66 20 73 69 | .sigsum.logs.allow.logging.of.si |
23a0 | 67 6e 65 64 20 63 68 65 63 6b 73 75 6d 20 61 6e 64 20 73 6f 6d 65 00 54 68 65 20 67 6f 61 6c 20 | gned.checksum.and.some.The.goal. |
23c0 | 6f 66 20 73 69 67 73 75 6d 20 6c 6f 67 67 69 6e 67 20 69 73 20 74 6f 20 6d 61 6b 65 20 61 20 73 | of.sigsum.logging.is.to.make.a.s |
23e0 | 69 67 6e 65 72 27 73 20 6b 65 79 2d 75 73 61 67 65 20 74 72 61 6e 73 70 61 72 65 6e 74 20 69 6e | igner's.key-usage.transparent.in |
2400 | 00 23 23 23 20 31 2e 31 20 2d 20 47 6f 61 6c 73 20 61 6e 64 20 6e 6f 6e 2d 73 63 6f 70 65 00 00 | .###.1.1.-.Goals.and.non-scope.. |
2420 | 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 69 73 20 61 62 6f 75 74 20 6f 75 72 20 6c 6f 67 20 64 | This.document.is.about.our.log.d |
2440 | 65 73 69 67 6e 2e 00 20 20 20 20 20 20 20 20 5b 63 6c 61 69 6d 61 6e 74 20 6d 6f 64 65 6c 5d 28 | esign..........[claimant.model]( |
2460 | 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 6f 6f 67 6c 65 2f 74 72 69 6c 6c 69 | https://github.com/google/trilli |
2480 | 61 6e 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 64 6f 63 73 2f 63 6c 61 69 6d 61 6e 74 6d 6f 64 65 | an/blob/master/docs/claimantmode |
24a0 | 6c 2f 43 6f 72 65 4d 6f 64 65 6c 2e 6d 64 29 2e 00 75 73 69 6e 67 20 74 68 65 00 20 20 20 20 20 | l/CoreModel.md)..using.the...... |
24c0 | 20 20 20 5b 73 65 70 61 72 61 74 65 20 64 6f 63 75 6d 65 6e 74 5d 28 68 74 74 70 73 3a 2f 2f 67 | ...[separate.document](https://g |
24e0 | 69 74 2e 73 69 67 73 75 6d 2e 6f 72 67 2f 73 69 67 73 75 6d 2f 74 72 65 65 2f 64 6f 63 2f 63 6c | it.sigsum.org/sigsum/tree/doc/cl |
2500 | 61 69 6d 61 6e 74 2e 6d 64 29 00 64 6f 63 75 6d 65 6e 74 20 74 68 65 6d 20 62 61 73 65 64 20 6f | aimant.md).document.them.based.o |
2520 | 6e 20 77 68 61 74 20 70 65 6f 70 6c 65 20 61 72 65 20 77 6f 72 6b 69 6e 67 20 6f 6e 20 69 6e 20 | n.what.people.are.working.on.in. |
2540 | 61 00 54 68 65 72 65 20 61 72 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 75 73 65 2d 63 61 73 65 73 | a.There.are.many.other.use-cases |
2560 | 20 74 68 61 74 20 73 69 67 73 75 6d 20 6c 6f 67 67 69 6e 67 20 63 61 6e 20 68 65 6c 70 20 77 69 | .that.sigsum.logging.can.help.wi |
2580 | 74 68 2e 20 20 57 65 20 69 6e 74 65 6e 64 20 74 6f 00 00 2d 20 41 20 6c 69 73 74 20 6f 66 20 6b | th...We.intend.to..-.A.list.of.k |
25a0 | 65 79 2d 76 61 6c 75 65 20 70 61 69 72 73 20 69 73 20 6d 61 69 6e 74 61 69 6e 65 64 20 77 69 74 | ey-value.pairs.is.maintained.wit |
25c0 | 68 20 61 20 63 65 72 74 61 69 6e 20 70 6f 6c 69 63 79 2e 00 09 5b 5c 5b 53 52 49 5c 5d 5d 28 68 | h.a.certain.policy...[\[SRI\]](h |
25e0 | 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 65 6e 2d | ttps://developer.mozilla.org/en- |
2600 | 55 53 2f 64 6f 63 73 2f 57 65 62 2f 53 65 63 75 72 69 74 79 2f 53 75 62 72 65 73 6f 75 72 63 65 | US/docs/Web/Security/Subresource |
2620 | 5f 49 6e 74 65 67 72 69 74 79 29 00 2d 20 41 20 77 65 62 20 73 65 72 76 65 72 20 64 6f 65 73 20 | _Integrity).-.A.web.server.does. |
2640 | 6e 6f 74 20 73 65 72 76 65 20 6d 61 6c 69 63 69 6f 75 73 20 6a 61 76 61 73 63 72 69 70 74 00 09 | not.serve.malicious.javascript.. |
2660 | 5b 5c 5b 42 54 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 | [\[BT\]](https://wiki.mozilla.or |
2680 | 67 2f 53 65 63 75 72 69 74 79 2f 42 69 6e 61 72 79 5f 54 72 61 6e 73 70 61 72 65 6e 63 79 29 00 | g/Security/Binary_Transparency). |
26a0 | 2d 20 45 76 65 72 79 6f 6e 65 20 67 65 74 73 20 74 68 65 20 73 61 6d 65 20 65 78 65 63 75 74 61 | -.Everyone.gets.the.same.executa |
26c0 | 62 6c 65 20 62 69 6e 61 72 69 65 73 00 45 78 61 6d 70 6c 65 73 20 69 6e 63 6c 75 64 65 3a 00 00 | ble.binaries.Examples.include:.. |
26e0 | 62 6c 6f 63 6b 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 61 63 69 6c 69 | block.that.can.be.used.to.facili |
2700 | 74 61 74 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6f 66 20 66 61 6c 73 69 66 69 61 62 6c 65 | tate.verification.of.falsifiable |
2720 | 20 63 6c 61 69 6d 73 2e 00 69 64 65 61 20 69 73 20 74 6f 20 6d 61 6b 65 20 61 20 73 69 67 6e 65 | .claims..idea.is.to.make.a.signe |
2740 | 72 27 73 20 5f 6b 65 79 2d 75 73 61 67 65 5f 20 74 72 61 6e 73 70 61 72 65 6e 74 2e 20 20 54 68 | r's._key-usage_.transparent...Th |
2760 | 69 73 20 69 73 20 61 20 70 6f 77 65 72 66 75 6c 20 62 75 69 6c 64 69 6e 67 00 53 69 67 73 75 6d | is.is.a.powerful.building.Sigsum |
2780 | 20 6c 6f 67 73 20 6d 61 6b 65 20 69 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 61 6e 73 77 65 72 | .logs.make.it.possible.to.answer |
27a0 | 73 20 74 68 65 73 65 20 74 79 70 65 73 20 6f 66 20 71 75 65 73 74 69 6f 6e 73 2e 20 20 54 68 65 | s.these.types.of.questions...The |
27c0 | 20 62 61 73 69 63 00 00 69 66 20 74 68 65 20 73 69 67 6e 69 6e 67 20 70 61 72 74 79 20 77 61 73 | .basic..if.the.signing.party.was |
27e0 | 20 66 6f 72 63 65 64 20 74 6f 20 73 69 67 6e 20 6d 61 6c 69 63 69 6f 75 73 20 64 61 74 61 20 61 | .forced.to.sign.malicious.data.a |
2800 | 67 61 69 6e 73 74 20 74 68 65 69 72 20 77 69 6c 6c 3f 00 48 6f 77 20 77 6f 75 6c 64 20 77 65 20 | gainst.their.will?.How.would.we. |
2820 | 64 65 74 65 63 74 20 69 66 20 73 6f 6d 65 74 68 69 6e 67 20 77 61 73 20 73 69 67 6e 65 64 20 62 | detect.if.something.was.signed.b |
2840 | 79 20 6d 69 73 74 61 6b 65 2c 20 6f 72 20 65 76 65 6e 20 77 6f 72 73 65 2c 00 48 6f 77 20 77 6f | y.mistake,.or.even.worse,.How.wo |
2860 | 75 6c 64 20 77 65 20 64 65 74 65 63 74 20 69 66 20 61 20 73 65 63 72 65 74 20 73 69 67 6e 69 6e | uld.we.detect.if.a.secret.signin |
2880 | 67 20 6b 65 79 20 67 6f 74 20 63 6f 6d 70 72 6f 6d 69 73 65 64 3f 00 77 68 65 74 68 65 72 20 74 | g.key.got.compromised?.whether.t |
28a0 | 68 65 20 73 69 67 6e 65 64 20 64 61 74 61 20 69 73 20 5f 61 63 74 75 61 6c 6c 79 20 74 68 65 20 | he.signed.data.is._actually.the. |
28c0 | 64 61 74 61 20 74 68 61 74 20 73 68 6f 75 6c 64 20 68 61 76 65 20 62 65 65 6e 20 73 69 67 6e 65 | data.that.should.have.been.signe |
28e0 | 64 5f 2e 00 54 68 65 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 5f 64 69 67 69 74 61 6c 20 73 69 | d_..The.problem.with._digital.si |
2900 | 67 6e 69 6e 67 20 6f 6e 20 69 74 73 20 6f 77 6e 5f 20 69 73 20 74 68 61 74 20 69 74 20 69 73 20 | gning.on.its.own_.is.that.it.is. |
2920 | 64 69 66 66 69 63 75 6c 74 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 00 00 54 68 65 20 75 73 65 72 | difficult.to.determine..The.user |
2940 | 20 6f 66 20 74 68 65 20 73 69 67 6e 65 64 20 64 61 74 61 20 69 73 20 63 61 6c 6c 65 64 20 61 20 | .of.the.signed.data.is.called.a. |
2960 | 5f 76 65 72 69 66 69 65 72 5f 2e 00 54 68 65 20 73 69 67 6e 69 6e 67 20 70 61 72 74 79 20 69 73 | _verifier_..The.signing.party.is |
2980 | 20 63 61 6c 6c 65 64 20 61 20 5f 73 69 67 6e 65 72 5f 2e 00 73 69 67 73 75 6d 20 6c 6f 67 67 69 | .called.a._signer_..sigsum.loggi |
29a0 | 6e 67 20 61 73 20 70 72 65 2d 68 61 73 68 65 64 20 64 69 67 69 74 61 6c 20 73 69 67 6e 69 6e 67 | ng.as.pre-hashed.digital.signing |
29c0 | 20 77 69 74 68 20 74 72 61 6e 73 70 61 72 65 6e 63 79 2e 00 41 20 73 69 67 73 75 6d 20 6c 6f 67 | .with.transparency..A.sigsum.log |
29e0 | 20 62 72 69 6e 67 73 20 74 72 61 6e 73 70 61 72 65 6e 63 79 20 74 6f 20 2a 2a 73 69 67 2a 2a 6e | .brings.transparency.to.**sig**n |
2a00 | 65 64 20 63 68 65 63 6b 2a 2a 73 75 6d 2a 2a 73 2e 20 20 59 6f 75 20 63 61 6e 20 74 68 69 6e 6b | ed.check**sum**s...You.can.think |
2a20 | 20 6f 66 00 00 09 5b 5c 5b 41 75 64 69 74 4c 6f 67 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 74 72 61 | .of...[\[AuditLog\]](https://tra |
2a40 | 6e 73 70 61 72 65 6e 63 79 2e 64 65 76 2f 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 65 6c 69 61 62 | nsparency.dev/application/reliab |
2a60 | 6c 79 2d 6c 6f 67 2d 61 6c 6c 2d 61 63 74 69 6f 6e 73 2d 70 65 72 66 6f 72 6d 65 64 2d 6f 6e 2d | ly-log-all-actions-performed-on- |
2a80 | 79 6f 75 72 2d 73 65 72 76 65 72 73 2f 29 2e 00 6f 72 20 69 73 20 73 6f 6d 65 6f 6e 65 20 72 75 | your-servers/)..or.is.someone.ru |
2aa0 | 6e 6e 69 6e 67 20 75 6e 65 78 70 65 63 74 65 64 20 63 6f 6d 6d 61 6e 64 73 20 6f 6e 20 79 6f 75 | nning.unexpected.commands.on.you |
2ac0 | 72 20 73 65 72 76 65 72 00 09 5b 5c 5b 43 68 65 63 6b 73 75 6d 44 42 5c 5d 5d 28 68 74 74 70 73 | r.server..[\[ChecksumDB\]](https |
2ae0 | 3a 2f 2f 67 6f 2e 67 6f 6f 67 6c 65 73 6f 75 72 63 65 2e 63 6f 6d 2f 70 72 6f 70 6f 73 61 6c 2f | ://go.googlesource.com/proposal/ |
2b00 | 2b 2f 6d 61 73 74 65 72 2f 64 65 73 69 67 6e 2f 32 35 35 33 30 2d 73 75 6d 64 62 2e 6d 64 29 2c | +/master/design/25530-sumdb.md), |
2b20 | 00 64 69 64 20 79 6f 75 20 67 65 74 20 61 20 64 69 66 66 65 72 65 6e 74 20 47 6f 20 6d 6f 64 75 | .did.you.get.a.different.Go.modu |
2b40 | 6c 65 20 74 68 61 6e 20 65 76 65 72 79 6f 6e 65 20 65 6c 73 65 00 09 5b 5c 5b 43 54 5c 5d 5d 28 | le.than.everyone.else..[\[CT\]]( |
2b60 | 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 36 | https://tools.ietf.org/html/rfc6 |
2b80 | 39 36 32 29 2c 00 61 72 65 20 74 68 65 72 65 20 61 6e 79 20 28 6d 69 73 2d 29 69 73 73 75 65 64 | 962),.are.there.any.(mis-)issued |
2ba0 | 20 54 4c 53 20 63 65 72 74 69 66 69 63 61 74 65 73 00 54 72 61 6e 73 70 61 72 65 6e 63 79 20 6c | .TLS.certificates.Transparency.l |
2bc0 | 6f 67 73 20 6d 61 6b 65 20 69 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 64 65 74 65 63 74 20 75 | ogs.make.it.possible.to.detect.u |
2be0 | 6e 77 61 6e 74 65 64 20 65 76 65 6e 74 73 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 00 23 23 | nwanted.events...For.example,.## |
2c00 | 20 31 20 2d 20 49 6e 74 72 6f 64 75 63 74 69 6f 6e 00 00 50 6c 65 61 73 65 20 6c 65 74 20 75 73 | .1.-.Introduction..Please.let.us |
2c20 | 20 6b 6e 6f 77 20 69 66 20 79 6f 75 20 68 61 76 65 20 61 6e 79 20 66 65 65 64 62 61 63 6b 2e 00 | .know.if.you.have.any.feedback.. |
2c40 | 00 72 65 76 69 73 69 6f 6e 20 6f 66 20 74 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 77 69 6c 6c 20 | .revision.of.this.document.will. |
2c60 | 62 75 6d 70 20 74 68 65 20 76 65 72 73 69 6f 6e 20 6e 75 6d 62 65 72 20 74 6f 20 76 31 2e 00 54 | bump.the.version.number.to.v1..T |
2c80 | 68 69 73 20 69 73 20 61 20 77 6f 72 6b 2d 69 6e 2d 70 72 6f 67 72 65 73 73 20 64 6f 63 75 6d 65 | his.is.a.work-in-progress.docume |
2ca0 | 6e 74 20 74 68 61 74 20 6d 61 79 20 62 65 20 6d 6f 76 65 64 20 6f 72 20 6d 6f 64 69 66 69 65 64 | nt.that.may.be.moved.or.modified |
2cc0 | 2e 20 20 41 20 66 75 74 75 72 65 00 2a 2a 57 61 72 6e 69 6e 67 2e 2a 2a 00 00 43 65 72 74 69 66 | ...A.future.**Warning.**..Certif |
2ce0 | 69 63 61 74 65 20 54 72 61 6e 73 70 61 72 65 6e 63 79 20 73 6f 6c 76 65 73 20 61 6e 64 20 68 6f | icate.Transparency.solves.and.ho |
2d00 | 77 2e 00 73 69 67 6e 61 74 75 72 65 73 2c 20 68 61 73 68 20 66 75 6e 63 74 69 6f 6e 73 2c 20 61 | w..signatures,.hash.functions,.a |
2d20 | 6e 64 20 4d 65 72 6b 6c 65 20 74 72 65 65 73 2e 20 20 59 6f 75 20 72 6f 75 67 68 6c 79 20 6b 6e | nd.Merkle.trees...You.roughly.kn |
2d40 | 6f 77 20 77 68 61 74 20 70 72 6f 62 6c 65 6d 00 59 6f 75 20 68 61 76 65 20 62 61 73 69 63 20 75 | ow.what.problem.You.have.basic.u |
2d60 | 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 70 72 | nderstanding.of.cryptographic.pr |
2d80 | 69 6d 69 74 69 76 65 73 2c 20 65 2e 67 2e 2c 20 64 69 67 69 74 61 6c 00 2a 2a 50 72 65 6c 69 6d | imitives,.e.g.,.digital.**Prelim |
2da0 | 69 6e 61 72 69 65 73 2e 2a 2a 00 00 6d 69 6e 69 6d 61 6c 69 73 6d 20 74 68 61 74 20 73 69 6d 70 | inaries.**..minimalism.that.simp |
2dc0 | 6c 69 66 69 65 73 20 75 73 61 67 65 2e 00 61 72 63 68 69 74 65 63 74 75 72 65 20 65 76 6f 6c 76 | lifies.usage..architecture.evolv |
2de0 | 65 73 20 61 72 6f 75 6e 64 20 63 65 6e 74 72 61 6c 69 7a 65 64 20 6c 6f 67 20 6f 70 65 72 61 74 | es.around.centralized.log.operat |
2e00 | 69 6f 6e 73 2c 20 64 69 73 74 72 69 62 75 74 65 64 20 74 72 75 73 74 2c 20 61 6e 64 00 6d 61 6e | ions,.distributed.trust,.and.man |
2e20 | 61 67 65 6d 65 6e 74 20 6f 66 20 65 78 65 63 75 74 61 62 6c 65 20 62 69 6e 61 72 69 65 73 20 61 | agement.of.executable.binaries.a |
2e40 | 6e 64 20 70 72 6f 76 65 6e 61 6e 63 65 20 61 72 65 20 74 77 6f 20 65 78 61 6d 70 6c 65 73 2e 20 | nd.provenance.are.two.examples.. |
2e60 | 20 4f 75 72 00 61 20 62 75 69 6c 64 69 6e 67 20 62 6c 6f 63 6b 20 74 68 61 74 20 63 61 6e 20 62 | .Our.a.building.block.that.can.b |
2e80 | 65 20 75 73 65 64 20 66 6f 72 20 61 20 76 61 72 69 65 74 79 20 6f 66 20 75 73 65 2d 63 61 73 65 | e.used.for.a.variety.of.use-case |
2ea0 | 73 2e 20 20 54 72 61 6e 73 70 61 72 65 6e 74 00 6d 61 6c 69 63 69 6f 75 73 20 61 6e 64 20 75 6e | s...Transparent.malicious.and.un |
2ec0 | 69 6e 74 65 6e 64 65 64 20 6b 65 79 2d 75 73 61 67 65 20 63 61 6e 20 62 65 20 64 65 74 65 63 74 | intended.key-usage.can.be.detect |
2ee0 | 65 64 20 75 73 69 6e 67 20 61 20 73 69 67 73 75 6d 20 6c 6f 67 2e 20 20 54 68 69 73 20 69 73 00 | ed.using.a.sigsum.log...This.is. |
2f00 | 6c 6f 67 67 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 6b 65 20 73 69 67 6e 61 74 75 72 | logged.in.order.to.make.signatur |
2f20 | 65 20 6f 70 65 72 61 74 69 6f 6e 73 20 74 72 61 6e 73 70 61 72 65 6e 74 2e 20 20 46 6f 72 20 65 | e.operations.transparent...For.e |
2f40 | 78 61 6d 70 6c 65 2c 00 63 68 65 63 6b 73 75 6d 20 64 61 74 61 62 61 73 65 2c 20 65 78 63 65 70 | xample,.checksum.database,.excep |
2f60 | 74 20 74 68 61 74 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 61 6c 6c 79 20 2a 2a 73 69 67 2a 2a | t.that.cryptographically.**sig** |
2f80 | 6e 65 64 20 63 68 65 63 6b 2a 2a 73 75 6d 2a 2a 73 20 61 72 65 00 57 65 20 70 72 6f 70 6f 73 65 | ned.check**sum**s.are.We.propose |
2fa0 | 20 73 69 67 73 75 6d 20 6c 6f 67 67 69 6e 67 2e 20 20 49 74 20 69 73 20 73 69 6d 69 6c 61 72 20 | .sigsum.logging...It.is.similar. |
2fc0 | 74 6f 20 43 65 72 74 69 66 69 63 61 74 65 20 54 72 61 6e 73 70 61 72 65 6e 63 79 20 61 6e 64 20 | to.Certificate.Transparency.and. |
2fe0 | 47 6f 27 73 00 23 20 53 69 67 73 75 6d 20 4c 6f 67 67 69 6e 67 20 44 65 73 69 67 6e 20 76 30 00 | Go's.#.Sigsum.Logging.Design.v0. |
3000 | 61 64 00 00 42 04 00 00 22 05 00 00 00 10 00 00 31 00 00 00 00 00 00 00 b0 0f 00 00 63 0f 00 00 | ad..B...".......1...........c... |
3020 | 0e 0f 00 00 c1 0e 00 00 74 0e 00 00 51 0e 00 00 50 0e 00 00 03 0e 00 00 bc 0d 00 00 79 0d 00 00 | ........t...Q...P...........y... |
3040 | 78 0d 00 00 27 0d 00 00 26 0d 00 00 d8 0c 00 00 88 0c 00 00 4a 0c 00 00 ec 0b 00 00 eb 0b 00 00 | x...'...&...........J........... |
3060 | b5 0b 00 00 68 0b 00 00 1b 0b 00 00 cb 0a 00 00 80 0a 00 00 7f 0a 00 00 33 0a 00 00 e7 09 00 00 | ....h...................3....... |
3080 | 98 09 00 00 3a 09 00 00 39 09 00 00 eb 08 00 00 9d 08 00 00 51 08 00 00 50 08 00 00 00 08 00 00 | ....:...9...........Q...P....... |
30a0 | b4 07 00 00 7c 07 00 00 7b 07 00 00 30 07 00 00 2f 07 00 00 15 07 00 00 d5 06 00 00 8d 06 00 00 | ....|...{...0.../............... |
30c0 | 58 06 00 00 21 06 00 00 d1 05 00 00 96 05 00 00 75 05 00 00 4a 05 00 00 22 05 00 00 21 05 00 00 | X...!...........u...J..."...!... |
30e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3100 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3120 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3140 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3160 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3180 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
31a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
31c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
31e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3200 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3220 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3240 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3260 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3280 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
32a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
32c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
32e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3300 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3320 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3340 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3360 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3380 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
33a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
33c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
33e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3400 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3420 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3440 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3460 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3480 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
34a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
34c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
34e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3500 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3520 | 00 00 2d 20 57 68 61 74 20 70 6f 6c 69 63 79 20 73 68 6f 75 6c 64 20 61 20 76 65 72 69 66 69 65 | ..-.What.policy.should.a.verifie |
3540 | 72 20 66 6f 6c 6c 6f 77 3f 00 2d 20 48 6f 77 20 64 6f 65 73 20 69 74 20 77 6f 72 6b 20 77 69 74 | r.follow?.-.How.does.it.work.wit |
3560 | 68 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 6c 6f 67 3f 00 2d 20 57 68 61 74 20 61 72 65 20 | h.more.than.one.log?.-.What.are. |
3580 | 74 68 65 20 70 72 69 76 61 63 79 20 63 6f 6e 63 65 72 6e 73 3f 00 73 68 6f 75 6c 64 20 69 6e 63 | the.privacy.concerns?.should.inc |
35a0 | 6c 75 64 65 20 60 67 65 74 2d 74 72 65 65 2d 68 65 61 64 2d 2a 60 20 65 6e 64 70 6f 69 6e 74 73 | lude.`get-tree-head-*`.endpoints |
35c0 | 20 69 6e 20 6d 6f 72 65 20 64 65 74 61 69 6c 2e 00 2d 20 57 68 61 74 20 74 68 6f 75 67 68 74 20 | .in.more.detail..-.What.thought. |
35e0 | 77 65 6e 74 20 69 6e 74 6f 20 77 69 74 6e 65 73 73 20 63 6f 73 69 67 6e 69 6e 67 3f 20 20 43 6f | went.into.witness.cosigning?..Co |
3600 | 6d 70 61 72 65 20 77 69 74 68 20 6f 74 68 65 72 20 61 70 70 72 6f 61 63 68 65 73 2c 20 61 6e 64 | mpare.with.other.approaches,.and |
3620 | 00 2d 20 57 68 61 74 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 70 72 69 6d 69 74 69 76 65 73 | .-.What.cryptographic.primitives |
3640 | 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 20 61 6e 64 20 77 68 79 3f 00 2d 20 57 68 61 74 20 28 | .are.supported.and.why?.-.What.( |
3660 | 64 65 29 73 65 72 69 61 6c 69 7a 61 74 69 6f 6e 20 70 61 72 73 65 72 73 20 61 72 65 20 6e 65 65 | de)serialization.parsers.are.nee |
3680 | 64 65 64 20 61 6e 64 20 77 68 79 3f 00 2d 20 57 68 79 20 6e 6f 74 20 73 74 6f 72 65 20 72 69 63 | ded.and.why?.-.Why.not.store.ric |
36a0 | 68 20 6d 65 74 61 64 61 74 61 20 69 6e 20 74 68 65 20 6c 6f 67 3f 20 58 58 58 3a 20 61 6e 73 77 | h.metadata.in.the.log?.XXX:.answ |
36c0 | 65 72 65 64 20 65 6e 6f 75 67 68 20 61 6c 72 65 61 64 79 3f 00 2d 20 57 68 79 20 6e 6f 74 20 73 | ered.enough.already?.-.Why.not.s |
36e0 | 74 6f 72 65 20 64 61 74 61 20 69 6e 20 74 68 65 20 6c 6f 67 3f 20 20 58 58 58 3a 20 61 6e 73 77 | tore.data.in.the.log?..XXX:.answ |
3700 | 65 72 65 64 20 65 6e 6f 75 67 68 20 61 6c 72 65 61 64 79 3f 00 23 23 23 23 20 34 2e 34 20 2d 20 | ered.enough.already?.####.4.4.-. |
3720 | 4d 6f 72 65 20 71 75 65 73 74 69 6f 6e 73 00 00 57 65 20 61 72 65 20 63 6f 6e 73 69 64 65 72 69 | More.questions..We.are.consideri |
3740 | 6e 67 20 69 66 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 6e 74 69 2d 73 70 61 6d 20 6d 65 63 68 61 | ng.if.additional.anti-spam.mecha |
3760 | 6e 69 73 6d 73 20 73 68 6f 75 6c 64 20 62 65 20 73 75 70 70 6f 72 74 65 64 2e 00 00 6d 61 6e 61 | nisms.should.be.supported...mana |
3780 | 67 65 6d 65 6e 74 2e 20 20 4f 75 72 20 77 6f 72 6b 20 69 73 20 61 62 6f 75 74 20 74 72 61 6e 73 | gement...Our.work.is.about.trans |
37a0 | 70 61 72 65 6e 74 20 5f 6b 65 79 2d 75 73 61 67 65 5f 2e 00 6d 6f 72 65 20 63 6f 6d 70 6c 65 78 | parent._key-usage_..more.complex |
37c0 | 20 74 68 61 6e 20 74 68 61 74 2e 20 20 41 20 73 65 70 61 72 61 74 65 20 70 72 6f 6a 65 63 74 20 | .than.that...A.separate.project. |
37e0 | 73 68 6f 75 6c 64 20 66 6f 63 75 73 20 6f 6e 20 74 72 61 6e 73 70 61 72 65 6e 74 20 6b 65 79 00 | should.focus.on.transparent.key. |
3800 | 41 20 73 69 67 6e 65 72 27 73 20 64 6f 6d 61 69 6e 20 68 69 6e 74 20 69 73 20 6e 6f 74 20 70 61 | A.signer's.domain.hint.is.not.pa |
3820 | 72 74 20 6f 66 20 74 68 65 20 6c 6f 67 67 65 64 20 6c 65 61 66 20 62 65 63 61 75 73 65 20 6b 65 | rt.of.the.logged.leaf.because.ke |
3840 | 79 20 6d 61 6e 61 67 65 6d 65 6e 74 20 69 73 00 00 6d 61 6e 79 20 73 69 67 6e 65 72 73 20 68 61 | y.management.is..many.signers.ha |
3860 | 76 65 20 61 20 64 6f 6d 61 69 6e 2e 20 20 41 20 73 69 6e 67 6c 65 20 64 6f 6d 61 69 6e 20 6e 61 | ve.a.domain...A.single.domain.na |
3880 | 6d 65 20 69 73 20 61 6c 73 6f 20 72 65 6c 61 74 69 76 65 6c 79 20 63 68 65 61 70 2e 00 62 65 74 | me.is.also.relatively.cheap..bet |
38a0 | 74 65 72 20 74 68 61 6e 20 6e 6f 74 20 68 61 76 69 6e 67 20 61 6e 79 20 61 6e 74 69 2d 73 70 61 | ter.than.not.having.any.anti-spa |
38c0 | 6d 20 6d 65 63 68 61 6e 69 73 6d 20 61 74 20 61 6c 6c 2e 20 20 57 65 20 70 69 63 6b 65 64 20 44 | m.mechanism.at.all...We.picked.D |
38e0 | 4e 53 20 62 65 63 61 75 73 65 00 55 73 69 6e 67 20 44 4e 53 20 61 73 20 61 6e 20 61 6e 74 69 2d | NS.because.Using.DNS.as.an.anti- |
3900 | 73 70 61 6d 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 6e 6f 74 20 61 20 70 65 72 66 65 63 74 20 | spam.mechanism.is.not.a.perfect. |
3920 | 73 6f 6c 75 74 69 6f 6e 2e 20 20 49 74 20 69 73 20 68 6f 77 65 76 65 72 00 00 09 5b 41 76 69 61 | solution...It.is.however...[Avia |
3940 | 74 6f 72 5d 28 68 74 74 70 73 3a 2f 2f 67 72 6f 75 70 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 | tor](https://groups.google.com/a |
3960 | 2f 63 68 72 6f 6d 69 75 6d 2e 6f 72 67 2f 67 2f 63 74 2d 70 6f 6c 69 63 79 2f 63 2f 5a 5a 66 33 | /chromium.org/g/ct-policy/c/ZZf3 |
3980 | 69 72 79 4c 67 43 6f 2f 6d 2f 72 64 54 41 48 57 63 64 42 67 41 4a 29 00 75 6e 75 73 61 62 6c 65 | iryLgCo/m/rdTAHWcdBgAJ).unusable |
39a0 | 20 66 6f 72 20 6f 74 68 65 72 73 2e 20 20 54 68 69 73 20 6b 69 6e 64 20 6f 66 20 69 6e 63 69 64 | .for.others...This.kind.of.incid |
39c0 | 65 6e 74 20 68 61 70 70 65 6e 65 64 20 69 6e 20 74 68 65 20 72 65 61 6c 2d 77 6f 72 6c 64 20 61 | ent.happened.in.the.real-world.a |
39e0 | 6c 72 65 61 64 79 00 6d 65 72 67 65 20 6c 61 74 65 6e 63 69 65 73 2e 20 20 54 6f 6f 20 6d 61 6e | lready.merge.latencies...Too.man |
3a00 | 79 20 73 75 62 6d 69 73 73 69 6f 6e 73 20 66 72 6f 6d 20 61 20 73 69 6e 67 6c 65 20 70 61 72 74 | y.submissions.from.a.single.part |
3a20 | 79 20 6d 61 79 20 72 65 6e 64 65 72 20 61 20 6c 6f 67 00 4e 6f 74 69 63 65 20 74 68 61 74 20 74 | y.may.render.a.log.Notice.that.t |
3a40 | 68 65 20 65 66 66 65 63 74 20 6f 66 20 73 70 61 6d 20 69 73 20 6e 6f 74 20 6f 6e 6c 79 20 61 62 | he.effect.of.spam.is.not.only.ab |
3a60 | 6f 75 74 20 73 74 6f 72 61 67 65 2e 20 20 49 74 20 69 73 20 61 6c 73 6f 20 61 62 6f 75 74 00 00 | out.storage...It.is.also.about.. |
3a80 | 74 6f 20 73 70 61 6d 20 61 20 6c 6f 67 20 69 6e 20 61 6e 79 20 73 69 67 6e 69 66 69 63 61 6e 74 | to.spam.a.log.in.any.significant |
3aa0 | 20 77 61 79 20 69 66 20 72 61 74 65 20 6c 69 6d 69 74 73 20 61 72 65 20 6e 6f 74 20 73 65 74 20 | .way.if.rate.limits.are.not.set. |
3ac0 | 74 6f 6f 20 6c 6f 6f 73 65 2e 00 61 70 70 6c 69 65 64 20 70 65 72 20 73 65 63 6f 6e 64 2d 6c 65 | too.loose..applied.per.second-le |
3ae0 | 76 65 6c 20 64 6f 6d 61 69 6e 2e 20 20 59 6f 75 20 77 6f 75 6c 64 20 6e 65 65 64 20 61 20 6c 61 | vel.domain...You.would.need.a.la |
3b00 | 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 73 00 63 6f 6e 74 72 | rge.number.of.domain.names.contr |
3b20 | 6f 6c 73 20 61 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 74 68 61 74 20 69 73 20 61 77 61 72 65 20 | ols.a.domain.name.that.is.aware. |
3b40 | 6f 66 20 74 68 65 69 72 20 70 75 62 6c 69 63 20 6b 65 79 2c 20 72 61 74 65 20 6c 69 6d 69 74 73 | of.their.public.key,.rate.limits |
3b60 | 20 63 61 6e 20 62 65 00 44 6f 6d 61 69 6e 20 68 69 6e 74 73 20 68 65 6c 70 20 6c 6f 67 20 6f 70 | .can.be.Domain.hints.help.log.op |
3b80 | 65 72 61 74 6f 72 73 20 63 6f 6d 62 61 74 20 73 70 61 6d 2e 20 20 42 79 20 76 65 72 69 66 79 69 | erators.combat.spam...By.verifyi |
3ba0 | 6e 67 20 74 68 61 74 20 65 76 65 72 79 20 73 69 67 6e 65 72 00 23 23 23 23 20 34 2e 33 20 2d 20 | ng.that.every.signer.####.4.3.-. |
3bc0 | 57 68 61 74 20 69 73 20 74 68 65 20 70 6f 69 6e 74 20 6f 66 20 68 61 76 69 6e 67 20 61 20 64 6f | What.is.the.point.of.having.a.do |
3be0 | 6d 61 69 6e 20 68 69 6e 74 3f 00 00 09 5b 5c 5b 54 53 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 67 69 | main.hint?...[\[TS\]](https://gi |
3c00 | 74 2e 73 69 67 73 75 6d 2e 6f 72 67 2f 73 69 67 73 75 6d 2f 63 6f 6d 6d 69 74 2f 3f 69 64 3d 66 | t.sigsum.org/sigsum/commit/?id=f |
3c20 | 65 66 34 36 30 35 38 36 65 38 34 37 65 33 37 38 61 31 39 37 33 38 31 65 66 31 61 65 33 61 36 34 | ef460586e847e378a197381ef1ae3a64 |
3c40 | 65 36 65 61 33 38 62 29 2e 00 74 68 65 20 74 69 6d 65 20 6f 66 20 6c 6f 67 67 69 6e 67 2c 20 79 | e6ea38b)..the.time.of.logging,.y |
3c60 | 6f 75 20 6d 61 79 20 75 73 65 20 61 20 63 6f 73 69 67 6e 65 64 20 74 72 65 65 20 68 65 61 64 20 | ou.may.use.a.cosigned.tree.head. |
3c80 | 69 6e 73 74 65 61 64 00 73 65 74 20 69 74 20 61 73 20 6c 61 72 67 65 20 61 73 20 70 6f 73 73 69 | instead.set.it.as.large.as.possi |
3ca0 | 62 6c 65 2e 20 20 49 66 20 61 20 76 65 72 69 66 69 65 64 20 74 69 6d 65 73 74 61 6d 70 20 69 73 | ble...If.a.verified.timestamp.is |
3cc0 | 20 6e 65 65 64 65 64 20 74 6f 20 72 65 61 73 6f 6e 20 61 62 6f 75 74 00 4e 6f 74 65 20 74 68 61 | .needed.to.reason.about.Note.tha |
3ce0 | 74 20 61 20 73 69 67 6e 65 72 27 73 20 73 68 61 72 64 20 68 69 6e 74 20 69 73 20 6e 6f 74 20 61 | t.a.signer's.shard.hint.is.not.a |
3d00 | 20 76 65 72 69 66 69 65 64 20 74 69 6d 65 73 74 61 6d 70 2e 20 20 57 65 20 72 65 63 6f 6d 6d 65 | .verified.timestamp...We.recomme |
3d20 | 6e 64 20 74 6f 00 00 53 75 63 68 20 72 65 2d 6c 6f 67 67 69 6e 67 20 61 6c 73 6f 20 63 6f 6d 65 | nd.to..Such.re-logging.also.come |
3d40 | 73 20 61 74 20 74 68 65 20 72 69 73 6b 20 6f 66 20 61 63 74 69 76 61 74 69 6e 67 20 73 6f 6d 65 | s.at.the.risk.of.activating.some |
3d60 | 6f 6e 65 20 65 6c 73 65 27 73 20 72 61 74 65 20 6c 69 6d 69 74 73 2e 00 00 75 6e 73 75 73 74 61 | one.else's.rate.limits...unsusta |
3d80 | 69 6e 61 62 6c 65 20 69 6e 20 74 68 65 20 6c 6f 6e 67 20 72 75 6e 20 62 65 63 61 75 73 65 20 6c | inable.in.the.long.run.because.l |
3da0 | 6f 67 20 73 69 7a 65 73 20 67 72 6f 77 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 2e 00 6e 65 77 65 | og.sizes.grow.indefinitely..newe |
3dc0 | 72 20 6f 6e 65 20 74 68 61 74 20 6a 75 73 74 20 73 74 61 72 74 65 64 20 69 74 73 20 6f 70 65 72 | r.one.that.just.started.its.oper |
3de0 | 61 74 69 6f 6e 73 2e 20 20 54 68 69 73 20 6d 61 6b 65 73 20 6c 6f 67 20 6f 70 65 72 61 74 69 6f | ations...This.makes.log.operatio |
3e00 | 6e 73 00 57 69 74 68 6f 75 74 20 73 68 61 72 64 69 6e 67 2c 20 61 20 67 6f 6f 64 20 53 61 6d 61 | ns.Without.sharding,.a.good.Sama |
3e20 | 72 69 74 61 6e 20 63 61 6e 20 61 64 64 20 61 6c 6c 20 6c 65 61 76 65 73 20 66 72 6f 6d 20 61 6e | ritan.can.add.all.leaves.from.an |
3e40 | 20 6f 6c 64 20 6c 6f 67 20 69 6e 74 6f 20 61 00 00 65 70 6f 63 68 20 28 4a 61 6e 75 61 72 79 20 | .old.log.into.a..epoch.(January. |
3e60 | 31 2c 20 31 39 37 30 20 30 30 3a 30 30 20 55 54 43 29 2e 00 69 6e 74 65 72 76 61 6c 20 61 72 65 | 1,.1970.00:00.UTC)..interval.are |
3e80 | 20 69 6e 63 6c 75 73 69 76 65 20 61 6e 64 20 65 78 70 72 65 73 73 65 64 20 61 73 20 74 68 65 20 | .inclusive.and.expressed.as.the. |
3ea0 | 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 73 69 6e 63 65 20 74 68 65 20 55 4e 49 58 | number.of.seconds.since.the.UNIX |
3ec0 | 00 69 6e 74 65 72 76 61 6c 20 69 73 20 64 65 66 69 6e 65 64 20 62 79 20 61 20 73 74 61 72 74 20 | .interval.is.defined.by.a.start. |
3ee0 | 74 69 6d 65 20 61 6e 64 20 61 6e 20 65 6e 64 20 74 69 6d 65 2e 20 20 42 6f 74 68 20 65 6e 64 73 | time.and.an.end.time...Both.ends |
3f00 | 20 6f 66 20 74 68 65 20 73 68 61 72 64 00 73 68 61 72 64 20 68 69 6e 74 2e 20 20 54 68 65 20 73 | .of.the.shard.shard.hint...The.s |
3f20 | 65 6c 65 63 74 65 64 20 73 68 61 72 64 20 68 69 6e 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 | elected.shard.hint.must.be.withi |
3f40 | 6e 20 61 20 6c 6f 67 27 73 20 73 68 61 72 64 20 69 6e 74 65 72 76 61 6c 2e 20 20 41 20 73 68 61 | n.a.log's.shard.interval...A.sha |
3f60 | 72 64 00 63 61 72 72 79 20 61 6e 79 20 73 75 63 68 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 20 | rd.carry.any.such.information... |
3f80 | 54 68 65 72 65 66 6f 72 65 2c 20 77 65 20 72 65 71 75 69 72 65 20 74 68 61 74 20 74 68 65 20 73 | Therefore,.we.require.that.the.s |
3fa0 | 69 67 6e 65 72 20 73 65 6c 65 63 74 73 20 61 00 55 6e 6c 69 6b 65 20 54 4c 53 20 63 65 72 74 69 | igner.selects.a.Unlike.TLS.certi |
3fc0 | 66 69 63 61 74 65 73 20 77 68 69 63 68 20 61 6c 72 65 61 64 79 20 68 61 76 65 20 76 61 6c 69 64 | ficates.which.already.have.valid |
3fe0 | 69 74 79 20 72 61 6e 67 65 73 2c 20 61 20 63 68 65 63 6b 73 75 6d 20 64 6f 65 73 20 6e 6f 74 00 | ity.ranges,.a.checksum.does.not. |
4000 | 61 64 00 00 45 00 00 00 3d 01 00 00 00 10 00 00 37 00 00 00 00 00 00 00 bf 0f 00 00 78 0f 00 00 | ad..E...=.......7...........x... |
4020 | 2d 0f 00 00 2c 0f 00 00 13 0f 00 00 c3 0e 00 00 7c 0e 00 00 2e 0e 00 00 de 0d 00 00 8d 0d 00 00 | -...,...........|............... |
4040 | 3d 0d 00 00 ea 0c 00 00 9c 0c 00 00 4c 0c 00 00 fc 0b 00 00 ae 0b 00 00 62 0b 00 00 19 0b 00 00 | =...........L...........b....... |
4060 | c9 0a 00 00 79 0a 00 00 2c 0a 00 00 dd 09 00 00 8f 09 00 00 43 09 00 00 0f 09 00 00 bb 08 00 00 | ....y...,...........C........... |
4080 | 6d 08 00 00 1f 08 00 00 eb 07 00 00 a1 07 00 00 5b 07 00 00 0d 07 00 00 b6 06 00 00 69 06 00 00 | m...............[...........i... |
40a0 | 1f 06 00 00 cf 05 00 00 91 05 00 00 90 05 00 00 7c 05 00 00 2e 05 00 00 df 04 00 00 92 04 00 00 | ................|............... |
40c0 | 41 04 00 00 eb 03 00 00 a6 03 00 00 73 03 00 00 fe 02 00 00 fd 02 00 00 82 02 00 00 3a 02 00 00 | A...........s...............:... |
40e0 | eb 01 00 00 a4 01 00 00 93 01 00 00 3e 01 00 00 3d 01 00 00 16 01 00 00 00 00 00 00 00 00 00 00 | ............>...=............... |
4100 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 5b 5c 5b 44 69 67 69 43 | ........................[\[DigiC |
4120 | 65 72 74 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 67 72 6f 75 70 73 2e 67 6f 6f 67 6c 65 00 00 09 5b | ert\]](https://groups.google...[ |
4140 | 5c 5b 44 69 67 69 43 65 72 74 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 67 72 6f 75 70 73 2e 67 6f 6f | \[DigiCert\]](https://groups.goo |
4160 | 67 6c 65 2e 63 6f 6d 2f 61 2f 63 68 72 6f 6d 69 75 6d 2e 6f 72 67 2f 67 2f 63 74 2d 70 6f 6c 69 | gle.com/a/chromium.org/g/ct-poli |
4180 | 63 79 2f 63 2f 61 4b 4e 62 5a 75 4a 7a 77 66 4d 29 2e 00 54 72 61 6e 73 70 61 72 65 6e 63 79 20 | cy/c/aKNbZuJzwfM)..Transparency. |
41a0 | 4c 6f 67 00 62 65 65 6e 20 74 68 65 20 63 61 73 65 20 77 68 65 6e 20 61 20 72 65 6d 6f 74 65 20 | Log.been.the.case.when.a.remote. |
41c0 | 63 6f 64 65 20 65 78 65 63 75 74 69 6f 6e 20 77 61 73 20 66 6f 75 6e 64 20 66 6f 72 20 61 20 43 | code.execution.was.found.for.a.C |
41e0 | 65 72 74 69 66 69 63 61 74 65 00 64 69 73 74 72 69 62 75 74 65 20 69 74 20 74 6f 20 61 20 73 75 | ertificate.distribute.it.to.a.su |
4200 | 62 73 65 74 20 6f 66 20 69 73 6f 6c 61 74 65 64 20 76 65 72 69 66 69 65 72 73 2e 20 20 46 6f 72 | bset.of.isolated.verifiers...For |
4220 | 20 65 78 61 6d 70 6c 65 2c 20 74 68 69 73 20 63 6f 75 6c 64 20 68 61 76 65 00 54 68 69 73 20 63 | .example,.this.could.have.This.c |
4240 | 6f 76 65 72 73 20 61 20 77 65 61 6b 65 72 20 66 6f 72 6d 20 6f 66 20 61 74 74 61 63 6b 65 72 20 | overs.a.weaker.form.of.attacker. |
4260 | 74 68 61 74 20 69 73 20 61 62 6c 65 20 74 6f 20 73 69 67 6e 20 6c 6f 67 20 64 61 74 61 20 61 6e | that.is.able.to.sign.log.data.an |
4280 | 64 00 54 68 65 20 73 61 6d 65 20 61 74 74 61 63 6b 65 72 20 61 6c 73 6f 20 67 61 69 6e 65 64 20 | d.The.same.attacker.also.gained. |
42a0 | 63 6f 6e 74 72 6f 6c 20 6f 66 20 74 68 65 20 73 69 67 6e 69 6e 67 20 6b 65 79 20 61 6e 64 20 69 | control.of.the.signing.key.and.i |
42c0 | 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 6f 66 20 61 20 73 69 67 73 75 6d 20 6c 6f 67 20 74 68 | nfrastructure.of.a.sigsum.log.th |
42e0 | 61 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 72 61 6e 73 70 61 72 65 6e 63 79 2e 00 00 09 5b | at.is.used.for.transparency....[ |
4300 | 5c 5b 53 6f 6c 61 72 57 69 6e 64 73 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 7a 64 6e 65 | \[SolarWinds\]](https://www.zdne |
4320 | 74 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 68 69 72 64 2d 6d 61 6c 77 61 72 65 2d 73 74 72 61 | t.com/article/third-malware-stra |
4340 | 69 6e 2d 64 69 73 63 6f 76 65 72 65 64 2d 69 6e 2d 73 6f 6c 61 72 77 69 6e 64 73 2d 73 75 70 70 | in-discovered-in-solarwinds-supp |
4360 | 6c 79 2d 63 68 61 69 6e 2d 61 74 74 61 63 6b 2f 29 2e 00 63 6f 6d 70 72 6f 6d 69 73 65 64 20 73 | ly-chain-attack/)..compromised.s |
4380 | 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 63 6f 6e 74 72 6f 76 65 72 73 69 61 6c 20 74 68 65 73 65 | hould.not.be.controversial.these |
43a0 | 20 64 61 79 73 00 54 68 65 20 66 61 63 74 20 74 68 61 74 20 73 69 67 6e 69 6e 67 20 6b 65 79 73 | .days.The.fact.that.signing.keys |
43c0 | 20 61 6e 64 20 72 65 6c 61 74 65 64 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 63 6f 6d 70 | .and.related.infrastructure.comp |
43e0 | 6f 6e 65 6e 74 73 20 67 65 74 00 09 5b 5c 5b 46 42 49 2d 41 70 70 6c 65 5c 5d 5d 28 68 74 74 70 | onents.get..[\[FBI-Apple\]](http |
4400 | 73 3a 2f 2f 77 77 77 2e 65 66 66 2e 6f 72 67 2f 63 61 73 65 73 2f 61 70 70 6c 65 2d 63 68 61 6c | s://www.eff.org/cases/apple-chal |
4420 | 6c 65 6e 67 65 73 2d 66 62 69 2d 61 6c 6c 2d 77 72 69 74 73 2d 61 63 74 2d 6f 72 64 65 72 29 2e | lenges-fbi-all-writs-act-order). |
4440 | 00 74 68 69 73 20 69 73 20 65 73 73 65 6e 74 69 61 6c 6c 79 20 77 68 61 74 20 74 68 65 20 46 42 | .this.is.essentially.what.the.FB |
4460 | 49 20 72 65 71 75 65 73 74 65 64 20 66 72 6f 6d 20 41 70 70 6c 65 20 69 6e 20 74 68 65 20 53 61 | I.requested.from.Apple.in.the.Sa |
4480 | 6e 20 42 65 72 6e 61 72 64 69 6e 6f 20 63 61 73 65 00 73 69 67 6e 20 64 61 74 61 20 61 6e 64 20 | n.Bernardino.case.sign.data.and. |
44a0 | 64 69 73 74 72 69 62 75 74 65 20 69 74 20 74 6f 20 61 20 73 75 62 73 65 74 20 6f 66 20 69 73 6f | distribute.it.to.a.subset.of.iso |
44c0 | 6c 61 74 65 64 20 76 65 72 69 66 69 65 72 73 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 00 72 | lated.verifiers...For.example,.r |
44e0 | 65 6c 65 61 73 65 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 2e 20 20 54 68 69 73 20 63 6f 76 | elease.infrastructure...This.cov |
4500 | 65 72 73 20 61 20 77 65 61 6b 65 72 20 66 6f 72 6d 20 6f 66 20 61 74 74 61 63 6b 65 72 20 74 68 | ers.a.weaker.form.of.attacker.th |
4520 | 61 74 20 69 73 20 61 62 6c 65 20 74 6f 00 57 65 20 63 6f 6e 73 69 64 65 72 20 61 20 70 6f 77 65 | at.is.able.to.We.consider.a.powe |
4540 | 72 66 75 6c 20 61 74 74 61 63 6b 65 72 20 74 68 61 74 20 67 61 69 6e 65 64 20 63 6f 6e 74 72 6f | rful.attacker.that.gained.contro |
4560 | 6c 20 6f 66 20 61 20 73 69 67 6e 65 72 27 73 20 73 69 67 6e 69 6e 67 20 61 6e 64 00 23 23 20 32 | l.of.a.signer's.signing.and.##.2 |
4580 | 20 2d 20 54 68 72 65 61 74 20 6d 6f 64 65 6c 00 00 20 20 20 20 20 20 20 20 5b 41 50 49 5d 28 68 | .-.Threat.model..........[API](h |
45a0 | 74 74 70 73 3a 2f 2f 67 69 74 2e 73 69 67 73 75 6d 2e 6f 72 67 2f 73 69 67 73 75 6d 2f 74 72 65 | ttps://git.sigsum.org/sigsum/tre |
45c0 | 65 2f 64 6f 63 2f 61 70 69 2e 6d 64 29 2e 00 61 64 64 69 74 69 6f 6e 61 6c 6c 79 20 6e 65 65 64 | e/doc/api.md)..additionally.need |
45e0 | 20 74 6f 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 61 20 73 69 67 73 75 6d 20 6c 6f 67 27 73 | .to.interact.with.a.sigsum.log's |
4600 | 20 6c 69 6e 65 2d 74 65 72 6d 69 6e 61 74 65 64 20 41 53 43 49 49 20 48 54 54 50 28 53 29 00 74 | .line-terminated.ASCII.HTTP(S).t |
4620 | 68 61 74 20 61 20 76 65 72 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 73 75 | hat.a.verifier.is.required.to.su |
4640 | 70 70 6f 72 74 2e 20 20 53 69 67 6e 65 72 73 2c 20 6d 6f 6e 69 74 6f 72 73 2c 20 61 6e 64 20 77 | pport...Signers,.monitors,.and.w |
4660 | 69 74 6e 65 73 73 65 73 00 6f 72 20 22 62 79 20 68 61 6e 64 22 20 69 6e 20 6d 61 6e 79 20 6d 6f | itnesses.or."by.hand".in.many.mo |
4680 | 64 65 72 6e 20 70 72 6f 67 72 61 6d 6d 69 6e 67 20 6c 61 6e 67 75 61 67 65 73 2e 20 20 54 68 69 | dern.programming.languages...Thi |
46a0 | 73 20 69 73 20 74 68 65 20 6f 6e 6c 79 20 70 61 72 73 69 6e 67 00 09 5b 54 72 75 6e 6e 65 6c 5d | s.is.the.only.parsing..[Trunnel] |
46c0 | 28 68 74 74 70 73 3a 2f 2f 67 69 74 6c 61 62 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 74 | (https://gitlab.torproject.org/t |
46e0 | 70 6f 2f 63 6f 72 65 2f 74 72 75 6e 6e 65 6c 2f 2d 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 64 6f 63 2f | po/core/trunnel/-/blob/main/doc/ |
4700 | 74 72 75 6e 6e 65 6c 2e 6d 64 29 2c 00 63 6f 6e 73 74 72 61 69 6e 65 64 20 65 6e 76 69 72 6f 6e | trunnel.md),.constrained.environ |
4720 | 6d 65 6e 74 73 2e 20 20 53 69 67 6e 65 64 20 61 6e 64 20 6c 6f 67 67 65 64 20 64 61 74 61 20 63 | ments...Signed.and.logged.data.c |
4740 | 61 6e 20 62 65 20 28 64 65 29 73 65 72 69 61 6c 69 7a 65 64 20 75 73 69 6e 67 00 69 6e 63 72 65 | an.be.(de)serialized.using.incre |
4760 | 61 73 65 20 61 74 74 61 63 6b 20 73 75 72 66 61 63 65 73 20 61 6e 64 20 6d 61 6b 65 20 74 68 65 | ase.attack.surfaces.and.make.the |
4780 | 20 73 79 73 74 65 6d 20 6d 6f 72 65 20 64 69 66 66 69 63 75 6c 74 20 74 6f 20 75 73 65 20 69 6e | .system.more.difficult.to.use.in |
47a0 | 00 2d 20 2a 2a 53 69 6d 70 6c 65 20 28 64 65 29 73 65 72 69 61 6c 69 7a 61 74 69 6f 6e 20 70 61 | .-.**Simple.(de)serialization.pa |
47c0 | 72 73 65 72 73 3a 2a 2a 20 63 6f 6d 70 6c 65 78 20 28 64 65 29 73 65 72 69 61 6c 69 7a 61 74 69 | rsers:**.complex.(de)serializati |
47e0 | 6f 6e 20 70 61 72 73 65 72 73 00 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 64 61 74 61 20 66 6f | on.parsers.protocols.and.data.fo |
4800 | 72 6d 61 74 73 20 73 69 6d 70 6c 65 72 20 61 6e 64 20 6d 6f 72 65 20 73 65 63 75 72 65 2e 00 66 | rmats.simpler.and.more.secure..f |
4820 | 75 6e 63 74 69 6f 6e 73 20 61 72 65 20 45 64 32 35 35 31 39 20 61 6e 64 20 53 48 41 32 35 36 2e | unctions.are.Ed25519.and.SHA256. |
4840 | 20 20 4e 6f 74 20 68 61 76 69 6e 67 20 61 6e 79 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 61 | ..Not.having.any.cryptographic.a |
4860 | 67 69 6c 69 74 79 20 6d 61 6b 65 73 00 2d 20 2a 2a 4e 6f 20 63 72 79 70 74 6f 67 72 61 70 68 69 | gility.makes.-.**No.cryptographi |
4880 | 63 20 61 67 69 6c 69 74 79 2a 2a 3a 20 74 68 65 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 65 64 20 | c.agility**:.the.only.supported. |
48a0 | 73 69 67 6e 61 74 75 72 65 20 73 63 68 65 6d 65 73 20 61 6e 64 20 68 61 73 68 00 09 5b 77 69 74 | signature.schemes.and.hash..[wit |
48c0 | 6e 65 73 73 20 63 6f 73 69 67 6e 69 6e 67 5d 28 68 74 74 70 73 3a 2f 2f 69 65 65 65 78 70 6c 6f | ness.cosigning](https://ieeexplo |
48e0 | 72 65 2e 69 65 65 65 2e 6f 72 67 2f 73 74 61 6d 70 2f 73 74 61 6d 70 2e 6a 73 70 3f 61 72 6e 75 | re.ieee.org/stamp/stamp.jsp?arnu |
4900 | 6d 62 65 72 3d 37 35 34 36 35 32 31 29 2e 00 70 72 6f 74 6f 63 6f 6c 20 64 69 72 65 63 74 6c 79 | mber=7546521)..protocol.directly |
4920 | 20 69 6e 74 6f 20 74 68 65 20 6c 6f 67 2e 20 20 49 74 20 69 73 20 61 20 76 61 72 69 61 6e 74 20 | .into.the.log...It.is.a.variant. |
4940 | 6f 66 00 6c 6f 67 73 20 72 65 6c 79 20 6f 6e 20 67 6f 73 73 69 70 20 70 72 6f 74 6f 63 6f 6c 73 | of.logs.rely.on.gossip.protocols |
4960 | 20 74 6f 20 64 65 74 65 63 74 20 66 6f 72 6b 73 2e 20 20 57 65 20 62 75 69 6c 74 20 61 20 70 72 | .to.detect.forks...We.built.a.pr |
4980 | 6f 61 63 74 69 76 65 20 67 6f 73 73 69 70 00 2d 20 2a 2a 42 75 69 6c 74 2d 69 6e 20 6d 65 63 68 | oactive.gossip.-.**Built-in.mech |
49a0 | 61 6e 69 73 6d 73 20 74 68 61 74 20 65 6e 73 75 72 65 20 61 20 67 6c 6f 62 61 6c 6c 79 20 63 6f | anisms.that.ensure.a.globally.co |
49c0 | 6e 73 69 73 74 65 6e 74 20 6c 6f 67 3a 2a 2a 20 74 72 61 6e 73 70 61 72 65 6e 63 79 00 63 6f 6d | nsistent.log:**.transparency.com |
49e0 | 62 61 74 20 6c 6f 67 20 73 70 61 6d 2e 20 20 53 68 61 72 64 69 6e 67 20 69 73 20 61 6c 73 6f 20 | bat.log.spam...Sharding.is.also. |
4a00 | 68 65 6c 70 66 75 6c 20 74 6f 20 63 6f 6d 62 61 74 20 6c 6f 67 20 73 70 61 6d 20 69 6e 20 74 68 | helpful.to.combat.log.spam.in.th |
4a20 | 65 20 6c 6f 6e 67 20 72 75 6e 2e 00 6c 69 74 74 6c 65 20 6d 65 74 61 64 61 74 61 20 61 73 20 70 | e.long.run..little.metadata.as.p |
4a40 | 6f 73 73 69 62 6c 65 20 74 6f 20 63 6f 6d 62 61 74 20 6c 6f 67 20 70 6f 69 73 6f 6e 69 6e 67 2e | ossible.to.combat.log.poisoning. |
4a60 | 20 20 57 65 20 70 69 67 67 79 62 61 63 6b 20 6f 6e 20 44 4e 53 20 74 6f 00 66 72 6f 6d 20 61 6e | ..We.piggyback.on.DNS.to.from.an |
4a80 | 79 6f 6e 65 20 61 74 20 61 72 62 69 74 72 61 72 79 20 72 61 74 65 73 20 63 61 6e 20 6c 65 61 64 | yone.at.arbitrary.rates.can.lead |
4aa0 | 20 74 6f 20 61 62 75 73 69 76 65 20 75 73 61 67 65 20 70 61 74 74 65 72 6e 73 2e 20 20 57 65 20 | .to.abusive.usage.patterns...We. |
4ac0 | 73 74 6f 72 65 20 61 73 00 70 6f 73 73 69 62 6c 65 20 74 68 65 79 20 73 68 6f 75 6c 64 20 62 65 | store.as.possible.they.should.be |
4ae0 | 20 6f 70 65 6e 20 66 6f 72 20 65 76 65 72 79 6f 6e 65 2e 20 20 48 6f 77 65 76 65 72 2c 20 61 63 | .open.for.everyone...However,.ac |
4b00 | 63 65 70 74 69 6e 67 20 6c 6f 67 67 69 6e 67 20 72 65 71 75 65 73 74 73 00 2d 20 2a 2a 44 65 66 | cepting.logging.requests.-.**Def |
4b20 | 65 6e 73 65 73 20 61 67 61 69 6e 73 74 20 6c 6f 67 20 73 70 61 6d 20 61 6e 64 20 70 6f 69 73 6f | enses.against.log.spam.and.poiso |
4b40 | 6e 69 6e 67 3a 2a 2a 20 74 6f 20 6b 65 65 70 20 6c 6f 67 73 20 61 73 20 75 73 65 66 75 6c 20 61 | ning:**.to.keep.logs.as.useful.a |
4b60 | 73 00 61 6e 20 6f 6c 64 65 72 20 6c 6f 67 20 73 68 61 72 64 20 63 61 6e 6e 6f 74 20 62 65 20 72 | s.an.older.log.shard.cannot.be.r |
4b80 | 65 70 6c 61 79 65 64 20 69 6e 20 61 6e 6f 74 68 65 72 20 6e 6f 6e 2d 6f 76 65 72 6c 61 70 70 69 | eplayed.in.another.non-overlappi |
4ba0 | 6e 67 20 6c 6f 67 20 73 68 61 72 64 2e 00 74 68 61 74 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 | ng.log.shard..that.determines.th |
4bc0 | 65 20 74 69 6d 65 20 64 75 72 69 6e 67 20 77 68 69 63 68 20 74 68 65 20 6c 6f 67 20 77 69 6c 6c | e.time.during.which.the.log.will |
4be0 | 20 62 65 20 61 63 74 69 76 65 2e 20 20 53 75 62 6d 69 73 73 69 6f 6e 73 20 74 6f 00 74 68 61 6e | .be.active...Submissions.to.than |
4c00 | 20 63 6c 6f 73 69 6e 67 20 69 74 20 64 6f 77 6e 20 69 6e 20 61 20 72 65 6c 69 61 62 6c 65 20 77 | .closing.it.down.in.a.reliable.w |
4c20 | 61 79 2e 20 20 57 65 20 68 61 76 65 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 73 68 61 72 64 69 | ay...We.have.a.predefined.shardi |
4c40 | 6e 67 20 69 6e 74 65 72 76 61 6c 00 2d 20 2a 2a 53 68 61 72 64 69 6e 67 20 74 6f 20 73 69 6d 70 | ng.interval.-.**Sharding.to.simp |
4c60 | 6c 69 66 79 20 6c 6f 67 20 6c 69 66 65 20 63 79 63 6c 65 73 3a 2a 2a 20 73 74 61 72 74 69 6e 67 | lify.log.life.cycles:**.starting |
4c80 | 20 74 6f 20 6f 70 65 72 61 74 65 20 61 20 6c 6f 67 20 69 73 20 65 61 73 69 65 72 00 49 6e 20 6f | .to.operate.a.log.is.easier.In.o |
4ca0 | 74 68 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 73 69 67 6e 65 72 20 74 61 6c 6b 73 20 74 6f 20 | ther.words,.the.signer.talks.to. |
4cc0 | 74 68 65 20 6c 6f 67 20 6f 6e 20 62 65 68 61 6c 66 20 6f 66 20 74 68 65 20 76 65 72 69 66 79 69 | the.log.on.behalf.of.the.verifyi |
4ce0 | 6e 67 20 70 61 72 74 79 2e 00 75 73 69 6e 67 20 74 68 65 20 73 61 6d 65 20 64 69 73 74 72 69 62 | ng.party..using.the.same.distrib |
4d00 | 75 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 61 73 20 69 73 20 75 73 65 64 20 66 6f 72 20 64 | ution.mechanism.as.is.used.for.d |
4d20 | 69 73 74 72 69 62 75 74 69 6e 67 20 74 68 65 20 61 63 74 75 61 6c 20 64 61 74 61 2e 00 61 64 64 | istributing.the.actual.data..add |
4d40 | 69 74 69 6f 6e 61 6c 20 6f 75 74 62 6f 75 6e 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 | itional.outbound.network.connect |
4d60 | 69 6f 6e 73 2e 20 20 50 72 6f 6f 66 73 20 6f 66 20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 20 | ions...Proofs.of.public.logging. |
4d80 | 61 72 65 20 70 72 6f 76 69 64 65 64 00 2d 20 2a 2a 50 72 65 73 65 72 76 65 64 20 64 61 74 61 20 | are.provided.-.**Preserved.data. |
4da0 | 66 6c 6f 77 73 3a 2a 2a 20 61 20 76 65 72 69 66 69 65 72 20 63 61 6e 20 65 6e 66 6f 72 63 65 20 | flows:**.a.verifier.can.enforce. |
4dc0 | 73 69 67 73 75 6d 20 6c 6f 67 67 69 6e 67 20 77 69 74 68 6f 75 74 20 6d 61 6b 69 6e 67 00 62 75 | sigsum.logging.without.making.bu |
4de0 | 74 20 69 74 20 69 73 20 6d 61 74 75 72 65 20 65 6e 6f 75 67 68 20 74 6f 20 63 61 70 74 75 72 65 | t.it.is.mature.enough.to.capture |
4e00 | 20 77 68 61 74 20 74 79 70 65 20 6f 66 20 65 63 6f 73 79 73 74 65 6d 20 77 65 20 77 61 6e 74 20 | .what.type.of.ecosystem.we.want. |
4e20 | 74 6f 20 62 6f 6f 74 73 74 72 61 70 2e 00 70 72 6f 70 65 72 74 69 65 73 2e 20 20 49 74 20 64 6f | to.bootstrap..properties...It.do |
4e40 | 65 73 20 6e 6f 74 20 6d 65 61 6e 20 74 68 61 74 20 74 68 65 20 73 69 67 73 75 6d 20 6c 6f 67 20 | es.not.mean.that.the.sigsum.log. |
4e60 | 64 65 73 69 67 6e 20 69 73 20 73 65 74 20 69 6e 20 73 74 6f 6e 65 20 79 65 74 2c 00 6f 66 20 73 | design.is.set.in.stone.yet,.of.s |
4e80 | 69 67 73 75 6d 20 6c 6f 67 73 2c 20 75 6c 74 69 6d 61 74 65 6c 79 20 6c 65 61 76 69 6e 67 20 75 | igsum.logs,.ultimately.leaving.u |
4ea0 | 73 20 77 69 74 68 20 61 20 64 65 73 69 67 6e 20 74 68 61 74 20 68 61 73 20 74 68 65 20 62 65 6c | s.with.a.design.that.has.the.bel |
4ec0 | 6f 77 00 49 74 20 69 73 20 66 61 69 72 20 74 6f 20 73 61 79 20 74 68 61 74 20 6d 75 63 68 20 74 | ow.It.is.fair.to.say.that.much.t |
4ee0 | 68 6f 75 67 68 20 77 65 6e 74 20 69 6e 74 6f 20 5f 72 65 6d 6f 76 69 6e 67 5f 20 75 6e 77 61 6e | hough.went.into._removing_.unwan |
4f00 | 74 65 64 20 75 73 61 67 65 2d 70 61 74 74 65 72 6e 73 00 23 23 23 20 31 2e 32 20 2d 20 4c 6f 67 | ted.usage-patterns.###.1.2.-.Log |
4f20 | 20 70 72 6f 70 65 72 74 69 65 73 00 00 09 5b 47 32 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 64 61 74 | .properties...[G2\]](https://dat |
4f40 | 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 64 72 61 66 74 | atracker.ietf.org/doc/html/draft |
4f60 | 2d 69 65 74 66 2d 74 72 61 6e 73 2d 67 6f 73 73 69 70 2d 30 35 29 2e 00 09 5b 5c 5b 47 31 2c 5d | -ietf-trans-gossip-05)...[\[G1,] |
4f80 | 28 68 74 74 70 73 3a 2f 2f 69 65 65 65 78 70 6c 6f 72 65 2e 69 65 65 65 2e 6f 72 67 2f 73 74 61 | (https://ieeexplore.ieee.org/sta |
4fa0 | 6d 70 2f 73 74 61 6d 70 2e 6a 73 70 3f 61 72 6e 75 6d 62 65 72 3d 37 33 34 36 38 35 33 29 00 70 | mp/stamp.jsp?arnumber=7346853).p |
4fc0 | 72 6f 6d 69 73 65 73 2c 20 61 6e 64 20 64 65 70 6c 6f 79 6d 65 6e 74 20 6f 66 20 61 20 67 6f 73 | romises,.and.deployment.of.a.gos |
4fe0 | 73 69 70 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 73 75 69 74 73 20 74 68 65 20 77 65 62 00 | sip.protocol.that.suits.the.web. |
5000 | 61 64 00 00 07 0f 00 00 33 0f 00 00 00 10 00 00 04 00 00 00 00 00 00 00 b0 0f 00 00 a0 0f 00 00 | ad......3....................... |
5020 | 55 0f 00 00 33 0f 00 00 16 0f 00 00 c6 0e 00 00 c5 0e 00 00 76 0e 00 00 28 0e 00 00 27 0e 00 00 | U...3...............v...(...'... |
5040 | d7 0d 00 00 8b 0d 00 00 10 0d 00 00 0f 0d 00 00 f7 0c 00 00 d8 0c 00 00 7c 0c 00 00 67 0c 00 00 | ........................|...g... |
5060 | 57 0c 00 00 08 0c 00 00 c2 0b 00 00 c1 0b 00 00 70 0b 00 00 25 0b 00 00 24 0b 00 00 ed 0a 00 00 | W...............p...%...$....... |
5080 | ec 0a 00 00 9e 0a 00 00 51 0a 00 00 05 0a 00 00 c0 09 00 00 bf 09 00 00 a3 09 00 00 55 09 00 00 | ........Q...................U... |
50a0 | 0b 09 00 00 cb 08 00 00 ca 08 00 00 84 08 00 00 f7 07 00 00 76 07 00 00 75 07 00 00 5c 07 00 00 | ....................v...u...\... |
50c0 | c6 06 00 00 72 06 00 00 2e 06 00 00 2d 06 00 00 05 06 00 00 91 05 00 00 46 05 00 00 f6 04 00 00 | ....r.......-...........F....... |
50e0 | ae 04 00 00 ad 04 00 00 5b 04 00 00 0b 04 00 00 e2 03 00 00 9b 03 00 00 52 03 00 00 03 03 00 00 | ........[...............R....... |
5100 | a4 02 00 00 a3 02 00 00 5a 02 00 00 59 02 00 00 3f 02 00 00 ef 01 00 00 9f 01 00 00 5f 01 00 00 | ........Z...Y...?..........._... |
5120 | 2d 01 00 00 2c 01 00 00 31 01 00 00 00 53 69 67 6e 65 72 73 20 64 69 73 74 72 69 62 75 74 65 20 | -...,...1....Signers.distribute. |
5140 | 61 74 20 6c 65 61 73 74 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 69 65 63 65 73 3a 00 74 | at.least.the.following.pieces:.t |
5160 | 68 65 20 64 61 74 61 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 6f 6e 20 61 20 77 65 62 73 | he.data...For.example,.on.a.webs |
5180 | 69 74 65 2c 20 69 6e 20 61 20 67 69 74 20 72 65 70 6f 73 69 74 6f 72 79 2c 20 65 74 63 2e 00 73 | ite,.in.a.git.repository,.etc..s |
51a0 | 74 61 72 74 2e 20 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 68 61 70 70 65 6e 73 20 75 73 69 6e | tart...Distribution.happens.usin |
51c0 | 67 20 74 68 65 20 73 61 6d 65 20 6d 65 63 68 61 6e 69 73 6d 20 74 68 61 74 20 69 73 20 6e 6f 72 | g.the.same.mechanism.that.is.nor |
51e0 | 6d 61 6c 6c 79 20 75 73 65 64 20 66 6f 72 00 4f 6e 63 65 20 61 20 73 69 67 6e 65 72 20 68 61 73 | mally.used.for.Once.a.signer.has |
5200 | 20 63 6f 6c 6c 65 63 74 65 64 20 70 72 6f 6f 66 73 20 6f 66 20 70 75 62 6c 69 63 20 6c 6f 67 67 | .collected.proofs.of.public.logg |
5220 | 69 6e 67 20 74 68 65 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 70 68 61 73 65 20 63 61 6e 00 23 | ing.the.distribution.phase.can.# |
5240 | 23 23 23 20 33 2e 32 2e 34 20 2d 20 44 69 73 74 72 69 62 75 74 69 6f 6e 00 00 55 73 65 2d 63 61 | ###.3.2.4.-.Distribution..Use-ca |
5260 | 73 65 73 20 6c 69 6b 65 20 69 6e 73 74 61 6e 74 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 73 | ses.like.instant.certificate.iss |
5280 | 75 61 6e 63 65 20 61 72 65 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 64 65 73 69 67 | uance.are.not.supported.by.desig |
52a0 | 6e 2e 00 00 09 5b 47 34 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e | n....[G4\]](https://docs.google. |
52c0 | 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 2f 64 2f 31 36 47 2d 51 37 69 4e 33 6b 42 34 36 47 53 57 35 | com/document/d/16G-Q7iN3kB46GSW5 |
52e0 | 62 2d 73 66 48 35 4d 4f 33 6e 4b 53 59 79 45 62 37 37 59 73 4d 37 54 4d 5a 47 45 2f 65 64 69 74 | b-sfH5MO3nKSYyEb77YsM7TMZGE/edit |
5300 | 29 2e 00 09 5b 47 33 2c 5d 28 68 74 74 70 73 3a 2f 2f 70 65 74 73 79 6d 70 6f 73 69 75 6d 2e 6f | )...[G3,](https://petsymposium.o |
5320 | 72 67 2f 32 30 32 31 2f 66 69 6c 65 73 2f 70 61 70 65 72 73 2f 69 73 73 75 65 32 2f 70 6f 70 65 | rg/2021/files/papers/issue2/pope |
5340 | 74 73 2d 32 30 32 31 2d 30 30 32 34 2e 70 64 66 29 00 09 5b 47 32 2c 5d 28 68 74 74 70 73 3a 2f | ts-2021-0024.pdf)..[G2,](https:/ |
5360 | 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 64 | /datatracker.ietf.org/doc/html/d |
5380 | 72 61 66 74 2d 69 65 74 66 2d 74 72 61 6e 73 2d 67 6f 73 73 69 70 2d 30 35 29 00 09 5b 5c 5b 47 | raft-ietf-trans-gossip-05)..[\[G |
53a0 | 31 2c 5d 28 68 74 74 70 73 3a 2f 2f 69 65 65 65 78 70 6c 6f 72 65 2e 69 65 65 65 2e 6f 72 67 2f | 1,](https://ieeexplore.ieee.org/ |
53c0 | 73 74 61 6d 70 2f 73 74 61 6d 70 2e 6a 73 70 3f 61 72 6e 75 6d 62 65 72 3d 37 33 34 36 38 35 33 | stamp/stamp.jsp?arnumber=7346853 |
53e0 | 29 00 6e 65 65 64 20 66 6f 72 20 72 65 61 63 74 69 76 65 20 67 6f 73 73 69 70 2d 61 75 64 69 74 | ).need.for.reactive.gossip-audit |
5400 | 20 70 72 6f 74 6f 63 6f 6c 73 00 54 68 65 20 61 64 64 65 64 20 6c 61 74 65 6e 63 79 20 69 73 20 | .protocols.The.added.latency.is. |
5420 | 61 20 74 72 61 64 65 2d 6f 66 66 20 74 68 61 74 20 73 69 6d 70 6c 69 66 69 65 73 20 73 69 67 73 | a.trade-off.that.simplifies.sigs |
5440 | 75 6d 20 6c 6f 67 67 69 6e 67 20 62 79 20 72 65 6d 6f 76 69 6e 67 20 74 68 65 00 49 74 20 74 68 | um.logging.by.removing.the.It.th |
5460 | 75 73 20 74 61 6b 65 73 20 66 69 76 65 20 74 6f 20 74 65 6e 20 6d 69 6e 75 74 65 73 20 62 65 66 | us.takes.five.to.ten.minutes.bef |
5480 | 6f 72 65 20 61 20 73 69 67 6e 65 72 27 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 70 68 61 73 | ore.a.signer's.distribution.phas |
54a0 | 65 20 63 61 6e 20 73 74 61 72 74 2e 00 00 74 6f 20 6c 6f 67 73 20 73 6f 20 74 68 61 74 20 73 69 | e.can.start...to.logs.so.that.si |
54c0 | 67 6e 65 72 73 20 63 61 6e 20 65 61 73 69 6c 79 20 66 65 74 63 68 20 66 69 6e 61 6c 69 7a 65 64 | gners.can.easily.fetch.finalized |
54e0 | 20 63 6f 73 69 67 6e 65 64 20 74 72 65 65 20 68 65 61 64 73 2e 00 61 70 70 65 6e 64 2d 6f 6e 6c | .cosigned.tree.heads..append-onl |
5500 | 79 20 62 65 66 6f 72 65 20 64 6f 69 6e 67 20 61 20 63 6f 73 69 67 6e 61 74 75 72 65 20 6f 70 65 | y.before.doing.a.cosignature.ope |
5520 | 72 61 74 69 6f 6e 2e 20 20 43 6f 73 69 67 6e 61 74 75 72 65 73 20 61 72 65 20 70 6f 73 74 65 64 | ration...Cosignatures.are.posted |
5540 | 20 62 61 63 6b 00 6c 6f 67 73 20 66 6f 72 20 73 6f 2d 63 61 6c 6c 65 64 20 5f 74 6f 2d 73 69 67 | .back.logs.for.so-called._to-sig |
5560 | 6e 5f 20 74 72 65 65 20 68 65 61 64 73 20 61 6e 64 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 | n_.tree.heads.and.verify.that.th |
5580 | 65 79 20 61 72 65 20 66 72 65 73 68 20 61 6e 64 00 53 69 67 73 75 6d 20 6c 6f 67 73 20 70 65 72 | ey.are.fresh.and.Sigsum.logs.per |
55a0 | 69 6f 64 69 63 61 6c 6c 79 20 66 72 65 65 7a 65 20 74 68 65 20 6d 6f 73 74 20 63 75 72 72 65 6e | iodically.freeze.the.most.curren |
55c0 | 74 20 74 72 65 65 20 68 65 61 64 2c 20 74 79 70 69 63 61 6c 6c 79 20 65 76 65 72 79 20 66 69 76 | t.tree.head,.typically.every.fiv |
55e0 | 65 20 6d 69 6e 75 74 65 73 2e 20 20 43 6f 73 69 67 6e 69 6e 67 20 77 69 74 6e 65 73 73 65 73 20 | e.minutes...Cosigning.witnesses. |
5600 | 70 6f 6c 6c 00 23 23 23 23 20 33 2e 32 2e 33 20 2d 20 57 61 69 74 20 66 6f 72 20 77 69 74 6e 65 | poll.####.3.2.3.-.Wait.for.witne |
5620 | 73 73 20 63 6f 73 69 67 6e 69 6e 67 00 00 73 69 67 6e 65 72 20 68 61 73 20 74 6f 20 77 61 69 74 | ss.cosigning..signer.has.to.wait |
5640 | 20 66 6f 72 20 61 6e 20 69 6e 63 6c 75 73 69 6f 6e 20 70 72 6f 6f 66 20 61 6e 64 20 61 20 63 6f | .for.an.inclusion.proof.and.a.co |
5660 | 73 69 67 6e 65 64 20 74 72 65 65 20 68 65 61 64 2e 00 43 65 72 74 69 66 69 63 61 74 65 20 54 72 | signed.tree.head..Certificate.Tr |
5680 | 61 6e 73 70 61 72 65 6e 63 79 2e 20 20 54 68 65 72 65 66 6f 72 65 2c 20 73 69 67 73 75 6d 20 6c | ansparency...Therefore,.sigsum.l |
56a0 | 6f 67 73 20 64 6f 20 6e 6f 74 20 70 72 6f 76 69 64 65 20 6c 6f 77 20 6c 61 74 65 6e 63 79 20 2d | ogs.do.not.provide.low.latency.- |
56c0 | 2d 20 74 68 65 00 72 65 71 75 65 73 74 20 69 73 20 61 63 63 65 70 74 65 64 2c 20 74 68 65 20 6c | -.the.request.is.accepted,.the.l |
56e0 | 6f 67 20 5f 74 72 69 65 73 5f 20 74 6f 20 69 6e 63 6f 72 70 6f 72 61 74 65 20 74 68 65 20 73 75 | og._tries_.to.incorporate.the.su |
5700 | 62 6d 69 74 74 65 64 20 6c 65 61 66 20 69 6e 74 6f 20 69 74 73 20 4d 65 72 6b 6c 65 20 74 72 65 | bmitted.leaf.into.its.Merkle.tre |
5720 | 65 2e 20 20 54 68 65 72 65 20 61 72 65 20 68 6f 77 65 76 65 72 20 6e 6f 20 5f 70 72 6f 6d 69 73 | e...There.are.however.no._promis |
5740 | 65 73 20 6f 66 20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 5f 20 61 73 20 69 6e 00 57 68 65 6e | es.of.public.logging_.as.in.When |
5760 | 20 61 20 73 75 62 6d 69 74 74 65 64 20 6c 6f 67 67 69 6e 67 00 00 74 68 65 20 73 69 67 6e 61 74 | .a.submitted.logging..the.signat |
5780 | 75 72 65 20 69 73 20 76 61 6c 69 64 2c 20 74 68 65 6e 20 63 6f 6e 73 74 72 75 63 74 73 20 74 68 | ure.is.valid,.then.constructs.th |
57a0 | 65 20 4d 65 72 6b 6c 65 20 74 72 65 65 20 6c 65 61 66 20 61 73 20 64 65 73 63 72 69 62 65 64 20 | e.Merkle.tree.leaf.as.described. |
57c0 | 69 6e 20 33 2e 31 20 61 6e 64 20 68 61 73 68 65 73 20 69 74 20 74 6f 20 63 6f 6e 73 74 72 75 63 | in.3.1.and.hashes.it.to.construc |
57e0 | 74 20 74 68 65 20 6c 65 61 66 27 73 20 6b 65 79 20 68 61 73 68 2e 00 6b 65 79 20 61 6e 64 20 64 | t.the.leaf's.key.hash..key.and.d |
5800 | 6f 6d 61 69 6e 20 68 69 6e 74 20 61 73 20 41 53 43 49 49 20 6b 65 79 2d 76 61 6c 75 65 20 70 61 | omain.hint.as.ASCII.key-value.pa |
5820 | 69 72 73 2e 20 20 54 68 65 20 6c 6f 67 20 76 65 72 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 | irs...The.log.verifies.that.the. |
5840 | 70 75 62 6c 69 63 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 20 69 73 20 70 72 65 73 65 | public.verification.key.is.prese |
5860 | 6e 74 20 69 6e 20 44 4e 53 20 61 6e 64 20 75 73 65 73 20 69 74 20 74 6f 20 63 68 65 63 6b 20 74 | nt.in.DNS.and.uses.it.to.check.t |
5880 | 68 61 74 00 41 20 73 69 67 6e 65 72 20 73 75 62 6d 69 74 73 20 73 68 61 72 64 20 68 69 6e 74 2c | hat.A.signer.submits.shard.hint, |
58a0 | 20 63 68 65 63 6b 73 75 6d 2c 20 73 69 67 6e 61 74 75 72 65 2c 20 70 75 62 6c 69 63 20 76 65 72 | .checksum,.signature,.public.ver |
58c0 | 69 66 69 63 61 74 69 6f 6e 00 00 73 69 6e 63 65 20 74 68 65 20 64 61 74 61 20 73 74 72 75 63 74 | ification..since.the.data.struct |
58e0 | 75 72 65 73 20 62 65 69 6e 67 20 65 78 63 68 61 6e 67 65 64 20 61 72 65 20 70 72 69 6d 69 74 69 | ures.being.exchanged.are.primiti |
5900 | 76 65 20 65 6e 6f 75 67 68 2e 00 75 73 65 20 61 20 73 69 6d 70 6c 65 20 41 53 43 49 49 20 66 6f | ve.enough..use.a.simple.ASCII.fo |
5920 | 72 6d 61 74 2e 20 20 41 20 6d 6f 72 65 20 63 6f 6d 70 6c 65 78 20 70 61 72 73 65 72 20 6c 69 6b | rmat...A.more.complex.parser.lik |
5940 | 65 20 4a 53 4f 4e 20 69 73 20 6e 6f 74 20 6e 65 65 64 65 64 00 53 69 67 73 75 6d 20 6c 6f 67 73 | e.JSON.is.not.needed.Sigsum.logs |
5960 | 20 69 6d 70 6c 65 6d 65 6e 74 20 61 6e 20 48 54 54 50 28 53 29 20 41 50 49 2e 20 20 49 6e 70 75 | .implement.an.HTTP(S).API...Inpu |
5980 | 74 20 61 6e 64 20 6f 75 74 70 75 74 20 69 73 20 68 75 6d 61 6e 2d 72 65 61 64 61 62 6c 65 20 61 | t.and.output.is.human-readable.a |
59a0 | 6e 64 00 23 23 23 23 20 33 2e 32 2e 32 20 2d 20 53 75 62 6d 69 74 20 72 65 71 75 65 73 74 00 00 | nd.####.3.2.2.-.Submit.request.. |
59c0 | 4f 6e 63 65 20 70 72 65 73 65 6e 74 20 69 6e 20 44 4e 53 2c 20 61 20 76 65 72 69 66 69 63 61 74 | Once.present.in.DNS,.a.verificat |
59e0 | 69 6f 6e 20 6b 65 79 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 6c 6f 67 20 72 65 71 75 65 | ion.key.can.be.used.in.log.reque |
5a00 | 73 74 73 2e 00 70 61 72 74 20 6f 66 20 61 20 64 65 66 65 6e 73 65 20 6d 65 63 68 61 6e 69 73 6d | sts..part.of.a.defense.mechanism |
5a20 | 20 74 68 61 74 20 68 65 6c 70 73 20 6c 6f 67 20 6f 70 65 72 61 74 6f 72 73 20 74 6f 20 64 65 61 | .that.helps.log.operators.to.dea |
5a40 | 6c 20 77 69 74 68 20 6c 6f 67 20 73 70 61 6d 2e 00 63 68 65 63 6b 20 74 68 61 74 20 5f 73 6f 6d | l.with.log.spam..check.that._som |
5a60 | 65 20 64 6f 6d 61 69 6e 5f 20 69 73 20 61 77 61 72 65 20 6f 66 20 74 68 65 20 73 69 67 6e 65 72 | e.domain_.is.aware.of.the.signer |
5a80 | 27 73 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 2e 20 20 54 68 69 73 20 69 73 00 54 68 | 's.verification.key...This.is.Th |
5aa0 | 65 20 73 69 67 6e 65 72 20 61 6c 73 6f 20 68 61 73 20 74 6f 20 64 6f 20 61 20 6f 6e 65 2d 74 69 | e.signer.also.has.to.do.a.one-ti |
5ac0 | 6d 65 20 44 4e 53 20 73 65 74 75 70 2e 20 20 41 73 20 6f 75 74 6c 69 6e 65 64 20 62 65 6c 6f 77 | me.DNS.setup...As.outlined.below |
5ae0 | 2c 20 6c 6f 67 73 20 77 69 6c 6c 00 00 54 68 65 20 73 69 67 6e 65 72 20 73 69 67 6e 73 20 74 68 | ,.logs.will..The.signer.signs.th |
5b00 | 65 20 73 65 6c 65 63 74 65 64 20 73 68 61 72 64 20 68 69 6e 74 20 61 6e 64 20 63 68 65 63 6b 73 | e.selected.shard.hint.and.checks |
5b20 | 75 6d 2e 00 00 68 61 73 68 20 66 75 6e 63 74 69 6f 6e 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 | um...hash.function...For.example |
5b40 | 2c 20 69 74 20 63 6f 75 6c 64 20 62 65 20 74 68 65 20 68 61 73 68 20 6f 66 20 61 6e 20 65 78 65 | ,.it.could.be.the.hash.of.an.exe |
5b60 | 63 75 74 61 62 6c 65 20 62 69 6e 61 72 79 2e 00 54 68 65 20 73 69 67 6e 65 72 20 73 65 6c 65 63 | cutable.binary..The.signer.selec |
5b80 | 74 73 20 61 20 63 68 65 63 6b 73 75 6d 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 6c 6f 67 | ts.a.checksum.that.should.be.log |
5ba0 | 67 65 64 2c 20 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 74 68 65 20 6f 75 74 70 75 74 20 6f 66 20 61 | ged,.most.likely.the.output.of.a |
5bc0 | 00 00 72 65 70 6c 61 79 65 64 20 69 6e 20 61 20 6e 6f 6e 2d 6f 76 65 72 6c 61 70 70 69 6e 67 20 | ..replayed.in.a.non-overlapping. |
5be0 | 73 68 61 72 64 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 62 79 20 61 20 67 6f 6f 64 20 53 61 6d | shard,.for.example.by.a.good.Sam |
5c00 | 61 72 69 74 61 6e 2e 00 69 6e 63 6f 72 70 6f 72 61 74 65 64 20 69 6e 74 6f 20 74 68 65 20 73 69 | aritan..incorporated.into.the.si |
5c20 | 67 6e 65 64 20 73 74 61 74 65 6d 65 6e 74 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 61 20 | gned.statement.to.ensure.that.a. |
5c40 | 6c 6f 67 27 73 20 6c 65 61 76 65 73 20 63 61 6e 6e 6f 74 20 62 65 00 41 20 73 68 61 72 64 20 68 | log's.leaves.cannot.be.A.shard.h |
5c60 | 69 6e 74 20 69 73 00 61 63 74 69 76 65 20 64 75 72 69 6e 67 20 32 30 32 31 22 2e 00 41 20 73 69 | int.is.active.during.2021"..A.si |
5c80 | 67 6e 65 72 20 73 65 6c 65 63 74 73 20 61 20 73 68 61 72 64 20 68 69 6e 74 20 72 65 70 72 65 73 | gner.selects.a.shard.hint.repres |
5ca0 | 65 6e 74 69 6e 67 20 61 6e 20 61 62 73 74 72 61 63 74 20 73 74 61 74 65 6d 65 6e 74 20 6c 69 6b | enting.an.abstract.statement.lik |
5cc0 | 65 20 22 73 69 67 73 75 6d 20 6c 6f 67 73 20 74 68 61 74 20 61 72 65 00 23 23 23 23 20 33 2e 32 | e."sigsum.logs.that.are.####.3.2 |
5ce0 | 2e 31 20 2d 20 50 72 65 70 61 72 65 20 61 20 72 65 71 75 65 73 74 00 23 23 23 20 33 2e 32 20 2d | .1.-.Prepare.a.request.###.3.2.- |
5d00 | 20 55 73 61 67 65 20 70 61 74 74 65 72 6e 00 00 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 76 65 72 | .Usage.pattern..other.words,.ver |
5d20 | 69 66 69 65 72 73 20 61 6e 64 20 6d 6f 6e 69 74 6f 72 73 20 6d 75 73 74 20 6c 6f 63 61 74 65 20 | ifiers.and.monitors.must.locate. |
5d40 | 73 69 67 6e 65 72 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 73 20 69 6e 64 65 70 65 6e | signer.verification.keys.indepen |
5d60 | 64 65 6e 74 6c 79 20 6f 66 20 6c 6f 67 73 2c 20 61 6e 64 20 74 72 75 73 74 20 74 68 65 6d 20 65 | dently.of.logs,.and.trust.them.e |
5d80 | 78 70 6c 69 63 69 74 6c 79 2e 00 74 68 65 20 6c 69 6b 65 6c 69 68 6f 6f 64 20 74 68 61 74 20 61 | xplicitly..the.likelihood.that.a |
5da0 | 6e 20 75 6e 74 72 75 73 74 65 64 20 6b 65 79 20 69 73 20 64 69 73 63 6f 76 65 72 65 64 20 61 6e | n.untrusted.key.is.discovered.an |
5dc0 | 64 20 75 73 65 64 20 62 79 20 6d 69 73 74 61 6b 65 2e 20 20 49 6e 00 4e 6f 74 65 20 74 68 61 74 | d.used.by.mistake...In.Note.that |
5de0 | 20 61 20 6b 65 79 20 68 61 73 68 20 69 73 20 6c 6f 67 67 65 64 20 72 61 74 68 65 72 20 74 68 61 | .a.key.hash.is.logged.rather.tha |
5e00 | 6e 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 69 74 73 65 6c 66 2e 20 20 54 68 69 73 20 72 | n.the.public.key.itself...This.r |
5e20 | 65 64 75 63 65 73 00 00 64 61 74 61 20 74 68 61 74 20 61 20 63 68 65 63 6b 73 75 6d 20 72 65 70 | educes..data.that.a.checksum.rep |
5e40 | 72 65 73 65 6e 74 73 2e 20 20 57 68 65 72 65 20 64 61 74 61 20 69 73 20 6c 6f 63 61 74 65 64 20 | resents...Where.data.is.located. |
5e60 | 69 73 20 75 73 65 2d 63 61 73 65 20 73 70 65 63 69 66 69 63 2e 00 41 6e 79 20 61 64 64 69 74 69 | is.use-case.specific..Any.additi |
5e80 | 6f 6e 61 6c 20 6d 65 74 61 64 61 74 61 20 74 68 61 74 20 69 73 20 75 73 65 2d 63 61 73 65 20 73 | onal.metadata.that.is.use-case.s |
5ea0 | 70 65 63 69 66 69 63 20 63 61 6e 20 62 65 20 73 74 6f 72 65 64 20 61 73 20 70 61 72 74 20 6f 66 | pecific.can.be.stored.as.part.of |
5ec0 | 20 74 68 65 00 00 62 65 20 75 73 65 64 20 74 6f 20 76 65 72 69 66 79 20 74 68 65 20 73 69 67 6e | .the..be.used.to.verify.the.sign |
5ee0 | 61 74 75 72 65 2e 00 2d 20 2a 2a 6b 65 79 5f 68 61 73 68 2a 2a 3a 20 61 20 63 72 79 70 74 6f 67 | ature..-.**key_hash**:.a.cryptog |
5f00 | 72 61 70 68 69 63 20 68 61 73 68 20 6f 66 20 74 68 65 20 73 69 67 73 65 6c 65 63 74 65 73 68 61 | raphic.hash.of.the.sigselectesha |
5f20 | 72 64 20 68 69 6e 74 20 61 6e 64 20 63 68 65 63 6b 73 65 73 65 6c 65 63 74 65 64 20 73 68 61 72 | rd.hint.and.checkseselected.shar |
5f40 | 64 20 68 69 6e 74 20 61 6e 64 20 63 68 65 63 6b 73 75 6d 2e 00 2d 20 2a 2a 73 69 67 6e 61 74 75 | d.hint.and.checksum..-.**signatu |
5f60 | 72 65 2a 2a 3a 20 61 20 64 69 67 69 74 61 6c 20 73 69 67 6e 61 74 75 72 65 20 74 68 61 74 20 69 | re**:.a.digital.signature.that.i |
5f80 | 73 20 63 6f 6d 70 75 74 65 64 20 62 79 20 61 20 73 69 67 6e 65 72 20 6f 76 65 72 20 74 68 65 00 | s.computed.by.a.signer.over.the. |
5fa0 | 6a 75 73 74 20 63 68 65 63 6b 73 75 6d 73 2e 00 2d 20 2a 2a 63 68 65 63 6b 73 75 6d 2a 2a 3a 20 | just.checksums..-.**checksum**:. |
5fc0 | 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 61 20 68 61 73 68 20 6f 66 20 73 6f 6d 65 20 64 61 74 61 2e | most.likely.a.hash.of.some.data. |
5fe0 | 20 20 54 68 65 20 6c 6f 67 20 69 73 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 20 64 61 74 61 3b 00 | ..The.log.is.not.aware.of.data;. |
6000 | 61 64 00 00 0b 00 00 00 33 01 00 00 00 10 00 00 43 00 00 00 00 00 00 00 f6 0f 00 00 91 0f 00 00 | ad......3.......C............... |
6020 | 90 0f 00 00 82 0f 00 00 00 0f 00 00 b3 0e 00 00 b2 0e 00 00 a7 0e 00 00 5a 0e 00 00 11 0e 00 00 | ........................Z....... |
6040 | 10 0e 00 00 f6 0d 00 00 a3 0d 00 00 52 0d 00 00 09 0d 00 00 f4 0c 00 00 a6 0c 00 00 a5 0c 00 00 | ............R................... |
6060 | 5b 0c 00 00 0a 0c 00 00 b7 0b 00 00 7b 0b 00 00 32 0b 00 00 f1 0a 00 00 f0 0a 00 00 a2 0a 00 00 | [...........{...2............... |
6080 | 51 0a 00 00 06 0a 00 00 bb 09 00 00 6f 09 00 00 6e 09 00 00 1f 09 00 00 d2 08 00 00 8a 08 00 00 | Q...........o...n............... |
60a0 | 89 08 00 00 71 08 00 00 1f 08 00 00 d1 07 00 00 7a 07 00 00 26 07 00 00 25 07 00 00 13 07 00 00 | ....q...........z...&...%....... |
60c0 | c6 06 00 00 75 06 00 00 74 06 00 00 2b 06 00 00 dd 05 00 00 7d 05 00 00 7c 05 00 00 2d 05 00 00 | ....u...t...+.......}...|...-... |
60e0 | d4 04 00 00 7e 04 00 00 30 04 00 00 2f 04 00 00 e7 03 00 00 99 03 00 00 4a 03 00 00 fd 02 00 00 | ....~...0.../...........J....... |
6100 | fc 02 00 00 d9 02 00 00 a2 02 00 00 77 02 00 00 f0 01 00 00 a5 01 00 00 69 01 00 00 68 01 00 00 | ............w...........i...h... |
6120 | 33 01 00 00 2e 01 00 00 00 00 00 00 23 23 23 23 23 23 23 23 23 23 23 20 34 2e 32 20 2d 20 57 68 | 3...........###########.4.2.-.Wh |
6140 | 61 74 20 69 73 20 74 68 65 20 70 6f 69 6e 74 20 6f 66 20 68 61 76 69 6e 67 20 61 20 73 68 61 72 | at.is.the.point.of.having.a.shar |
6160 | 64 20 68 69 6e 74 3f 00 00 61 62 6f 75 74 2e 20 20 57 65 20 61 72 65 20 73 74 69 6c 6c 20 6f 70 | d.hint?..about...We.are.still.op |
6180 | 65 6e 20 74 6f 20 72 65 6d 6f 76 65 2c 20 61 64 64 2c 20 6f 72 20 63 68 61 6e 67 65 20 74 68 69 | en.to.remove,.add,.or.change.thi |
61a0 | 6e 67 73 2e 00 49 74 20 6d 61 79 20 62 65 20 69 6e 63 6f 6d 70 6c 65 74 65 2c 20 62 75 74 20 63 | ngs..It.may.be.incomplete,.but.c |
61c0 | 6f 76 65 72 73 20 73 6f 6d 65 20 64 65 74 61 69 6c 73 20 74 68 61 74 20 61 72 65 20 77 6f 72 74 | overs.some.details.that.are.wort |
61e0 | 68 20 74 68 69 6e 6b 69 6e 67 20 6d 6f 72 65 00 09 5b 32 30 32 31 2d 31 30 2d 30 35 5d 28 68 74 | h.thinking.more..[2021-10-05](ht |
6200 | 74 70 73 3a 2f 2f 67 69 74 2e 73 69 67 73 75 6d 2e 6f 72 67 2f 73 69 67 73 75 6d 2f 74 72 65 65 | tps://git.sigsum.org/sigsum/tree |
6220 | 2f 61 72 63 68 69 76 65 2f 32 30 32 31 2d 31 30 2d 30 35 2d 6f 70 65 6e 2d 64 65 73 69 67 6e 2d | /archive/2021-10-05-open-design- |
6240 | 74 68 6f 75 67 68 74 73 3f 69 64 3d 35 63 30 32 37 37 30 62 35 62 64 37 64 34 33 62 39 33 32 37 | thoughts?id=5c02770b5bd7d43b9327 |
6260 | 36 32 33 64 33 64 65 39 61 64 65 64 61 32 34 36 38 65 38 34 29 2e 00 41 20 62 72 69 65 66 20 73 | 623d3de9adeda2468e84)..A.brief.s |
6280 | 75 6d 6d 61 72 79 20 61 70 70 65 61 72 65 64 20 69 6e 20 6f 75 72 20 61 72 63 68 69 76 65 20 6f | ummary.appeared.in.our.archive.o |
62a0 | 6e 00 23 23 23 23 20 34 2e 31 20 2d 20 57 68 61 74 20 70 61 72 74 73 20 6f 66 20 74 68 65 20 64 | n.####.4.1.-.What.parts.of.the.d |
62c0 | 65 73 69 67 6e 20 61 72 65 20 75 70 20 66 6f 72 20 64 65 62 61 74 65 3f 00 23 23 23 20 34 20 2d | esign.are.up.for.debate?.###.4.- |
62e0 | 20 46 72 65 71 75 65 6e 74 6c 79 20 41 73 6b 65 64 20 51 75 65 73 74 69 6f 6e 73 00 00 63 68 65 | .Frequently.Asked.Questions..che |
6300 | 63 6b 73 75 6d 73 20 69 6e 20 74 68 65 20 6c 6f 67 73 20 61 6e 64 20 67 65 6e 65 72 61 74 65 20 | cksums.in.the.logs.and.generate. |
6320 | 61 6c 65 72 74 73 20 69 66 20 61 6e 79 20 6b 65 79 2d 75 73 61 67 65 20 69 73 20 69 6e 61 70 70 | alerts.if.any.key-usage.is.inapp |
6340 | 72 6f 70 72 69 61 74 65 2e 00 61 6e 64 20 64 69 73 74 72 69 62 75 74 69 6e 67 20 6e 65 63 65 73 | ropriate..and.distributing.neces |
6360 | 73 61 72 79 20 70 72 6f 6f 66 73 20 6f 66 20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 2e 20 20 | sary.proofs.of.public.logging... |
6380 | 4d 6f 6e 69 74 6f 72 73 20 64 69 73 63 6f 76 65 72 20 73 69 67 6e 65 64 00 64 69 73 74 72 69 62 | Monitors.discover.signed.distrib |
63a0 | 75 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 2e 20 20 53 69 67 6e 65 72 73 20 61 72 65 20 72 65 | ution.mechanism...Signers.are.re |
63c0 | 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 6c 6f 67 67 69 6e 67 20 73 69 67 6e 65 64 20 63 68 65 | sponsible.for.logging.signed.che |
63e0 | 63 6b 73 75 6d 73 00 56 65 72 69 66 69 65 72 73 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 6c | cksums.Verifiers.interact.with.l |
6400 | 6f 67 73 20 69 6e 64 69 72 65 63 74 6c 79 20 74 68 72 6f 75 67 68 20 74 68 65 69 72 20 73 69 67 | ogs.indirectly.through.their.sig |
6420 | 6e 65 72 27 73 20 65 78 69 73 74 69 6e 67 00 00 54 68 69 73 20 61 6c 73 6f 20 6b 65 65 70 73 20 | ner's.existing..This.also.keeps. |
6440 | 6c 6f 67 20 6f 70 65 72 61 74 69 6f 6e 73 20 73 69 6d 70 6c 65 72 20 62 65 63 61 75 73 65 20 74 | log.operations.simpler.because.t |
6460 | 68 65 72 65 20 61 72 65 20 6c 65 73 73 20 64 61 74 61 20 74 6f 20 6d 61 6e 61 67 65 2e 00 4e 6f | here.are.less.data.to.manage..No |
6480 | 20 64 61 74 61 20 6f 72 20 72 69 63 68 20 6d 65 74 61 64 61 74 61 20 69 73 20 62 65 69 6e 67 20 | .data.or.rich.metadata.is.being. |
64a0 | 6c 6f 67 67 65 64 2c 20 74 6f 20 70 72 6f 74 65 63 74 20 74 68 65 20 6c 6f 67 20 6f 70 65 72 61 | logged,.to.protect.the.log.opera |
64c0 | 74 6f 72 20 66 72 6f 6d 20 70 6f 69 73 6f 6e 69 6e 67 2e 00 41 50 49 2e 20 20 41 20 73 69 67 6e | tor.from.poisoning..API...A.sign |
64e0 | 65 72 20 6d 75 73 74 20 70 72 6f 76 65 20 74 68 61 74 20 74 68 65 79 20 63 6f 6e 74 72 6f 6c 20 | er.must.prove.that.they.control. |
6500 | 61 20 44 4e 53 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 61 73 20 61 6e 20 61 6e 74 69 2d 73 70 61 | a.DNS.domain.name.as.an.anti-spa |
6520 | 6d 20 6d 65 63 68 61 6e 69 73 6d 2e 00 53 69 67 6e 65 72 73 2c 20 6d 6f 6e 69 74 6f 72 73 2c 20 | m.mechanism..Signers,.monitors,. |
6540 | 61 6e 64 20 77 69 74 6e 65 73 73 65 73 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 74 68 65 20 | and.witnesses.interact.with.the. |
6560 | 6c 6f 67 73 20 75 73 69 6e 67 20 61 6e 20 41 53 43 49 49 20 48 54 54 50 28 53 29 00 00 68 65 61 | logs.using.an.ASCII.HTTP(S)..hea |
6580 | 64 20 69 73 20 63 6f 72 72 65 63 74 20 62 65 66 6f 72 65 20 63 6f 73 69 67 6e 69 6e 67 2e 20 20 | d.is.correct.before.cosigning... |
65a0 | 43 6f 72 72 65 63 74 6e 65 73 73 20 69 6e 63 6c 75 64 65 73 20 66 72 65 73 68 6e 65 73 73 20 61 | Correctness.includes.freshness.a |
65c0 | 6e 64 20 74 68 65 20 61 70 70 65 6e 64 2d 6f 6e 6c 79 20 70 72 6f 70 65 72 74 79 2e 00 63 6f 6e | nd.the.append-only.property..con |
65e0 | 74 72 6f 6c 6c 69 6e 67 20 65 6e 6f 75 67 68 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 77 69 74 6e | trolling.enough.independent.witn |
6600 | 65 73 73 65 73 2e 20 20 41 20 77 69 74 6e 65 73 73 20 63 68 65 63 6b 73 20 74 68 61 74 20 61 20 | esses...A.witness.checks.that.a. |
6620 | 6c 6f 67 27 73 20 74 72 65 65 00 54 68 65 20 64 69 66 66 69 63 75 6c 74 79 20 6f 66 20 62 79 70 | log's.tree.The.difficulty.of.byp |
6640 | 61 73 73 69 6e 67 20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 20 69 73 20 62 61 73 65 64 20 6f | assing.public.logging.is.based.o |
6660 | 6e 20 74 68 65 20 64 69 66 66 69 63 75 6c 74 79 20 6f 66 00 00 73 68 75 74 20 64 6f 77 6e 20 5f | n.the.difficulty.of..shut.down._ |
6680 | 73 61 66 65 6c 79 5f 20 62 65 63 61 75 73 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6f 6e 20 | safely_.because.verification.on. |
66a0 | 74 68 65 20 76 65 72 69 66 69 65 72 2d 73 69 64 65 20 69 73 20 6e 6f 74 20 69 6e 74 65 72 61 63 | the.verifier-side.is.not.interac |
66c0 | 74 69 76 65 2e 00 53 69 67 73 75 6d 20 6c 6f 67 73 20 61 72 65 20 73 68 61 72 64 65 64 20 61 6e | tive..Sigsum.logs.are.sharded.an |
66e0 | 64 20 73 68 75 74 20 64 6f 77 6e 20 61 74 20 70 72 65 64 65 66 69 6e 65 64 20 74 69 6d 65 73 2e | d.shut.down.at.predefined.times. |
6700 | 20 20 41 20 73 69 67 73 75 6d 20 6c 6f 67 20 63 61 6e 00 23 23 23 20 33 2e 33 20 2d 20 53 75 6d | ..A.sigsum.log.can.###.3.3.-.Sum |
6720 | 6d 61 72 79 00 00 6d 61 79 20 61 6c 73 6f 20 6e 65 65 64 20 74 6f 20 62 65 20 61 77 61 72 65 20 | mary..may.also.need.to.be.aware. |
6740 | 6f 66 20 68 6f 77 20 74 6f 20 6c 6f 63 61 74 65 20 74 68 65 20 64 61 74 61 20 74 68 61 74 20 66 | of.how.to.locate.the.data.that.f |
6760 | 6f 75 6e 64 20 63 68 65 63 6b 73 75 6d 73 20 72 65 70 72 65 73 65 6e 74 2e 00 73 70 65 63 69 66 | ound.checksums.represent..specif |
6780 | 69 63 20 69 6e 20 73 69 67 73 75 6d 2e 20 20 41 74 20 61 20 6d 69 6e 69 6d 75 6d 2c 20 6d 6f 6e | ic.in.sigsum...At.a.minimum,.mon |
67a0 | 69 74 6f 72 73 20 6e 65 65 64 20 74 6f 20 6c 6f 63 61 74 65 20 72 65 6c 65 76 61 6e 74 20 70 75 | itors.need.to.locate.relevant.pu |
67c0 | 62 6c 69 63 20 6b 65 79 73 2e 20 20 54 68 65 79 00 74 72 61 63 6b 20 6f 66 20 77 68 61 74 20 61 | blic.keys...They.track.of.what.a |
67e0 | 70 70 65 61 72 73 20 69 6e 20 74 68 65 20 70 75 62 6c 69 63 20 6c 6f 67 73 2e 20 20 4d 6f 6e 69 | ppears.in.the.public.logs...Moni |
6800 | 74 6f 72 69 6e 67 20 69 73 20 6e 65 63 65 73 73 61 72 69 6c 79 20 75 73 65 2d 63 61 73 65 00 41 | toring.is.necessarily.use-case.A |
6820 | 6e 20 6f 66 74 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 73 74 65 70 20 69 73 20 74 68 61 74 20 | n.often.overlooked.step.is.that. |
6840 | 74 72 61 6e 73 70 61 72 65 6e 63 79 20 6c 6f 67 67 69 6e 67 20 66 61 6c 6c 73 20 73 68 6f 72 74 | transparency.logging.falls.short |
6860 | 20 69 66 20 6e 6f 2d 6f 6e 65 20 6b 65 65 70 73 00 23 23 23 23 20 33 2e 32 2e 36 20 2d 20 4d 6f | .if.no-one.keeps.####.3.2.6.-.Mo |
6880 | 6e 69 74 6f 72 69 6e 67 00 00 72 65 6c 65 61 73 65 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 | nitoring..release.infrastructure |
68a0 | 20 77 6f 75 6c 64 20 62 65 20 64 65 74 65 63 74 65 64 20 69 66 20 74 68 65 20 6c 6f 67 20 69 73 | .would.be.detected.if.the.log.is |
68c0 | 20 6e 6f 74 20 63 6f 6d 70 72 6f 6d 69 73 65 64 2e 00 69 6e 20 61 20 6b 6e 6f 77 6e 20 6c 6f 67 | .not.compromised..in.a.known.log |
68e0 | 20 77 69 74 68 6f 75 74 20 77 69 74 6e 65 73 73 69 6e 67 2e 20 20 41 74 74 61 63 6b 73 20 61 67 | .without.witnessing...Attacks.ag |
6900 | 61 69 6e 73 74 20 74 68 65 20 73 69 67 6e 65 72 27 73 20 73 69 67 6e 69 6e 67 20 61 6e 64 00 41 | ainst.the.signer's.signing.and.A |
6920 | 6e 6f 74 68 65 72 20 65 78 61 6d 70 6c 65 20 6f 66 20 70 61 72 74 69 61 6c 20 65 6e 66 6f 72 63 | nother.example.of.partial.enforc |
6940 | 65 6d 65 6e 74 20 77 6f 75 6c 64 20 62 65 20 69 66 20 61 20 76 65 72 69 66 69 65 72 20 72 65 71 | ement.would.be.if.a.verifier.req |
6960 | 75 69 72 65 64 20 6c 6f 67 67 69 6e 67 00 00 53 6f 6d 65 6f 6e 65 20 69 6e 20 61 20 73 69 6d 69 | uired.logging..Someone.in.a.simi |
6980 | 6c 61 72 20 61 72 65 61 20 6d 61 79 20 62 65 20 61 62 6c 65 20 74 6f 20 64 65 74 65 63 74 20 74 | lar.area.may.be.able.to.detect.t |
69a0 | 68 69 73 20 61 6e 64 20 72 65 70 6f 72 74 20 74 68 65 20 61 74 74 61 63 6b 2e 00 61 63 63 65 70 | his.and.report.the.attack..accep |
69c0 | 74 20 64 61 74 61 20 66 72 6f 6d 20 61 20 6d 61 6c 69 63 69 6f 75 73 20 64 61 74 61 20 6d 69 72 | t.data.from.a.malicious.data.mir |
69e0 | 72 6f 72 20 77 69 74 68 6f 75 74 20 70 72 6f 6f 66 73 20 6f 66 20 70 75 62 6c 69 63 20 6c 6f 67 | ror.without.proofs.of.public.log |
6a00 | 67 69 6e 67 2e 00 65 78 61 6d 70 6c 65 2c 20 73 6f 6d 65 20 76 65 72 69 66 69 65 72 20 6d 61 79 | ging..example,.some.verifier.may |
6a20 | 20 6e 6f 74 20 65 6e 66 6f 72 63 65 20 74 68 65 73 65 20 63 72 69 74 65 72 69 61 20 61 74 20 61 | .not.enforce.these.criteria.at.a |
6a40 | 6c 6c 2c 20 61 6e 64 20 73 6f 20 77 6f 75 6c 64 00 76 65 72 69 66 69 65 72 20 5f 66 61 69 6c 73 | ll,.and.so.would.verifier._fails |
6a60 | 20 6f 70 65 6e 5f 20 62 79 20 65 6e 66 6f 72 63 69 6e 67 20 74 68 65 20 73 65 63 6f 6e 64 20 61 | .open_.by.enforcing.the.second.a |
6a80 | 6e 64 20 74 68 69 72 64 20 63 72 69 74 65 72 69 61 20 70 61 72 74 69 61 6c 6c 79 2e 20 20 46 6f | nd.third.criteria.partially...Fo |
6aa0 | 72 00 49 6e 20 61 20 6c 65 73 73 20 69 64 65 61 6c 20 77 6f 72 6c 64 20 73 69 67 73 75 6d 20 6c | r.In.a.less.ideal.world.sigsum.l |
6ac0 | 6f 67 67 69 6e 67 20 63 61 6e 20 66 61 63 69 6c 69 74 61 74 65 20 64 65 74 65 63 74 69 6f 6e 20 | ogging.can.facilitate.detection. |
6ae0 | 6f 66 20 61 74 74 61 63 6b 73 20 69 66 20 61 00 00 75 6e 6c 65 73 73 20 74 68 65 20 61 74 74 61 | of.attacks.if.a..unless.the.atta |
6b00 | 63 6b 65 72 20 63 6f 6e 74 72 6f 6c 73 20 6d 6f 72 65 20 74 68 61 6e 20 61 20 74 68 72 65 73 68 | cker.controls.more.than.a.thresh |
6b20 | 6f 6c 64 20 6f 66 20 77 69 74 6e 65 73 73 65 73 2e 00 74 72 69 63 6b 65 64 20 69 6e 74 6f 20 61 | old.of.witnesses..tricked.into.a |
6b40 | 63 63 65 70 74 69 6e 67 20 64 61 74 61 20 77 68 6f 73 65 20 63 68 65 63 6b 73 75 6d 20 68 61 76 | ccepting.data.whose.checksum.hav |
6b60 | 65 20 6e 6f 74 20 62 65 65 6e 20 70 75 62 6c 69 63 6c 79 20 6c 6f 67 67 65 64 00 75 73 69 6e 67 | e.not.been.publicly.logged.using |
6b80 | 20 61 20 76 61 72 69 61 6e 74 20 6f 66 20 77 69 74 6e 65 73 73 20 63 6f 73 69 67 6e 69 6e 67 2e | .a.variant.of.witness.cosigning. |
6ba0 | 20 20 41 20 76 65 72 69 66 69 65 72 20 63 61 6e 6e 6f 74 20 62 65 00 61 6e 20 69 6e 63 6c 75 73 | ..A.verifier.cannot.be.an.inclus |
6bc0 | 69 6f 6e 20 70 72 6f 6f 66 20 6c 65 61 64 73 20 75 70 20 74 6f 2e 20 20 53 69 67 73 75 6d 20 6c | ion.proof.leads.up.to...Sigsum.l |
6be0 | 6f 67 73 20 68 61 76 65 20 74 72 75 73 74 77 6f 72 74 68 79 20 74 72 65 65 20 68 65 61 64 73 20 | ogs.have.trustworthy.tree.heads. |
6c00 | 74 68 61 6e 6b 73 20 74 6f 00 54 68 65 72 65 66 6f 72 65 2c 20 61 20 70 72 6f 6f 66 20 6f 66 20 | thanks.to.Therefore,.a.proof.of. |
6c20 | 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 20 69 73 20 6f 6e 6c 79 20 61 73 20 63 6f 6e 76 69 6e | public.logging.is.only.as.convin |
6c40 | 63 69 6e 67 20 61 73 20 74 68 65 20 74 72 65 65 20 68 65 61 64 20 74 68 61 74 00 4e 6f 74 69 63 | cing.as.the.tree.head.that.Notic |
6c60 | 65 20 74 68 61 74 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 6e 65 77 20 6f 75 74 62 6f 75 6e 64 | e.that.there.are.no.new.outbound |
6c80 | 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 61 20 76 65 72 69 66 | .network.connections.for.a.verif |
6ca0 | 69 65 72 2e 00 00 33 2e 20 54 68 65 20 70 72 6f 76 69 64 65 64 20 74 72 65 65 20 68 65 61 64 20 | ier...3..The.provided.tree.head. |
6cc0 | 69 73 20 66 72 6f 6d 20 61 20 6b 6e 6f 77 6e 20 6c 6f 67 20 77 69 74 68 20 65 6e 6f 75 67 68 20 | is.from.a.known.log.with.enough. |
6ce0 | 76 61 6c 69 64 20 63 6f 73 69 67 6e 61 74 75 72 65 73 2e 00 69 74 73 20 69 6e 63 6c 75 73 69 6f | valid.cosignatures..its.inclusio |
6d00 | 6e 20 70 72 6f 6f 66 2e 00 32 2e 20 54 68 65 20 70 72 6f 76 69 64 65 64 20 74 72 65 65 20 68 65 | n.proof..2..The.provided.tree.he |
6d20 | 61 64 20 63 61 6e 20 62 65 20 72 65 63 6f 6e 73 74 72 75 63 74 65 64 20 66 72 6f 6d 20 74 68 65 | ad.can.be.reconstructed.from.the |
6d40 | 20 6c 6f 67 67 65 64 20 6c 65 61 66 20 61 6e 64 20 00 31 2e 20 54 68 65 20 64 61 74 61 27 73 20 | .logged.leaf.and..1..The.data's. |
6d60 | 63 68 65 63 6b 73 75 6d 20 61 6e 64 20 73 68 61 72 64 20 68 69 6e 74 20 61 72 65 20 73 69 67 6e | checksum.and.shard.hint.are.sign |
6d80 | 65 64 20 75 73 69 6e 67 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 75 62 6c 69 63 20 6b 65 | ed.using.the.specified.public.ke |
6da0 | 79 2e 00 41 20 76 65 72 69 66 69 65 72 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 61 63 63 65 70 74 | y..A.verifier.should.only.accept |
6dc0 | 20 74 68 65 20 64 69 73 74 72 69 62 75 74 65 64 20 64 61 74 61 20 69 66 20 74 68 65 20 66 6f 6c | .the.distributed.data.if.the.fol |
6de0 | 6c 6f 77 69 6e 67 20 63 72 69 74 65 72 69 61 20 68 6f 6c 64 3a 00 23 23 23 23 20 33 2e 32 2e 35 | lowing.criteria.hold:.####.3.2.5 |
6e00 | 20 2d 20 56 65 72 69 66 69 63 61 74 69 6f 6e 00 00 72 65 66 65 72 73 20 74 6f 20 74 68 65 20 63 | .-.Verification..refers.to.the.c |
6e20 | 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 61 6e 20 69 6e 63 6c 75 73 69 6f 6e 20 70 72 6f 6f 66 20 | ollection.of.an.inclusion.proof. |
6e40 | 61 6e 64 20 61 20 63 6f 73 69 67 6e 65 64 20 74 72 65 65 20 68 65 61 64 2e 00 61 6e 20 69 6e 63 | and.a.cosigned.tree.head..an.inc |
6e60 | 6c 75 73 69 6f 6e 20 70 72 6f 6f 66 20 74 68 61 74 20 6c 65 61 64 73 20 75 70 20 74 6f 20 61 20 | lusion.proof.that.leads.up.to.a. |
6e80 | 63 6f 73 69 67 6e 65 64 20 74 72 65 65 20 68 65 61 64 2e 20 20 4e 6f 74 65 20 74 68 61 74 20 5f | cosigned.tree.head...Note.that._ |
6ea0 | 70 72 6f 6f 66 5f 00 2a 2a 50 72 6f 6f 66 3a 2a 2a 00 00 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 6f | proof_.**Proof:**..combination.o |
6ec0 | 66 20 64 61 74 61 20 61 6e 64 20 6d 65 74 61 64 61 74 61 20 63 61 6e 20 62 65 20 75 73 65 64 20 | f.data.and.metadata.can.be.used. |
6ee0 | 74 6f 20 72 65 63 6f 6e 73 74 72 75 63 74 20 74 68 65 20 6c 6f 67 67 65 64 20 6c 65 61 66 2e 00 | to.reconstruct.the.logged.leaf.. |
6f00 | 74 68 65 20 73 68 61 72 64 20 68 69 6e 74 2c 20 74 68 65 20 73 69 67 6e 61 74 75 72 65 20 6f 76 | the.shard.hint,.the.signature.ov |
6f20 | 65 72 20 73 68 61 72 64 20 68 69 6e 74 20 61 6e 64 20 63 68 65 63 6b 73 75 6d 2c 20 61 6e 64 20 | er.shard.hint.and.checksum,.and. |
6f40 | 74 68 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 20 68 61 73 68 20 75 73 65 64 20 69 | the.verification.key.hash.used.i |
6f60 | 6e 20 74 68 65 20 6c 6f 67 20 72 65 71 75 65 73 74 2e 20 20 4e 6f 74 65 20 74 68 61 74 20 74 68 | n.the.log.request...Note.that.th |
6f80 | 65 00 2a 2a 4d 65 74 61 64 61 74 61 3a 2a 2a 00 00 74 68 65 20 73 69 67 6e 65 72 27 73 20 64 61 | e.**Metadata:**..the.signer's.da |
6fa0 | 74 61 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 61 6e 20 65 78 65 63 75 74 61 62 6c 65 20 62 69 | ta,.for.example.an.executable.bi |
6fc0 | 6e 61 72 79 2e 20 20 49 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 70 72 6f 64 75 | nary...It.can.be.used.to.reprodu |
6fe0 | 63 65 20 61 20 6c 6f 67 67 65 64 20 63 68 65 63 6b 73 75 6d 2e 00 2a 2a 44 61 74 61 3a 2a 2a 00 | ce.a.logged.checksum..**Data:**. |
7000 | 61 64 00 00 29 00 00 00 51 01 00 00 00 10 00 00 43 00 00 00 00 00 00 00 ad 0f 00 00 5f 0f 00 00 | ad..)...Q.......C..........._... |
7020 | 0f 0f 00 00 c3 0e 00 00 c2 0e 00 00 76 0e 00 00 2c 0e 00 00 e2 0d 00 00 d9 0d 00 00 89 0d 00 00 | ............v...,............... |
7040 | 85 0d 00 00 2c 0d 00 00 e1 0c 00 00 e0 0c 00 00 d2 0c 00 00 84 0c 00 00 66 0c 00 00 62 0c 00 00 | ....,...................f...b... |
7060 | 36 0c 00 00 f9 0b 00 00 b8 0b 00 00 7a 0b 00 00 42 0b 00 00 01 0b 00 00 c0 0a 00 00 7f 0a 00 00 | 6...........z...B............... |
7080 | 47 0a 00 00 0b 0a 00 00 cb 09 00 00 8e 09 00 00 56 09 00 00 16 09 00 00 d6 08 00 00 96 08 00 00 | G...............V............... |
70a0 | 6f 08 00 00 43 08 00 00 37 08 00 00 06 08 00 00 02 08 00 00 01 08 00 00 b5 07 00 00 67 07 00 00 | o...C...7...................g... |
70c0 | 19 07 00 00 cb 06 00 00 7f 06 00 00 7e 06 00 00 2d 06 00 00 df 05 00 00 94 05 00 00 48 05 00 00 | ............~...-...........H... |
70e0 | 47 05 00 00 fe 04 00 00 ae 04 00 00 60 04 00 00 0f 04 00 00 0e 04 00 00 c1 03 00 00 72 03 00 00 | G...........`...............r... |
7100 | 33 03 00 00 32 03 00 00 1c 03 00 00 cc 02 00 00 7c 02 00 00 3e 02 00 00 ed 01 00 00 9d 01 00 00 | 3...2...........|...>........... |
7120 | 51 01 00 00 50 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | Q...P........................... |
7140 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 61 72 65 20 61 63 63 65 70 74 65 64 2e 20 20 | .................are.accepted... |
7160 | 4f 6e 63 65 20 65 6c 61 70 73 65 64 2c 20 74 68 65 20 6c 6f 67 20 63 61 6e 20 62 65 20 73 68 75 | Once.elapsed,.the.log.can.be.shu |
7180 | 74 20 64 6f 77 6e 20 6f 72 20 62 65 20 6d 61 64 65 20 72 65 61 64 2d 6f 6e 6c 79 2e 00 53 68 61 | t.down.or.be.made.read-only..Sha |
71a0 | 72 64 69 6e 67 20 6d 65 61 6e 73 20 74 68 61 74 20 74 68 65 20 6c 6f 67 20 68 61 73 20 61 20 70 | rding.means.that.the.log.has.a.p |
71c0 | 72 65 64 65 66 69 6e 65 64 20 74 69 6d 65 20 64 75 72 69 6e 67 20 77 68 69 63 68 20 6c 6f 67 67 | redefined.time.during.which.logg |
71e0 | 69 6e 67 20 72 65 71 75 65 73 74 73 00 2d 20 2a 2a 73 68 61 72 64 5f 68 69 6e 74 2a 2a 3a 20 61 | ing.requests.-.**shard_hint**:.a |
7200 | 20 6e 75 6d 62 65 72 20 74 68 61 74 20 62 69 6e 64 73 20 74 68 65 20 6c 65 61 66 20 74 6f 20 61 | .number.that.binds.the.leaf.to.a |
7220 | 20 70 61 72 74 69 63 75 6c 61 72 20 5f 73 68 61 72 64 20 69 6e 74 65 72 76 61 6c 5f 2e 00 64 69 | .particular._shard.interval_..di |
7240 | 73 74 72 69 62 75 74 65 64 20 66 6f 72 6d 20 6f 66 20 74 72 75 73 74 2e 20 20 41 20 74 72 65 65 | stributed.form.of.trust...A.tree |
7260 | 20 6c 65 61 66 20 63 6f 6e 74 61 69 6e 73 20 66 6f 75 72 20 66 69 65 6c 64 73 3a 00 76 65 72 69 | .leaf.contains.four.fields:.veri |
7280 | 66 79 20 74 68 61 74 20 74 68 69 73 20 74 72 65 65 20 69 73 20 66 72 65 73 68 20 61 6e 64 20 61 | fy.that.this.tree.is.fresh.and.a |
72a0 | 70 70 65 6e 64 2d 6f 6e 6c 79 20 62 65 66 6f 72 65 20 63 6f 73 69 67 6e 69 6e 67 20 69 74 20 74 | ppend-only.before.cosigning.it.t |
72c0 | 6f 20 61 63 68 69 65 76 65 20 61 00 41 20 73 69 67 73 75 6d 20 6c 6f 67 20 6d 61 69 6e 74 61 69 | o.achieve.a.A.sigsum.log.maintai |
72e0 | 6e 73 20 61 20 70 75 62 6c 69 63 20 61 70 70 65 6e 64 2d 6f 6e 6c 79 20 4d 65 72 6b 6c 65 20 74 | ns.a.public.append-only.Merkle.t |
7300 | 72 65 65 2e 20 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 77 69 74 6e 65 73 73 65 73 00 23 23 23 20 | ree...Independent.witnesses.###. |
7320 | 33 2e 31 20 2d 20 4d 65 72 6b 6c 65 20 74 72 65 65 00 00 63 6f 73 69 67 6e 69 6e 67 20 70 72 6f | 3.1.-.Merkle.tree..cosigning.pro |
7340 | 74 6f 63 6f 6c 2e 20 20 4d 6f 72 65 20 64 65 74 61 69 6c 20 69 73 20 70 72 6f 76 69 64 65 64 20 | tocol...More.detail.is.provided. |
7360 | 69 6e 20 53 65 63 74 69 6f 6e 20 33 2e 32 2e 33 2e 00 61 64 64 69 74 69 6f 6e 61 6c 20 6f 75 74 | in.Section.3.2.3..additional.out |
7380 | 62 6f 75 6e 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 66 20 61 20 74 | bound.network.connections.if.a.t |
73a0 | 68 72 65 73 68 6f 6c 64 20 6f 66 20 77 69 74 6e 65 73 73 65 73 20 66 6f 6c 6c 6f 77 65 64 20 61 | hreshold.of.witnesses.followed.a |
73c0 | 00 56 65 72 69 66 69 65 72 73 20 61 6e 64 20 6d 6f 6e 69 74 6f 72 73 20 63 61 6e 20 62 65 20 63 | .Verifiers.and.monitors.can.be.c |
73e0 | 6f 6e 76 69 6e 63 65 64 20 74 68 61 74 20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 20 68 61 70 | onvinced.that.public.logging.hap |
7400 | 70 65 6e 65 64 20 77 69 74 68 6f 75 74 00 00 74 68 65 69 72 20 6b 65 79 2d 75 73 61 67 65 20 63 | pened.without..their.key-usage.c |
7420 | 61 6e 20 6e 6f 77 20 62 65 20 76 65 72 69 66 69 65 64 20 62 65 63 61 75 73 65 20 6e 6f 20 73 69 | an.now.be.verified.because.no.si |
7440 | 67 6e 69 6e 67 20 6f 70 65 72 61 74 69 6f 6e 20 67 6f 65 73 20 75 6e 6e 6f 74 69 63 65 64 2e 00 | gning.operation.goes.unnoticed.. |
7460 | 6b 65 79 73 20 74 68 61 74 20 74 68 65 79 20 61 72 65 20 61 77 61 72 65 20 6f 66 2e 20 20 41 6e | keys.that.they.are.aware.of...An |
7480 | 79 20 66 61 6c 73 69 66 69 61 62 6c 65 20 63 6c 61 69 6d 20 74 68 61 74 20 61 20 73 69 67 6e 65 | y.falsifiable.claim.that.a.signe |
74a0 | 72 20 6d 61 6b 65 73 20 61 62 6f 75 74 00 6c 6f 67 67 69 6e 67 2e 20 20 4d 6f 6e 69 74 6f 72 73 | r.makes.about.logging...Monitors |
74c0 | 20 6c 6f 6f 6b 20 66 6f 72 20 73 69 67 6e 65 64 20 63 68 65 63 6b 73 75 6d 73 20 61 6e 64 20 64 | .look.for.signed.checksums.and.d |
74e0 | 61 74 61 20 74 68 61 74 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 70 75 62 6c 69 63 00 56 65 | ata.that.correspond.to.public.Ve |
7500 | 72 69 66 69 65 72 73 20 75 73 65 20 74 68 65 20 73 69 67 6e 65 72 27 73 20 64 61 74 61 20 69 66 | rifiers.use.the.signer's.data.if |
7520 | 20 69 74 20 69 73 20 61 63 63 6f 6d 70 61 6e 69 65 64 20 62 79 20 70 72 6f 6f 66 73 20 6f 66 20 | .it.is.accompanied.by.proofs.of. |
7540 | 70 75 62 6c 69 63 00 00 6c 6f 67 67 69 6e 67 2e 20 20 41 20 73 69 67 73 75 6d 20 6c 6f 67 20 64 | public..logging...A.sigsum.log.d |
7560 | 6f 65 73 20 6e 6f 74 20 68 65 6c 70 20 74 68 65 20 73 69 67 6e 65 72 20 77 69 74 68 20 61 6e 79 | oes.not.help.the.signer.with.any |
7580 | 20 64 61 74 61 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 00 74 68 65 20 73 69 67 6e 65 64 20 63 | .data.distribution..the.signed.c |
75a0 | 68 65 63 6b 73 75 6d 27 73 20 64 61 74 61 20 69 73 20 72 65 61 64 79 20 66 6f 72 20 64 69 73 74 | hecksum's.data.is.ready.for.dist |
75c0 | 72 69 62 75 74 69 6f 6e 20 77 69 74 68 20 70 72 6f 6f 66 73 20 6f 66 20 70 75 62 6c 69 63 00 69 | ribution.with.proofs.of.public.i |
75e0 | 6e 63 6c 75 73 69 6f 6e 20 70 72 6f 6f 66 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 74 68 61 74 | nclusion.proof.is.available.that |
7600 | 20 6c 65 61 64 73 20 75 70 20 74 6f 20 61 20 74 72 75 73 74 77 6f 72 74 68 79 20 4d 65 72 6b 6c | .leads.up.to.a.trustworthy.Merkl |
7620 | 65 20 74 72 65 65 20 68 65 61 64 2c 00 54 68 65 20 73 69 67 6e 69 6e 67 20 70 61 72 74 79 20 77 | e.tree.head,.The.signing.party.w |
7640 | 61 69 74 73 20 66 6f 72 20 74 68 65 69 72 20 73 75 62 6d 69 73 73 69 6f 6e 20 74 6f 20 62 65 20 | aits.for.their.submission.to.be. |
7660 | 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 65 20 6c 6f 67 2e 20 20 57 68 65 6e 20 61 6e 00 00 6b | included.in.the.log...When.an..k |
7680 | 65 79 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 44 4e 53 20 61 73 20 61 20 54 58 54 | ey.is.configured.in.DNS.as.a.TXT |
76a0 | 20 72 65 63 6f 72 64 20 74 6f 20 68 65 6c 70 20 6c 6f 67 20 6f 70 65 72 61 74 6f 72 73 20 63 6f | .record.to.help.log.operators.co |
76c0 | 6d 62 61 74 20 73 70 61 6d 2e 00 61 6e 64 20 61 20 68 61 73 68 20 6f 66 20 74 68 65 20 70 75 62 | mbat.spam..and.a.hash.of.the.pub |
76e0 | 6c 69 63 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 2e 20 20 41 20 68 61 73 68 20 6f 66 | lic.verification.key...A.hash.of |
7700 | 20 74 68 65 20 70 75 62 6c 69 63 20 76 65 72 69 66 69 63 61 74 69 6f 6e 00 64 61 74 61 2e 20 20 | .the.public.verification.data... |
7720 | 4d 69 6e 69 6d 61 6c 20 6d 65 74 61 64 61 74 61 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 6c 6f | Minimal.metadata.must.also.be.lo |
7740 | 67 67 65 64 2c 20 73 75 63 68 20 61 73 20 74 68 65 20 63 68 65 63 6b 73 75 6d 27 73 20 73 69 67 | gged,.such.as.the.checksum's.sig |
7760 | 6e 61 74 75 72 65 00 73 74 61 74 65 6d 65 6e 74 20 74 68 61 74 20 73 69 67 73 75 6d 20 6c 6f 67 | nature.statement.that.sigsum.log |
7780 | 73 20 61 63 63 65 70 74 2e 20 20 54 68 61 74 20 73 74 61 74 65 6d 65 6e 74 20 65 6e 63 6f 64 65 | s.accept...That.statement.encode |
77a0 | 73 20 61 20 63 68 65 63 6b 73 75 6d 20 6f 66 20 73 6f 6d 65 00 41 20 73 69 67 6e 65 72 20 77 61 | s.a.checksum.of.some.A.signer.wa |
77c0 | 6e 74 73 20 74 6f 20 6d 61 6b 65 20 74 68 65 69 72 20 6b 65 79 2d 75 73 61 67 65 20 74 72 61 6e | nts.to.make.their.key-usage.tran |
77e0 | 73 70 61 72 65 6e 74 2e 20 20 54 68 65 72 65 66 6f 72 65 2c 20 74 68 65 79 20 73 69 67 6e 20 61 | sparent...Therefore,.they.sign.a |
7800 | 00 00 60 60 60 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 46 69 67 | ..```........................Fig |
7820 | 75 72 65 20 31 3a 20 73 79 73 74 65 6d 20 6f 76 65 72 76 69 65 77 00 20 20 20 20 20 20 20 20 20 | ure.1:.system.overview.......... |
7840 | 20 20 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | ................................ |
7860 | 20 20 20 69 6e 76 65 73 74 69 67 61 74 65 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | ...investigate.................. |
7880 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 00 20 20 20 20 20 20 20 20 20 20 | ....................v........... |
78a0 | 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 20 20 20 20 20 20 20 20 20 20 7c 20 63 6c 61 | .....+---------+...........|.cla |
78c0 | 69 6d 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 00 20 20 20 20 20 20 20 20 20 20 | im.......+----------+........... |
78e0 | 20 20 20 20 20 7c 20 57 69 74 6e 65 73 73 20 7c 20 20 20 20 20 20 20 20 20 20 20 7c 20 66 61 6c | .....|.Witness.|...........|.fal |
7900 | 73 65 20 20 20 20 20 20 20 7c 20 56 65 72 69 66 69 65 72 20 7c 00 20 20 20 20 20 20 20 20 20 20 | se.......|.Verifier.|........... |
7920 | 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 20 20 | .....+---------+...........|.... |
7940 | 20 20 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 00 20 20 20 20 20 20 20 20 20 20 | .........+----------+........... |
7960 | 20 20 20 20 20 20 20 76 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d | .......v..............+--------- |
7980 | 2b 20 20 20 20 20 20 20 20 20 20 20 76 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c | +...........v..................| |
79a0 | 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 3e 7c 20 4d 6f 6e 69 74 6f 72 20 7c 3c 2d 2d 2d 2d 2d 2d | ..+---------->|.Monitor.|<------ |
79c0 | 2d 2b 20 20 7c 70 72 6f 6f 66 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 7c | -+..|proof..................|..| |
79e0 | 20 70 72 6f 6f 66 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 20 20 64 61 74 61 20 7c 20 | .proof.....+---------+...data.|. |
7a00 | 20 7c 6d 65 74 61 64 61 74 61 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 7c | .|metadata..................|..| |
7a20 | 20 6d 65 74 61 64 61 74 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 | .metadata.....................|. |
7a40 | 20 7c 64 61 74 61 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5e 20 20 7c 20 63 68 65 | .|data..................^..|.che |
7a60 | 63 6b 73 75 6d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 7c 00 20 | cksum.....................|..|.. |
7a80 | 20 2b 2d 2d 2d 2d 2d 2b 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 20 20 20 20 20 | .+-----+.......+---------+...... |
7aa0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 00 | ...............+--------------+. |
7ac0 | 20 20 7c 20 44 4e 53 20 7c 2d 2d 2d 2d 2d 2d 3e 7c 20 20 20 4c 6f 67 20 20 20 7c 2d 2d 2d 2d 2d | ..|.DNS.|------>|...Log...|----- |
7ae0 | 2d 2d 2d 2d 2d 2b 20 20 20 20 20 20 20 20 20 20 7c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 7c | -----+..........|.Distribution.| |
7b00 | 00 20 20 2b 2d 2d 2d 2d 2d 2b 20 48 28 76 6b 29 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 20 20 70 | ...+-----+.H(vk).+---------+...p |
7b20 | 72 6f 6f 66 20 20 7c 20 20 20 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d | roof..|..........+-------------- |
7b40 | 2b 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 20 20 20 20 20 20 20 20 20 | +.....................v......... |
7b60 | 20 20 20 20 20 20 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 00 20 20 20 20 20 20 | .......|................v....... |
7b80 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5e | ..............|................^ |
7ba0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 70 72 6f 6f 66 00 20 20 20 20 20 20 20 20 | ................|.proof......... |
7bc0 | 20 20 20 6d 65 74 61 64 61 74 61 20 7c 20 20 20 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d | ...metadata.|..........+-------- |
7be0 | 2d 2d 2b 20 20 20 20 20 20 20 20 20 20 20 7c 20 6d 65 74 61 64 61 74 61 00 20 20 20 20 20 20 20 | --+...........|.metadata........ |
7c00 | 20 20 20 20 63 68 65 63 6b 73 75 6d 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 7c 20 20 53 69 67 6e 65 | ....checksum.+----------|..Signe |
7c20 | 72 20 20 7c 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 64 61 74 61 00 20 20 20 20 20 20 20 20 20 20 | r..|-----------+.data........... |
7c40 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d | .....................+---------- |
7c60 | 2b 00 60 60 60 00 77 65 20 67 69 76 65 20 61 20 62 72 69 65 66 20 70 72 69 6d 65 72 20 62 65 6c | +.```.we.give.a.brief.primer.bel |
7c80 | 6f 77 2e 00 41 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 73 69 67 73 75 6d 20 6c 6f 67 67 69 6e | ow..An.overview.of.sigsum.loggin |
7ca0 | 67 20 69 73 20 73 68 6f 77 6e 20 69 6e 20 46 69 67 75 72 65 20 31 2e 20 20 42 65 66 6f 72 65 20 | g.is.shown.in.Figure.1...Before. |
7cc0 | 67 6f 69 6e 67 20 69 6e 74 6f 20 64 65 74 61 69 6c 00 23 23 20 33 20 2d 20 44 65 73 69 67 6e 00 | going.into.detail.##.3.-.Design. |
7ce0 | 00 61 74 74 61 63 6b 73 2e 20 20 20 41 20 6c 6f 67 20 6f 70 65 72 61 74 6f 72 20 63 61 6e 20 61 | .attacks....A.log.operator.can.a |
7d00 | 74 20 62 65 73 74 20 64 65 6e 79 20 73 65 72 76 69 63 65 20 77 69 74 68 20 74 68 65 73 65 20 61 | t.best.deny.service.with.these.a |
7d20 | 73 73 75 6d 70 74 69 6f 6e 73 2e 00 09 5b 73 6c 6f 77 2d 64 6f 77 6e 5d 28 68 74 74 70 73 3a 2f | ssumptions...[slow-down](https:/ |
7d40 | 2f 67 69 74 2e 73 69 67 73 75 6d 2e 6f 72 67 2f 73 69 67 73 75 6d 2f 74 72 65 65 2f 61 72 63 68 | /git.sigsum.org/sigsum/tree/arch |
7d60 | 69 76 65 2f 32 30 32 31 2d 30 38 2d 32 34 2d 63 68 65 63 6b 70 6f 69 6e 74 2d 74 69 6d 65 73 74 | ive/2021-08-24-checkpoint-timest |
7d80 | 61 6d 70 29 00 61 6e 64 00 09 5b 73 70 6c 69 74 2d 76 69 65 77 5d 28 68 74 74 70 73 3a 2f 2f 64 | amp).and..[split-view](https://d |
7da0 | 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 64 72 61 | atatracker.ietf.org/doc/html/dra |
7dc0 | 66 74 2d 69 65 74 66 2d 74 72 61 6e 73 2d 67 6f 73 73 69 70 2d 30 35 29 00 61 74 74 65 6d 70 74 | ft-ietf-trans-gossip-05).attempt |
7de0 | 73 00 77 69 74 6e 65 73 73 65 73 20 73 74 6f 70 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f | s.witnesses.stop.following.proto |
7e00 | 63 6f 6c 20 74 6f 20 70 72 6f 74 65 63 74 20 61 67 61 69 6e 73 74 20 61 20 6d 61 6c 69 63 69 6f | col.to.protect.against.a.malicio |
7e20 | 75 73 20 6c 6f 67 20 74 68 61 74 00 73 69 67 6e 61 74 75 72 65 20 73 63 68 65 6d 65 2e 20 20 57 | us.log.that.signature.scheme...W |
7e40 | 65 20 61 6c 73 6f 20 61 73 73 75 6d 65 20 74 68 61 74 20 61 74 20 6d 6f 73 74 20 61 20 74 68 72 | e.also.assume.that.at.most.a.thr |
7e60 | 65 73 68 6f 6c 64 20 6f 66 20 69 6e 64 65 70 65 6e 64 65 6e 74 00 46 6f 72 20 73 65 63 75 72 69 | eshold.of.independent.For.securi |
7e80 | 74 79 20 77 65 20 6e 65 65 64 20 61 20 63 6f 6c 6c 69 73 69 6f 6e 20 72 65 73 69 73 74 61 6e 74 | ty.we.need.a.collision.resistant |
7ea0 | 20 68 61 73 68 20 66 75 6e 63 74 69 6f 6e 20 61 6e 64 20 61 6e 20 75 6e 66 6f 72 67 65 61 62 6c | .hash.function.and.an.unforgeabl |
7ec0 | 65 00 00 48 6f 77 65 76 65 72 2c 20 61 20 6c 6f 67 20 6f 70 65 72 61 74 6f 72 20 77 6f 75 6c 64 | e..However,.a.log.operator.would |
7ee0 | 20 6f 6e 6c 79 20 64 6f 20 74 68 61 74 20 69 66 20 69 74 20 69 73 20 6c 69 6b 65 6c 79 20 74 6f | .only.do.that.if.it.is.likely.to |
7f00 | 20 67 6f 20 75 6e 6e 6f 74 69 63 65 64 2e 00 74 68 65 20 73 61 6d 65 20 61 70 70 65 6e 64 2d 6f | .go.unnoticed..the.same.append-o |
7f20 | 6e 6c 79 20 4d 65 72 6b 6c 65 20 74 72 65 65 20 74 6f 20 65 76 65 72 79 6f 6e 65 20 62 65 63 61 | nly.Merkle.tree.to.everyone.beca |
7f40 | 75 73 65 20 69 74 20 69 73 20 61 74 74 61 63 6b 65 72 2d 63 6f 6e 74 72 6f 6c 6c 65 64 2e 00 63 | use.it.is.attacker-controlled..c |
7f60 | 68 65 63 6b 73 75 6d 20 74 68 61 74 20 61 20 76 65 72 69 66 69 65 72 20 77 6f 75 6c 64 20 61 63 | hecksum.that.a.verifier.would.ac |
7f80 | 63 65 70 74 2e 20 20 41 20 6c 6f 67 20 63 61 6e 20 6d 69 73 62 65 68 61 76 65 20 62 79 20 6e 6f | cept...A.log.can.misbehave.by.no |
7fa0 | 74 20 70 72 65 73 65 6e 74 69 6e 67 00 54 68 65 20 6f 76 65 72 61 6c 6c 20 73 79 73 74 65 6d 20 | t.presenting.The.overall.system. |
7fc0 | 69 73 20 73 61 69 64 20 74 6f 20 62 65 20 73 65 63 75 72 65 20 69 66 20 61 20 6c 6f 67 20 6d 6f | is.said.to.be.secure.if.a.log.mo |
7fe0 | 6e 69 74 6f 72 20 63 61 6e 20 64 69 73 63 6f 76 65 72 20 65 76 65 72 79 20 73 69 67 6e 65 64 00 | nitor.can.discover.every.signed. |
8000 | 61 64 00 00 4a 01 00 00 5e 02 00 00 00 10 00 00 3e 00 00 00 00 00 00 00 b1 0f 00 00 90 0f 00 00 | ad..J...^.......>............... |
8020 | 8f 0f 00 00 40 0f 00 00 f2 0e 00 00 f1 0e 00 00 a1 0e 00 00 55 0e 00 00 da 0d 00 00 d9 0d 00 00 | ....@...............U........... |
8040 | c1 0d 00 00 a2 0d 00 00 51 0d 00 00 00 0d 00 00 af 0c 00 00 68 0c 00 00 51 0c 00 00 50 0c 00 00 | ........Q...........h...Q...P... |
8060 | 19 0c 00 00 18 0c 00 00 ca 0b 00 00 7d 0b 00 00 31 0b 00 00 e1 0a 00 00 e0 0a 00 00 c4 0a 00 00 | ............}...1............... |
8080 | 76 0a 00 00 2c 0a 00 00 ec 09 00 00 eb 09 00 00 9d 09 00 00 10 09 00 00 a9 08 00 00 a8 08 00 00 | v...,........................... |
80a0 | a7 08 00 00 8e 08 00 00 f8 07 00 00 a4 07 00 00 60 07 00 00 5f 07 00 00 37 07 00 00 c3 06 00 00 | ................`..._...7....... |
80c0 | 78 06 00 00 28 06 00 00 e0 05 00 00 df 05 00 00 8d 05 00 00 3d 05 00 00 14 05 00 00 cd 04 00 00 | x...(...............=........... |
80e0 | 84 04 00 00 35 04 00 00 d6 03 00 00 d5 03 00 00 8c 03 00 00 8b 03 00 00 71 03 00 00 21 03 00 00 | ....5...................q...!... |
8100 | d1 02 00 00 91 02 00 00 5f 02 00 00 5e 02 00 00 58 02 00 00 58 02 00 00 58 02 00 00 04 02 00 00 | ........_...^...X...X...X....... |
8120 | e7 01 00 00 e3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
8140 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
8160 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
8180 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 69 67 6e 65 72 73 20 64 69 73 74 72 69 62 75 74 | ...............Signers.distribut |
81a0 | 65 20 61 74 20 6c 65 61 73 74 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 69 65 63 65 73 3a | e.at.least.the.following.pieces: |
81c0 | 00 74 00 53 69 67 6e 65 72 73 20 64 69 73 74 72 69 62 75 74 65 20 61 74 20 6c 65 61 73 74 20 74 | .t.Signers.distribute.at.least.t |
81e0 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 69 65 63 65 73 3a 00 74 68 65 20 64 00 53 69 67 6e 65 | he.following.pieces:.the.d.Signe |
8200 | 72 73 20 64 00 53 69 67 6e 65 72 73 20 00 53 69 67 6e 65 72 73 20 64 69 73 74 72 69 62 75 74 65 | rs.d.Signers..Signers.distribute |
8220 | 20 61 74 20 6c 65 61 73 74 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 69 65 63 65 73 3a 00 | .at.least.the.following.pieces:. |
8240 | 74 68 65 20 64 61 74 61 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 6f 6e 20 61 20 77 00 53 | the.data...For.example,.on.a.w.S |
8260 | 69 67 6e 65 72 73 20 64 69 73 74 72 69 62 75 74 65 20 61 74 20 6c 65 61 73 74 20 74 68 65 20 66 | igners.distribute.at.least.the.f |
8280 | 6f 6c 6c 6f 77 69 6e 67 20 70 69 65 63 65 73 3a 00 74 68 65 20 64 61 74 61 2e 20 20 46 6f 72 20 | ollowing.pieces:.the.data...For. |
82a0 | 65 78 61 6d 70 6c 65 2c 20 6f 6e 20 61 20 77 65 62 73 69 74 65 2c 20 69 6e 20 61 20 67 69 74 20 | example,.on.a.website,.in.a.git. |
82c0 | 72 65 70 6f 73 69 74 6f 72 79 2c 20 65 74 63 2e 00 73 74 61 72 74 2e 20 20 44 69 73 74 72 69 62 | repository,.etc..start...Distrib |
82e0 | 75 74 69 6f 6e 20 68 61 70 70 65 6e 73 20 75 73 69 6e 67 20 74 68 65 20 73 61 6d 65 20 6d 65 63 | ution.happens.using.the.same.mec |
8300 | 68 61 6e 69 73 6d 20 74 68 61 74 20 69 73 20 6e 6f 72 6d 61 6c 6c 79 20 75 73 65 64 20 66 6f 72 | hanism.that.is.normally.used.for |
8320 | 00 4f 6e 63 65 20 61 20 73 69 67 6e 65 72 20 68 61 73 20 63 6f 6c 6c 65 63 74 65 64 20 70 72 6f | .Once.a.signer.has.collected.pro |
8340 | 6f 66 73 20 6f 66 20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 20 74 68 65 20 64 69 73 74 72 69 | ofs.of.public.logging.the.distri |
8360 | 62 75 74 69 6f 6e 20 70 68 61 73 65 20 63 61 6e 00 23 23 23 23 20 33 2e 32 2e 34 20 2d 20 44 69 | bution.phase.can.####.3.2.4.-.Di |
8380 | 73 74 72 69 62 75 74 69 6f 6e 00 00 55 73 65 2d 63 61 73 65 73 20 6c 69 6b 65 20 69 6e 73 74 61 | stribution..Use-cases.like.insta |
83a0 | 6e 74 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 73 75 61 6e 63 65 20 61 72 65 20 6e 6f 74 20 | nt.certificate.issuance.are.not. |
83c0 | 73 75 70 70 6f 72 74 65 64 20 62 79 20 64 65 73 69 67 6e 2e 00 00 09 5b 47 34 5c 5d 5d 28 68 74 | supported.by.design....[G4\]](ht |
83e0 | 74 70 73 3a 2f 2f 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 2f 64 | tps://docs.google.com/document/d |
8400 | 2f 31 36 47 2d 51 37 69 4e 33 6b 42 34 36 47 53 57 35 62 2d 73 66 48 35 4d 4f 33 6e 4b 53 59 79 | /16G-Q7iN3kB46GSW5b-sfH5MO3nKSYy |
8420 | 45 62 37 37 59 73 4d 37 54 4d 5a 47 45 2f 65 64 69 74 29 2e 00 09 5b 47 33 2c 5d 28 68 74 74 70 | Eb77YsM7TMZGE/edit)...[G3,](http |
8440 | 73 3a 2f 2f 70 65 74 73 79 6d 70 6f 73 69 75 6d 2e 6f 72 67 2f 32 30 32 31 2f 66 69 6c 65 73 2f | s://petsymposium.org/2021/files/ |
8460 | 70 61 70 65 72 73 2f 69 73 73 75 65 32 2f 70 6f 70 65 74 73 2d 32 30 32 31 2d 30 30 32 34 2e 70 | papers/issue2/popets-2021-0024.p |
8480 | 64 66 29 00 09 5b 47 32 2c 5d 28 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 | df)..[G2,](https://datatracker.i |
84a0 | 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 64 72 61 66 74 2d 69 65 74 66 2d 74 72 61 6e | etf.org/doc/html/draft-ietf-tran |
84c0 | 73 2d 67 6f 73 73 69 70 2d 30 35 29 00 09 5b 5c 5b 47 31 2c 5d 28 68 74 74 70 73 3a 2f 2f 69 65 | s-gossip-05)..[\[G1,](https://ie |
84e0 | 65 65 78 70 6c 6f 72 65 2e 69 65 65 65 2e 6f 72 67 2f 73 74 61 6d 70 2f 73 74 61 6d 70 2e 6a 73 | eexplore.ieee.org/stamp/stamp.js |
8500 | 70 3f 61 72 6e 75 6d 62 65 72 3d 37 33 34 36 38 35 33 29 00 6e 65 65 64 20 66 6f 72 20 72 65 61 | p?arnumber=7346853).need.for.rea |
8520 | 63 74 69 76 65 20 67 6f 73 73 69 70 2d 61 75 64 69 74 20 70 72 6f 74 6f 63 6f 6c 73 00 54 68 65 | ctive.gossip-audit.protocols.The |
8540 | 20 61 64 64 65 64 20 6c 61 74 65 6e 63 79 20 69 73 20 61 20 74 72 61 64 65 2d 6f 66 66 20 74 68 | .added.latency.is.a.trade-off.th |
8560 | 61 74 20 73 69 6d 70 6c 69 66 69 65 73 20 73 69 67 73 75 6d 20 6c 6f 67 67 69 6e 67 20 62 79 20 | at.simplifies.sigsum.logging.by. |
8580 | 72 65 6d 6f 76 69 6e 67 20 74 68 65 00 49 74 20 74 68 75 73 20 74 61 6b 65 73 20 66 69 76 65 20 | removing.the.It.thus.takes.five. |
85a0 | 74 6f 20 74 65 6e 20 6d 69 6e 75 74 65 73 20 62 65 66 6f 72 65 20 61 20 73 69 67 6e 65 72 27 73 | to.ten.minutes.before.a.signer's |
85c0 | 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 70 68 61 73 65 20 63 61 6e 20 73 74 61 72 74 2e 00 00 | .distribution.phase.can.start... |
85e0 | 74 6f 20 6c 6f 67 73 20 73 6f 20 74 68 61 74 20 73 69 67 6e 65 72 73 20 63 61 6e 20 65 61 73 69 | to.logs.so.that.signers.can.easi |
8600 | 6c 79 20 66 65 74 63 68 20 66 69 6e 61 6c 69 7a 65 64 20 63 6f 73 69 67 6e 65 64 20 74 72 65 65 | ly.fetch.finalized.cosigned.tree |
8620 | 20 68 65 61 64 73 2e 00 61 70 70 65 6e 64 2d 6f 6e 6c 79 20 62 65 66 6f 72 65 20 64 6f 69 6e 67 | .heads..append-only.before.doing |
8640 | 20 61 20 63 6f 73 69 67 6e 61 74 75 72 65 20 6f 70 65 72 61 74 69 6f 6e 2e 20 20 43 6f 73 69 67 | .a.cosignature.operation...Cosig |
8660 | 6e 61 74 75 72 65 73 20 61 72 65 20 70 6f 73 74 65 64 20 62 61 63 6b 00 6c 6f 67 73 20 66 6f 72 | natures.are.posted.back.logs.for |
8680 | 20 73 6f 2d 63 61 6c 6c 65 64 20 5f 74 6f 2d 73 69 67 6e 5f 20 74 72 65 65 20 68 65 61 64 73 20 | .so-called._to-sign_.tree.heads. |
86a0 | 61 6e 64 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 65 79 20 61 72 65 20 66 72 65 73 68 20 61 | and.verify.that.they.are.fresh.a |
86c0 | 6e 64 00 53 69 67 73 75 6d 20 6c 6f 67 73 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 66 72 65 65 | nd.Sigsum.logs.periodically.free |
86e0 | 7a 65 20 74 68 65 20 6d 6f 73 74 20 63 75 72 72 65 6e 74 20 74 72 65 65 20 68 65 61 64 2c 20 74 | ze.the.most.current.tree.head,.t |
8700 | 79 70 69 63 61 6c 6c 79 20 65 76 65 72 79 20 66 69 76 65 20 6d 69 6e 75 74 65 73 2e 20 20 43 6f | ypically.every.five.minutes...Co |
8720 | 73 69 67 6e 69 6e 67 20 77 69 74 6e 65 73 73 65 73 20 70 6f 6c 6c 00 23 23 23 23 20 33 2e 32 2e | signing.witnesses.poll.####.3.2. |
8740 | 33 20 2d 20 57 61 69 74 20 66 6f 72 20 77 69 74 6e 65 73 73 20 63 6f 73 69 67 6e 69 6e 67 00 00 | 3.-.Wait.for.witness.cosigning.. |
8760 | 73 69 67 6e 65 72 20 68 61 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 6e 20 69 6e 63 6c 75 73 | signer.has.to.wait.for.an.inclus |
8780 | 69 6f 6e 20 70 72 6f 6f 66 20 61 6e 64 20 61 20 63 6f 73 69 67 6e 65 64 20 74 72 65 65 20 68 65 | ion.proof.and.a.cosigned.tree.he |
87a0 | 61 64 2e 00 43 65 72 74 69 66 69 63 61 74 65 20 54 72 61 6e 73 70 61 72 65 6e 63 79 2e 20 20 54 | ad..Certificate.Transparency...T |
87c0 | 68 65 72 65 66 6f 72 65 2c 20 73 69 67 73 75 6d 20 6c 6f 67 73 20 64 6f 20 6e 6f 74 20 70 72 6f | herefore,.sigsum.logs.do.not.pro |
87e0 | 76 69 64 65 20 6c 6f 77 20 6c 61 74 65 6e 63 79 20 2d 2d 20 74 68 65 00 72 65 71 75 65 73 74 20 | vide.low.latency.--.the.request. |
8800 | 69 73 20 61 63 63 65 70 74 65 64 2c 20 74 68 65 20 6c 6f 67 20 5f 74 72 69 65 73 5f 20 74 6f 20 | is.accepted,.the.log._tries_.to. |
8820 | 69 6e 63 6f 72 70 6f 72 61 74 65 20 74 68 65 20 73 75 62 6d 69 74 74 65 64 20 6c 65 61 66 20 69 | incorporate.the.submitted.leaf.i |
8840 | 6e 74 6f 20 69 74 73 20 4d 65 72 6b 6c 65 20 74 72 65 65 2e 20 20 54 68 65 72 65 20 61 72 65 20 | nto.its.Merkle.tree...There.are. |
8860 | 68 6f 77 65 76 65 72 20 6e 6f 20 5f 70 72 6f 6d 69 73 65 73 20 6f 66 20 70 75 62 6c 69 63 20 6c | however.no._promises.of.public.l |
8880 | 6f 67 67 69 6e 67 5f 20 61 73 20 69 6e 00 57 68 65 6e 20 61 20 73 75 62 6d 69 74 74 65 64 20 6c | ogging_.as.in.When.a.submitted.l |
88a0 | 6f 67 67 69 6e 67 00 00 00 74 68 65 20 73 69 67 6e 61 74 75 72 65 20 69 73 20 76 61 6c 69 64 2c | ogging...the.signature.is.valid, |
88c0 | 20 74 68 65 6e 20 68 61 73 68 65 73 20 69 74 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 73 20 74 68 | .then.hashes.it.to.constructs.th |
88e0 | 65 20 4d 65 72 6b 6c 65 20 74 72 65 65 20 6c 65 61 66 20 61 73 20 64 65 73 63 72 69 62 65 64 20 | e.Merkle.tree.leaf.as.described. |
8900 | 69 6e 20 53 65 63 74 69 6f 6e 20 33 2e 31 2e 00 6b 65 79 20 61 6e 64 20 64 6f 6d 61 69 6e 20 68 | in.Section.3.1..key.and.domain.h |
8920 | 69 6e 74 20 61 73 20 41 53 43 49 49 20 6b 65 79 2d 76 61 6c 75 65 20 70 61 69 72 73 2e 20 20 54 | int.as.ASCII.key-value.pairs...T |
8940 | 68 65 20 6c 6f 67 20 76 65 72 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 70 75 62 6c 69 63 20 | he.log.verifies.that.the.public. |
8960 | 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 20 69 73 20 70 72 65 73 65 6e 74 20 69 6e 20 44 | verification.key.is.present.in.D |
8980 | 4e 53 20 61 6e 64 20 75 73 65 73 20 69 74 20 74 6f 20 63 68 65 63 6b 20 74 68 61 74 00 54 68 65 | NS.and.uses.it.to.check.that.The |
89a0 | 20 73 69 67 6e 65 72 20 73 75 62 6d 69 74 73 20 74 68 65 69 72 20 73 68 61 72 64 20 68 69 6e 74 | .signer.submits.their.shard.hint |
89c0 | 2c 20 63 68 65 63 6b 73 75 6d 2c 20 73 69 67 6e 61 74 75 72 65 2c 20 70 75 62 6c 69 63 20 76 65 | ,.checksum,.signature,.public.ve |
89e0 | 72 69 66 69 63 61 74 69 6f 6e 00 00 73 69 6e 63 65 20 74 68 65 20 64 61 74 61 20 73 74 72 75 63 | rification..since.the.data.struc |
8a00 | 74 75 72 65 73 20 62 65 69 6e 67 20 65 78 63 68 61 6e 67 65 64 20 61 72 65 20 70 72 69 6d 69 74 | tures.being.exchanged.are.primit |
8a20 | 69 76 65 20 65 6e 6f 75 67 68 2e 00 75 73 65 20 61 20 73 69 6d 70 6c 65 20 41 53 43 49 49 20 66 | ive.enough..use.a.simple.ASCII.f |
8a40 | 6f 72 6d 61 74 2e 20 20 41 20 6d 6f 72 65 20 63 6f 6d 70 6c 65 78 20 70 61 72 73 65 72 20 6c 69 | ormat...A.more.complex.parser.li |
8a60 | 6b 65 20 4a 53 4f 4e 20 69 73 20 6e 6f 74 20 6e 65 65 64 65 64 00 53 69 67 73 75 6d 20 6c 6f 67 | ke.JSON.is.not.needed.Sigsum.log |
8a80 | 73 20 69 6d 70 6c 65 6d 65 6e 74 20 61 6e 20 48 54 54 50 28 53 29 20 41 50 49 2e 20 20 49 6e 70 | s.implement.an.HTTP(S).API...Inp |
8aa0 | 75 74 20 61 6e 64 20 6f 75 74 70 75 74 20 69 73 20 68 75 6d 61 6e 2d 72 65 61 64 61 62 6c 65 20 | ut.and.output.is.human-readable. |
8ac0 | 61 6e 64 00 23 23 23 23 20 33 2e 32 2e 32 20 2d 20 53 75 62 6d 69 74 20 72 65 71 75 65 73 74 00 | and.####.3.2.2.-.Submit.request. |
8ae0 | 00 4f 6e 63 65 20 70 72 65 73 65 6e 74 20 69 6e 20 44 4e 53 2c 20 61 20 76 65 72 69 66 69 63 61 | .Once.present.in.DNS,.a.verifica |
8b00 | 74 69 6f 6e 20 6b 65 79 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 73 75 62 73 65 71 75 65 | tion.key.can.be.used.in.subseque |
8b20 | 6e 74 20 6c 6f 67 20 72 65 71 75 65 73 74 73 2e 00 70 61 72 74 20 6f 66 20 61 20 64 65 66 65 6e | nt.log.requests..part.of.a.defen |
8b40 | 73 65 20 6d 65 63 68 61 6e 69 73 6d 20 74 68 61 74 20 68 65 6c 70 73 20 6c 6f 67 20 6f 70 65 72 | se.mechanism.that.helps.log.oper |
8b60 | 61 74 6f 72 73 20 74 6f 20 64 65 61 6c 20 77 69 74 68 20 6c 6f 67 20 73 70 61 6d 2e 00 63 68 65 | ators.to.deal.with.log.spam..che |
8b80 | 63 6b 20 74 68 61 74 20 5f 73 6f 6d 65 20 64 6f 6d 61 69 6e 5f 20 69 73 20 61 77 61 72 65 20 6f | ck.that._some.domain_.is.aware.o |
8ba0 | 66 20 74 68 65 20 73 69 67 6e 65 72 27 73 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 2e | f.the.signer's.verification.key. |
8bc0 | 20 20 54 68 69 73 20 69 73 00 54 68 65 20 73 69 67 6e 65 72 20 61 6c 73 6f 20 68 61 73 20 74 6f | ..This.is.The.signer.also.has.to |
8be0 | 20 64 6f 20 61 20 6f 6e 65 2d 74 69 6d 65 20 44 4e 53 20 73 65 74 75 70 2e 20 20 41 73 20 6f 75 | .do.a.one-time.DNS.setup...As.ou |
8c00 | 74 6c 69 6e 65 64 20 62 65 6c 6f 77 2c 20 6c 6f 67 73 20 77 69 6c 6c 00 00 54 68 65 20 73 69 67 | tlined.below,.logs.will..The.sig |
8c20 | 6e 65 72 20 73 69 67 6e 73 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 73 68 61 72 64 20 68 69 6e | ner.signs.the.selected.shard.hin |
8c40 | 74 20 61 6e 64 20 63 68 65 63 6b 73 75 6d 2e 00 00 6e 6f 6e 2d 6f 76 65 72 6c 61 70 70 69 6e 67 | t.and.checksum...non-overlapping |
8c60 | 20 73 68 61 72 64 2e 00 32 30 32 31 22 2e 20 20 53 68 61 72 64 20 68 69 6e 74 73 20 65 6e 73 75 | .shard..2021"...Shard.hints.ensu |
8c80 | 72 65 20 74 68 61 74 20 61 20 6c 6f 67 27 73 20 6c 65 61 76 65 73 20 63 61 6e 6e 6f 74 20 62 65 | re.that.a.log's.leaves.cannot.be |
8ca0 | 20 72 65 70 6c 61 79 65 64 20 69 6e 20 61 00 68 69 6e 74 20 72 65 70 72 65 73 65 6e 74 69 6e 67 | .replayed.in.a.hint.representing |
8cc0 | 20 61 6e 20 61 62 73 74 72 61 63 74 20 73 74 61 74 65 6d 65 6e 74 20 6c 69 6b 65 20 22 73 69 67 | .an.abstract.statement.like."sig |
8ce0 | 73 75 6d 20 6c 6f 67 73 20 74 68 61 74 20 61 72 65 20 61 63 74 69 76 65 20 64 75 72 69 6e 67 00 | sum.logs.that.are.active.during. |
8d00 | 68 61 73 68 20 6f 66 20 61 6e 20 65 78 65 63 75 74 61 62 6c 65 20 62 69 6e 61 72 79 20 6f 72 20 | hash.of.an.executable.binary.or. |
8d20 | 73 6f 6d 65 74 68 69 6e 67 20 65 6c 73 65 2e 20 20 54 68 65 20 73 69 67 6e 65 72 20 61 6c 73 6f | something.else...The.signer.also |
8d40 | 20 73 65 6c 65 63 74 73 20 61 20 73 68 61 72 64 00 41 20 73 69 67 6e 65 72 20 73 65 6c 65 63 74 | .selects.a.shard.A.signer.select |
8d60 | 73 20 61 20 63 68 65 63 6b 73 75 6d 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 6c 6f 67 67 | s.a.checksum.that.should.be.logg |
8d80 | 65 64 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 74 20 63 6f 75 6c 64 20 62 65 20 74 68 | ed...For.example,.it.could.be.th |
8da0 | 65 00 23 23 23 23 20 33 2e 32 2e 31 20 2d 20 50 72 65 70 61 72 65 20 61 20 72 65 71 75 65 73 74 | e.####.3.2.1.-.Prepare.a.request |
8dc0 | 00 23 23 23 20 33 2e 32 20 2d 20 55 73 61 67 65 20 70 61 74 74 65 72 6e 00 00 6f 74 68 65 72 20 | .###.3.2.-.Usage.pattern..other. |
8de0 | 77 6f 72 64 73 2c 20 76 65 72 69 66 69 65 72 73 20 61 6e 64 20 6d 6f 6e 69 74 6f 72 73 20 6d 75 | words,.verifiers.and.monitors.mu |
8e00 | 73 74 20 6c 6f 63 61 74 65 20 73 69 67 6e 65 72 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 | st.locate.signer.verification.ke |
8e20 | 79 73 20 69 6e 64 65 70 65 6e 64 65 6e 74 6c 79 20 6f 66 20 6c 6f 67 73 2c 20 61 6e 64 20 74 72 | ys.independently.of.logs,.and.tr |
8e40 | 75 73 74 20 74 68 65 6d 20 65 78 70 6c 69 63 69 74 6c 79 2e 00 74 68 65 20 6c 69 6b 65 6c 69 68 | ust.them.explicitly..the.likelih |
8e60 | 6f 6f 64 20 74 68 61 74 20 61 6e 20 75 6e 74 72 75 73 74 65 64 20 6b 65 79 20 69 73 20 64 69 73 | ood.that.an.untrusted.key.is.dis |
8e80 | 63 6f 76 65 72 65 64 20 61 6e 64 20 75 73 65 64 20 62 79 20 6d 69 73 74 61 6b 65 2e 20 20 49 6e | covered.and.used.by.mistake...In |
8ea0 | 00 4e 6f 74 65 20 74 68 61 74 20 61 20 6b 65 79 20 68 61 73 68 20 69 73 20 6c 6f 67 67 65 64 20 | .Note.that.a.key.hash.is.logged. |
8ec0 | 72 61 74 68 65 72 20 74 68 61 6e 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 69 74 73 65 6c | rather.than.the.public.key.itsel |
8ee0 | 66 2e 20 20 54 68 69 73 20 72 65 64 75 63 65 73 00 00 64 61 74 61 20 74 68 61 74 20 61 20 63 68 | f...This.reduces..data.that.a.ch |
8f00 | 65 63 6b 73 75 6d 20 72 65 70 72 65 73 65 6e 74 73 2e 20 20 57 68 65 72 65 20 64 61 74 61 20 69 | ecksum.represents...Where.data.i |
8f20 | 73 20 6c 6f 63 61 74 65 64 20 69 73 20 75 73 65 2d 63 61 73 65 20 73 70 65 63 69 66 69 63 2e 00 | s.located.is.use-case.specific.. |
8f40 | 41 6e 79 20 61 64 64 69 74 69 6f 6e 61 6c 20 6d 65 74 61 64 61 74 61 20 74 68 61 74 20 69 73 20 | Any.additional.metadata.that.is. |
8f60 | 75 73 65 2d 63 61 73 65 20 73 70 65 63 69 66 69 63 20 63 61 6e 20 62 65 20 73 74 6f 72 65 64 20 | use-case.specific.can.be.stored. |
8f80 | 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 00 00 62 65 20 75 73 65 64 20 74 6f 20 76 65 72 69 66 | as.part.of.the..be.used.to.verif |
8fa0 | 79 20 74 68 65 20 73 69 67 6e 61 74 75 72 65 2e 00 2d 20 2a 2a 6b 65 79 5f 68 61 73 68 2a 2a 3a | y.the.signature..-.**key_hash**: |
8fc0 | 20 61 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 68 61 73 68 20 6f 66 20 74 68 65 20 73 69 67 | .a.cryptographic.hash.of.the.sig |
8fe0 | 6e 65 72 27 73 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 20 74 68 61 74 20 63 61 6e 00 | ner's.verification.key.that.can. |