Distributed access control for collaborative applications using CRDTs

Rault, Pierre-Antoine; Ignat, Claudia-Lavinia; Perrin, Olivier

doi:10.1145/3517209.3524826

Cited by 5 publications

(2 citation statements)

References 13 publications

(10 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In order to support a completely distributed group-key-management component for our real-time peer-to-peer collaborative editor MUTE [24], we plan to integrate the TreeKEM protocol and our distributed Delivery Service. We further plan to combine this distributed groupkey-management mechanism with a distributed access control mechanism such as ACCURE [27].…”

Section: Discussionmentioning

confidence: 99%

DiSCreet: Distributed Delivery Service with Context-Aware Cooperation

Paillat,

Ignat,

Frey

et al. 2024

Preprint

Self Cite

View full text Add to dashboard Cite

End-to-end encrypted messaging applications such as Signal became widely popular thanks to their capability to ensure the confidentiality and integrity of online communication. While the highest security guarantees were long reserved to two-party communication, solutions for n-party communication remained either inefficient or less secure until the standardization of the MLS Protocol (Messaging Layer Security). This new protocol offers an efficient way to provide end-to-end secure communication with the same guarantees originally offered by the Signal Protocol for two-party communication. However, both solutions still rely on a centralized component for message delivery, called the Delivery Service in the MLS Protocol. The centralization of the Delivery Service makes it an ideal target for attackers and threatens the availability of any protocol relying on MLS. In order to overcome this issue, we propose DiSCreet (Distributed delIvery Service with Context-awaRE coopEraTion), a design that allows clients to exchange protocol messages efficiently and without any intermediary. It uses a Probabilistic Reliable-Broadcast mechanism to efficiently deliver messages and the Cascade Consensus Protocol to handle messages requiring an agreement. Our solution strengthens the availability of the MLS Protocol without compromising its security. We compare the theoretical performance of DiSCreet with another distributed solution, the DGKA protocol, and detail the implementation of our solution.

show abstract

Section: Discussionmentioning

confidence: 99%

DiSCreet: Distributed Delivery Service with Context-Aware Cooperation

Paillat,

Ignat,

Frey

et al. 2024

Preprint

Self Cite

View full text Add to dashboard Cite

show abstract

“…In order to support a completely distributed group-key-management component for our real-time peer-to-peer collaborative editor MUTE [17], we plan to integrate the TreeKEM protocol and our distributed Delivery Service. We further plan to combine this distributed groupkey-management mechanism with a distributed access control mechanism such as ACCURE [19].…”

Section: Discussionmentioning

confidence: 99%

Design of an Efficient Distributed Delivery Service for Group Key Agreement Protocols

Paillat,

Ignat,

Frey

et al. 2024

Lecture Notes in Computer Science

View full text Add to dashboard Cite

End-to-end encrypted messaging applications such as Signal became widely popular thanks to their capability to ensure the confidentiality and integrity of online communication. While the highest security guarantees were long reserved to two-party communication, solutions for n-party communication remained either inefficient or less secure until the standardization of the MLS Protocol (Messaging Layer Security). This new protocol offers an efficient way to provide end-to-end secure communication with the same guarantees originally offered by the Signal Protocol for two-party communication. However, both solutions still rely on a centralized component for message delivery, called the Delivery Service in the MLS Protocol. The centralization of the Delivery Service makes it an ideal target for attackers and threatens the availability of any protocol relying on MLS. In order to overcome this issue, we propose the design of a fully distributed Delivery Service that allows clients to exchange protocol messages efficiently and without any intermediary. It uses a Probabilistic Reliable-Broadcast mechanism to efficiently deliver messages and the Cascade Consensus Protocol to handle messages requiring an agreement. Our solution strengthens the availability of the MLS Protocol without compromising its security.

show abstract