►
Description
Traditional approaches to access control require one or more points of trust – a hardware security module or a centralized server managed by a data custodian. NuCypher provides a departure from this trust-dependent paradigm and introduces threshold split-key proxy re-encryption scheme (Umbral) – a combination of proxy re-encryption and decentralization – which enables performant permission management while preserving the encrypted state of the underlying data. Proxy re-encryption nodes provide re-encryption services without ever decrypting data. Cryptographic permissions are enforced through the issuance or revocation of re-encryption keys by data owners.
----
Hyperledger – Open Source Blockchain Technologies
Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use
Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory
Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter
Follow-us on Twitter @Hyperledger
Learn about Hyperledger Membership: https://www.hyperledger.org/about/join
#Hyperledger #Blockchain
A
Good
afternoon
everyone,
my
name,
is
David
Nunez
I'm
cryptographer
at
new
cipher
ciphers
this
company.
We
provide
cryptographic
tools
to
enhance
privacy
for
for
distributed
applications.
We
basically,
then
the
main
topic
of
the
call
will
be
our
work
on
the
proxy
encryption
based
tool,
but
we
also
have
our
focus
is
to
provide
privacy
preserving
solutions,
and
we
also
are
targeting
other
ideas
like
folio
African,
Christian
desert,
okay.
So
this
is
the
typical
slide
with
really
scary
charts
about
data
breaches
losing
money
and
everything.
So
I
won't.
I
wouldn't
bore
you
with
that.
A
We
all
know
that
data
protection
of
data
is
important
and
it
basically
it
costs
money.
So
what
are
we
going
to?
What
are
we
providing?
What
is
new
server?
Providing
new
ciphers
provide
in
a
secure,
a
secure
way
of
sharing
data
that
is
encrypted
so
I,
don't
know
if
you
are
familiar
with
encryption
or
public
key
encryption.
I
will
assume
that
you
are
more
or
less
familiar
with
it
and
if
you
have
at
some
moment
try
to
use
or
share
data
that
you
have
encrypted
with
some
your
public
key.
A
A
Another
option
is,
you
will
have
to
share
your
private
key
with
some
intermediate
entity
that
this
is
the
something
typical
what
we
can
do
with
Amazon
or
Google,
where
the
data
is
storing
the
clear
in
the
in
the
so
public
key
encryption
doesn't
allow
to
to
share
data
in
a
secure
way.
It's
not
scalable.
Its
revocation
is
very
difficult,
of
course,
and
there
are
many
potential
intermediate
actors
that
can
you
know
spy
on
your
data
and
everything.
So
what's
our
proposal
proposal
is
to
use
a
type
of
criticism
called
proxy
encryption.
A
So
proxy
encryption
is
a
very
cool
crypto
system
that
basically
has
the
same
feature
of
public
key
encryption,
but
as
extended
without
the
new
functionality
called
real
encryption
water
encryption.
Does
it
basically
allows
a
proxy
entity
and
intermediate
entity
to
transform
a
ciphertext,
thus
has
Alice's
public
key,
transform
it
to
someone
else
for
the
key.
So,
for
example,
if
I
am
Alice,
I
have
tons
of
data
that
is
already
encrypted
with
my
apology
and
I
want
to
share
this
data
with
with
Bob
or
with
Charlie.
A
What
protocol
encryption
allows
is
for
for
me
to
create
a
special
key
called
the
R
encryption
key.
The
encryption
key
is
generated
using
my
private
key
and
the
public
key
of
the
recipient.
So,
with
this
information,
accurate
description,
key
and
I
handled
this
key
to
a
proxy.
So
the
proxy
now
can't
take
my
ciphertext
and
transform
it
to
ciphertext
that
can
be
opened
by
the
recipient
with
their
own
private
keys.
The
cool
thing
is
that
you
never
the
proxy,
never
learns
any
data
nor
they
learn
any
private
key.
A
So
we
go
one
step
further
than
this,
because
what
we
explained
before
is
just
typical
proxy
encryption
with
a
Singh
proxy
okay,
the
problem
of
having
a
deployment
of
proxy
encryption
with
where
it's
real
ssin
key
goes
to
a
single
proxy.
Is
that
what
happens
if
this
proxy
goes
offline
or
what
happened
if
this
proxy
refuses
to
to
transform
the
data?
So
we
overcome
these
solutions
by
making
add
their
own
Krypton
process
distribute.
So
basically,
what
we
have
is
a
distributed
threshold
proxy
encryption
scheme
that
basically
allows
to
split
their
encryption.
A
Key,
which
I
will
remind
is
the
the
the
thing
that
will
allow
the
process
to
transform
data
from
one
public
eternal.
So
I
can
split.
This
key
in
many
pieces
say,
for
example,
I
will
split
the
skin
ten
pieces
and
I
will
distribute
with
each
of
these
pieces
to
different
nodes
in
the
network,
and
I
will
require
that
some
threshold
of
these
nodes
will
have
to
collaborate
too,
so
the
receiver
hand
can
get
the
cipher
text
so
now.
A
A
We
support
different
kind
of
access
policies,
so
we
can
support
indefinite
access
policies
time-based,
for
example,
I
nodes.
Can
you
can
specify
that
encryption
nodes
only
allowed
to
share
data
for
a
period
of
time?
You
can
also
support
encryption
to
be
conditional
on
some
payments.
It
can
also
be
based
on
some
generic
smart
contact
logic,
and
that
way
the
the
nodes
will
apply
those
conditions
in
order
to
enforce
the
access
control
decision
placed
by
by
the
data
owner.
A
So
another
important
aspect
is
that
our
solution
is
not
tied
to
any
specific
blockchain,
so
we
are
basically
blocking
agnostic.
We
can
support
either
public
block
chains,
a
kathiria,
for
example,
which
is
basically
our
main,
the
one
that
we
mainly
super
right
now,
but
we
could
also
run
on
private
permission
and
block
chains,
and
there
are
many
potential
use
cases
that
can
be
built
on
top
of
new
cipher.
A
Basically
that
the
typical
use
case
will
be
a
multi-tenant
multi
producer,
multi
consumer,
encrypted
data
Lake,
where
you
have
data
with
you
know:
multiple
producers,
multiple
consumers,
it's
difficult
to
to
foresee
add
encryption
time
this.
This
data
is
going
to
be
shared
with
whom,
so
that's
something
that
proxy
encryption
allows
to
to
do
it
in
a
really
clean
way.
So,
for
example,
let's
say
some
data
producers
are
encrypting
information
that
it's
owned
by
by
some
entity
would
be
represented
by
green.
A
Then
we
can
generate
their
encryption
keys
to
touch
from
this
data
for
other
type
of
consumers.
That,
for
example,
have
private
keys
that
are,
for
example,
a
bar
below
right.
So
that
way
data
is
never
decrypted
inside
the
data
like
it's
always
maintained
is
encrypted
end-to-end.
We
have
other
potential
use
cases
and
not
going
to
explain
them
in
detail,
but
it
can
be
used
for
making
a
scalable
and
secure
IOT
updates.
So
it's
a
IOT
device
can
get
end-to-end
in
Crete,
I,
update
of
firmware
or
or
other
software.
A
Another
interesting
application
that
can
be
built
on
top
of
new
cipher
is
for
multi-user
chats.
So,
instead
of
current
solutions
of
multi-user,
secure,
bilities
chats
where
each
sender
of
data
has
to
encrypt
each
message
for
its
recipient.
So
if
you
have
a
secure
signal
or
was
that
group
of
100
people
it's
time
that
you
send
a
message,
you
are
encrypted
the
message
100
times,
so
that
something
that
wouldn't
be
the
case
for
a
new
cipher
based
application.
A
Since
you
will
basically
encrypt
ones
and
data
will
be
recruited
on
the
server
side,
it
can
be
also
used
to
construct
decentralized
access,
control,
content,
delivery
networks
based
on,
for
example,
payments.
Only
in
the
on
the
event
of
a
consumer
has
made
some
payment,
then
the
node,
so
the
network
will
perform
the
Egyptian
work.
Also
that
of
course,
and
the
content
is
never
decrypted
in
the.
A
In
this
case
that
can
be
medical
data,
so
you
can
basically
control
how
your
data
share
with
hospitals
or
doctors
or
where,
but
there
are
other
applications,
potential
applications
for
Internet
of
Things,
for
decentralized
databases
for
automobile
data
or
any
of
a
lot
of
different,
interesting
applications.
So
we
have,
we
have
currently
a
private
test
net
we
will
have.
A
We
are
very
close
to
having
a
public
test
net
right
now
and
we
were
steam
eight
that
in
the
first
quarter
of
2010
we
can
have
a
launch
of
or
maintenance
that
we
intend
to
be
public,
so
everyone
can
join
and
be
part
of
the
new
cypher
network.
And
yes,
this
you
can
find
more
information
about
no
cypher
in
your
website
or
what
paper
all
our
work
is
from
github.
A
We
do
open
source
work,
so
you
have
the
github
repositories
of
our
filter,
graphic
library
and
and
and
yeah
also
we
do
all
our
development
in
the
open
on
this
court.
So
if
you
have
any
questions,
please
feel
free
to
join
or
discard
channels
or
write
us.
An
email
I
will
be
more
than
happy
to
to
answer.
So
that's
it.
Thank
you
very
much.
You
have
any
questions,
I'll
be
happy
to
answer
that.
B
So
in
the
case
of
a
proxy
be
encryption,
you
were
saying
the
proxy
never
learns,
neither
the
private
key
to
decrypt
the
data,
nor
has
a
copy
of
the
clear
text
data.
Yes.
So
to
me
that
sounds
like
homomorphic
encryption,
but
you
were
separating
those
two,
so
I'm
a
bit
curious
about
what
the
difference
is
right.
So.
A
On
what
the
encryption
can
do
proxy
encryption,
of
course,
because
I
offer
encryption,
the
goal
is
to
perform
generic
computations
and
you
could
do
data
sharing
based
on
how
often
encryption,
but
that
it's
awfully
efficient
proxy
encryption
is
basically
the
right
tool
for
the
right
keep
traffic
tool
for
sharing
encrypted
data.
So
it
sounds
like
it's
doing
some
kind
of
a
morphic
work,
because
the
the
the
nodes
are
taking
a
ciphertext
and
are
performing
an
operation
in
the
ciphertext
and
the
result
of
that
operation
is
another
ciphertext.
A
So
it
seems
like
it's
fully
awful
encryption
or
something
like
that,
but
it's
actually
not
performing
like
meaningful
algebraic
computation,
which
is
basically
what
fully
Orphic
encryption
achieves.
It
allows
you
to
perform
addition
or
multiplication
of
data
of
encrypted
data.
Proximal
christian
does
not
allow
allow
that
it
just
allows
to
take
the
public
key
like
it's,
not
exactly
that,
but
basically
it
can
be
thought
as
taking
the
public
key
in
ciphertext
and
put
in
a
different
public
key.
So
now
the
ciphertext
can
be
opened
by
a
different
person.