Re: [Ejbca-develop] Blockchain as a new protection mechanism for Database Integrity Protection

[Andreas K. <ku...@tr...>]

Yes, a timestamp will do, or an Evidence Record (Merkle Tree + Timestamp).

Compared with BlockChain the responsiveness is likely the same and there is
no need to run an additional power plant to perform useless PoW
computations.

Another question always nagging me:
In non-monetary scenarios why should a significant number of parties,
unrelated to the given CA, perform the mining? What could be their payback?


Greetings,

Andreas

-----Ursprüngliche Nachricht-----
Von: Manuel Dejonghe [mailto:ma...@de...] 
Gesendet: Freitag, 26. Oktober 2018 07:32
An: ejbca-develop <ejb...@li...>
Betreff: Re: [Ejbca-develop] Blockchain as a new protection mechanism for
Database Integrity Protection

Hi,
I think CT Logs fulfill pretty exactly those requirements, and they do store
their info in Merkle Trees, so you're pretty close here.

cheers,
Manuel
On Thu, 25 Oct 2018 at 19:32, Jaime Hablutzel <hab...@gm...> wrote:
>
> Just a quick idea right now, but, what do you think of protecting EJBCA
records with blockchain transactions?. This way, records in EJBCA would be
verifiable with a distributed ledger and this could help to prove the
authenticity of certain data even to third parties (e.g. government), for
example, the exact time when a certificate got revoked in the past.
>
> I think that this could be implemented just as a new protection version
for Database Integrity Protection
(https://www.ejbca.org/docs/EJBCA_Security.html#src-23855405_id-.EJBCASecuri
tyv6.15.0-DatabaseIntegrityProtection).
>
> What do you think?.
>
> --
> Jaime Hablutzel -  RPC 994690880
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop


_______________________________________________
Ejbca-develop mailing list
Ejb...@li...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop