Skip to content

Commit

Permalink
docs: update quantum security guide to clarify BLS vs self-encryption…
Browse files Browse the repository at this point in the history
… security properties, remove pointer design doc
  • Loading branch information
dirvine committed Dec 29, 2024
1 parent 611ff47 commit 1c95fef
Show file tree
Hide file tree
Showing 3 changed files with 33 additions and 91 deletions.
30 changes: 17 additions & 13 deletions docs/guides/quantum_security.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,28 +4,33 @@ This guide explains Autonomi's approach to quantum-resistant security and how to

## Overview

Autonomi is built with post-quantum cryptography at its core, ensuring that your data remains secure even against quantum computer attacks. This guide covers the security features and best practices for maintaining quantum-resistant security in your applications.
Autonomi implements a hybrid security approach, combining information-theoretic security for data storage with traditional cryptographic methods for signatures. This guide covers the security features and best practices for maintaining security in your applications.

## Quantum-Resistant Features
## Security Features

### Self-Encryption
### Self-Encryption (Information-Theoretically Secure)

Autonomi uses a quantum-resistant self-encryption scheme that:
Autonomi's self-encryption scheme provides the highest level of security possible:

- Splits data into chunks
- Encrypts each chunk with quantum-resistant algorithms
- Information-theoretically secure chunking (quantum-secure by definition)
- No reliance on computational hardness assumptions
- Secure against both classical and quantum attacks
- Splits data into chunks using information-theoretic principles
- Creates secure data maps for reconstruction
- Implements content-based addressing

### BLS Threshold Signatures
### BLS Threshold Signatures (Classical Security)

Our BLS threshold signature implementation provides:

- Quantum-resistant signature schemes
- Classical cryptographic security (not quantum-resistant)
- Distributed key generation
- Threshold signature creation
- Secure aggregation

!!! warning "Quantum Computing Consideration"
The BLS signature scheme is based on elliptic curve cryptography and will require updates when quantum computers reach sufficient capability. However, the core data storage mechanism using self-encryption chunks remains secure against quantum attacks.

## Implementation Guide

### Secure Data Storage
Expand Down Expand Up @@ -89,15 +94,14 @@ let combined = scheme.combine_signatures(&[signature1, signature2, signature3])?

### Current Threats

- Grover's algorithm impact on symmetric cryptography
- Shor's algorithm impact on asymmetric cryptography
- Store now, decrypt later attacks
- Shor's algorithm impact on BLS signatures (future consideration)
- Store now, decrypt later attacks (mitigated by information-theoretic security for data)
- Quantum side-channel attacks

### Mitigation Strategies

1. Use increased key sizes
2. Implement quantum-resistant algorithms
1. Core data storage is already quantum-secure through information-theoretic security
2. Future upgrade path planned for signature scheme
3. Regular security audits
4. Continuous monitoring

Expand Down
75 changes: 0 additions & 75 deletions docs/pointer_design_doc.md

This file was deleted.

19 changes: 16 additions & 3 deletions mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,9 @@ site_author: Autonomi Team
theme:
name: material
palette:
scheme: slate
primary: deep purple
accent: purple
scheme: default
primary: green
accent: green
font:
text: Roboto
code: Roboto Mono
Expand Down Expand Up @@ -74,10 +74,23 @@ plugins:
nav:
- Home: index.md
- Getting Started:
- Installation: getting-started/installation.md
- Quick Start: getting-started/quickstart.md
- Local Network: guides/local_network.md
- Local Development: guides/local_development.md
- Core Concepts:
- Data Types: guides/data_types.md
- Data Storage: guides/data_storage.md
- Client Modes: guides/client_modes.md
- Payments: guides/payments.md
- Development Guides:
- Web Development: guides/web_development.md
- Quantum Security: guides/quantum_security.md
- Error Handling: guides/error_handling.md
- Data Science: guides/data_science.md
- Rust Performance: guides/rust_performance.md
- EVM Integration: guides/evm_integration.md
- Testing Guide: guides/testing_guide.md
- API Reference:
- Overview: api/README.md
- Rust: api/rust/README.md
Expand Down

0 comments on commit 1c95fef

Please sign in to comment.