[messaging] Test Data for the Usability Study

Tom Ritter tom at ritter.vg
Mon Jul 7 14:06:49 PDT 2014


On 7 July 2014 04:17, Joseph Bonneau <jbonneau at gmail.com> wrote:
> So am I correct in reading that your main concern is that an attacker able
> to do 2^80 work can't always find an 80-bit match (by which we mean any
> desirable type of match that has a probability of 2^-80 of occurring by
> chance)?

No, it's around what _type_ of match we generate for an attacker's
fingerprint.  Do we flip bits at random, or do we optimize for the
encoded fingerprint type.  The latter introduces a certain amount of
subjectiveness.  (It's quite objective if we do a fuzzy match based on
phonetic differences, it's much-less-subjective-but-still-a-little-bit
if we do a 'leading and trailing n bits' match).

I argued strongly for full subjectivity, then went to random bit
flips, and now I'm back to saying let's do something in-between.

-tom


More information about the Messaging mailing list