[HN Gopher] One-Time Programs
       ___________________________________________________________________
        
       One-Time Programs
        
       Author : feross
       Score  : 28 points
       Date   : 2022-10-27 18:48 UTC (4 hours ago)
        
 (HTM) web link (blog.cryptographyengineering.com)
 (TXT) w3m dump (blog.cryptographyengineering.com)
        
       | nonrandomstring wrote:
       | A brilliant read from a computer science POV. An interesting
       | theoretical problem indeed. But ultimately it feels like a
       | rainbow solution looking for a real problem with attendant
       | potential evil side effects.
        
       | cowtools wrote:
       | The solution is to use a locked-down co-processor? Whoop-de-doo.
       | This is just a shameful re-marketing of "remote attestation"
        
       | mattdesl wrote:
       | I don't have much to add except to say this was enlightening and
       | great to read.
       | 
       | My first thought is whether this could be used with ZKP at some
       | point: one pitfall of ZKP is that you can copy a proof to other
       | people and they could potentially reuse it to pretend to have the
       | same knowledge/attestation. You can use a nonce/nullifier to
       | force each proof to be newly signed, but even then the prover
       | could just keep generating new proofs and send them out. Some
       | kind of one-time ZKP generating program would be pretty
       | interesting.
        
         | _0ffh wrote:
         | I thought that at least some ZKPs rely on responses to one or a
         | set of specific challenge(s) randomly chosen by the
         | interrogator. So, as long as the challenge space is big enough,
         | it seems unlikely that you can easily collect enough responses
         | to satisfy such a random (set of) challenge(s) with any
         | significant probability.
         | 
         | Please correct me, if I got that wrong.
        
           | mattdesl wrote:
           | I was imagining this for protocols like zkSNARK and similar,
           | which do not have interactive challenges.
        
       | alkonaut wrote:
       | > like one of those old copy-protection dongles from the 1990s
       | 
       | Ok now I feel like the software I'm making for a living isn't
       | very modern since it's using copy protection dongles...
        
       ___________________________________________________________________
       (page generated 2022-10-27 23:01 UTC)