[E-Lang] latency compensation

Norman Hardy norm@agorics.com
Wed, 18 Oct 2000 10:47:45 -0700


[This is Norm's summary of the proposed use of hash chaining to simplify 
Pluribus.  This summary is based on a phone conversation, and I believe was 
written without reading the notes I recently sent to e-lang.  I am posting 
this (with permission) as it says many things more clearly than I did.  
--MarkM]


Let me replay the ideas that you mentioned a couple of days ago.

I think that authority to an object within a vat, from outside the vat, 
consists of knowledge of the public key of the vat and the swiss number that 
goes with the object.

The question that you raised is whether an outsider can be trusted to choose 
the swiss number in order know it while the message to create that object 
travels to the vat.

One obstacle to this is that the outsider may choose a number of an extant 
object, or a deceased object. The vat can guard against the first but it is 
a bit of extra work. It is more expensive to guard against the second for it 
requires the vat to remember all past numbers. It must be guarded against 
lest the new object be mistaken for an old object. The outsider may 
legitimately know the deceased object's number but should not thereby be able 
to steal the identity of the deceased object and there by learn secrets 
directed to it from outside the vat.

I suspect that I didn't say anything new to you above.

You went on the mention the arcHash idea. I suppose it goes as follows. The 
outsider chooses a random number N and sends it along with the creation 
request. The hash of N becomes the swiss number and this seems to prevent 
the outsider from colliding with past objects not of his creation. The 
outsider knows the new swiss number early and the vat knows it soon enough.

I don't recall further extensions of the idea.