Re: Students' Project seeks help

2011-08-01 Thread Tom Widmer
On 01/08/2011 11:09, Jan Peters wrote: Hi Everybody, thanks for all the quick repsonses. I myself wasn't able to answer until now since we wanted to discuss things in our group. We plan to integrate this so that a compromised server does not allow the attacker to read data, even if he has got ac

Re: Students' Project seeks help

2011-08-01 Thread Julian Foad
On Mon, 2011-07-25, Jan Peters wrote: > [...] Yet the code of the update functionality is by far harder to > comprehend. Hi Jan. I'll just reply to this part of your question about how the 'update' code works. > To me personally it looks like the svn_ra_do_update2 fetches the data > from the s

Re: Students' Project seeks help

2011-08-01 Thread Tom Widmer
On 01/08/2011 15:28, Bob Archer wrote: Hi Everybody, thanks for all the quick repsonses. I myself wasn't able to answer until now since we wanted to discuss things in our group. We plan to integrate this so that a compromised server does not allow the attacker to read data, even if he has got ac

RE: Students' Project seeks help

2011-08-01 Thread Bob Archer
> Hi Everybody, > thanks for all the quick repsonses. I myself wasn't able to answer > until > now since we wanted to discuss things in our group. > > We plan to integrate this so that a compromised server does not > allow > the attacker to read data, even if he has got access to the > repositorie

AW: Students' Project seeks help

2011-08-01 Thread Markus Schaber
Hi, Jan, Von: Jan Peters [mailto:peters.ja...@googlemail.com] > Markus Schaber > Concerning the RA solution: Our task is to integrate the client-side > encryption into Tortoise. But we figured that a general solution, which > worked on all clients would be the best way to handle this. Having an RA

Re: Students' Project seeks help

2011-08-01 Thread Jan Peters
Hi Everybody, thanks for all the quick repsonses. I myself wasn't able to answer until now since we wanted to discuss things in our group. We plan to integrate this so that a compromised server does not allow the attacker to read data, even if he has got access to the repositories, no matter

AW: Students' Project seeks help

2011-07-27 Thread Markus Schaber
Hi, Von: Peter Samuelson [mailto:pe...@p12n.org] > [Tom Widmer] > > Since encrypted data looks identical to random binary data, all diffs > > will necessarily be as large as the file being committed (or 2x the > > size possibly: 1x to remove the old file + 1x to add the new file). > > Not _quit

Re: Students' Project seeks help

2011-07-26 Thread Hyrum K Wright
On Tue, Jul 26, 2011 at 11:12 AM, Tom Widmer wrote: > On 25/07/2011 14:25, Jan Peters wrote: >> >> Hi there, >> we are a follow-up project to a student's group at Ruhr-University >> Bochum, Germany, which tried to integrate a functionality into >> Subversion to allow users to encrypt all their dat

Re: Students' Project seeks help

2011-07-26 Thread Peter Samuelson
[Tom Widmer] > If I understand you correctly, I have a feeling that this is > fundamentally a bad idea, since Subversion stores data using diffs. Actually binary deltas (and yes, it makes a difference in context). > Since encrypted data looks identical to random binary data, all diffs > will nec

Re: Students' Project seeks help

2011-07-26 Thread Tom Widmer
On 25/07/2011 14:25, Jan Peters wrote: Hi there, we are a follow-up project to a student's group at Ruhr-University Bochum, Germany, which tried to integrate a functionality into Subversion to allow users to encrypt all their data on the client-side, before committing and to decrpyt while updatin

Re: Students' Project seeks help

2011-07-25 Thread Daniel Shahaf
Jan Peters wrote on Mon, Jul 25, 2011 at 15:25:40 +0200: > Hi there, > we are a follow-up project to a student's group at Ruhr-University > Bochum, Germany, which tried to integrate a functionality into > Subversion to allow users to encrypt all their data on the > client-side, before committing an

AW: Students' Project seeks help

2011-07-25 Thread Markus Schaber
Hi, Jan, Von: Jan Peters [mailto:peters.ja...@googlemail.com] > we are a follow-up project to a student's group at Ruhr-University Bochum, Germany, which tried to integrate a functionality into Subversion to allow users to encrypt all their data on the client-side, before committing and to decrp

Re: Students' Project seeks help

2011-07-25 Thread Philip Martin
Jan Peters writes: > we are a follow-up project to a student's group at Ruhr-University > Bochum, Germany, which tried to integrate a functionality into > Subversion to allow users to encrypt all their data on the > client-side, before committing and to decrpyt while updating. > > To achieve this

Students' Project seeks help

2011-07-25 Thread Jan Peters
Hi there, we are a follow-up project to a student's group at Ruhr-University Bochum, Germany, which tried to integrate a functionality into Subversion to allow users to encrypt all their data on the client-side, before committing and to decrpyt while updating. To achieve this we have found a