[WIP] Biscuit 2.0 specification and samples #77
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
- remove v0 compatibility - convert v1 to v2 - remove the index from blocks (now the cryptographisc design guarantees the order
Geal
force-pushed
the
2.0
branch
3 times, most recently
from
035941d
to
f19bce4
Compare
the scoped execution model ensures that checks and rules only have access to facts added or generated in the current or previous blocks. They cannot be affected by facts from later blocks. Verifier rules, checks and policies are executed in the context of the authority block Since this change can prevent check from the authority block and the verifier from being affected by facts from later block, we can remove the #authority and #ambient symbols
symbols were a kind of strings with less available operations and some specific optimizations: they store in index into a symbol table carried by the token, to reduce size by avoiding repetitions. They were too confusing for users, and now that #authority and #ambient are gone, we can remove them completely. The symbol table was useful though, so now the symbol table is used for all predicate names and strings
it is enough to uniquely identify each block
They complicated the Datalog, and the #authority and #ambient symbols are not needed anymore with the scoped execution
Add sealed spec
this will open the way t other urves or algorithms, like P256
it does not change anything security wise, but it makes it more consistent with the rest
Clarify vocabulary
|
What about this V2 ? is it still "in progress" ? |
|
@fbredy it is mostly done. Currently we're working on the web components and the new website, and will publish that along with the 2.0. I'd like to see the java version done as well. Do you have plans to update the C# version to 2.0? |
implementations will be able to compare the returned errors
@Geal, i'll update the C# biscuit package, just after the merge of the java version. i've already started. |
|
ok, I'm merging this now, there's been enough time to explore it :) |
Open
# for free
to join this conversation on GitHub.
Already have an account?
# to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
See #72