publicly-verifiable macaroon implementations?

[Jason Axley]

Has anyone implemented the publicly-verifiable macaroon approach documented in the original paper?

Or something similar for macaroons?  Perhaps in a custom implementation or as part of the future tokens work?

-Jason

[Tony Arcieri]

If you're talking about the public key variants which are based on static Diffie-Hellman keys, I don't know of any public implementations of this offhand. This approach is nice in that it affords a public key extension of Macaroons with verification that is still fully symmetric.

On the other hand, if you're talking about Macaroon-like credentials based on digital signatures (ala Vanadium Authorization), Biscuit is probably the closest thing.

--
You received this message because you are subscribed to the Google Groups "Macaroons" group.
To unsubscribe from this group and stop receiving emails from it, send an email to macaroons+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/macaroons/a42efeca-b4eb-4120-b52f-389210dd0974%40googlegroups.com.

--

Tony Arcieri

[Cameron Sajedi]

Not to derail this thread, but after reading it I was intrigued by Biscuit. However due to the commonality of the word my Google-fu has failed me. @Tony can you share a link or provide me with a breadcrumb to find out more?

Much appreciated.

Cameron Sajedi

To view this discussion on the web visit https://groups.google.com/d/msgid/macaroons/CAHOTMVJO21Cro4JKQ4uJRhxQgX3y_ZJRn%2BACjsdZo471HY9AXw%40mail.gmail.com.

[Evan Cordell]

I implemented publicly-verifiable macaroons here: 

https://github.com/ecordell/watchstander

 

It’s probably not something you should use, but I tried to make it readable. 

And I think Tony was referring to: 

https://github.com/CleverCloud/biscuit/

To view this discussion on the web visit https://groups.google.com/d/msgid/macaroons/CAAFYv0g2p7DDcnc9KNgYaYORqJVrVkzUyc%3D2Y3UM-4oPDpPUTw%40mail.gmail.com.

--

Evan Cordell

318.471.6759

[Cameron Sajedi]

Evan, 

I've been exploring how to use Macaroons in a decentralized p2p system outside the cloud (ex Bitcoin, Bittorent) and I realize that there are some limitations stemming from the trust model that designed macaroons. Biscuit is a cool addition, so is watchstander. I don't think either will achieve what I want on their own, but studying them has already led to a better understanding of my problem space. 

Thanks for the clarifications.

Cameron

To view this discussion on the web visit https://groups.google.com/d/msgid/macaroons/CAEfywoE-J9V7B1CJDqDqgpu1xmsV7WSsy7ewe1jiPNVfEuXZRA%40mail.gmail.com.

[Tony Arcieri]

Definitely look into Vanadium: it's something a bit closer to SPKI/SDSI, based on public-key cryptography, and created by some of the same people as Macaroons (e.g. Ankur Taly)

http://theory.stanford.edu/~ataly/Papers/fosad16.pdf

To view this discussion on the web visit https://groups.google.com/d/msgid/macaroons/CAAFYv0gxuhJOag%2BKmkVUrYoPfmQVrO0DM0D-kB1czcSdh8e%2BBQ%40mail.gmail.com.

--

Tony Arcieri