WhatsApp Key Transparency with Jasleen Malvai and Kevin Lewi
Security Cryptography Whatever
00:00
How to Audit a WhatsApp Data Structure
The idea is if you have an append only data structure, who's checking that it's append only? Because the clients are only checking for their own key. How do you basically save them from having to do all this extra work of checking the data structure? So the only thing that you're checking is that the only changes in the tree are insertions. And so that's what the auditors are checking in this like plain model. We don't want them to get actual user information at all. But they're only checking that this tree is only growing through insertion and no other changes are being made in this basic version. Then when it comes to deletion, they basically check that only valid
Transcript
Play full episode
