GSoC 2017 - Wave e2e encryption

[Pablo Ojanguren <pa...@gmail.com>]

Hi all,

SwellRT/JetPad is participating in the Google Summer of Code 2017 with a
project aiming to add end-to-end encryption to Wave OT. The work will be
based on the paper [1] and it has been awarded to David Llop. I would like
to invite the Wave community to support David during his duty.

Of course, this work is going to be to contributed directly to Wave
codebase.

Thanks,

Pablo

[1] http://www.tara.tcd.ie/bitstream/handle/2262/68179/paper.pdf;sequence=1

Re: GSoC 2017 - Wave e2e encryption

[David Llop <ll...@protonmail.com>]

Hello Upayavira,

An exciting project, congrats!

I know you aren't undertaking this under the guidance of an Apache GSoC
project, but given some of the code is destined for Wave, I would like,
as a project Mentor, to make some suggestions as to how you engage with
the tasks.

Thank you, you are very welcome!

So please keep reporting back here as to your progress. Make Git pull
requests against the Wave Git source, ask for feedback. Even if you are
met with silence, sometimes that means assent, so please keep doing what
you are doing in public.

Sure, I suggest Pablo and me discuss the design decisions using [github issues](https://github.com/llopv/gsoc-2017/labels/discussion) (under the tag discussion). Once we have a proposal that we can present to the community, we will send it to this list. Anybody can join the discussion at any time, while the proposal is forged in github, or later when it is proposed to the list. On the other hand, If somebody is interested in knowing how the work is going, can also read the [blog](https://llopv.github.io/gsoc-2017/), that I am going to update frequently.

We plan to provide symmetric encryption first, and public key management later. We will provide the code in small self-contained commits as soon as we have them.

If you have any other suggestion, let us know. Thanks again for your help.

Best,
David Llop.

Re: GSoC 2017 - Wave e2e encryption

[Upayavira <uv...@odoko.co.uk>]

David,

An exciting project, congrats!

I know you aren't undertaking this under the guidance of an Apache GSoC
project, but given some of the code is destined for Wave, I would like,
as a project Mentor, to make some suggestions as to how you engage with
the tasks.

For your contributions, however good, to make it into the Wave codebase,
you will need to enlist the help of a Wave committer. Pablo can probably
help you there.

It is far more valuable for the community if your work is presented in
small, bite-sized chunks over an extended period. The community will
gain from witnessing your design decisions, and gain the opportunity to
influence them too.

So please keep reporting back here as to your progress. Make Git pull
requests against the Wave Git source, ask for feedback. Even if you are
met with silence, sometimes that means assent, so please keep doing what
you are doing in public.

We often hear about "open source", which really discusses a snapshot of
code in time. Far less often do we discuss "open development" - that is,
how a codebase is developed in the open. This is, I would suggest, one
of the goals of GSoC - to help people develop an awareness of how open
source communities function.

I hope this is helpful.

Let me know if you have any questions.

Upayavira

On Thu, 18 May 2017, at 02:13 PM, David Llop wrote:
> Hello, my name is David Llop and as Pablo has said, I am going to work on
> Wave/SwellRT during this Summer!
> 
> I’m interested in free software, cryptography, world-wide knowledge
> access, and Internet decentralization. This particular project combines
> many of those interests, so I’m highly motivated, curious, and glad to
> accept the duty.
> 
> During these days I have been setting up the environment and
> understanding how Wave’s code is structured. I have had the help of Pablo
> during the process, and we also have been re-reading the paper together
> to understand how it is related with Wave's OT system.
> 
> The purpose of the project is to encrypt Wave deltas with AES-GCM
> authenticated encryption, using the strategy developed in [Clear et al.
> paper][1]. The clients are going to encrypt and decrypt the OT deltas
> using a shared symmetric key, meanwhile the deltas are going to the
> server is not going to be able to decipher the documents.
> 
> As a first exercise to start getting familiar with the code, I am trying
> to implement the [Caesar Cipher][2] on Wave. It might seem silly, but I
> believe it is going to be extremely helpful later on, when implementing
> the real AES cipher.
> 
> I will tell you how is it going in [the blog I set up specially for the
> project][3] as well as all the other advances I will do during the
> Summer.
> 
> If anyone wants to get involved or wants to contact me, they can reach me
> directly in the e-mail. Thank you for your support guys, let’s surf the
> waves together.
> 
> David Llop
> 
> [1]:
> http://www.tara.tcd.ie/bitstream/handle/2262/68179/paper.pdf;sequence=1
> [2]: https://en.wikipedia.org/wiki/Caesar_cipher
> [3]: https://llopv.github.io/gsoc-2017/
> 
> ________________________________________________
> Sent from [ProtonMail](https://protonmail.ch), encrypted email based in
> Switzerland.
> 
> -------- Original Message --------
> Subject: Re: GSoC 2017 - Wave e2e encryption
> Local Time: 8 maig 2017 3:14 PM
> UTC Time: 8 maig 2017 13:14
> From: antoniotenorio@ucm.es
> To: wave-dev@incubator.apache.org
> David Llop <ll...@protonmail.com>
> 
> awesome project!
> 
> David, Pablo, I am interested and happy to help.
> 
> Congrats David!
> 
> 2017-05-08 14:08 GMT+02:00 Pablo Ojanguren <pa...@gmail.com>:
> 
> > Hi all,
> >
> > SwellRT/JetPad is participating in the Google Summer of Code 2017 with a
> > project aiming to add end-to-end encryption to Wave OT. The work will be
> > based on the paper [1] and it has been awarded to David Llop. I would like
> > to invite the Wave community to support David during his duty.
> >
> > Of course, this work is going to be to contributed directly to Wave
> > codebase.
> >
> > Thanks,
> >
> > Pablo
> >
> > [1] http://www.tara.tcd.ie/bitstream/handle/2262/68179/
> > paper.pdf;sequence=1
> >

Re: GSoC 2017 - Wave e2e encryption

[David Llop <ll...@protonmail.com>]

Hello, my name is David Llop and as Pablo has said, I am going to work on Wave/SwellRT during this Summer!

I’m interested in free software, cryptography, world-wide knowledge access, and Internet decentralization. This particular project combines many of those interests, so I’m highly motivated, curious, and glad to accept the duty.

During these days I have been setting up the environment and understanding how Wave’s code is structured. I have had the help of Pablo during the process, and we also have been re-reading the paper together to understand how it is related with Wave's OT system.

The purpose of the project is to encrypt Wave deltas with AES-GCM authenticated encryption, using the strategy developed in [Clear et al. paper][1]. The clients are going to encrypt and decrypt the OT deltas using a shared symmetric key, meanwhile the deltas are going to the server is not going to be able to decipher the documents.

As a first exercise to start getting familiar with the code, I am trying to implement the [Caesar Cipher][2] on Wave. It might seem silly, but I believe it is going to be extremely helpful later on, when implementing the real AES cipher.

I will tell you how is it going in [the blog I set up specially for the project][3] as well as all the other advances I will do during the Summer.

If anyone wants to get involved or wants to contact me, they can reach me directly in the e-mail. Thank you for your support guys, let’s surf the waves together.

David Llop

[1]: http://www.tara.tcd.ie/bitstream/handle/2262/68179/paper.pdf;sequence=1
[2]: https://en.wikipedia.org/wiki/Caesar_cipher
[3]: https://llopv.github.io/gsoc-2017/

________________________________________________
Sent from [ProtonMail](https://protonmail.ch), encrypted email based in Switzerland.

-------- Original Message --------
Subject: Re: GSoC 2017 - Wave e2e encryption
Local Time: 8 maig 2017 3:14 PM
UTC Time: 8 maig 2017 13:14
From: antoniotenorio@ucm.es
To: wave-dev@incubator.apache.org
David Llop <ll...@protonmail.com>

awesome project!

David, Pablo, I am interested and happy to help.

Congrats David!

2017-05-08 14:08 GMT+02:00 Pablo Ojanguren <pa...@gmail.com>:

> Hi all,
>
> SwellRT/JetPad is participating in the Google Summer of Code 2017 with a
> project aiming to add end-to-end encryption to Wave OT. The work will be
> based on the paper [1] and it has been awarded to David Llop. I would like
> to invite the Wave community to support David during his duty.
>
> Of course, this work is going to be to contributed directly to Wave
> codebase.
>
> Thanks,
>
> Pablo
>
> [1] http://www.tara.tcd.ie/bitstream/handle/2262/68179/
> paper.pdf;sequence=1
>

Re: GSoC 2017 - Wave e2e encryption

[Antonio Tenorio Fornés <an...@ucm.es>]

awesome project!

David, Pablo, I am interested and happy to help.

Congrats David!



2017-05-08 14:08 GMT+02:00 Pablo Ojanguren <pa...@gmail.com>:

> Hi all,
>
> SwellRT/JetPad is participating in the Google Summer of Code 2017 with a
> project aiming to add end-to-end encryption to Wave OT. The work will be
> based on the paper [1] and it has been awarded to David Llop. I would like
> to invite the Wave community to support David during his duty.
>
> Of course, this work is going to be to contributed directly to Wave
> codebase.
>
> Thanks,
>
> Pablo
>
> [1] http://www.tara.tcd.ie/bitstream/handle/2262/68179/
> paper.pdf;sequence=1
>