Midsummer check-in: the Saturday sizzle Rasmus Dahlberg, 2024-06-22. It’s currently holiday time in Sweden. Yesterday was Midsummer Eve. Today it’s Midsummer Day. Midsummer is the brightest time of the year and widely celebrated by people living here. Activities include making flower crowns, dancing like frogs around a maypole, and drinking schnapps and similar spirits. Ironically I…
We released a thing: st-1.0.0 Rasmus Dahlberg, 2024-05-12. On Thursday this week, the System Transparency project announced st-1.0.0. It is a collection of stable, tested, and documented components the project supports: stboot: a bootloader that boots an operating system such as Debian 12. One of the main features is network booting while enforcing m-of-n valid signatures. stprov: a provisioning…
Dusting off the blog Rasmus Dahlberg, 2024-05-04. The other week I talked to my friend MC about maybe starting to blog again. I know, “starting to blog again” is a bit of a stretch for someone that didn’t post a lot to begin with. Nevertheless, today I woke up and wanted to see if I can get this thing going again. I think it requires lowering the bar for what needs to go into a…
Guest blog post over at the Tor Project Rasmus Dahlberg, 2021-11-30. My coauthors and I published a paper that brings Certificate Transparency to Tor last summer. The Tor Project offered us to write a guest blog post about it. We of course said yes, and I encourage you to go and check it out.
Sigsum project launch Rasmus Dahlberg, 2021-10-13. A transparency log project named Sigsum just launched! It is sort of like pre-hashed digital signing with transparency. The overall goal is to make a signer’s key-usage transparent. Design principles include minimalism and distributed trust. Please refer to the original announcement for more information.
Trillian log sequencing: demystified? Rasmus Dahlberg, 2021-02-09. One way to view Trillian is as a database with an append-only Merkle tree. That Merkle tree is managed by a separate component called a log signer. It runs in a dedicated process that basically merges pending leaves that have yet to be incorporated into the Merkle tree. This part of the log signer is structured as a sequencing job…
Observations from a Trillian play-date Rasmus Dahlberg, 2020-11-23. Have you ever heard about Trillian in the context of transparency logging? Perhaps you view it as an integral part of Certificate Transparency, a solution for arbitrary transparency applications, or both. Even if you know Certificate Transparency quite well the Trillian details might be a bit blurry until you sit down and get some…
Hold on to your hat and learn System Transparency in five minutes! Rasmus Dahlberg, 2020-10-12. What do we really know about the systems that run our critical applications? Not enough is probably a fair summary: much can go wrong between device reset and execution of a user-land application. System Transparency helps you verify that what you think is running remotely actually runs, and not, say, a…
What happened at CT days 2020? Rasmus Dahlberg, 2020-09-14. This year’s CT days were hosted remotely on September 8–9. The agenda covered a wide range of topics, such as making CT more newcomer friendly, updating user-agent policies, and what it takes to operate a log at scale. I do not intend to write about all of it, and especially not every little detail. You will be brought up to speed on some…