PrivateData is marketed as a data privacy solution in Hyperledger Fabric. Unfortunately, this is just another serious security hole somehow went under the radar, and all projects using this function a

#fabric-chaincode #ssl #fabric #fabric-questions #fabric-dstorage

thanks for reply but I think you guys are down playing the seriousness of this issue. if u add salt then the salt must be passed to others so others can validate. to avoid others to launch dictionary

#fabric-chaincode #ssl #fabric #fabric-questions #fabric-dstorage

Hi Yacov, thanks for your reply, let me clarify the jargon here so more people can understand pre-image: data itself and its salt first of all, I appreciate you agree that another point 2 point connec

#fabric-chaincode #ssl #fabric #fabric-questions #fabric-dstorage

Hi Alexandre, Yacov Thanks for your reply and I appreciate the discussion. my hands are tight now so I will give my full response later today: Yes, my point is private data design maybe flawed in two

#fabric-chaincode #ssl #fabric #fabric-questions #fabric-dstorage

Dave, Yacov, and Alex Seems that the general response to this scenario is “this is an application design problem and should be solved by chaincode” But my argument here is that chaincode design can’t

#fabric-chaincode #ssl #fabric #fabric-questions #fabric-dstorage

Ivan Ch Oct 21 #6979 PrivateData is marketed as a data privacy solution in Hyperledger Fabric. Unfortunately, this is just another serious security hole somehow went under the radar, and all projects

#fabric-chaincode #ssl #fabric #fabric-questions #fabric-dstorage

Hi jeroiraz Oct: : there are actually quite a few ways to validate anything including national ID using ZKP or ZKP like technique (e.g. I can design my crypto to validate if the two text data encrypte

#fabric-chaincode #ssl #fabric #fabric-questions #fabric-dstorage

this statement is so flawed, there is no such requirement in ALL public blockchains. at most you can say is this is true for private/consortium blockchains, even that is terribly flawed since even PBF

#fabric-chaincode #ssl #fabric #fabric-questions #fabric-dstorage

Hi Yacov again you are bypassing the question, to be honest I am quiet frustrated now. the community is not about defending a stance but to find a solution to on going problems, and if something is wr

#fabric-chaincode #ssl #fabric #fabric-questions #fabric-dstorage

Hi Vipin, I was on vacation for a few weeks and I am now starting a new topic regarding the private data design since we are no longer talking about the original security issue (unsalted hash). Chain

#fabric #fabric-questions #fabric-dstorage

apparently the fabric maintainers has decided to falling deaf on this question. however the truth is I've been contacted privately by some current fabric maintainers who agree with me, and due to what

#fabric #fabric-questions #fabric-dstorage

I apologize for restarting this old topic, someone sent me a private message so I think the least I can do is to make the problem clear The problem is that all the checks you mentioned above are check

#fabric #fabric-questions #fabric-dstorage