Skip to content

AccessControlPolicy (ACP) specification  #3187

@cygnusv

Description

@cygnusv
{
    "version": "x.y.z",
    "publicKey": "VGhyZWUgc3F1YXJlcz8gWW91IGNhbuKAmXQgc3BhcmUgdGhyZWUgc3F1YXJlcz8=",  // base64 
    "accessCondition": {
        "version": "x.y.z",
        "condition": { ... }
    },
    "authorization": {
        "evidence": "WW91IGtub3csIEkgYWx3YXlzIHdhbnRlZCB0byBwcmV0ZW5kIEkgd2FzIGFuIGFyY2hpdGVjdC4=",  // base64 
    }   
}

(h/t to @KPrasch @derekpierre for bringing this ideas forward)

Related notes:

  • MessageKit = FerveoCiphertext + ACP
  • FerveoCiphertext's AAD should not include the whole ACP, but some components of it, specifically the publicKey and accessConditions
  • This is not a formal specification yet, just a discussion & implementation starter.

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions