Developing zero-knowledge solutions with JavaScript

Who am I

 

Jose Aguinaga / @ jjperezaguinaga

 

Web Engineer

Startups / Fintech / Privacy

 

Disclaimer

Crypto stuff ahead, handle with caution, errata might occur

What are zero-knowledge solutions?

Trust based solutions

I have nothing on ya, trust me.

Zero-knowledge solutions

I have nothing on ya, you know.

?

?

😅

Zero-knowledge (proved) solutions

I have nothing on ya, you know, but you know I know.

SHA256(      )

SHA256(      )

Where does the Web fit in all this?

Server-side cryptography

SSL, bcrypt, HMACs

//NOTE: This prompts the user to enter a password.
window.crypto.subtle.generateKey(
    {
        name: "PBKDF2",
    },
    false, //whether the key is extractable
    ["deriveKey", "deriveBits"] //can be any combination
)
.then(function(key){
    //returns a key object
    console.log(key);
})
.catch(function(err){
    console.error(err);
});

https://deniable.website

Deniable encryption

Ya ain't know what I got, or if I got something.

E(A | E(B | ... E(N, pk.n), pk.b) pk.a)

What are some use cases for zero-knowledge solutions?

boxcryptor

Further reading, libraries and links

https://www.coursera.org/learn/crypto

Solid introduction to cryptography from a computer science perspective by Stanford University teacher Dan Boneh

https://github.com/diafygi/webcrypto-examples

Moar examples on Web crypto

keybase.io

Thank you

https://joind.in/talk/81548

QA

Developing zero-knowledge solutions with JavaScript

By Jose Aguinaga

Developing zero-knowledge solutions with JavaScript

  • 1,007
Loading comments...

More from Jose Aguinaga