Distributed key secret for rewritable blockchain
A system includes circuitry for rewriting blockchains in a non-tamper-evident or tamper-evident operation using a key secret held in portions by multiple individually untrusted parties. The blockchains may include a series of blocks secured by integrity codes that may prevent non-tamper-evident rewrites by non-trusted parties that are not in possession of the key secret or individually-untrusted parties in possession of only a portion of the key secret. In some cases, multiple individually-untrusted parties may combine their portions into the key secret. As a group, the multiple individually-untrusted parties may perform non-tamper-evident operation with respect to at least one integrity code within the blockchain.
1. A method including:
at rewrite circuitry:
collecting a number of key secret portions;
combining the number of key secret portions,
the combining responsive to an event,
the event including the number of key secret portions exceeding a pre-determined threshold,
the predetermined threshold including a threshold for validity-preserving rewrites; and
the combining executed to obtain a rewrite key secret;
performing a validity-preserving rewrite to a selected block of a data-tamper-protected blockchain,
the performing responsive to obtaining the rewrite key secret, and
the performing including determining new content for the selected block using the rewrite key secret.
2. The method of claim 1 , further including:
responsive to the number of key secret portions exceeding a granting threshold, combining the number of key secret portions to obtain a granting key secret; and
responsive to obtaining the granting key secret, assigning at least a key secret portion to an untrusted party.
3. The method of claim 1 , where collecting the number of key secret portions includes collecting the number of key secret portions using a key secret exchange operation.
4. The method of claim 3 , where the key secret exchange operation prevents disclosure of content of individual ones of the number of key secret portions.
5. The method of claim 3 , where the key secret exchange operation uses a public key exchange protocol.
6. The method of claim 1 , where individual ones of the number of key secret portions contribute unequally to exceeding the threshold for validity-preserving rewrites.
7. The method of claim 1 , where the data-tamper-protected blockchain includes multiple blocks, each of the multiple blocks:
secured via an integrity code stored within the data-tamper-protected blockchain; and
storing an integrity code that secures another block in the data-tamper-protected blockchain.
8. The method of claim 1 , where individual ones of the number of key secret portions are each controlled by different individually-untrusted parties.
9. The method of claim 1 , where the selected block is coding-consistent with an integrity output stored within a specific block of the data-tam per-protected blockchain,
the specific block different than the selected block.
10. The method of claim 1 , where:
determining new content for the selected block using the rewrite key secret includes using the rewrite key secret to determine collision data based on altered payload data for the selected block; and
performing the validity-preserving rewrite to a selected block of the data-tamper-protected blockchain includes overwriting the selected block with the collision data and the altered payload data.
11. A system including:
rewrite circuitry configured to:
collect a number of key secret portions;
combine the number of key secret portions,
the rewrite circuitry configured to combine the number of key secret portions responsive to an event,
the event including the number of key secret portions exceeding a predetermined threshold,
the predetermined threshold including a threshold for validity-preserving rewrites; and
the rewrite circuitry configured to combine the number of key secret portions to obtain a rewrite key secret; and
perform a validity-preserving rewrite to a selected block of a data-tamper-protected blockchain,
the rewrite circuitry configured to perform a validity-preserving rewrite responsive to obtaining the rewrite key secret, and
the rewrite circuitry configured to perform a validity-preserving rewrite by determining new content for the selected block using the rewrite key secret.
12. The system of claim 11 , where the rewrite circuitry is further configured to:
responsive to the number of key secret portions exceeding a granting threshold, combine the number of key secret portions to obtain a granting key secret; and
responsive to obtaining the granting key secret, assign at least a key secret portion to an untrusted party.
13. The system of claim 11 , where the rewrite circuitry is configured to collect the number of key secret portions by collecting the number of key secret portions using a key secret exchange operation.
14. The system of claim 13 , where the key secret exchange operation is configured to prevent disclosure of content of individual ones of the number of key secret portions.
15. The system of claim 13 , where the key secret exchange operation is configured to use a public key exchange protocol.
16. The system of claim 11 , where individual ones of the number of key secret portions contribute unequally to exceeding threshold for validity-preserving rewrites.
17. The system of claim 11 where the data-tamper-protected blockchain includes multiple blocks, each of the multiple blocks:
secured via an integrity code stored within the data-tamper-protected blockchain; and
storing an integrity code that secures another block in the data-tamper-protected blockchain.
18. A product including:
machine-readable media other than a transitory signal;
instructions stored on the machine-readable media, the instructions configured to, when executed, cause a machine to:
at rewrite circuitry:
collect a number of key secret portions;
combine the number of key secret portions,
the instructions configured to cause the machine to combine the number of key secret portions responsive to an event,
the event including the number of key secret portions exceeding a predetermined threshold,
the predetermined threshold including a threshold for validity-preserving rewrites; and
the instructions configured to cause the machine to combine the number of key secret portions to obtain a rewrite key secret; and
perform a validity-preserving rewrite to a selected block of a data-tamper-protected blockchain,
the instructions configured to cause the machine to perform a validity-preserving rewrite responsive to obtaining the rewrite key secret, and
the instructions configured to cause the machine to perform a validity-preserving rewrite by determining new content for the selected block using the rewrite key secret.
19. The product of claim 18 , where individual ones of the number of key secret portions are each controlled by different individually-untrusted parties.
20. The product of claim 18 , where the selected block is coding-consistent with an integrity output stored within a specific block of the data-tamper-protected blockchain, the specific block different than the selected block.