aboutsummaryrefslogtreecommitdiff
path: root/doc/.design.md.swp
blob: ff611e32b0e615d26ef5c529525eebb7d7e55bb8 (plain)
ofshex dumpascii
0000 62 30 56 49 4d 20 38 2e 31 00 00 00 00 10 00 00 16 f6 62 61 7e 39 02 01 04 4b 00 00 72 67 64 64 b0VIM.8.1.........ba~9...K..rgdd
0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0040 00 00 00 00 69 7a 7a 79 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ....izzy........................
0060 00 00 00 00 00 00 00 00 00 00 00 00 7e 72 67 64 64 2f 67 69 74 2f 73 69 67 73 75 6d 2f 73 69 67 ............~rgdd/git/sigsum/sig
0080 73 75 6d 2f 64 6f 63 2f 64 65 73 69 67 6e 2e 6d 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sum/doc/design.md...............
00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
02a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
02c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
02e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
03a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
03c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
03e0 00 00 00 00 00 00 00 00 00 75 74 66 2d 38 0d 00 33 32 31 30 00 00 00 00 23 22 21 20 13 12 55 00 .........utf-8..3210....#"!...U.
0400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0420 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0440 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0460 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
04a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
04c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
04e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
05a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
05c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
05e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0620 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0640 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0660 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
06a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
06c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
06e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
07a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
07c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
07e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0820 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0840 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0860 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0880 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
08a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
08c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
08e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0920 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0940 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0960 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0980 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
09a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
09c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
09e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0a00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0a20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0a40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0a60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0a80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0aa0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0ac0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0ae0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0b00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0b20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0b40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0b60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0b80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0ba0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0bc0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0be0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0c00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0c20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0c40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0c60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0c80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0ca0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0cc0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0ce0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0d00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0d20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0d40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0d60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0d80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0da0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0dc0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0de0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0e00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0e20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0e40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0e60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0e80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0ea0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0ec0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0ee0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0f00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0f20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0f40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0f60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0f80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0fa0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0fc0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0fe0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1000 74 70 07 00 7f 00 00 00 02 00 00 00 00 00 00 00 47 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 tp..............G...............
1020 01 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 37 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 ................7.......H.......
1040 01 00 00 00 00 00 00 00 07 00 00 00 00 00 00 00 43 00 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 ................C...............
1060 01 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 c2 00 00 00 00 00 00 00 ................................
1080 01 00 00 00 00 00 00 00 08 00 00 00 00 00 00 00 3e 00 00 00 00 00 00 00 c7 00 00 00 00 00 00 00 ................>...............
10a0 01 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 43 00 00 00 00 00 00 00 06 01 00 00 00 00 00 00 ................C...............
10c0 01 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 31 00 00 00 00 00 00 00 49 01 00 00 00 00 00 00 ................1.......I.......
10e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
11a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
11c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
11e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
12a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
12c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
12e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
13a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
13c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
13e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1420 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1440 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1460 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
14a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
14c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
14e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
15a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
15c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
15e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1620 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1640 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1660 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
16a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
16c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
16e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
17a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
17c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
17e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1820 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1840 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1860 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1880 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
18a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
18c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
18e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1920 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1940 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1960 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1980 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
19a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
19c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
19e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1a00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1a20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1a40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1a60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1a80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1aa0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1ac0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1ae0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1b00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1b20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1b40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1b60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1b80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1ba0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1bc0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1be0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1c00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1c20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1c40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1c60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1c80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1ca0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1cc0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1ce0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1d00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1d20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1d40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1d60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1d80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1da0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1dc0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1de0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1e00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1e20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1e40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1e60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1e80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1ea0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1ec0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1ee0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1f00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1f20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1f40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1f60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1f80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1fa0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1fc0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1fe0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
2000 61 64 00 00 12 00 00 00 4a 01 00 00 00 10 00 00 47 00 00 00 00 00 00 00 e5 0f 00 00 96 0f 00 00 ad......J.......G...............
2020 48 0f 00 00 00 0f 00 00 b0 0e 00 00 65 0e 00 00 1d 0e 00 00 ce 0d 00 00 ac 0d 00 00 ab 0d 00 00 H...........e...................
2040 98 0d 00 00 50 0d 00 00 03 0d 00 00 da 0c 00 00 d9 0c 00 00 cc 0c 00 00 7f 0c 00 00 41 0c 00 00 ....P.......................A...
2060 40 0c 00 00 13 0c 00 00 12 0c 00 00 fe 0b 00 00 b2 0b 00 00 86 0b 00 00 56 0b 00 00 21 0b 00 00 @.......................V...!...
2080 c9 0a 00 00 90 0a 00 00 25 0a 00 00 24 0a 00 00 d4 09 00 00 94 09 00 00 6c 09 00 00 38 09 00 00 ........%...$...........l...8...
20a0 37 09 00 00 e4 08 00 00 97 08 00 00 5a 08 00 00 13 08 00 00 c8 07 00 00 c7 07 00 00 7a 07 00 00 7...........Z...............z...
20c0 29 07 00 00 e0 06 00 00 df 06 00 00 cd 06 00 00 a0 06 00 00 5f 06 00 00 2c 06 00 00 d4 05 00 00 )..................._...,.......
20e0 93 05 00 00 92 05 00 00 42 05 00 00 0b 05 00 00 bb 04 00 00 b1 04 00 00 47 04 00 00 20 04 00 00 ........B...............G.......
2100 1f 04 00 00 01 04 00 00 b7 03 00 00 6c 03 00 00 20 03 00 00 1f 03 00 00 d1 02 00 00 86 02 00 00 ............l...................
2120 36 02 00 00 e8 01 00 00 e7 01 00 00 98 01 00 00 4a 01 00 00 49 01 00 00 00 00 00 00 00 00 00 00 6...............J...I...........
2140 00 00 00 00 00 00 00 00 00 00 73 74 6f 72 61 67 65 20 6f 66 20 61 72 62 69 74 72 61 72 79 20 63 ..........storage.of.arbitrary.c
2160 65 72 74 69 66 69 63 61 74 65 20 66 69 65 6c 64 73 2c 20 72 65 61 63 74 69 76 65 20 61 75 64 69 ertificate.fields,.reactive.audi
2180 74 69 6e 67 20 6f 66 20 63 6f 6d 70 6c 69 63 61 74 65 64 20 6c 6f 67 00 54 68 69 73 20 69 73 20 ting.of.complicated.log.This.is.
21a0 69 6e 20 63 6f 6e 74 72 61 73 74 20 74 6f 20 43 65 72 74 69 66 69 63 61 74 65 20 54 72 61 6e 73 in.contrast.to.Certificate.Trans
21c0 70 61 72 65 6e 63 79 2c 20 77 68 69 63 68 20 72 65 71 75 69 72 65 73 20 41 53 4e 2e 31 20 70 61 parency,.which.requires.ASN.1.pa
21e0 72 73 69 6e 67 2c 00 00 70 6f 69 73 6f 6e 69 6e 67 2c 20 61 6e 64 20 61 20 77 65 6c 6c 2d 64 65 rsing,..poisoning,.and.a.well-de
2200 66 69 6e 65 64 20 67 6f 73 73 69 70 20 70 72 6f 74 6f 63 6f 6c 20 77 69 74 68 6f 75 74 20 63 6f fined.gossip.protocol.without.co
2220 6d 70 6c 65 78 20 61 75 64 69 74 69 6e 67 20 6c 6f 67 69 63 2e 00 69 6e 63 6c 75 64 65 73 20 63 mplex.auditing.logic..includes.c
2240 6f 6e 73 69 64 65 72 61 74 69 6f 6e 73 20 73 75 63 68 20 61 73 20 73 69 6d 70 6c 65 20 70 61 72 onsiderations.such.as.simple.par
2260 73 69 6e 67 2c 20 70 72 6f 74 65 63 74 69 6f 6e 20 61 67 61 69 6e 73 74 20 6c 6f 67 20 73 70 61 sing,.protection.against.log.spa
2280 6d 20 61 6e 64 00 65 78 61 6d 70 6c 65 20 6c 6f 67 20 6f 70 65 72 61 74 69 6f 6e 73 20 61 6e 64 m.and.example.log.operations.and
22a0 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 69 6e 20 63 6f 6e 73 74 72 61 69 6e 65 64 20 65 6e 76 .verification.in.constrained.env
22c0 69 72 6f 6e 6d 65 6e 74 73 2e 20 20 54 68 69 73 00 57 65 20 77 61 6e 74 20 74 68 65 20 72 65 73 ironments...This.We.want.the.res
22e0 75 6c 74 69 6e 67 20 64 65 73 69 67 6e 20 74 6f 20 62 65 20 65 61 73 79 20 66 72 6f 6d 20 6d 61 ulting.design.to.be.easy.from.ma
2300 6e 79 20 64 69 66 66 65 72 65 6e 74 20 70 65 72 73 70 65 63 74 69 76 65 73 2c 20 66 6f 72 00 00 ny.different.perspectives,.for..
2320 6d 69 6e 69 6d 61 6c 6c 79 20 72 65 71 75 69 72 65 64 20 6d 65 74 61 64 61 74 61 2e 20 20 53 74 minimally.required.metadata...St
2340 6f 72 69 6e 67 20 64 61 74 61 20 61 6e 64 20 72 69 63 68 20 6d 65 74 61 64 61 74 61 20 69 73 20 oring.data.and.rich.metadata.is.
2360 61 20 6e 6f 6e 2d 67 6f 61 6c 2e 00 67 65 6e 65 72 61 6c 2e 20 20 54 68 65 72 65 66 6f 72 65 2c a.non-goal..general...Therefore,
2380 20 73 69 67 73 75 6d 20 6c 6f 67 73 20 61 6c 6c 6f 77 20 6c 6f 67 67 69 6e 67 20 6f 66 20 73 69 .sigsum.logs.allow.logging.of.si
23a0 67 6e 65 64 20 63 68 65 63 6b 73 75 6d 20 61 6e 64 20 73 6f 6d 65 00 54 68 65 20 67 6f 61 6c 20 gned.checksum.and.some.The.goal.
23c0 6f 66 20 73 69 67 73 75 6d 20 6c 6f 67 67 69 6e 67 20 69 73 20 74 6f 20 6d 61 6b 65 20 61 20 73 of.sigsum.logging.is.to.make.a.s
23e0 69 67 6e 65 72 27 73 20 6b 65 79 2d 75 73 61 67 65 20 74 72 61 6e 73 70 61 72 65 6e 74 20 69 6e igner's.key-usage.transparent.in
2400 00 23 23 23 20 31 2e 31 20 2d 20 47 6f 61 6c 73 20 61 6e 64 20 6e 6f 6e 2d 73 63 6f 70 65 00 00 .###.1.1.-.Goals.and.non-scope..
2420 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 69 73 20 61 62 6f 75 74 20 6f 75 72 20 6c 6f 67 20 64 This.document.is.about.our.log.d
2440 65 73 69 67 6e 2e 00 20 20 20 20 20 20 20 20 5b 63 6c 61 69 6d 61 6e 74 20 6d 6f 64 65 6c 5d 28 esign..........[claimant.model](
2460 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 6f 6f 67 6c 65 2f 74 72 69 6c 6c 69 https://github.com/google/trilli
2480 61 6e 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 64 6f 63 73 2f 63 6c 61 69 6d 61 6e 74 6d 6f 64 65 an/blob/master/docs/claimantmode
24a0 6c 2f 43 6f 72 65 4d 6f 64 65 6c 2e 6d 64 29 2e 00 75 73 69 6e 67 20 74 68 65 00 20 20 20 20 20 l/CoreModel.md)..using.the......
24c0 20 20 20 5b 73 65 70 61 72 61 74 65 20 64 6f 63 75 6d 65 6e 74 5d 28 68 74 74 70 73 3a 2f 2f 67 ...[separate.document](https://g
24e0 69 74 2e 73 69 67 73 75 6d 2e 6f 72 67 2f 73 69 67 73 75 6d 2f 74 72 65 65 2f 64 6f 63 2f 63 6c it.sigsum.org/sigsum/tree/doc/cl
2500 61 69 6d 61 6e 74 2e 6d 64 29 00 64 6f 63 75 6d 65 6e 74 20 74 68 65 6d 20 62 61 73 65 64 20 6f aimant.md).document.them.based.o
2520 6e 20 77 68 61 74 20 70 65 6f 70 6c 65 20 61 72 65 20 77 6f 72 6b 69 6e 67 20 6f 6e 20 69 6e 20 n.what.people.are.working.on.in.
2540 61 00 54 68 65 72 65 20 61 72 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 75 73 65 2d 63 61 73 65 73 a.There.are.many.other.use-cases
2560 20 74 68 61 74 20 73 69 67 73 75 6d 20 6c 6f 67 67 69 6e 67 20 63 61 6e 20 68 65 6c 70 20 77 69 .that.sigsum.logging.can.help.wi
2580 74 68 2e 20 20 57 65 20 69 6e 74 65 6e 64 20 74 6f 00 00 2d 20 41 20 6c 69 73 74 20 6f 66 20 6b th...We.intend.to..-.A.list.of.k
25a0 65 79 2d 76 61 6c 75 65 20 70 61 69 72 73 20 69 73 20 6d 61 69 6e 74 61 69 6e 65 64 20 77 69 74 ey-value.pairs.is.maintained.wit
25c0 68 20 61 20 63 65 72 74 61 69 6e 20 70 6f 6c 69 63 79 2e 00 09 5b 5c 5b 53 52 49 5c 5d 5d 28 68 h.a.certain.policy...[\[SRI\]](h
25e0 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 65 6e 2d ttps://developer.mozilla.org/en-
2600 55 53 2f 64 6f 63 73 2f 57 65 62 2f 53 65 63 75 72 69 74 79 2f 53 75 62 72 65 73 6f 75 72 63 65 US/docs/Web/Security/Subresource
2620 5f 49 6e 74 65 67 72 69 74 79 29 00 2d 20 41 20 77 65 62 20 73 65 72 76 65 72 20 64 6f 65 73 20 _Integrity).-.A.web.server.does.
2640 6e 6f 74 20 73 65 72 76 65 20 6d 61 6c 69 63 69 6f 75 73 20 6a 61 76 61 73 63 72 69 70 74 00 09 not.serve.malicious.javascript..
2660 5b 5c 5b 42 54 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 [\[BT\]](https://wiki.mozilla.or
2680 67 2f 53 65 63 75 72 69 74 79 2f 42 69 6e 61 72 79 5f 54 72 61 6e 73 70 61 72 65 6e 63 79 29 00 g/Security/Binary_Transparency).
26a0 2d 20 45 76 65 72 79 6f 6e 65 20 67 65 74 73 20 74 68 65 20 73 61 6d 65 20 65 78 65 63 75 74 61 -.Everyone.gets.the.same.executa
26c0 62 6c 65 20 62 69 6e 61 72 69 65 73 00 45 78 61 6d 70 6c 65 73 20 69 6e 63 6c 75 64 65 3a 00 00 ble.binaries.Examples.include:..
26e0 62 6c 6f 63 6b 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 61 63 69 6c 69 block.that.can.be.used.to.facili
2700 74 61 74 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6f 66 20 66 61 6c 73 69 66 69 61 62 6c 65 tate.verification.of.falsifiable
2720 20 63 6c 61 69 6d 73 2e 00 69 64 65 61 20 69 73 20 74 6f 20 6d 61 6b 65 20 61 20 73 69 67 6e 65 .claims..idea.is.to.make.a.signe
2740 72 27 73 20 5f 6b 65 79 2d 75 73 61 67 65 5f 20 74 72 61 6e 73 70 61 72 65 6e 74 2e 20 20 54 68 r's._key-usage_.transparent...Th
2760 69 73 20 69 73 20 61 20 70 6f 77 65 72 66 75 6c 20 62 75 69 6c 64 69 6e 67 00 53 69 67 73 75 6d is.is.a.powerful.building.Sigsum
2780 20 6c 6f 67 73 20 6d 61 6b 65 20 69 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 61 6e 73 77 65 72 .logs.make.it.possible.to.answer
27a0 73 20 74 68 65 73 65 20 74 79 70 65 73 20 6f 66 20 71 75 65 73 74 69 6f 6e 73 2e 20 20 54 68 65 s.these.types.of.questions...The
27c0 20 62 61 73 69 63 00 00 69 66 20 74 68 65 20 73 69 67 6e 69 6e 67 20 70 61 72 74 79 20 77 61 73 .basic..if.the.signing.party.was
27e0 20 66 6f 72 63 65 64 20 74 6f 20 73 69 67 6e 20 6d 61 6c 69 63 69 6f 75 73 20 64 61 74 61 20 61 .forced.to.sign.malicious.data.a
2800 67 61 69 6e 73 74 20 74 68 65 69 72 20 77 69 6c 6c 3f 00 48 6f 77 20 77 6f 75 6c 64 20 77 65 20 gainst.their.will?.How.would.we.
2820 64 65 74 65 63 74 20 69 66 20 73 6f 6d 65 74 68 69 6e 67 20 77 61 73 20 73 69 67 6e 65 64 20 62 detect.if.something.was.signed.b
2840 79 20 6d 69 73 74 61 6b 65 2c 20 6f 72 20 65 76 65 6e 20 77 6f 72 73 65 2c 00 48 6f 77 20 77 6f y.mistake,.or.even.worse,.How.wo
2860 75 6c 64 20 77 65 20 64 65 74 65 63 74 20 69 66 20 61 20 73 65 63 72 65 74 20 73 69 67 6e 69 6e uld.we.detect.if.a.secret.signin
2880 67 20 6b 65 79 20 67 6f 74 20 63 6f 6d 70 72 6f 6d 69 73 65 64 3f 00 77 68 65 74 68 65 72 20 74 g.key.got.compromised?.whether.t
28a0 68 65 20 73 69 67 6e 65 64 20 64 61 74 61 20 69 73 20 5f 61 63 74 75 61 6c 6c 79 20 74 68 65 20 he.signed.data.is._actually.the.
28c0 64 61 74 61 20 74 68 61 74 20 73 68 6f 75 6c 64 20 68 61 76 65 20 62 65 65 6e 20 73 69 67 6e 65 data.that.should.have.been.signe
28e0 64 5f 2e 00 54 68 65 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 5f 64 69 67 69 74 61 6c 20 73 69 d_..The.problem.with._digital.si
2900 67 6e 69 6e 67 20 6f 6e 20 69 74 73 20 6f 77 6e 5f 20 69 73 20 74 68 61 74 20 69 74 20 69 73 20 gning.on.its.own_.is.that.it.is.
2920 64 69 66 66 69 63 75 6c 74 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 00 00 54 68 65 20 75 73 65 72 difficult.to.determine..The.user
2940 20 6f 66 20 74 68 65 20 73 69 67 6e 65 64 20 64 61 74 61 20 69 73 20 63 61 6c 6c 65 64 20 61 20 .of.the.signed.data.is.called.a.
2960 5f 76 65 72 69 66 69 65 72 5f 2e 00 54 68 65 20 73 69 67 6e 69 6e 67 20 70 61 72 74 79 20 69 73 _verifier_..The.signing.party.is
2980 20 63 61 6c 6c 65 64 20 61 20 5f 73 69 67 6e 65 72 5f 2e 00 73 69 67 73 75 6d 20 6c 6f 67 67 69 .called.a._signer_..sigsum.loggi
29a0 6e 67 20 61 73 20 70 72 65 2d 68 61 73 68 65 64 20 64 69 67 69 74 61 6c 20 73 69 67 6e 69 6e 67 ng.as.pre-hashed.digital.signing
29c0 20 77 69 74 68 20 74 72 61 6e 73 70 61 72 65 6e 63 79 2e 00 41 20 73 69 67 73 75 6d 20 6c 6f 67 .with.transparency..A.sigsum.log
29e0 20 62 72 69 6e 67 73 20 74 72 61 6e 73 70 61 72 65 6e 63 79 20 74 6f 20 2a 2a 73 69 67 2a 2a 6e .brings.transparency.to.**sig**n
2a00 65 64 20 63 68 65 63 6b 2a 2a 73 75 6d 2a 2a 73 2e 20 20 59 6f 75 20 63 61 6e 20 74 68 69 6e 6b ed.check**sum**s...You.can.think
2a20 20 6f 66 00 00 09 5b 5c 5b 41 75 64 69 74 4c 6f 67 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 74 72 61 .of...[\[AuditLog\]](https://tra
2a40 6e 73 70 61 72 65 6e 63 79 2e 64 65 76 2f 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 65 6c 69 61 62 nsparency.dev/application/reliab
2a60 6c 79 2d 6c 6f 67 2d 61 6c 6c 2d 61 63 74 69 6f 6e 73 2d 70 65 72 66 6f 72 6d 65 64 2d 6f 6e 2d ly-log-all-actions-performed-on-
2a80 79 6f 75 72 2d 73 65 72 76 65 72 73 2f 29 2e 00 6f 72 20 69 73 20 73 6f 6d 65 6f 6e 65 20 72 75 your-servers/)..or.is.someone.ru
2aa0 6e 6e 69 6e 67 20 75 6e 65 78 70 65 63 74 65 64 20 63 6f 6d 6d 61 6e 64 73 20 6f 6e 20 79 6f 75 nning.unexpected.commands.on.you
2ac0 72 20 73 65 72 76 65 72 00 09 5b 5c 5b 43 68 65 63 6b 73 75 6d 44 42 5c 5d 5d 28 68 74 74 70 73 r.server..[\[ChecksumDB\]](https
2ae0 3a 2f 2f 67 6f 2e 67 6f 6f 67 6c 65 73 6f 75 72 63 65 2e 63 6f 6d 2f 70 72 6f 70 6f 73 61 6c 2f ://go.googlesource.com/proposal/
2b00 2b 2f 6d 61 73 74 65 72 2f 64 65 73 69 67 6e 2f 32 35 35 33 30 2d 73 75 6d 64 62 2e 6d 64 29 2c +/master/design/25530-sumdb.md),
2b20 00 64 69 64 20 79 6f 75 20 67 65 74 20 61 20 64 69 66 66 65 72 65 6e 74 20 47 6f 20 6d 6f 64 75 .did.you.get.a.different.Go.modu
2b40 6c 65 20 74 68 61 6e 20 65 76 65 72 79 6f 6e 65 20 65 6c 73 65 00 09 5b 5c 5b 43 54 5c 5d 5d 28 le.than.everyone.else..[\[CT\]](
2b60 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 36 https://tools.ietf.org/html/rfc6
2b80 39 36 32 29 2c 00 61 72 65 20 74 68 65 72 65 20 61 6e 79 20 28 6d 69 73 2d 29 69 73 73 75 65 64 962),.are.there.any.(mis-)issued
2ba0 20 54 4c 53 20 63 65 72 74 69 66 69 63 61 74 65 73 00 54 72 61 6e 73 70 61 72 65 6e 63 79 20 6c .TLS.certificates.Transparency.l
2bc0 6f 67 73 20 6d 61 6b 65 20 69 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 64 65 74 65 63 74 20 75 ogs.make.it.possible.to.detect.u
2be0 6e 77 61 6e 74 65 64 20 65 76 65 6e 74 73 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 00 23 23 nwanted.events...For.example,.##
2c00 20 31 20 2d 20 49 6e 74 72 6f 64 75 63 74 69 6f 6e 00 00 50 6c 65 61 73 65 20 6c 65 74 20 75 73 .1.-.Introduction..Please.let.us
2c20 20 6b 6e 6f 77 20 69 66 20 79 6f 75 20 68 61 76 65 20 61 6e 79 20 66 65 65 64 62 61 63 6b 2e 00 .know.if.you.have.any.feedback..
2c40 00 72 65 76 69 73 69 6f 6e 20 6f 66 20 74 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 77 69 6c 6c 20 .revision.of.this.document.will.
2c60 62 75 6d 70 20 74 68 65 20 76 65 72 73 69 6f 6e 20 6e 75 6d 62 65 72 20 74 6f 20 76 31 2e 00 54 bump.the.version.number.to.v1..T
2c80 68 69 73 20 69 73 20 61 20 77 6f 72 6b 2d 69 6e 2d 70 72 6f 67 72 65 73 73 20 64 6f 63 75 6d 65 his.is.a.work-in-progress.docume
2ca0 6e 74 20 74 68 61 74 20 6d 61 79 20 62 65 20 6d 6f 76 65 64 20 6f 72 20 6d 6f 64 69 66 69 65 64 nt.that.may.be.moved.or.modified
2cc0 2e 20 20 41 20 66 75 74 75 72 65 00 2a 2a 57 61 72 6e 69 6e 67 2e 2a 2a 00 00 43 65 72 74 69 66 ...A.future.**Warning.**..Certif
2ce0 69 63 61 74 65 20 54 72 61 6e 73 70 61 72 65 6e 63 79 20 73 6f 6c 76 65 73 20 61 6e 64 20 68 6f icate.Transparency.solves.and.ho
2d00 77 2e 00 73 69 67 6e 61 74 75 72 65 73 2c 20 68 61 73 68 20 66 75 6e 63 74 69 6f 6e 73 2c 20 61 w..signatures,.hash.functions,.a
2d20 6e 64 20 4d 65 72 6b 6c 65 20 74 72 65 65 73 2e 20 20 59 6f 75 20 72 6f 75 67 68 6c 79 20 6b 6e nd.Merkle.trees...You.roughly.kn
2d40 6f 77 20 77 68 61 74 20 70 72 6f 62 6c 65 6d 00 59 6f 75 20 68 61 76 65 20 62 61 73 69 63 20 75 ow.what.problem.You.have.basic.u
2d60 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 70 72 nderstanding.of.cryptographic.pr
2d80 69 6d 69 74 69 76 65 73 2c 20 65 2e 67 2e 2c 20 64 69 67 69 74 61 6c 00 2a 2a 50 72 65 6c 69 6d imitives,.e.g.,.digital.**Prelim
2da0 69 6e 61 72 69 65 73 2e 2a 2a 00 00 6d 69 6e 69 6d 61 6c 69 73 6d 20 74 68 61 74 20 73 69 6d 70 inaries.**..minimalism.that.simp
2dc0 6c 69 66 69 65 73 20 75 73 61 67 65 2e 00 61 72 63 68 69 74 65 63 74 75 72 65 20 65 76 6f 6c 76 lifies.usage..architecture.evolv
2de0 65 73 20 61 72 6f 75 6e 64 20 63 65 6e 74 72 61 6c 69 7a 65 64 20 6c 6f 67 20 6f 70 65 72 61 74 es.around.centralized.log.operat
2e00 69 6f 6e 73 2c 20 64 69 73 74 72 69 62 75 74 65 64 20 74 72 75 73 74 2c 20 61 6e 64 00 6d 61 6e ions,.distributed.trust,.and.man
2e20 61 67 65 6d 65 6e 74 20 6f 66 20 65 78 65 63 75 74 61 62 6c 65 20 62 69 6e 61 72 69 65 73 20 61 agement.of.executable.binaries.a
2e40 6e 64 20 70 72 6f 76 65 6e 61 6e 63 65 20 61 72 65 20 74 77 6f 20 65 78 61 6d 70 6c 65 73 2e 20 nd.provenance.are.two.examples..
2e60 20 4f 75 72 00 61 20 62 75 69 6c 64 69 6e 67 20 62 6c 6f 63 6b 20 74 68 61 74 20 63 61 6e 20 62 .Our.a.building.block.that.can.b
2e80 65 20 75 73 65 64 20 66 6f 72 20 61 20 76 61 72 69 65 74 79 20 6f 66 20 75 73 65 2d 63 61 73 65 e.used.for.a.variety.of.use-case
2ea0 73 2e 20 20 54 72 61 6e 73 70 61 72 65 6e 74 00 6d 61 6c 69 63 69 6f 75 73 20 61 6e 64 20 75 6e s...Transparent.malicious.and.un
2ec0 69 6e 74 65 6e 64 65 64 20 6b 65 79 2d 75 73 61 67 65 20 63 61 6e 20 62 65 20 64 65 74 65 63 74 intended.key-usage.can.be.detect
2ee0 65 64 20 75 73 69 6e 67 20 61 20 73 69 67 73 75 6d 20 6c 6f 67 2e 20 20 54 68 69 73 20 69 73 00 ed.using.a.sigsum.log...This.is.
2f00 6c 6f 67 67 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 6b 65 20 73 69 67 6e 61 74 75 72 logged.in.order.to.make.signatur
2f20 65 20 6f 70 65 72 61 74 69 6f 6e 73 20 74 72 61 6e 73 70 61 72 65 6e 74 2e 20 20 46 6f 72 20 65 e.operations.transparent...For.e
2f40 78 61 6d 70 6c 65 2c 00 63 68 65 63 6b 73 75 6d 20 64 61 74 61 62 61 73 65 2c 20 65 78 63 65 70 xample,.checksum.database,.excep
2f60 74 20 74 68 61 74 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 61 6c 6c 79 20 2a 2a 73 69 67 2a 2a t.that.cryptographically.**sig**
2f80 6e 65 64 20 63 68 65 63 6b 2a 2a 73 75 6d 2a 2a 73 20 61 72 65 00 57 65 20 70 72 6f 70 6f 73 65 ned.check**sum**s.are.We.propose
2fa0 20 73 69 67 73 75 6d 20 6c 6f 67 67 69 6e 67 2e 20 20 49 74 20 69 73 20 73 69 6d 69 6c 61 72 20 .sigsum.logging...It.is.similar.
2fc0 74 6f 20 43 65 72 74 69 66 69 63 61 74 65 20 54 72 61 6e 73 70 61 72 65 6e 63 79 20 61 6e 64 20 to.Certificate.Transparency.and.
2fe0 47 6f 27 73 00 23 20 53 69 67 73 75 6d 20 4c 6f 67 67 69 6e 67 20 44 65 73 69 67 6e 20 76 30 00 Go's.#.Sigsum.Logging.Design.v0.
3000 61 64 00 00 42 04 00 00 22 05 00 00 00 10 00 00 31 00 00 00 00 00 00 00 b0 0f 00 00 63 0f 00 00 ad..B...".......1...........c...
3020 0e 0f 00 00 c1 0e 00 00 74 0e 00 00 51 0e 00 00 50 0e 00 00 03 0e 00 00 bc 0d 00 00 79 0d 00 00 ........t...Q...P...........y...
3040 78 0d 00 00 27 0d 00 00 26 0d 00 00 d8 0c 00 00 88 0c 00 00 4a 0c 00 00 ec 0b 00 00 eb 0b 00 00 x...'...&...........J...........
3060 b5 0b 00 00 68 0b 00 00 1b 0b 00 00 cb 0a 00 00 80 0a 00 00 7f 0a 00 00 33 0a 00 00 e7 09 00 00 ....h...................3.......
3080 98 09 00 00 3a 09 00 00 39 09 00 00 eb 08 00 00 9d 08 00 00 51 08 00 00 50 08 00 00 00 08 00 00 ....:...9...........Q...P.......
30a0 b4 07 00 00 7c 07 00 00 7b 07 00 00 30 07 00 00 2f 07 00 00 15 07 00 00 d5 06 00 00 8d 06 00 00 ....|...{...0.../...............
30c0 58 06 00 00 21 06 00 00 d1 05 00 00 96 05 00 00 75 05 00 00 4a 05 00 00 22 05 00 00 21 05 00 00 X...!...........u...J..."...!...
30e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
31a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
31c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
31e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
32a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
32c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
32e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
33a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
33c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
33e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3420 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3440 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3460 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
34a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
34c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
34e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3520 00 00 2d 20 57 68 61 74 20 70 6f 6c 69 63 79 20 73 68 6f 75 6c 64 20 61 20 76 65 72 69 66 69 65 ..-.What.policy.should.a.verifie
3540 72 20 66 6f 6c 6c 6f 77 3f 00 2d 20 48 6f 77 20 64 6f 65 73 20 69 74 20 77 6f 72 6b 20 77 69 74 r.follow?.-.How.does.it.work.wit
3560 68 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 6c 6f 67 3f 00 2d 20 57 68 61 74 20 61 72 65 20 h.more.than.one.log?.-.What.are.
3580 74 68 65 20 70 72 69 76 61 63 79 20 63 6f 6e 63 65 72 6e 73 3f 00 73 68 6f 75 6c 64 20 69 6e 63 the.privacy.concerns?.should.inc
35a0 6c 75 64 65 20 60 67 65 74 2d 74 72 65 65 2d 68 65 61 64 2d 2a 60 20 65 6e 64 70 6f 69 6e 74 73 lude.`get-tree-head-*`.endpoints
35c0 20 69 6e 20 6d 6f 72 65 20 64 65 74 61 69 6c 2e 00 2d 20 57 68 61 74 20 74 68 6f 75 67 68 74 20 .in.more.detail..-.What.thought.
35e0 77 65 6e 74 20 69 6e 74 6f 20 77 69 74 6e 65 73 73 20 63 6f 73 69 67 6e 69 6e 67 3f 20 20 43 6f went.into.witness.cosigning?..Co
3600 6d 70 61 72 65 20 77 69 74 68 20 6f 74 68 65 72 20 61 70 70 72 6f 61 63 68 65 73 2c 20 61 6e 64 mpare.with.other.approaches,.and
3620 00 2d 20 57 68 61 74 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 70 72 69 6d 69 74 69 76 65 73 .-.What.cryptographic.primitives
3640 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 20 61 6e 64 20 77 68 79 3f 00 2d 20 57 68 61 74 20 28 .are.supported.and.why?.-.What.(
3660 64 65 29 73 65 72 69 61 6c 69 7a 61 74 69 6f 6e 20 70 61 72 73 65 72 73 20 61 72 65 20 6e 65 65 de)serialization.parsers.are.nee
3680 64 65 64 20 61 6e 64 20 77 68 79 3f 00 2d 20 57 68 79 20 6e 6f 74 20 73 74 6f 72 65 20 72 69 63 ded.and.why?.-.Why.not.store.ric
36a0 68 20 6d 65 74 61 64 61 74 61 20 69 6e 20 74 68 65 20 6c 6f 67 3f 20 58 58 58 3a 20 61 6e 73 77 h.metadata.in.the.log?.XXX:.answ
36c0 65 72 65 64 20 65 6e 6f 75 67 68 20 61 6c 72 65 61 64 79 3f 00 2d 20 57 68 79 20 6e 6f 74 20 73 ered.enough.already?.-.Why.not.s
36e0 74 6f 72 65 20 64 61 74 61 20 69 6e 20 74 68 65 20 6c 6f 67 3f 20 20 58 58 58 3a 20 61 6e 73 77 tore.data.in.the.log?..XXX:.answ
3700 65 72 65 64 20 65 6e 6f 75 67 68 20 61 6c 72 65 61 64 79 3f 00 23 23 23 23 20 34 2e 34 20 2d 20 ered.enough.already?.####.4.4.-.
3720 4d 6f 72 65 20 71 75 65 73 74 69 6f 6e 73 00 00 57 65 20 61 72 65 20 63 6f 6e 73 69 64 65 72 69 More.questions..We.are.consideri
3740 6e 67 20 69 66 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 6e 74 69 2d 73 70 61 6d 20 6d 65 63 68 61 ng.if.additional.anti-spam.mecha
3760 6e 69 73 6d 73 20 73 68 6f 75 6c 64 20 62 65 20 73 75 70 70 6f 72 74 65 64 2e 00 00 6d 61 6e 61 nisms.should.be.supported...mana
3780 67 65 6d 65 6e 74 2e 20 20 4f 75 72 20 77 6f 72 6b 20 69 73 20 61 62 6f 75 74 20 74 72 61 6e 73 gement...Our.work.is.about.trans
37a0 70 61 72 65 6e 74 20 5f 6b 65 79 2d 75 73 61 67 65 5f 2e 00 6d 6f 72 65 20 63 6f 6d 70 6c 65 78 parent._key-usage_..more.complex
37c0 20 74 68 61 6e 20 74 68 61 74 2e 20 20 41 20 73 65 70 61 72 61 74 65 20 70 72 6f 6a 65 63 74 20 .than.that...A.separate.project.
37e0 73 68 6f 75 6c 64 20 66 6f 63 75 73 20 6f 6e 20 74 72 61 6e 73 70 61 72 65 6e 74 20 6b 65 79 00 should.focus.on.transparent.key.
3800 41 20 73 69 67 6e 65 72 27 73 20 64 6f 6d 61 69 6e 20 68 69 6e 74 20 69 73 20 6e 6f 74 20 70 61 A.signer's.domain.hint.is.not.pa
3820 72 74 20 6f 66 20 74 68 65 20 6c 6f 67 67 65 64 20 6c 65 61 66 20 62 65 63 61 75 73 65 20 6b 65 rt.of.the.logged.leaf.because.ke
3840 79 20 6d 61 6e 61 67 65 6d 65 6e 74 20 69 73 00 00 6d 61 6e 79 20 73 69 67 6e 65 72 73 20 68 61 y.management.is..many.signers.ha
3860 76 65 20 61 20 64 6f 6d 61 69 6e 2e 20 20 41 20 73 69 6e 67 6c 65 20 64 6f 6d 61 69 6e 20 6e 61 ve.a.domain...A.single.domain.na
3880 6d 65 20 69 73 20 61 6c 73 6f 20 72 65 6c 61 74 69 76 65 6c 79 20 63 68 65 61 70 2e 00 62 65 74 me.is.also.relatively.cheap..bet
38a0 74 65 72 20 74 68 61 6e 20 6e 6f 74 20 68 61 76 69 6e 67 20 61 6e 79 20 61 6e 74 69 2d 73 70 61 ter.than.not.having.any.anti-spa
38c0 6d 20 6d 65 63 68 61 6e 69 73 6d 20 61 74 20 61 6c 6c 2e 20 20 57 65 20 70 69 63 6b 65 64 20 44 m.mechanism.at.all...We.picked.D
38e0 4e 53 20 62 65 63 61 75 73 65 00 55 73 69 6e 67 20 44 4e 53 20 61 73 20 61 6e 20 61 6e 74 69 2d NS.because.Using.DNS.as.an.anti-
3900 73 70 61 6d 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 6e 6f 74 20 61 20 70 65 72 66 65 63 74 20 spam.mechanism.is.not.a.perfect.
3920 73 6f 6c 75 74 69 6f 6e 2e 20 20 49 74 20 69 73 20 68 6f 77 65 76 65 72 00 00 09 5b 41 76 69 61 solution...It.is.however...[Avia
3940 74 6f 72 5d 28 68 74 74 70 73 3a 2f 2f 67 72 6f 75 70 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 tor](https://groups.google.com/a
3960 2f 63 68 72 6f 6d 69 75 6d 2e 6f 72 67 2f 67 2f 63 74 2d 70 6f 6c 69 63 79 2f 63 2f 5a 5a 66 33 /chromium.org/g/ct-policy/c/ZZf3
3980 69 72 79 4c 67 43 6f 2f 6d 2f 72 64 54 41 48 57 63 64 42 67 41 4a 29 00 75 6e 75 73 61 62 6c 65 iryLgCo/m/rdTAHWcdBgAJ).unusable
39a0 20 66 6f 72 20 6f 74 68 65 72 73 2e 20 20 54 68 69 73 20 6b 69 6e 64 20 6f 66 20 69 6e 63 69 64 .for.others...This.kind.of.incid
39c0 65 6e 74 20 68 61 70 70 65 6e 65 64 20 69 6e 20 74 68 65 20 72 65 61 6c 2d 77 6f 72 6c 64 20 61 ent.happened.in.the.real-world.a
39e0 6c 72 65 61 64 79 00 6d 65 72 67 65 20 6c 61 74 65 6e 63 69 65 73 2e 20 20 54 6f 6f 20 6d 61 6e lready.merge.latencies...Too.man
3a00 79 20 73 75 62 6d 69 73 73 69 6f 6e 73 20 66 72 6f 6d 20 61 20 73 69 6e 67 6c 65 20 70 61 72 74 y.submissions.from.a.single.part
3a20 79 20 6d 61 79 20 72 65 6e 64 65 72 20 61 20 6c 6f 67 00 4e 6f 74 69 63 65 20 74 68 61 74 20 74 y.may.render.a.log.Notice.that.t
3a40 68 65 20 65 66 66 65 63 74 20 6f 66 20 73 70 61 6d 20 69 73 20 6e 6f 74 20 6f 6e 6c 79 20 61 62 he.effect.of.spam.is.not.only.ab
3a60 6f 75 74 20 73 74 6f 72 61 67 65 2e 20 20 49 74 20 69 73 20 61 6c 73 6f 20 61 62 6f 75 74 00 00 out.storage...It.is.also.about..
3a80 74 6f 20 73 70 61 6d 20 61 20 6c 6f 67 20 69 6e 20 61 6e 79 20 73 69 67 6e 69 66 69 63 61 6e 74 to.spam.a.log.in.any.significant
3aa0 20 77 61 79 20 69 66 20 72 61 74 65 20 6c 69 6d 69 74 73 20 61 72 65 20 6e 6f 74 20 73 65 74 20 .way.if.rate.limits.are.not.set.
3ac0 74 6f 6f 20 6c 6f 6f 73 65 2e 00 61 70 70 6c 69 65 64 20 70 65 72 20 73 65 63 6f 6e 64 2d 6c 65 too.loose..applied.per.second-le
3ae0 76 65 6c 20 64 6f 6d 61 69 6e 2e 20 20 59 6f 75 20 77 6f 75 6c 64 20 6e 65 65 64 20 61 20 6c 61 vel.domain...You.would.need.a.la
3b00 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 73 00 63 6f 6e 74 72 rge.number.of.domain.names.contr
3b20 6f 6c 73 20 61 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 74 68 61 74 20 69 73 20 61 77 61 72 65 20 ols.a.domain.name.that.is.aware.
3b40 6f 66 20 74 68 65 69 72 20 70 75 62 6c 69 63 20 6b 65 79 2c 20 72 61 74 65 20 6c 69 6d 69 74 73 of.their.public.key,.rate.limits
3b60 20 63 61 6e 20 62 65 00 44 6f 6d 61 69 6e 20 68 69 6e 74 73 20 68 65 6c 70 20 6c 6f 67 20 6f 70 .can.be.Domain.hints.help.log.op
3b80 65 72 61 74 6f 72 73 20 63 6f 6d 62 61 74 20 73 70 61 6d 2e 20 20 42 79 20 76 65 72 69 66 79 69 erators.combat.spam...By.verifyi
3ba0 6e 67 20 74 68 61 74 20 65 76 65 72 79 20 73 69 67 6e 65 72 00 23 23 23 23 20 34 2e 33 20 2d 20 ng.that.every.signer.####.4.3.-.
3bc0 57 68 61 74 20 69 73 20 74 68 65 20 70 6f 69 6e 74 20 6f 66 20 68 61 76 69 6e 67 20 61 20 64 6f What.is.the.point.of.having.a.do
3be0 6d 61 69 6e 20 68 69 6e 74 3f 00 00 09 5b 5c 5b 54 53 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 67 69 main.hint?...[\[TS\]](https://gi
3c00 74 2e 73 69 67 73 75 6d 2e 6f 72 67 2f 73 69 67 73 75 6d 2f 63 6f 6d 6d 69 74 2f 3f 69 64 3d 66 t.sigsum.org/sigsum/commit/?id=f
3c20 65 66 34 36 30 35 38 36 65 38 34 37 65 33 37 38 61 31 39 37 33 38 31 65 66 31 61 65 33 61 36 34 ef460586e847e378a197381ef1ae3a64
3c40 65 36 65 61 33 38 62 29 2e 00 74 68 65 20 74 69 6d 65 20 6f 66 20 6c 6f 67 67 69 6e 67 2c 20 79 e6ea38b)..the.time.of.logging,.y
3c60 6f 75 20 6d 61 79 20 75 73 65 20 61 20 63 6f 73 69 67 6e 65 64 20 74 72 65 65 20 68 65 61 64 20 ou.may.use.a.cosigned.tree.head.
3c80 69 6e 73 74 65 61 64 00 73 65 74 20 69 74 20 61 73 20 6c 61 72 67 65 20 61 73 20 70 6f 73 73 69 instead.set.it.as.large.as.possi
3ca0 62 6c 65 2e 20 20 49 66 20 61 20 76 65 72 69 66 69 65 64 20 74 69 6d 65 73 74 61 6d 70 20 69 73 ble...If.a.verified.timestamp.is
3cc0 20 6e 65 65 64 65 64 20 74 6f 20 72 65 61 73 6f 6e 20 61 62 6f 75 74 00 4e 6f 74 65 20 74 68 61 .needed.to.reason.about.Note.tha
3ce0 74 20 61 20 73 69 67 6e 65 72 27 73 20 73 68 61 72 64 20 68 69 6e 74 20 69 73 20 6e 6f 74 20 61 t.a.signer's.shard.hint.is.not.a
3d00 20 76 65 72 69 66 69 65 64 20 74 69 6d 65 73 74 61 6d 70 2e 20 20 57 65 20 72 65 63 6f 6d 6d 65 .verified.timestamp...We.recomme
3d20 6e 64 20 74 6f 00 00 53 75 63 68 20 72 65 2d 6c 6f 67 67 69 6e 67 20 61 6c 73 6f 20 63 6f 6d 65 nd.to..Such.re-logging.also.come
3d40 73 20 61 74 20 74 68 65 20 72 69 73 6b 20 6f 66 20 61 63 74 69 76 61 74 69 6e 67 20 73 6f 6d 65 s.at.the.risk.of.activating.some
3d60 6f 6e 65 20 65 6c 73 65 27 73 20 72 61 74 65 20 6c 69 6d 69 74 73 2e 00 00 75 6e 73 75 73 74 61 one.else's.rate.limits...unsusta
3d80 69 6e 61 62 6c 65 20 69 6e 20 74 68 65 20 6c 6f 6e 67 20 72 75 6e 20 62 65 63 61 75 73 65 20 6c inable.in.the.long.run.because.l
3da0 6f 67 20 73 69 7a 65 73 20 67 72 6f 77 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 2e 00 6e 65 77 65 og.sizes.grow.indefinitely..newe
3dc0 72 20 6f 6e 65 20 74 68 61 74 20 6a 75 73 74 20 73 74 61 72 74 65 64 20 69 74 73 20 6f 70 65 72 r.one.that.just.started.its.oper
3de0 61 74 69 6f 6e 73 2e 20 20 54 68 69 73 20 6d 61 6b 65 73 20 6c 6f 67 20 6f 70 65 72 61 74 69 6f ations...This.makes.log.operatio
3e00 6e 73 00 57 69 74 68 6f 75 74 20 73 68 61 72 64 69 6e 67 2c 20 61 20 67 6f 6f 64 20 53 61 6d 61 ns.Without.sharding,.a.good.Sama
3e20 72 69 74 61 6e 20 63 61 6e 20 61 64 64 20 61 6c 6c 20 6c 65 61 76 65 73 20 66 72 6f 6d 20 61 6e ritan.can.add.all.leaves.from.an
3e40 20 6f 6c 64 20 6c 6f 67 20 69 6e 74 6f 20 61 00 00 65 70 6f 63 68 20 28 4a 61 6e 75 61 72 79 20 .old.log.into.a..epoch.(January.
3e60 31 2c 20 31 39 37 30 20 30 30 3a 30 30 20 55 54 43 29 2e 00 69 6e 74 65 72 76 61 6c 20 61 72 65 1,.1970.00:00.UTC)..interval.are
3e80 20 69 6e 63 6c 75 73 69 76 65 20 61 6e 64 20 65 78 70 72 65 73 73 65 64 20 61 73 20 74 68 65 20 .inclusive.and.expressed.as.the.
3ea0 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 73 69 6e 63 65 20 74 68 65 20 55 4e 49 58 number.of.seconds.since.the.UNIX
3ec0 00 69 6e 74 65 72 76 61 6c 20 69 73 20 64 65 66 69 6e 65 64 20 62 79 20 61 20 73 74 61 72 74 20 .interval.is.defined.by.a.start.
3ee0 74 69 6d 65 20 61 6e 64 20 61 6e 20 65 6e 64 20 74 69 6d 65 2e 20 20 42 6f 74 68 20 65 6e 64 73 time.and.an.end.time...Both.ends
3f00 20 6f 66 20 74 68 65 20 73 68 61 72 64 00 73 68 61 72 64 20 68 69 6e 74 2e 20 20 54 68 65 20 73 .of.the.shard.shard.hint...The.s
3f20 65 6c 65 63 74 65 64 20 73 68 61 72 64 20 68 69 6e 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 elected.shard.hint.must.be.withi
3f40 6e 20 61 20 6c 6f 67 27 73 20 73 68 61 72 64 20 69 6e 74 65 72 76 61 6c 2e 20 20 41 20 73 68 61 n.a.log's.shard.interval...A.sha
3f60 72 64 00 63 61 72 72 79 20 61 6e 79 20 73 75 63 68 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 20 rd.carry.any.such.information...
3f80 54 68 65 72 65 66 6f 72 65 2c 20 77 65 20 72 65 71 75 69 72 65 20 74 68 61 74 20 74 68 65 20 73 Therefore,.we.require.that.the.s
3fa0 69 67 6e 65 72 20 73 65 6c 65 63 74 73 20 61 00 55 6e 6c 69 6b 65 20 54 4c 53 20 63 65 72 74 69 igner.selects.a.Unlike.TLS.certi
3fc0 66 69 63 61 74 65 73 20 77 68 69 63 68 20 61 6c 72 65 61 64 79 20 68 61 76 65 20 76 61 6c 69 64 ficates.which.already.have.valid
3fe0 69 74 79 20 72 61 6e 67 65 73 2c 20 61 20 63 68 65 63 6b 73 75 6d 20 64 6f 65 73 20 6e 6f 74 00 ity.ranges,.a.checksum.does.not.
4000 61 64 00 00 45 00 00 00 3d 01 00 00 00 10 00 00 37 00 00 00 00 00 00 00 bf 0f 00 00 78 0f 00 00 ad..E...=.......7...........x...
4020 2d 0f 00 00 2c 0f 00 00 13 0f 00 00 c3 0e 00 00 7c 0e 00 00 2e 0e 00 00 de 0d 00 00 8d 0d 00 00 -...,...........|...............
4040 3d 0d 00 00 ea 0c 00 00 9c 0c 00 00 4c 0c 00 00 fc 0b 00 00 ae 0b 00 00 62 0b 00 00 19 0b 00 00 =...........L...........b.......
4060 c9 0a 00 00 79 0a 00 00 2c 0a 00 00 dd 09 00 00 8f 09 00 00 43 09 00 00 0f 09 00 00 bb 08 00 00 ....y...,...........C...........
4080 6d 08 00 00 1f 08 00 00 eb 07 00 00 a1 07 00 00 5b 07 00 00 0d 07 00 00 b6 06 00 00 69 06 00 00 m...............[...........i...
40a0 1f 06 00 00 cf 05 00 00 91 05 00 00 90 05 00 00 7c 05 00 00 2e 05 00 00 df 04 00 00 92 04 00 00 ................|...............
40c0 41 04 00 00 eb 03 00 00 a6 03 00 00 73 03 00 00 fe 02 00 00 fd 02 00 00 82 02 00 00 3a 02 00 00 A...........s...............:...
40e0 eb 01 00 00 a4 01 00 00 93 01 00 00 3e 01 00 00 3d 01 00 00 16 01 00 00 00 00 00 00 00 00 00 00 ............>...=...............
4100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 5b 5c 5b 44 69 67 69 43 ........................[\[DigiC
4120 65 72 74 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 67 72 6f 75 70 73 2e 67 6f 6f 67 6c 65 00 00 09 5b ert\]](https://groups.google...[
4140 5c 5b 44 69 67 69 43 65 72 74 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 67 72 6f 75 70 73 2e 67 6f 6f \[DigiCert\]](https://groups.goo
4160 67 6c 65 2e 63 6f 6d 2f 61 2f 63 68 72 6f 6d 69 75 6d 2e 6f 72 67 2f 67 2f 63 74 2d 70 6f 6c 69 gle.com/a/chromium.org/g/ct-poli
4180 63 79 2f 63 2f 61 4b 4e 62 5a 75 4a 7a 77 66 4d 29 2e 00 54 72 61 6e 73 70 61 72 65 6e 63 79 20 cy/c/aKNbZuJzwfM)..Transparency.
41a0 4c 6f 67 00 62 65 65 6e 20 74 68 65 20 63 61 73 65 20 77 68 65 6e 20 61 20 72 65 6d 6f 74 65 20 Log.been.the.case.when.a.remote.
41c0 63 6f 64 65 20 65 78 65 63 75 74 69 6f 6e 20 77 61 73 20 66 6f 75 6e 64 20 66 6f 72 20 61 20 43 code.execution.was.found.for.a.C
41e0 65 72 74 69 66 69 63 61 74 65 00 64 69 73 74 72 69 62 75 74 65 20 69 74 20 74 6f 20 61 20 73 75 ertificate.distribute.it.to.a.su
4200 62 73 65 74 20 6f 66 20 69 73 6f 6c 61 74 65 64 20 76 65 72 69 66 69 65 72 73 2e 20 20 46 6f 72 bset.of.isolated.verifiers...For
4220 20 65 78 61 6d 70 6c 65 2c 20 74 68 69 73 20 63 6f 75 6c 64 20 68 61 76 65 00 54 68 69 73 20 63 .example,.this.could.have.This.c
4240 6f 76 65 72 73 20 61 20 77 65 61 6b 65 72 20 66 6f 72 6d 20 6f 66 20 61 74 74 61 63 6b 65 72 20 overs.a.weaker.form.of.attacker.
4260 74 68 61 74 20 69 73 20 61 62 6c 65 20 74 6f 20 73 69 67 6e 20 6c 6f 67 20 64 61 74 61 20 61 6e that.is.able.to.sign.log.data.an
4280 64 00 54 68 65 20 73 61 6d 65 20 61 74 74 61 63 6b 65 72 20 61 6c 73 6f 20 67 61 69 6e 65 64 20 d.The.same.attacker.also.gained.
42a0 63 6f 6e 74 72 6f 6c 20 6f 66 20 74 68 65 20 73 69 67 6e 69 6e 67 20 6b 65 79 20 61 6e 64 20 69 control.of.the.signing.key.and.i
42c0 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 6f 66 20 61 20 73 69 67 73 75 6d 20 6c 6f 67 20 74 68 nfrastructure.of.a.sigsum.log.th
42e0 61 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 72 61 6e 73 70 61 72 65 6e 63 79 2e 00 00 09 5b at.is.used.for.transparency....[
4300 5c 5b 53 6f 6c 61 72 57 69 6e 64 73 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 7a 64 6e 65 \[SolarWinds\]](https://www.zdne
4320 74 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 68 69 72 64 2d 6d 61 6c 77 61 72 65 2d 73 74 72 61 t.com/article/third-malware-stra
4340 69 6e 2d 64 69 73 63 6f 76 65 72 65 64 2d 69 6e 2d 73 6f 6c 61 72 77 69 6e 64 73 2d 73 75 70 70 in-discovered-in-solarwinds-supp
4360 6c 79 2d 63 68 61 69 6e 2d 61 74 74 61 63 6b 2f 29 2e 00 63 6f 6d 70 72 6f 6d 69 73 65 64 20 73 ly-chain-attack/)..compromised.s
4380 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 63 6f 6e 74 72 6f 76 65 72 73 69 61 6c 20 74 68 65 73 65 hould.not.be.controversial.these
43a0 20 64 61 79 73 00 54 68 65 20 66 61 63 74 20 74 68 61 74 20 73 69 67 6e 69 6e 67 20 6b 65 79 73 .days.The.fact.that.signing.keys
43c0 20 61 6e 64 20 72 65 6c 61 74 65 64 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 63 6f 6d 70 .and.related.infrastructure.comp
43e0 6f 6e 65 6e 74 73 20 67 65 74 00 09 5b 5c 5b 46 42 49 2d 41 70 70 6c 65 5c 5d 5d 28 68 74 74 70 onents.get..[\[FBI-Apple\]](http
4400 73 3a 2f 2f 77 77 77 2e 65 66 66 2e 6f 72 67 2f 63 61 73 65 73 2f 61 70 70 6c 65 2d 63 68 61 6c s://www.eff.org/cases/apple-chal
4420 6c 65 6e 67 65 73 2d 66 62 69 2d 61 6c 6c 2d 77 72 69 74 73 2d 61 63 74 2d 6f 72 64 65 72 29 2e lenges-fbi-all-writs-act-order).
4440 00 74 68 69 73 20 69 73 20 65 73 73 65 6e 74 69 61 6c 6c 79 20 77 68 61 74 20 74 68 65 20 46 42 .this.is.essentially.what.the.FB
4460 49 20 72 65 71 75 65 73 74 65 64 20 66 72 6f 6d 20 41 70 70 6c 65 20 69 6e 20 74 68 65 20 53 61 I.requested.from.Apple.in.the.Sa
4480 6e 20 42 65 72 6e 61 72 64 69 6e 6f 20 63 61 73 65 00 73 69 67 6e 20 64 61 74 61 20 61 6e 64 20 n.Bernardino.case.sign.data.and.
44a0 64 69 73 74 72 69 62 75 74 65 20 69 74 20 74 6f 20 61 20 73 75 62 73 65 74 20 6f 66 20 69 73 6f distribute.it.to.a.subset.of.iso
44c0 6c 61 74 65 64 20 76 65 72 69 66 69 65 72 73 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 00 72 lated.verifiers...For.example,.r
44e0 65 6c 65 61 73 65 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 2e 20 20 54 68 69 73 20 63 6f 76 elease.infrastructure...This.cov
4500 65 72 73 20 61 20 77 65 61 6b 65 72 20 66 6f 72 6d 20 6f 66 20 61 74 74 61 63 6b 65 72 20 74 68 ers.a.weaker.form.of.attacker.th
4520 61 74 20 69 73 20 61 62 6c 65 20 74 6f 00 57 65 20 63 6f 6e 73 69 64 65 72 20 61 20 70 6f 77 65 at.is.able.to.We.consider.a.powe
4540 72 66 75 6c 20 61 74 74 61 63 6b 65 72 20 74 68 61 74 20 67 61 69 6e 65 64 20 63 6f 6e 74 72 6f rful.attacker.that.gained.contro
4560 6c 20 6f 66 20 61 20 73 69 67 6e 65 72 27 73 20 73 69 67 6e 69 6e 67 20 61 6e 64 00 23 23 20 32 l.of.a.signer's.signing.and.##.2
4580 20 2d 20 54 68 72 65 61 74 20 6d 6f 64 65 6c 00 00 20 20 20 20 20 20 20 20 5b 41 50 49 5d 28 68 .-.Threat.model..........[API](h
45a0 74 74 70 73 3a 2f 2f 67 69 74 2e 73 69 67 73 75 6d 2e 6f 72 67 2f 73 69 67 73 75 6d 2f 74 72 65 ttps://git.sigsum.org/sigsum/tre
45c0 65 2f 64 6f 63 2f 61 70 69 2e 6d 64 29 2e 00 61 64 64 69 74 69 6f 6e 61 6c 6c 79 20 6e 65 65 64 e/doc/api.md)..additionally.need
45e0 20 74 6f 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 61 20 73 69 67 73 75 6d 20 6c 6f 67 27 73 .to.interact.with.a.sigsum.log's
4600 20 6c 69 6e 65 2d 74 65 72 6d 69 6e 61 74 65 64 20 41 53 43 49 49 20 48 54 54 50 28 53 29 00 74 .line-terminated.ASCII.HTTP(S).t
4620 68 61 74 20 61 20 76 65 72 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 73 75 hat.a.verifier.is.required.to.su
4640 70 70 6f 72 74 2e 20 20 53 69 67 6e 65 72 73 2c 20 6d 6f 6e 69 74 6f 72 73 2c 20 61 6e 64 20 77 pport...Signers,.monitors,.and.w
4660 69 74 6e 65 73 73 65 73 00 6f 72 20 22 62 79 20 68 61 6e 64 22 20 69 6e 20 6d 61 6e 79 20 6d 6f itnesses.or."by.hand".in.many.mo
4680 64 65 72 6e 20 70 72 6f 67 72 61 6d 6d 69 6e 67 20 6c 61 6e 67 75 61 67 65 73 2e 20 20 54 68 69 dern.programming.languages...Thi
46a0 73 20 69 73 20 74 68 65 20 6f 6e 6c 79 20 70 61 72 73 69 6e 67 00 09 5b 54 72 75 6e 6e 65 6c 5d s.is.the.only.parsing..[Trunnel]
46c0 28 68 74 74 70 73 3a 2f 2f 67 69 74 6c 61 62 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 74 (https://gitlab.torproject.org/t
46e0 70 6f 2f 63 6f 72 65 2f 74 72 75 6e 6e 65 6c 2f 2d 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 64 6f 63 2f po/core/trunnel/-/blob/main/doc/
4700 74 72 75 6e 6e 65 6c 2e 6d 64 29 2c 00 63 6f 6e 73 74 72 61 69 6e 65 64 20 65 6e 76 69 72 6f 6e trunnel.md),.constrained.environ
4720 6d 65 6e 74 73 2e 20 20 53 69 67 6e 65 64 20 61 6e 64 20 6c 6f 67 67 65 64 20 64 61 74 61 20 63 ments...Signed.and.logged.data.c
4740 61 6e 20 62 65 20 28 64 65 29 73 65 72 69 61 6c 69 7a 65 64 20 75 73 69 6e 67 00 69 6e 63 72 65 an.be.(de)serialized.using.incre
4760 61 73 65 20 61 74 74 61 63 6b 20 73 75 72 66 61 63 65 73 20 61 6e 64 20 6d 61 6b 65 20 74 68 65 ase.attack.surfaces.and.make.the
4780 20 73 79 73 74 65 6d 20 6d 6f 72 65 20 64 69 66 66 69 63 75 6c 74 20 74 6f 20 75 73 65 20 69 6e .system.more.difficult.to.use.in
47a0 00 2d 20 2a 2a 53 69 6d 70 6c 65 20 28 64 65 29 73 65 72 69 61 6c 69 7a 61 74 69 6f 6e 20 70 61 .-.**Simple.(de)serialization.pa
47c0 72 73 65 72 73 3a 2a 2a 20 63 6f 6d 70 6c 65 78 20 28 64 65 29 73 65 72 69 61 6c 69 7a 61 74 69 rsers:**.complex.(de)serializati
47e0 6f 6e 20 70 61 72 73 65 72 73 00 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 64 61 74 61 20 66 6f on.parsers.protocols.and.data.fo
4800 72 6d 61 74 73 20 73 69 6d 70 6c 65 72 20 61 6e 64 20 6d 6f 72 65 20 73 65 63 75 72 65 2e 00 66 rmats.simpler.and.more.secure..f
4820 75 6e 63 74 69 6f 6e 73 20 61 72 65 20 45 64 32 35 35 31 39 20 61 6e 64 20 53 48 41 32 35 36 2e unctions.are.Ed25519.and.SHA256.
4840 20 20 4e 6f 74 20 68 61 76 69 6e 67 20 61 6e 79 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 61 ..Not.having.any.cryptographic.a
4860 67 69 6c 69 74 79 20 6d 61 6b 65 73 00 2d 20 2a 2a 4e 6f 20 63 72 79 70 74 6f 67 72 61 70 68 69 gility.makes.-.**No.cryptographi
4880 63 20 61 67 69 6c 69 74 79 2a 2a 3a 20 74 68 65 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 65 64 20 c.agility**:.the.only.supported.
48a0 73 69 67 6e 61 74 75 72 65 20 73 63 68 65 6d 65 73 20 61 6e 64 20 68 61 73 68 00 09 5b 77 69 74 signature.schemes.and.hash..[wit
48c0 6e 65 73 73 20 63 6f 73 69 67 6e 69 6e 67 5d 28 68 74 74 70 73 3a 2f 2f 69 65 65 65 78 70 6c 6f ness.cosigning](https://ieeexplo
48e0 72 65 2e 69 65 65 65 2e 6f 72 67 2f 73 74 61 6d 70 2f 73 74 61 6d 70 2e 6a 73 70 3f 61 72 6e 75 re.ieee.org/stamp/stamp.jsp?arnu
4900 6d 62 65 72 3d 37 35 34 36 35 32 31 29 2e 00 70 72 6f 74 6f 63 6f 6c 20 64 69 72 65 63 74 6c 79 mber=7546521)..protocol.directly
4920 20 69 6e 74 6f 20 74 68 65 20 6c 6f 67 2e 20 20 49 74 20 69 73 20 61 20 76 61 72 69 61 6e 74 20 .into.the.log...It.is.a.variant.
4940 6f 66 00 6c 6f 67 73 20 72 65 6c 79 20 6f 6e 20 67 6f 73 73 69 70 20 70 72 6f 74 6f 63 6f 6c 73 of.logs.rely.on.gossip.protocols
4960 20 74 6f 20 64 65 74 65 63 74 20 66 6f 72 6b 73 2e 20 20 57 65 20 62 75 69 6c 74 20 61 20 70 72 .to.detect.forks...We.built.a.pr
4980 6f 61 63 74 69 76 65 20 67 6f 73 73 69 70 00 2d 20 2a 2a 42 75 69 6c 74 2d 69 6e 20 6d 65 63 68 oactive.gossip.-.**Built-in.mech
49a0 61 6e 69 73 6d 73 20 74 68 61 74 20 65 6e 73 75 72 65 20 61 20 67 6c 6f 62 61 6c 6c 79 20 63 6f anisms.that.ensure.a.globally.co
49c0 6e 73 69 73 74 65 6e 74 20 6c 6f 67 3a 2a 2a 20 74 72 61 6e 73 70 61 72 65 6e 63 79 00 63 6f 6d nsistent.log:**.transparency.com
49e0 62 61 74 20 6c 6f 67 20 73 70 61 6d 2e 20 20 53 68 61 72 64 69 6e 67 20 69 73 20 61 6c 73 6f 20 bat.log.spam...Sharding.is.also.
4a00 68 65 6c 70 66 75 6c 20 74 6f 20 63 6f 6d 62 61 74 20 6c 6f 67 20 73 70 61 6d 20 69 6e 20 74 68 helpful.to.combat.log.spam.in.th
4a20 65 20 6c 6f 6e 67 20 72 75 6e 2e 00 6c 69 74 74 6c 65 20 6d 65 74 61 64 61 74 61 20 61 73 20 70 e.long.run..little.metadata.as.p
4a40 6f 73 73 69 62 6c 65 20 74 6f 20 63 6f 6d 62 61 74 20 6c 6f 67 20 70 6f 69 73 6f 6e 69 6e 67 2e ossible.to.combat.log.poisoning.
4a60 20 20 57 65 20 70 69 67 67 79 62 61 63 6b 20 6f 6e 20 44 4e 53 20 74 6f 00 66 72 6f 6d 20 61 6e ..We.piggyback.on.DNS.to.from.an
4a80 79 6f 6e 65 20 61 74 20 61 72 62 69 74 72 61 72 79 20 72 61 74 65 73 20 63 61 6e 20 6c 65 61 64 yone.at.arbitrary.rates.can.lead
4aa0 20 74 6f 20 61 62 75 73 69 76 65 20 75 73 61 67 65 20 70 61 74 74 65 72 6e 73 2e 20 20 57 65 20 .to.abusive.usage.patterns...We.
4ac0 73 74 6f 72 65 20 61 73 00 70 6f 73 73 69 62 6c 65 20 74 68 65 79 20 73 68 6f 75 6c 64 20 62 65 store.as.possible.they.should.be
4ae0 20 6f 70 65 6e 20 66 6f 72 20 65 76 65 72 79 6f 6e 65 2e 20 20 48 6f 77 65 76 65 72 2c 20 61 63 .open.for.everyone...However,.ac
4b00 63 65 70 74 69 6e 67 20 6c 6f 67 67 69 6e 67 20 72 65 71 75 65 73 74 73 00 2d 20 2a 2a 44 65 66 cepting.logging.requests.-.**Def
4b20 65 6e 73 65 73 20 61 67 61 69 6e 73 74 20 6c 6f 67 20 73 70 61 6d 20 61 6e 64 20 70 6f 69 73 6f enses.against.log.spam.and.poiso
4b40 6e 69 6e 67 3a 2a 2a 20 74 6f 20 6b 65 65 70 20 6c 6f 67 73 20 61 73 20 75 73 65 66 75 6c 20 61 ning:**.to.keep.logs.as.useful.a
4b60 73 00 61 6e 20 6f 6c 64 65 72 20 6c 6f 67 20 73 68 61 72 64 20 63 61 6e 6e 6f 74 20 62 65 20 72 s.an.older.log.shard.cannot.be.r
4b80 65 70 6c 61 79 65 64 20 69 6e 20 61 6e 6f 74 68 65 72 20 6e 6f 6e 2d 6f 76 65 72 6c 61 70 70 69 eplayed.in.another.non-overlappi
4ba0 6e 67 20 6c 6f 67 20 73 68 61 72 64 2e 00 74 68 61 74 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 ng.log.shard..that.determines.th
4bc0 65 20 74 69 6d 65 20 64 75 72 69 6e 67 20 77 68 69 63 68 20 74 68 65 20 6c 6f 67 20 77 69 6c 6c e.time.during.which.the.log.will
4be0 20 62 65 20 61 63 74 69 76 65 2e 20 20 53 75 62 6d 69 73 73 69 6f 6e 73 20 74 6f 00 74 68 61 6e .be.active...Submissions.to.than
4c00 20 63 6c 6f 73 69 6e 67 20 69 74 20 64 6f 77 6e 20 69 6e 20 61 20 72 65 6c 69 61 62 6c 65 20 77 .closing.it.down.in.a.reliable.w
4c20 61 79 2e 20 20 57 65 20 68 61 76 65 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 73 68 61 72 64 69 ay...We.have.a.predefined.shardi
4c40 6e 67 20 69 6e 74 65 72 76 61 6c 00 2d 20 2a 2a 53 68 61 72 64 69 6e 67 20 74 6f 20 73 69 6d 70 ng.interval.-.**Sharding.to.simp
4c60 6c 69 66 79 20 6c 6f 67 20 6c 69 66 65 20 63 79 63 6c 65 73 3a 2a 2a 20 73 74 61 72 74 69 6e 67 lify.log.life.cycles:**.starting
4c80 20 74 6f 20 6f 70 65 72 61 74 65 20 61 20 6c 6f 67 20 69 73 20 65 61 73 69 65 72 00 49 6e 20 6f .to.operate.a.log.is.easier.In.o
4ca0 74 68 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 73 69 67 6e 65 72 20 74 61 6c 6b 73 20 74 6f 20 ther.words,.the.signer.talks.to.
4cc0 74 68 65 20 6c 6f 67 20 6f 6e 20 62 65 68 61 6c 66 20 6f 66 20 74 68 65 20 76 65 72 69 66 79 69 the.log.on.behalf.of.the.verifyi
4ce0 6e 67 20 70 61 72 74 79 2e 00 75 73 69 6e 67 20 74 68 65 20 73 61 6d 65 20 64 69 73 74 72 69 62 ng.party..using.the.same.distrib
4d00 75 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 61 73 20 69 73 20 75 73 65 64 20 66 6f 72 20 64 ution.mechanism.as.is.used.for.d
4d20 69 73 74 72 69 62 75 74 69 6e 67 20 74 68 65 20 61 63 74 75 61 6c 20 64 61 74 61 2e 00 61 64 64 istributing.the.actual.data..add
4d40 69 74 69 6f 6e 61 6c 20 6f 75 74 62 6f 75 6e 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 itional.outbound.network.connect
4d60 69 6f 6e 73 2e 20 20 50 72 6f 6f 66 73 20 6f 66 20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 20 ions...Proofs.of.public.logging.
4d80 61 72 65 20 70 72 6f 76 69 64 65 64 00 2d 20 2a 2a 50 72 65 73 65 72 76 65 64 20 64 61 74 61 20 are.provided.-.**Preserved.data.
4da0 66 6c 6f 77 73 3a 2a 2a 20 61 20 76 65 72 69 66 69 65 72 20 63 61 6e 20 65 6e 66 6f 72 63 65 20 flows:**.a.verifier.can.enforce.
4dc0 73 69 67 73 75 6d 20 6c 6f 67 67 69 6e 67 20 77 69 74 68 6f 75 74 20 6d 61 6b 69 6e 67 00 62 75 sigsum.logging.without.making.bu
4de0 74 20 69 74 20 69 73 20 6d 61 74 75 72 65 20 65 6e 6f 75 67 68 20 74 6f 20 63 61 70 74 75 72 65 t.it.is.mature.enough.to.capture
4e00 20 77 68 61 74 20 74 79 70 65 20 6f 66 20 65 63 6f 73 79 73 74 65 6d 20 77 65 20 77 61 6e 74 20 .what.type.of.ecosystem.we.want.
4e20 74 6f 20 62 6f 6f 74 73 74 72 61 70 2e 00 70 72 6f 70 65 72 74 69 65 73 2e 20 20 49 74 20 64 6f to.bootstrap..properties...It.do
4e40 65 73 20 6e 6f 74 20 6d 65 61 6e 20 74 68 61 74 20 74 68 65 20 73 69 67 73 75 6d 20 6c 6f 67 20 es.not.mean.that.the.sigsum.log.
4e60 64 65 73 69 67 6e 20 69 73 20 73 65 74 20 69 6e 20 73 74 6f 6e 65 20 79 65 74 2c 00 6f 66 20 73 design.is.set.in.stone.yet,.of.s
4e80 69 67 73 75 6d 20 6c 6f 67 73 2c 20 75 6c 74 69 6d 61 74 65 6c 79 20 6c 65 61 76 69 6e 67 20 75 igsum.logs,.ultimately.leaving.u
4ea0 73 20 77 69 74 68 20 61 20 64 65 73 69 67 6e 20 74 68 61 74 20 68 61 73 20 74 68 65 20 62 65 6c s.with.a.design.that.has.the.bel
4ec0 6f 77 00 49 74 20 69 73 20 66 61 69 72 20 74 6f 20 73 61 79 20 74 68 61 74 20 6d 75 63 68 20 74 ow.It.is.fair.to.say.that.much.t
4ee0 68 6f 75 67 68 20 77 65 6e 74 20 69 6e 74 6f 20 5f 72 65 6d 6f 76 69 6e 67 5f 20 75 6e 77 61 6e hough.went.into._removing_.unwan
4f00 74 65 64 20 75 73 61 67 65 2d 70 61 74 74 65 72 6e 73 00 23 23 23 20 31 2e 32 20 2d 20 4c 6f 67 ted.usage-patterns.###.1.2.-.Log
4f20 20 70 72 6f 70 65 72 74 69 65 73 00 00 09 5b 47 32 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 64 61 74 .properties...[G2\]](https://dat
4f40 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 64 72 61 66 74 atracker.ietf.org/doc/html/draft
4f60 2d 69 65 74 66 2d 74 72 61 6e 73 2d 67 6f 73 73 69 70 2d 30 35 29 2e 00 09 5b 5c 5b 47 31 2c 5d -ietf-trans-gossip-05)...[\[G1,]
4f80 28 68 74 74 70 73 3a 2f 2f 69 65 65 65 78 70 6c 6f 72 65 2e 69 65 65 65 2e 6f 72 67 2f 73 74 61 (https://ieeexplore.ieee.org/sta
4fa0 6d 70 2f 73 74 61 6d 70 2e 6a 73 70 3f 61 72 6e 75 6d 62 65 72 3d 37 33 34 36 38 35 33 29 00 70 mp/stamp.jsp?arnumber=7346853).p
4fc0 72 6f 6d 69 73 65 73 2c 20 61 6e 64 20 64 65 70 6c 6f 79 6d 65 6e 74 20 6f 66 20 61 20 67 6f 73 romises,.and.deployment.of.a.gos
4fe0 73 69 70 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 73 75 69 74 73 20 74 68 65 20 77 65 62 00 sip.protocol.that.suits.the.web.
5000 61 64 00 00 07 0f 00 00 33 0f 00 00 00 10 00 00 04 00 00 00 00 00 00 00 b0 0f 00 00 a0 0f 00 00 ad......3.......................
5020 55 0f 00 00 33 0f 00 00 16 0f 00 00 c6 0e 00 00 c5 0e 00 00 76 0e 00 00 28 0e 00 00 27 0e 00 00 U...3...............v...(...'...
5040 d7 0d 00 00 8b 0d 00 00 10 0d 00 00 0f 0d 00 00 f7 0c 00 00 d8 0c 00 00 7c 0c 00 00 67 0c 00 00 ........................|...g...
5060 57 0c 00 00 08 0c 00 00 c2 0b 00 00 c1 0b 00 00 70 0b 00 00 25 0b 00 00 24 0b 00 00 ed 0a 00 00 W...............p...%...$.......
5080 ec 0a 00 00 9e 0a 00 00 51 0a 00 00 05 0a 00 00 c0 09 00 00 bf 09 00 00 a3 09 00 00 55 09 00 00 ........Q...................U...
50a0 0b 09 00 00 cb 08 00 00 ca 08 00 00 84 08 00 00 f7 07 00 00 76 07 00 00 75 07 00 00 5c 07 00 00 ....................v...u...\...
50c0 c6 06 00 00 72 06 00 00 2e 06 00 00 2d 06 00 00 05 06 00 00 91 05 00 00 46 05 00 00 f6 04 00 00 ....r.......-...........F.......
50e0 ae 04 00 00 ad 04 00 00 5b 04 00 00 0b 04 00 00 e2 03 00 00 9b 03 00 00 52 03 00 00 03 03 00 00 ........[...............R.......
5100 a4 02 00 00 a3 02 00 00 5a 02 00 00 59 02 00 00 3f 02 00 00 ef 01 00 00 9f 01 00 00 5f 01 00 00 ........Z...Y...?..........._...
5120 2d 01 00 00 2c 01 00 00 31 01 00 00 00 53 69 67 6e 65 72 73 20 64 69 73 74 72 69 62 75 74 65 20 -...,...1....Signers.distribute.
5140 61 74 20 6c 65 61 73 74 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 69 65 63 65 73 3a 00 74 at.least.the.following.pieces:.t
5160 68 65 20 64 61 74 61 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 6f 6e 20 61 20 77 65 62 73 he.data...For.example,.on.a.webs
5180 69 74 65 2c 20 69 6e 20 61 20 67 69 74 20 72 65 70 6f 73 69 74 6f 72 79 2c 20 65 74 63 2e 00 73 ite,.in.a.git.repository,.etc..s
51a0 74 61 72 74 2e 20 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 68 61 70 70 65 6e 73 20 75 73 69 6e tart...Distribution.happens.usin
51c0 67 20 74 68 65 20 73 61 6d 65 20 6d 65 63 68 61 6e 69 73 6d 20 74 68 61 74 20 69 73 20 6e 6f 72 g.the.same.mechanism.that.is.nor
51e0 6d 61 6c 6c 79 20 75 73 65 64 20 66 6f 72 00 4f 6e 63 65 20 61 20 73 69 67 6e 65 72 20 68 61 73 mally.used.for.Once.a.signer.has
5200 20 63 6f 6c 6c 65 63 74 65 64 20 70 72 6f 6f 66 73 20 6f 66 20 70 75 62 6c 69 63 20 6c 6f 67 67 .collected.proofs.of.public.logg
5220 69 6e 67 20 74 68 65 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 70 68 61 73 65 20 63 61 6e 00 23 ing.the.distribution.phase.can.#
5240 23 23 23 20 33 2e 32 2e 34 20 2d 20 44 69 73 74 72 69 62 75 74 69 6f 6e 00 00 55 73 65 2d 63 61 ###.3.2.4.-.Distribution..Use-ca
5260 73 65 73 20 6c 69 6b 65 20 69 6e 73 74 61 6e 74 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 73 ses.like.instant.certificate.iss
5280 75 61 6e 63 65 20 61 72 65 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 64 65 73 69 67 uance.are.not.supported.by.desig
52a0 6e 2e 00 00 09 5b 47 34 5c 5d 5d 28 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e n....[G4\]](https://docs.google.
52c0 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 2f 64 2f 31 36 47 2d 51 37 69 4e 33 6b 42 34 36 47 53 57 35 com/document/d/16G-Q7iN3kB46GSW5
52e0 62 2d 73 66 48 35 4d 4f 33 6e 4b 53 59 79 45 62 37 37 59 73 4d 37 54 4d 5a 47 45 2f 65 64 69 74 b-sfH5MO3nKSYyEb77YsM7TMZGE/edit
5300 29 2e 00 09 5b 47 33 2c 5d 28 68 74 74 70 73 3a 2f 2f 70 65 74 73 79 6d 70 6f 73 69 75 6d 2e 6f )...[G3,](https://petsymposium.o
5320 72 67 2f 32 30 32 31 2f 66 69 6c 65 73 2f 70 61 70 65 72 73 2f 69 73 73 75 65 32 2f 70 6f 70 65 rg/2021/files/papers/issue2/pope
5340 74 73 2d 32 30 32 31 2d 30 30 32 34 2e 70 64 66 29 00 09 5b 47 32 2c 5d 28 68 74 74 70 73 3a 2f ts-2021-0024.pdf)..[G2,](https:/
5360 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 64 /datatracker.ietf.org/doc/html/d
5380 72 61 66 74 2d 69 65 74 66 2d 74 72 61 6e 73 2d 67 6f 73 73 69 70 2d 30 35 29 00 09 5b 5c 5b 47 raft-ietf-trans-gossip-05)..[\[G
53a0 31 2c 5d 28 68 74 74 70 73 3a 2f 2f 69 65 65 65 78 70 6c 6f 72 65 2e 69 65 65 65 2e 6f 72 67 2f 1,](https://ieeexplore.ieee.org/
53c0 73 74 61 6d 70 2f 73 74 61 6d 70 2e 6a 73 70 3f 61 72 6e 75 6d 62 65 72 3d 37 33 34 36 38 35 33 stamp/stamp.jsp?arnumber=7346853
53e0 29 00 6e 65 65 64 20 66 6f 72 20 72 65 61 63 74 69 76 65 20 67 6f 73 73 69 70 2d 61 75 64 69 74 ).need.for.reactive.gossip-audit
5400 20 70 72 6f 74 6f 63 6f 6c 73 00 54 68 65 20 61 64 64 65 64 20 6c 61 74 65 6e 63 79 20 69 73 20 .protocols.The.added.latency.is.
5420 61 20 74 72 61 64 65 2d 6f 66 66 20 74 68 61 74 20 73 69 6d 70 6c 69 66 69 65 73 20 73 69 67 73 a.trade-off.that.simplifies.sigs
5440 75 6d 20 6c 6f 67 67 69 6e 67 20 62 79 20 72 65 6d 6f 76 69 6e 67 20 74 68 65 00 49 74 20 74 68 um.logging.by.removing.the.It.th
5460 75 73 20 74 61 6b 65 73 20 66 69 76 65 20 74 6f 20 74 65 6e 20 6d 69 6e 75 74 65 73 20 62 65 66 us.takes.five.to.ten.minutes.bef
5480 6f 72 65 20 61 20 73 69 67 6e 65 72 27 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 70 68 61 73 ore.a.signer's.distribution.phas
54a0 65 20 63 61 6e 20 73 74 61 72 74 2e 00 00 74 6f 20 6c 6f 67 73 20 73 6f 20 74 68 61 74 20 73 69 e.can.start...to.logs.so.that.si
54c0 67 6e 65 72 73 20 63 61 6e 20 65 61 73 69 6c 79 20 66 65 74 63 68 20 66 69 6e 61 6c 69 7a 65 64 gners.can.easily.fetch.finalized
54e0 20 63 6f 73 69 67 6e 65 64 20 74 72 65 65 20 68 65 61 64 73 2e 00 61 70 70 65 6e 64 2d 6f 6e 6c .cosigned.tree.heads..append-onl
5500 79 20 62 65 66 6f 72 65 20 64 6f 69 6e 67 20 61 20 63 6f 73 69 67 6e 61 74 75 72 65 20 6f 70 65 y.before.doing.a.cosignature.ope
5520 72 61 74 69 6f 6e 2e 20 20 43 6f 73 69 67 6e 61 74 75 72 65 73 20 61 72 65 20 70 6f 73 74 65 64 ration...Cosignatures.are.posted
5540 20 62 61 63 6b 00 6c 6f 67 73 20 66 6f 72 20 73 6f 2d 63 61 6c 6c 65 64 20 5f 74 6f 2d 73 69 67 .back.logs.for.so-called._to-sig
5560 6e 5f 20 74 72 65 65 20 68 65 61 64 73 20 61 6e 64 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 n_.tree.heads.and.verify.that.th
5580 65 79 20 61 72 65 20 66 72 65 73 68 20 61 6e 64 00 53 69 67 73 75 6d 20 6c 6f 67 73 20 70 65 72 ey.are.fresh.and.Sigsum.logs.per
55a0 69 6f 64 69 63 61 6c 6c 79 20 66 72 65 65 7a 65 20 74 68 65 20 6d 6f 73 74 20 63 75 72 72 65 6e iodically.freeze.the.most.curren
55c0 74 20 74 72 65 65 20 68 65 61 64 2c 20 74 79 70 69 63 61 6c 6c 79 20 65 76 65 72 79 20 66 69 76 t.tree.head,.typically.every.fiv
55e0 65 20 6d 69 6e 75 74 65 73 2e 20 20 43 6f 73 69 67 6e 69 6e 67 20 77 69 74 6e 65 73 73 65 73 20 e.minutes...Cosigning.witnesses.
5600 70 6f 6c 6c 00 23 23 23 23 20 33 2e 32 2e 33 20 2d 20 57 61 69 74 20 66 6f 72 20 77 69 74 6e 65 poll.####.3.2.3.-.Wait.for.witne
5620 73 73 20 63 6f 73 69 67 6e 69 6e 67 00 00 73 69 67 6e 65 72 20 68 61 73 20 74 6f 20 77 61 69 74 ss.cosigning..signer.has.to.wait
5640 20 66 6f 72 20 61 6e 20 69 6e 63 6c 75 73 69 6f 6e 20 70 72 6f 6f 66 20 61 6e 64 20 61 20 63 6f .for.an.inclusion.proof.and.a.co
5660 73 69 67 6e 65 64 20 74 72 65 65 20 68 65 61 64 2e 00 43 65 72 74 69 66 69 63 61 74 65 20 54 72 signed.tree.head..Certificate.Tr
5680 61 6e 73 70 61 72 65 6e 63 79 2e 20 20 54 68 65 72 65 66 6f 72 65 2c 20 73 69 67 73 75 6d 20 6c ansparency...Therefore,.sigsum.l
56a0 6f 67 73 20 64 6f 20 6e 6f 74 20 70 72 6f 76 69 64 65 20 6c 6f 77 20 6c 61 74 65 6e 63 79 20 2d ogs.do.not.provide.low.latency.-
56c0 2d 20 74 68 65 00 72 65 71 75 65 73 74 20 69 73 20 61 63 63 65 70 74 65 64 2c 20 74 68 65 20 6c -.the.request.is.accepted,.the.l
56e0 6f 67 20 5f 74 72 69 65 73 5f 20 74 6f 20 69 6e 63 6f 72 70 6f 72 61 74 65 20 74 68 65 20 73 75 og._tries_.to.incorporate.the.su
5700 62 6d 69 74 74 65 64 20 6c 65 61 66 20 69 6e 74 6f 20 69 74 73 20 4d 65 72 6b 6c 65 20 74 72 65 bmitted.leaf.into.its.Merkle.tre
5720 65 2e 20 20 54 68 65 72 65 20 61 72 65 20 68 6f 77 65 76 65 72 20 6e 6f 20 5f 70 72 6f 6d 69 73 e...There.are.however.no._promis
5740 65 73 20 6f 66 20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 5f 20 61 73 20 69 6e 00 57 68 65 6e es.of.public.logging_.as.in.When
5760 20 61 20 73 75 62 6d 69 74 74 65 64 20 6c 6f 67 67 69 6e 67 00 00 74 68 65 20 73 69 67 6e 61 74 .a.submitted.logging..the.signat
5780 75 72 65 20 69 73 20 76 61 6c 69 64 2c 20 74 68 65 6e 20 63 6f 6e 73 74 72 75 63 74 73 20 74 68 ure.is.valid,.then.constructs.th
57a0 65 20 4d 65 72 6b 6c 65 20 74 72 65 65 20 6c 65 61 66 20 61 73 20 64 65 73 63 72 69 62 65 64 20 e.Merkle.tree.leaf.as.described.
57c0 69 6e 20 33 2e 31 20 61 6e 64 20 68 61 73 68 65 73 20 69 74 20 74 6f 20 63 6f 6e 73 74 72 75 63 in.3.1.and.hashes.it.to.construc
57e0 74 20 74 68 65 20 6c 65 61 66 27 73 20 6b 65 79 20 68 61 73 68 2e 00 6b 65 79 20 61 6e 64 20 64 t.the.leaf's.key.hash..key.and.d
5800 6f 6d 61 69 6e 20 68 69 6e 74 20 61 73 20 41 53 43 49 49 20 6b 65 79 2d 76 61 6c 75 65 20 70 61 omain.hint.as.ASCII.key-value.pa
5820 69 72 73 2e 20 20 54 68 65 20 6c 6f 67 20 76 65 72 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 irs...The.log.verifies.that.the.
5840 70 75 62 6c 69 63 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 20 69 73 20 70 72 65 73 65 public.verification.key.is.prese
5860 6e 74 20 69 6e 20 44 4e 53 20 61 6e 64 20 75 73 65 73 20 69 74 20 74 6f 20 63 68 65 63 6b 20 74 nt.in.DNS.and.uses.it.to.check.t
5880 68 61 74 00 41 20 73 69 67 6e 65 72 20 73 75 62 6d 69 74 73 20 73 68 61 72 64 20 68 69 6e 74 2c hat.A.signer.submits.shard.hint,
58a0 20 63 68 65 63 6b 73 75 6d 2c 20 73 69 67 6e 61 74 75 72 65 2c 20 70 75 62 6c 69 63 20 76 65 72 .checksum,.signature,.public.ver
58c0 69 66 69 63 61 74 69 6f 6e 00 00 73 69 6e 63 65 20 74 68 65 20 64 61 74 61 20 73 74 72 75 63 74 ification..since.the.data.struct
58e0 75 72 65 73 20 62 65 69 6e 67 20 65 78 63 68 61 6e 67 65 64 20 61 72 65 20 70 72 69 6d 69 74 69 ures.being.exchanged.are.primiti
5900 76 65 20 65 6e 6f 75 67 68 2e 00 75 73 65 20 61 20 73 69 6d 70 6c 65 20 41 53 43 49 49 20 66 6f ve.enough..use.a.simple.ASCII.fo
5920 72 6d 61 74 2e 20 20 41 20 6d 6f 72 65 20 63 6f 6d 70 6c 65 78 20 70 61 72 73 65 72 20 6c 69 6b rmat...A.more.complex.parser.lik
5940 65 20 4a 53 4f 4e 20 69 73 20 6e 6f 74 20 6e 65 65 64 65 64 00 53 69 67 73 75 6d 20 6c 6f 67 73 e.JSON.is.not.needed.Sigsum.logs
5960 20 69 6d 70 6c 65 6d 65 6e 74 20 61 6e 20 48 54 54 50 28 53 29 20 41 50 49 2e 20 20 49 6e 70 75 .implement.an.HTTP(S).API...Inpu
5980 74 20 61 6e 64 20 6f 75 74 70 75 74 20 69 73 20 68 75 6d 61 6e 2d 72 65 61 64 61 62 6c 65 20 61 t.and.output.is.human-readable.a
59a0 6e 64 00 23 23 23 23 20 33 2e 32 2e 32 20 2d 20 53 75 62 6d 69 74 20 72 65 71 75 65 73 74 00 00 nd.####.3.2.2.-.Submit.request..
59c0 4f 6e 63 65 20 70 72 65 73 65 6e 74 20 69 6e 20 44 4e 53 2c 20 61 20 76 65 72 69 66 69 63 61 74 Once.present.in.DNS,.a.verificat
59e0 69 6f 6e 20 6b 65 79 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 6c 6f 67 20 72 65 71 75 65 ion.key.can.be.used.in.log.reque
5a00 73 74 73 2e 00 70 61 72 74 20 6f 66 20 61 20 64 65 66 65 6e 73 65 20 6d 65 63 68 61 6e 69 73 6d sts..part.of.a.defense.mechanism
5a20 20 74 68 61 74 20 68 65 6c 70 73 20 6c 6f 67 20 6f 70 65 72 61 74 6f 72 73 20 74 6f 20 64 65 61 .that.helps.log.operators.to.dea
5a40 6c 20 77 69 74 68 20 6c 6f 67 20 73 70 61 6d 2e 00 63 68 65 63 6b 20 74 68 61 74 20 5f 73 6f 6d l.with.log.spam..check.that._som
5a60 65 20 64 6f 6d 61 69 6e 5f 20 69 73 20 61 77 61 72 65 20 6f 66 20 74 68 65 20 73 69 67 6e 65 72 e.domain_.is.aware.of.the.signer
5a80 27 73 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 2e 20 20 54 68 69 73 20 69 73 00 54 68 's.verification.key...This.is.Th
5aa0 65 20 73 69 67 6e 65 72 20 61 6c 73 6f 20 68 61 73 20 74 6f 20 64 6f 20 61 20 6f 6e 65 2d 74 69 e.signer.also.has.to.do.a.one-ti
5ac0 6d 65 20 44 4e 53 20 73 65 74 75 70 2e 20 20 41 73 20 6f 75 74 6c 69 6e 65 64 20 62 65 6c 6f 77 me.DNS.setup...As.outlined.below
5ae0 2c 20 6c 6f 67 73 20 77 69 6c 6c 00 00 54 68 65 20 73 69 67 6e 65 72 20 73 69 67 6e 73 20 74 68 ,.logs.will..The.signer.signs.th
5b00 65 20 73 65 6c 65 63 74 65 64 20 73 68 61 72 64 20 68 69 6e 74 20 61 6e 64 20 63 68 65 63 6b 73 e.selected.shard.hint.and.checks
5b20 75 6d 2e 00 00 68 61 73 68 20 66 75 6e 63 74 69 6f 6e 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 um...hash.function...For.example
5b40 2c 20 69 74 20 63 6f 75 6c 64 20 62 65 20 74 68 65 20 68 61 73 68 20 6f 66 20 61 6e 20 65 78 65 ,.it.could.be.the.hash.of.an.exe
5b60 63 75 74 61 62 6c 65 20 62 69 6e 61 72 79 2e 00 54 68 65 20 73 69 67 6e 65 72 20 73 65 6c 65 63 cutable.binary..The.signer.selec
5b80 74 73 20 61 20 63 68 65 63 6b 73 75 6d 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 6c 6f 67 ts.a.checksum.that.should.be.log
5ba0 67 65 64 2c 20 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 74 68 65 20 6f 75 74 70 75 74 20 6f 66 20 61 ged,.most.likely.the.output.of.a
5bc0 00 00 72 65 70 6c 61 79 65 64 20 69 6e 20 61 20 6e 6f 6e 2d 6f 76 65 72 6c 61 70 70 69 6e 67 20 ..replayed.in.a.non-overlapping.
5be0 73 68 61 72 64 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 62 79 20 61 20 67 6f 6f 64 20 53 61 6d shard,.for.example.by.a.good.Sam
5c00 61 72 69 74 61 6e 2e 00 69 6e 63 6f 72 70 6f 72 61 74 65 64 20 69 6e 74 6f 20 74 68 65 20 73 69 aritan..incorporated.into.the.si
5c20 67 6e 65 64 20 73 74 61 74 65 6d 65 6e 74 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 61 20 gned.statement.to.ensure.that.a.
5c40 6c 6f 67 27 73 20 6c 65 61 76 65 73 20 63 61 6e 6e 6f 74 20 62 65 00 41 20 73 68 61 72 64 20 68 log's.leaves.cannot.be.A.shard.h
5c60 69 6e 74 20 69 73 00 61 63 74 69 76 65 20 64 75 72 69 6e 67 20 32 30 32 31 22 2e 00 41 20 73 69 int.is.active.during.2021"..A.si
5c80 67 6e 65 72 20 73 65 6c 65 63 74 73 20 61 20 73 68 61 72 64 20 68 69 6e 74 20 72 65 70 72 65 73 gner.selects.a.shard.hint.repres
5ca0 65 6e 74 69 6e 67 20 61 6e 20 61 62 73 74 72 61 63 74 20 73 74 61 74 65 6d 65 6e 74 20 6c 69 6b enting.an.abstract.statement.lik
5cc0 65 20 22 73 69 67 73 75 6d 20 6c 6f 67 73 20 74 68 61 74 20 61 72 65 00 23 23 23 23 20 33 2e 32 e."sigsum.logs.that.are.####.3.2
5ce0 2e 31 20 2d 20 50 72 65 70 61 72 65 20 61 20 72 65 71 75 65 73 74 00 23 23 23 20 33 2e 32 20 2d .1.-.Prepare.a.request.###.3.2.-
5d00 20 55 73 61 67 65 20 70 61 74 74 65 72 6e 00 00 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 76 65 72 .Usage.pattern..other.words,.ver
5d20 69 66 69 65 72 73 20 61 6e 64 20 6d 6f 6e 69 74 6f 72 73 20 6d 75 73 74 20 6c 6f 63 61 74 65 20 ifiers.and.monitors.must.locate.
5d40 73 69 67 6e 65 72 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 73 20 69 6e 64 65 70 65 6e signer.verification.keys.indepen
5d60 64 65 6e 74 6c 79 20 6f 66 20 6c 6f 67 73 2c 20 61 6e 64 20 74 72 75 73 74 20 74 68 65 6d 20 65 dently.of.logs,.and.trust.them.e
5d80 78 70 6c 69 63 69 74 6c 79 2e 00 74 68 65 20 6c 69 6b 65 6c 69 68 6f 6f 64 20 74 68 61 74 20 61 xplicitly..the.likelihood.that.a
5da0 6e 20 75 6e 74 72 75 73 74 65 64 20 6b 65 79 20 69 73 20 64 69 73 63 6f 76 65 72 65 64 20 61 6e n.untrusted.key.is.discovered.an
5dc0 64 20 75 73 65 64 20 62 79 20 6d 69 73 74 61 6b 65 2e 20 20 49 6e 00 4e 6f 74 65 20 74 68 61 74 d.used.by.mistake...In.Note.that
5de0 20 61 20 6b 65 79 20 68 61 73 68 20 69 73 20 6c 6f 67 67 65 64 20 72 61 74 68 65 72 20 74 68 61 .a.key.hash.is.logged.rather.tha
5e00 6e 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 69 74 73 65 6c 66 2e 20 20 54 68 69 73 20 72 n.the.public.key.itself...This.r
5e20 65 64 75 63 65 73 00 00 64 61 74 61 20 74 68 61 74 20 61 20 63 68 65 63 6b 73 75 6d 20 72 65 70 educes..data.that.a.checksum.rep
5e40 72 65 73 65 6e 74 73 2e 20 20 57 68 65 72 65 20 64 61 74 61 20 69 73 20 6c 6f 63 61 74 65 64 20 resents...Where.data.is.located.
5e60 69 73 20 75 73 65 2d 63 61 73 65 20 73 70 65 63 69 66 69 63 2e 00 41 6e 79 20 61 64 64 69 74 69 is.use-case.specific..Any.additi
5e80 6f 6e 61 6c 20 6d 65 74 61 64 61 74 61 20 74 68 61 74 20 69 73 20 75 73 65 2d 63 61 73 65 20 73 onal.metadata.that.is.use-case.s
5ea0 70 65 63 69 66 69 63 20 63 61 6e 20 62 65 20 73 74 6f 72 65 64 20 61 73 20 70 61 72 74 20 6f 66 pecific.can.be.stored.as.part.of
5ec0 20 74 68 65 00 00 62 65 20 75 73 65 64 20 74 6f 20 76 65 72 69 66 79 20 74 68 65 20 73 69 67 6e .the..be.used.to.verify.the.sign
5ee0 61 74 75 72 65 2e 00 2d 20 2a 2a 6b 65 79 5f 68 61 73 68 2a 2a 3a 20 61 20 63 72 79 70 74 6f 67 ature..-.**key_hash**:.a.cryptog
5f00 72 61 70 68 69 63 20 68 61 73 68 20 6f 66 20 74 68 65 20 73 69 67 73 65 6c 65 63 74 65 73 68 61 raphic.hash.of.the.sigselectesha
5f20 72 64 20 68 69 6e 74 20 61 6e 64 20 63 68 65 63 6b 73 65 73 65 6c 65 63 74 65 64 20 73 68 61 72 rd.hint.and.checkseselected.shar
5f40 64 20 68 69 6e 74 20 61 6e 64 20 63 68 65 63 6b 73 75 6d 2e 00 2d 20 2a 2a 73 69 67 6e 61 74 75 d.hint.and.checksum..-.**signatu
5f60 72 65 2a 2a 3a 20 61 20 64 69 67 69 74 61 6c 20 73 69 67 6e 61 74 75 72 65 20 74 68 61 74 20 69 re**:.a.digital.signature.that.i
5f80 73 20 63 6f 6d 70 75 74 65 64 20 62 79 20 61 20 73 69 67 6e 65 72 20 6f 76 65 72 20 74 68 65 00 s.computed.by.a.signer.over.the.
5fa0 6a 75 73 74 20 63 68 65 63 6b 73 75 6d 73 2e 00 2d 20 2a 2a 63 68 65 63 6b 73 75 6d 2a 2a 3a 20 just.checksums..-.**checksum**:.
5fc0 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 61 20 68 61 73 68 20 6f 66 20 73 6f 6d 65 20 64 61 74 61 2e most.likely.a.hash.of.some.data.
5fe0 20 20 54 68 65 20 6c 6f 67 20 69 73 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 20 64 61 74 61 3b 00 ..The.log.is.not.aware.of.data;.
6000 61 64 00 00 0b 00 00 00 33 01 00 00 00 10 00 00 43 00 00 00 00 00 00 00 f6 0f 00 00 91 0f 00 00 ad......3.......C...............
6020 90 0f 00 00 82 0f 00 00 00 0f 00 00 b3 0e 00 00 b2 0e 00 00 a7 0e 00 00 5a 0e 00 00 11 0e 00 00 ........................Z.......
6040 10 0e 00 00 f6 0d 00 00 a3 0d 00 00 52 0d 00 00 09 0d 00 00 f4 0c 00 00 a6 0c 00 00 a5 0c 00 00 ............R...................
6060 5b 0c 00 00 0a 0c 00 00 b7 0b 00 00 7b 0b 00 00 32 0b 00 00 f1 0a 00 00 f0 0a 00 00 a2 0a 00 00 [...........{...2...............
6080 51 0a 00 00 06 0a 00 00 bb 09 00 00 6f 09 00 00 6e 09 00 00 1f 09 00 00 d2 08 00 00 8a 08 00 00 Q...........o...n...............
60a0 89 08 00 00 71 08 00 00 1f 08 00 00 d1 07 00 00 7a 07 00 00 26 07 00 00 25 07 00 00 13 07 00 00 ....q...........z...&...%.......
60c0 c6 06 00 00 75 06 00 00 74 06 00 00 2b 06 00 00 dd 05 00 00 7d 05 00 00 7c 05 00 00 2d 05 00 00 ....u...t...+.......}...|...-...
60e0 d4 04 00 00 7e 04 00 00 30 04 00 00 2f 04 00 00 e7 03 00 00 99 03 00 00 4a 03 00 00 fd 02 00 00 ....~...0.../...........J.......
6100 fc 02 00 00 d9 02 00 00 a2 02 00 00 77 02 00 00 f0 01 00 00 a5 01 00 00 69 01 00 00 68 01 00 00 ............w...........i...h...
6120 33 01 00 00 2e 01 00 00 00 00 00 00 23 23 23 23 23 23 23 23 23 23 23 20 34 2e 32 20 2d 20 57 68 3...........###########.4.2.-.Wh
6140 61 74 20 69 73 20 74 68 65 20 70 6f 69 6e 74 20 6f 66 20 68 61 76 69 6e 67 20 61 20 73 68 61 72 at.is.the.point.of.having.a.shar
6160 64 20 68 69 6e 74 3f 00 00 61 62 6f 75 74 2e 20 20 57 65 20 61 72 65 20 73 74 69 6c 6c 20 6f 70 d.hint?..about...We.are.still.op
6180 65 6e 20 74 6f 20 72 65 6d 6f 76 65 2c 20 61 64 64 2c 20 6f 72 20 63 68 61 6e 67 65 20 74 68 69 en.to.remove,.add,.or.change.thi
61a0 6e 67 73 2e 00 49 74 20 6d 61 79 20 62 65 20 69 6e 63 6f 6d 70 6c 65 74 65 2c 20 62 75 74 20 63 ngs..It.may.be.incomplete,.but.c
61c0 6f 76 65 72 73 20 73 6f 6d 65 20 64 65 74 61 69 6c 73 20 74 68 61 74 20 61 72 65 20 77 6f 72 74 overs.some.details.that.are.wort
61e0 68 20 74 68 69 6e 6b 69 6e 67 20 6d 6f 72 65 00 09 5b 32 30 32 31 2d 31 30 2d 30 35 5d 28 68 74 h.thinking.more..[2021-10-05](ht
6200 74 70 73 3a 2f 2f 67 69 74 2e 73 69 67 73 75 6d 2e 6f 72 67 2f 73 69 67 73 75 6d 2f 74 72 65 65 tps://git.sigsum.org/sigsum/tree
6220 2f 61 72 63 68 69 76 65 2f 32 30 32 31 2d 31 30 2d 30 35 2d 6f 70 65 6e 2d 64 65 73 69 67 6e 2d /archive/2021-10-05-open-design-
6240 74 68 6f 75 67 68 74 73 3f 69 64 3d 35 63 30 32 37 37 30 62 35 62 64 37 64 34 33 62 39 33 32 37 thoughts?id=5c02770b5bd7d43b9327
6260 36 32 33 64 33 64 65 39 61 64 65 64 61 32 34 36 38 65 38 34 29 2e 00 41 20 62 72 69 65 66 20 73 623d3de9adeda2468e84)..A.brief.s
6280 75 6d 6d 61 72 79 20 61 70 70 65 61 72 65 64 20 69 6e 20 6f 75 72 20 61 72 63 68 69 76 65 20 6f ummary.appeared.in.our.archive.o
62a0 6e 00 23 23 23 23 20 34 2e 31 20 2d 20 57 68 61 74 20 70 61 72 74 73 20 6f 66 20 74 68 65 20 64 n.####.4.1.-.What.parts.of.the.d
62c0 65 73 69 67 6e 20 61 72 65 20 75 70 20 66 6f 72 20 64 65 62 61 74 65 3f 00 23 23 23 20 34 20 2d esign.are.up.for.debate?.###.4.-
62e0 20 46 72 65 71 75 65 6e 74 6c 79 20 41 73 6b 65 64 20 51 75 65 73 74 69 6f 6e 73 00 00 63 68 65 .Frequently.Asked.Questions..che
6300 63 6b 73 75 6d 73 20 69 6e 20 74 68 65 20 6c 6f 67 73 20 61 6e 64 20 67 65 6e 65 72 61 74 65 20 cksums.in.the.logs.and.generate.
6320 61 6c 65 72 74 73 20 69 66 20 61 6e 79 20 6b 65 79 2d 75 73 61 67 65 20 69 73 20 69 6e 61 70 70 alerts.if.any.key-usage.is.inapp
6340 72 6f 70 72 69 61 74 65 2e 00 61 6e 64 20 64 69 73 74 72 69 62 75 74 69 6e 67 20 6e 65 63 65 73 ropriate..and.distributing.neces
6360 73 61 72 79 20 70 72 6f 6f 66 73 20 6f 66 20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 2e 20 20 sary.proofs.of.public.logging...
6380 4d 6f 6e 69 74 6f 72 73 20 64 69 73 63 6f 76 65 72 20 73 69 67 6e 65 64 00 64 69 73 74 72 69 62 Monitors.discover.signed.distrib
63a0 75 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 2e 20 20 53 69 67 6e 65 72 73 20 61 72 65 20 72 65 ution.mechanism...Signers.are.re
63c0 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 6c 6f 67 67 69 6e 67 20 73 69 67 6e 65 64 20 63 68 65 sponsible.for.logging.signed.che
63e0 63 6b 73 75 6d 73 00 56 65 72 69 66 69 65 72 73 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 6c cksums.Verifiers.interact.with.l
6400 6f 67 73 20 69 6e 64 69 72 65 63 74 6c 79 20 74 68 72 6f 75 67 68 20 74 68 65 69 72 20 73 69 67 ogs.indirectly.through.their.sig
6420 6e 65 72 27 73 20 65 78 69 73 74 69 6e 67 00 00 54 68 69 73 20 61 6c 73 6f 20 6b 65 65 70 73 20 ner's.existing..This.also.keeps.
6440 6c 6f 67 20 6f 70 65 72 61 74 69 6f 6e 73 20 73 69 6d 70 6c 65 72 20 62 65 63 61 75 73 65 20 74 log.operations.simpler.because.t
6460 68 65 72 65 20 61 72 65 20 6c 65 73 73 20 64 61 74 61 20 74 6f 20 6d 61 6e 61 67 65 2e 00 4e 6f here.are.less.data.to.manage..No
6480 20 64 61 74 61 20 6f 72 20 72 69 63 68 20 6d 65 74 61 64 61 74 61 20 69 73 20 62 65 69 6e 67 20 .data.or.rich.metadata.is.being.
64a0 6c 6f 67 67 65 64 2c 20 74 6f 20 70 72 6f 74 65 63 74 20 74 68 65 20 6c 6f 67 20 6f 70 65 72 61 logged,.to.protect.the.log.opera
64c0 74 6f 72 20 66 72 6f 6d 20 70 6f 69 73 6f 6e 69 6e 67 2e 00 41 50 49 2e 20 20 41 20 73 69 67 6e tor.from.poisoning..API...A.sign
64e0 65 72 20 6d 75 73 74 20 70 72 6f 76 65 20 74 68 61 74 20 74 68 65 79 20 63 6f 6e 74 72 6f 6c 20 er.must.prove.that.they.control.
6500 61 20 44 4e 53 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 61 73 20 61 6e 20 61 6e 74 69 2d 73 70 61 a.DNS.domain.name.as.an.anti-spa
6520 6d 20 6d 65 63 68 61 6e 69 73 6d 2e 00 53 69 67 6e 65 72 73 2c 20 6d 6f 6e 69 74 6f 72 73 2c 20 m.mechanism..Signers,.monitors,.
6540 61 6e 64 20 77 69 74 6e 65 73 73 65 73 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 74 68 65 20 and.witnesses.interact.with.the.
6560 6c 6f 67 73 20 75 73 69 6e 67 20 61 6e 20 41 53 43 49 49 20 48 54 54 50 28 53 29 00 00 68 65 61 logs.using.an.ASCII.HTTP(S)..hea
6580 64 20 69 73 20 63 6f 72 72 65 63 74 20 62 65 66 6f 72 65 20 63 6f 73 69 67 6e 69 6e 67 2e 20 20 d.is.correct.before.cosigning...
65a0 43 6f 72 72 65 63 74 6e 65 73 73 20 69 6e 63 6c 75 64 65 73 20 66 72 65 73 68 6e 65 73 73 20 61 Correctness.includes.freshness.a
65c0 6e 64 20 74 68 65 20 61 70 70 65 6e 64 2d 6f 6e 6c 79 20 70 72 6f 70 65 72 74 79 2e 00 63 6f 6e nd.the.append-only.property..con
65e0 74 72 6f 6c 6c 69 6e 67 20 65 6e 6f 75 67 68 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 77 69 74 6e trolling.enough.independent.witn
6600 65 73 73 65 73 2e 20 20 41 20 77 69 74 6e 65 73 73 20 63 68 65 63 6b 73 20 74 68 61 74 20 61 20 esses...A.witness.checks.that.a.
6620 6c 6f 67 27 73 20 74 72 65 65 00 54 68 65 20 64 69 66 66 69 63 75 6c 74 79 20 6f 66 20 62 79 70 log's.tree.The.difficulty.of.byp
6640 61 73 73 69 6e 67 20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 20 69 73 20 62 61 73 65 64 20 6f assing.public.logging.is.based.o
6660 6e 20 74 68 65 20 64 69 66 66 69 63 75 6c 74 79 20 6f 66 00 00 73 68 75 74 20 64 6f 77 6e 20 5f n.the.difficulty.of..shut.down._
6680 73 61 66 65 6c 79 5f 20 62 65 63 61 75 73 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6f 6e 20 safely_.because.verification.on.
66a0 74 68 65 20 76 65 72 69 66 69 65 72 2d 73 69 64 65 20 69 73 20 6e 6f 74 20 69 6e 74 65 72 61 63 the.verifier-side.is.not.interac
66c0 74 69 76 65 2e 00 53 69 67 73 75 6d 20 6c 6f 67 73 20 61 72 65 20 73 68 61 72 64 65 64 20 61 6e tive..Sigsum.logs.are.sharded.an
66e0 64 20 73 68 75 74 20 64 6f 77 6e 20 61 74 20 70 72 65 64 65 66 69 6e 65 64 20 74 69 6d 65 73 2e d.shut.down.at.predefined.times.
6700 20 20 41 20 73 69 67 73 75 6d 20 6c 6f 67 20 63 61 6e 00 23 23 23 20 33 2e 33 20 2d 20 53 75 6d ..A.sigsum.log.can.###.3.3.-.Sum
6720 6d 61 72 79 00 00 6d 61 79 20 61 6c 73 6f 20 6e 65 65 64 20 74 6f 20 62 65 20 61 77 61 72 65 20 mary..may.also.need.to.be.aware.
6740 6f 66 20 68 6f 77 20 74 6f 20 6c 6f 63 61 74 65 20 74 68 65 20 64 61 74 61 20 74 68 61 74 20 66 of.how.to.locate.the.data.that.f
6760 6f 75 6e 64 20 63 68 65 63 6b 73 75 6d 73 20 72 65 70 72 65 73 65 6e 74 2e 00 73 70 65 63 69 66 ound.checksums.represent..specif
6780 69 63 20 69 6e 20 73 69 67 73 75 6d 2e 20 20 41 74 20 61 20 6d 69 6e 69 6d 75 6d 2c 20 6d 6f 6e ic.in.sigsum...At.a.minimum,.mon
67a0 69 74 6f 72 73 20 6e 65 65 64 20 74 6f 20 6c 6f 63 61 74 65 20 72 65 6c 65 76 61 6e 74 20 70 75 itors.need.to.locate.relevant.pu
67c0 62 6c 69 63 20 6b 65 79 73 2e 20 20 54 68 65 79 00 74 72 61 63 6b 20 6f 66 20 77 68 61 74 20 61 blic.keys...They.track.of.what.a
67e0 70 70 65 61 72 73 20 69 6e 20 74 68 65 20 70 75 62 6c 69 63 20 6c 6f 67 73 2e 20 20 4d 6f 6e 69 ppears.in.the.public.logs...Moni
6800 74 6f 72 69 6e 67 20 69 73 20 6e 65 63 65 73 73 61 72 69 6c 79 20 75 73 65 2d 63 61 73 65 00 41 toring.is.necessarily.use-case.A
6820 6e 20 6f 66 74 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 73 74 65 70 20 69 73 20 74 68 61 74 20 n.often.overlooked.step.is.that.
6840 74 72 61 6e 73 70 61 72 65 6e 63 79 20 6c 6f 67 67 69 6e 67 20 66 61 6c 6c 73 20 73 68 6f 72 74 transparency.logging.falls.short
6860 20 69 66 20 6e 6f 2d 6f 6e 65 20 6b 65 65 70 73 00 23 23 23 23 20 33 2e 32 2e 36 20 2d 20 4d 6f .if.no-one.keeps.####.3.2.6.-.Mo
6880 6e 69 74 6f 72 69 6e 67 00 00 72 65 6c 65 61 73 65 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 nitoring..release.infrastructure
68a0 20 77 6f 75 6c 64 20 62 65 20 64 65 74 65 63 74 65 64 20 69 66 20 74 68 65 20 6c 6f 67 20 69 73 .would.be.detected.if.the.log.is
68c0 20 6e 6f 74 20 63 6f 6d 70 72 6f 6d 69 73 65 64 2e 00 69 6e 20 61 20 6b 6e 6f 77 6e 20 6c 6f 67 .not.compromised..in.a.known.log
68e0 20 77 69 74 68 6f 75 74 20 77 69 74 6e 65 73 73 69 6e 67 2e 20 20 41 74 74 61 63 6b 73 20 61 67 .without.witnessing...Attacks.ag
6900 61 69 6e 73 74 20 74 68 65 20 73 69 67 6e 65 72 27 73 20 73 69 67 6e 69 6e 67 20 61 6e 64 00 41 ainst.the.signer's.signing.and.A
6920 6e 6f 74 68 65 72 20 65 78 61 6d 70 6c 65 20 6f 66 20 70 61 72 74 69 61 6c 20 65 6e 66 6f 72 63 nother.example.of.partial.enforc
6940 65 6d 65 6e 74 20 77 6f 75 6c 64 20 62 65 20 69 66 20 61 20 76 65 72 69 66 69 65 72 20 72 65 71 ement.would.be.if.a.verifier.req
6960 75 69 72 65 64 20 6c 6f 67 67 69 6e 67 00 00 53 6f 6d 65 6f 6e 65 20 69 6e 20 61 20 73 69 6d 69 uired.logging..Someone.in.a.simi
6980 6c 61 72 20 61 72 65 61 20 6d 61 79 20 62 65 20 61 62 6c 65 20 74 6f 20 64 65 74 65 63 74 20 74 lar.area.may.be.able.to.detect.t
69a0 68 69 73 20 61 6e 64 20 72 65 70 6f 72 74 20 74 68 65 20 61 74 74 61 63 6b 2e 00 61 63 63 65 70 his.and.report.the.attack..accep
69c0 74 20 64 61 74 61 20 66 72 6f 6d 20 61 20 6d 61 6c 69 63 69 6f 75 73 20 64 61 74 61 20 6d 69 72 t.data.from.a.malicious.data.mir
69e0 72 6f 72 20 77 69 74 68 6f 75 74 20 70 72 6f 6f 66 73 20 6f 66 20 70 75 62 6c 69 63 20 6c 6f 67 ror.without.proofs.of.public.log
6a00 67 69 6e 67 2e 00 65 78 61 6d 70 6c 65 2c 20 73 6f 6d 65 20 76 65 72 69 66 69 65 72 20 6d 61 79 ging..example,.some.verifier.may
6a20 20 6e 6f 74 20 65 6e 66 6f 72 63 65 20 74 68 65 73 65 20 63 72 69 74 65 72 69 61 20 61 74 20 61 .not.enforce.these.criteria.at.a
6a40 6c 6c 2c 20 61 6e 64 20 73 6f 20 77 6f 75 6c 64 00 76 65 72 69 66 69 65 72 20 5f 66 61 69 6c 73 ll,.and.so.would.verifier._fails
6a60 20 6f 70 65 6e 5f 20 62 79 20 65 6e 66 6f 72 63 69 6e 67 20 74 68 65 20 73 65 63 6f 6e 64 20 61 .open_.by.enforcing.the.second.a
6a80 6e 64 20 74 68 69 72 64 20 63 72 69 74 65 72 69 61 20 70 61 72 74 69 61 6c 6c 79 2e 20 20 46 6f nd.third.criteria.partially...Fo
6aa0 72 00 49 6e 20 61 20 6c 65 73 73 20 69 64 65 61 6c 20 77 6f 72 6c 64 20 73 69 67 73 75 6d 20 6c r.In.a.less.ideal.world.sigsum.l
6ac0 6f 67 67 69 6e 67 20 63 61 6e 20 66 61 63 69 6c 69 74 61 74 65 20 64 65 74 65 63 74 69 6f 6e 20 ogging.can.facilitate.detection.
6ae0 6f 66 20 61 74 74 61 63 6b 73 20 69 66 20 61 00 00 75 6e 6c 65 73 73 20 74 68 65 20 61 74 74 61 of.attacks.if.a..unless.the.atta
6b00 63 6b 65 72 20 63 6f 6e 74 72 6f 6c 73 20 6d 6f 72 65 20 74 68 61 6e 20 61 20 74 68 72 65 73 68 cker.controls.more.than.a.thresh
6b20 6f 6c 64 20 6f 66 20 77 69 74 6e 65 73 73 65 73 2e 00 74 72 69 63 6b 65 64 20 69 6e 74 6f 20 61 old.of.witnesses..tricked.into.a
6b40 63 63 65 70 74 69 6e 67 20 64 61 74 61 20 77 68 6f 73 65 20 63 68 65 63 6b 73 75 6d 20 68 61 76 ccepting.data.whose.checksum.hav
6b60 65 20 6e 6f 74 20 62 65 65 6e 20 70 75 62 6c 69 63 6c 79 20 6c 6f 67 67 65 64 00 75 73 69 6e 67 e.not.been.publicly.logged.using
6b80 20 61 20 76 61 72 69 61 6e 74 20 6f 66 20 77 69 74 6e 65 73 73 20 63 6f 73 69 67 6e 69 6e 67 2e .a.variant.of.witness.cosigning.
6ba0 20 20 41 20 76 65 72 69 66 69 65 72 20 63 61 6e 6e 6f 74 20 62 65 00 61 6e 20 69 6e 63 6c 75 73 ..A.verifier.cannot.be.an.inclus
6bc0 69 6f 6e 20 70 72 6f 6f 66 20 6c 65 61 64 73 20 75 70 20 74 6f 2e 20 20 53 69 67 73 75 6d 20 6c ion.proof.leads.up.to...Sigsum.l
6be0 6f 67 73 20 68 61 76 65 20 74 72 75 73 74 77 6f 72 74 68 79 20 74 72 65 65 20 68 65 61 64 73 20 ogs.have.trustworthy.tree.heads.
6c00 74 68 61 6e 6b 73 20 74 6f 00 54 68 65 72 65 66 6f 72 65 2c 20 61 20 70 72 6f 6f 66 20 6f 66 20 thanks.to.Therefore,.a.proof.of.
6c20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 20 69 73 20 6f 6e 6c 79 20 61 73 20 63 6f 6e 76 69 6e public.logging.is.only.as.convin
6c40 63 69 6e 67 20 61 73 20 74 68 65 20 74 72 65 65 20 68 65 61 64 20 74 68 61 74 00 4e 6f 74 69 63 cing.as.the.tree.head.that.Notic
6c60 65 20 74 68 61 74 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 6e 65 77 20 6f 75 74 62 6f 75 6e 64 e.that.there.are.no.new.outbound
6c80 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 61 20 76 65 72 69 66 .network.connections.for.a.verif
6ca0 69 65 72 2e 00 00 33 2e 20 54 68 65 20 70 72 6f 76 69 64 65 64 20 74 72 65 65 20 68 65 61 64 20 ier...3..The.provided.tree.head.
6cc0 69 73 20 66 72 6f 6d 20 61 20 6b 6e 6f 77 6e 20 6c 6f 67 20 77 69 74 68 20 65 6e 6f 75 67 68 20 is.from.a.known.log.with.enough.
6ce0 76 61 6c 69 64 20 63 6f 73 69 67 6e 61 74 75 72 65 73 2e 00 69 74 73 20 69 6e 63 6c 75 73 69 6f valid.cosignatures..its.inclusio
6d00 6e 20 70 72 6f 6f 66 2e 00 32 2e 20 54 68 65 20 70 72 6f 76 69 64 65 64 20 74 72 65 65 20 68 65 n.proof..2..The.provided.tree.he
6d20 61 64 20 63 61 6e 20 62 65 20 72 65 63 6f 6e 73 74 72 75 63 74 65 64 20 66 72 6f 6d 20 74 68 65 ad.can.be.reconstructed.from.the
6d40 20 6c 6f 67 67 65 64 20 6c 65 61 66 20 61 6e 64 20 00 31 2e 20 54 68 65 20 64 61 74 61 27 73 20 .logged.leaf.and..1..The.data's.
6d60 63 68 65 63 6b 73 75 6d 20 61 6e 64 20 73 68 61 72 64 20 68 69 6e 74 20 61 72 65 20 73 69 67 6e checksum.and.shard.hint.are.sign
6d80 65 64 20 75 73 69 6e 67 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 75 62 6c 69 63 20 6b 65 ed.using.the.specified.public.ke
6da0 79 2e 00 41 20 76 65 72 69 66 69 65 72 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 61 63 63 65 70 74 y..A.verifier.should.only.accept
6dc0 20 74 68 65 20 64 69 73 74 72 69 62 75 74 65 64 20 64 61 74 61 20 69 66 20 74 68 65 20 66 6f 6c .the.distributed.data.if.the.fol
6de0 6c 6f 77 69 6e 67 20 63 72 69 74 65 72 69 61 20 68 6f 6c 64 3a 00 23 23 23 23 20 33 2e 32 2e 35 lowing.criteria.hold:.####.3.2.5
6e00 20 2d 20 56 65 72 69 66 69 63 61 74 69 6f 6e 00 00 72 65 66 65 72 73 20 74 6f 20 74 68 65 20 63 .-.Verification..refers.to.the.c
6e20 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 61 6e 20 69 6e 63 6c 75 73 69 6f 6e 20 70 72 6f 6f 66 20 ollection.of.an.inclusion.proof.
6e40 61 6e 64 20 61 20 63 6f 73 69 67 6e 65 64 20 74 72 65 65 20 68 65 61 64 2e 00 61 6e 20 69 6e 63 and.a.cosigned.tree.head..an.inc
6e60 6c 75 73 69 6f 6e 20 70 72 6f 6f 66 20 74 68 61 74 20 6c 65 61 64 73 20 75 70 20 74 6f 20 61 20 lusion.proof.that.leads.up.to.a.
6e80 63 6f 73 69 67 6e 65 64 20 74 72 65 65 20 68 65 61 64 2e 20 20 4e 6f 74 65 20 74 68 61 74 20 5f cosigned.tree.head...Note.that._
6ea0 70 72 6f 6f 66 5f 00 2a 2a 50 72 6f 6f 66 3a 2a 2a 00 00 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 6f proof_.**Proof:**..combination.o
6ec0 66 20 64 61 74 61 20 61 6e 64 20 6d 65 74 61 64 61 74 61 20 63 61 6e 20 62 65 20 75 73 65 64 20 f.data.and.metadata.can.be.used.
6ee0 74 6f 20 72 65 63 6f 6e 73 74 72 75 63 74 20 74 68 65 20 6c 6f 67 67 65 64 20 6c 65 61 66 2e 00 to.reconstruct.the.logged.leaf..
6f00 74 68 65 20 73 68 61 72 64 20 68 69 6e 74 2c 20 74 68 65 20 73 69 67 6e 61 74 75 72 65 20 6f 76 the.shard.hint,.the.signature.ov
6f20 65 72 20 73 68 61 72 64 20 68 69 6e 74 20 61 6e 64 20 63 68 65 63 6b 73 75 6d 2c 20 61 6e 64 20 er.shard.hint.and.checksum,.and.
6f40 74 68 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 20 68 61 73 68 20 75 73 65 64 20 69 the.verification.key.hash.used.i
6f60 6e 20 74 68 65 20 6c 6f 67 20 72 65 71 75 65 73 74 2e 20 20 4e 6f 74 65 20 74 68 61 74 20 74 68 n.the.log.request...Note.that.th
6f80 65 00 2a 2a 4d 65 74 61 64 61 74 61 3a 2a 2a 00 00 74 68 65 20 73 69 67 6e 65 72 27 73 20 64 61 e.**Metadata:**..the.signer's.da
6fa0 74 61 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 61 6e 20 65 78 65 63 75 74 61 62 6c 65 20 62 69 ta,.for.example.an.executable.bi
6fc0 6e 61 72 79 2e 20 20 49 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 70 72 6f 64 75 nary...It.can.be.used.to.reprodu
6fe0 63 65 20 61 20 6c 6f 67 67 65 64 20 63 68 65 63 6b 73 75 6d 2e 00 2a 2a 44 61 74 61 3a 2a 2a 00 ce.a.logged.checksum..**Data:**.
7000 61 64 00 00 29 00 00 00 51 01 00 00 00 10 00 00 43 00 00 00 00 00 00 00 ad 0f 00 00 5f 0f 00 00 ad..)...Q.......C..........._...
7020 0f 0f 00 00 c3 0e 00 00 c2 0e 00 00 76 0e 00 00 2c 0e 00 00 e2 0d 00 00 d9 0d 00 00 89 0d 00 00 ............v...,...............
7040 85 0d 00 00 2c 0d 00 00 e1 0c 00 00 e0 0c 00 00 d2 0c 00 00 84 0c 00 00 66 0c 00 00 62 0c 00 00 ....,...................f...b...
7060 36 0c 00 00 f9 0b 00 00 b8 0b 00 00 7a 0b 00 00 42 0b 00 00 01 0b 00 00 c0 0a 00 00 7f 0a 00 00 6...........z...B...............
7080 47 0a 00 00 0b 0a 00 00 cb 09 00 00 8e 09 00 00 56 09 00 00 16 09 00 00 d6 08 00 00 96 08 00 00 G...............V...............
70a0 6f 08 00 00 43 08 00 00 37 08 00 00 06 08 00 00 02 08 00 00 01 08 00 00 b5 07 00 00 67 07 00 00 o...C...7...................g...
70c0 19 07 00 00 cb 06 00 00 7f 06 00 00 7e 06 00 00 2d 06 00 00 df 05 00 00 94 05 00 00 48 05 00 00 ............~...-...........H...
70e0 47 05 00 00 fe 04 00 00 ae 04 00 00 60 04 00 00 0f 04 00 00 0e 04 00 00 c1 03 00 00 72 03 00 00 G...........`...............r...
7100 33 03 00 00 32 03 00 00 1c 03 00 00 cc 02 00 00 7c 02 00 00 3e 02 00 00 ed 01 00 00 9d 01 00 00 3...2...........|...>...........
7120 51 01 00 00 50 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Q...P...........................
7140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 61 72 65 20 61 63 63 65 70 74 65 64 2e 20 20 .................are.accepted...
7160 4f 6e 63 65 20 65 6c 61 70 73 65 64 2c 20 74 68 65 20 6c 6f 67 20 63 61 6e 20 62 65 20 73 68 75 Once.elapsed,.the.log.can.be.shu
7180 74 20 64 6f 77 6e 20 6f 72 20 62 65 20 6d 61 64 65 20 72 65 61 64 2d 6f 6e 6c 79 2e 00 53 68 61 t.down.or.be.made.read-only..Sha
71a0 72 64 69 6e 67 20 6d 65 61 6e 73 20 74 68 61 74 20 74 68 65 20 6c 6f 67 20 68 61 73 20 61 20 70 rding.means.that.the.log.has.a.p
71c0 72 65 64 65 66 69 6e 65 64 20 74 69 6d 65 20 64 75 72 69 6e 67 20 77 68 69 63 68 20 6c 6f 67 67 redefined.time.during.which.logg
71e0 69 6e 67 20 72 65 71 75 65 73 74 73 00 2d 20 2a 2a 73 68 61 72 64 5f 68 69 6e 74 2a 2a 3a 20 61 ing.requests.-.**shard_hint**:.a
7200 20 6e 75 6d 62 65 72 20 74 68 61 74 20 62 69 6e 64 73 20 74 68 65 20 6c 65 61 66 20 74 6f 20 61 .number.that.binds.the.leaf.to.a
7220 20 70 61 72 74 69 63 75 6c 61 72 20 5f 73 68 61 72 64 20 69 6e 74 65 72 76 61 6c 5f 2e 00 64 69 .particular._shard.interval_..di
7240 73 74 72 69 62 75 74 65 64 20 66 6f 72 6d 20 6f 66 20 74 72 75 73 74 2e 20 20 41 20 74 72 65 65 stributed.form.of.trust...A.tree
7260 20 6c 65 61 66 20 63 6f 6e 74 61 69 6e 73 20 66 6f 75 72 20 66 69 65 6c 64 73 3a 00 76 65 72 69 .leaf.contains.four.fields:.veri
7280 66 79 20 74 68 61 74 20 74 68 69 73 20 74 72 65 65 20 69 73 20 66 72 65 73 68 20 61 6e 64 20 61 fy.that.this.tree.is.fresh.and.a
72a0 70 70 65 6e 64 2d 6f 6e 6c 79 20 62 65 66 6f 72 65 20 63 6f 73 69 67 6e 69 6e 67 20 69 74 20 74 ppend-only.before.cosigning.it.t
72c0 6f 20 61 63 68 69 65 76 65 20 61 00 41 20 73 69 67 73 75 6d 20 6c 6f 67 20 6d 61 69 6e 74 61 69 o.achieve.a.A.sigsum.log.maintai
72e0 6e 73 20 61 20 70 75 62 6c 69 63 20 61 70 70 65 6e 64 2d 6f 6e 6c 79 20 4d 65 72 6b 6c 65 20 74 ns.a.public.append-only.Merkle.t
7300 72 65 65 2e 20 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 77 69 74 6e 65 73 73 65 73 00 23 23 23 20 ree...Independent.witnesses.###.
7320 33 2e 31 20 2d 20 4d 65 72 6b 6c 65 20 74 72 65 65 00 00 63 6f 73 69 67 6e 69 6e 67 20 70 72 6f 3.1.-.Merkle.tree..cosigning.pro
7340 74 6f 63 6f 6c 2e 20 20 4d 6f 72 65 20 64 65 74 61 69 6c 20 69 73 20 70 72 6f 76 69 64 65 64 20 tocol...More.detail.is.provided.
7360 69 6e 20 53 65 63 74 69 6f 6e 20 33 2e 32 2e 33 2e 00 61 64 64 69 74 69 6f 6e 61 6c 20 6f 75 74 in.Section.3.2.3..additional.out
7380 62 6f 75 6e 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 66 20 61 20 74 bound.network.connections.if.a.t
73a0 68 72 65 73 68 6f 6c 64 20 6f 66 20 77 69 74 6e 65 73 73 65 73 20 66 6f 6c 6c 6f 77 65 64 20 61 hreshold.of.witnesses.followed.a
73c0 00 56 65 72 69 66 69 65 72 73 20 61 6e 64 20 6d 6f 6e 69 74 6f 72 73 20 63 61 6e 20 62 65 20 63 .Verifiers.and.monitors.can.be.c
73e0 6f 6e 76 69 6e 63 65 64 20 74 68 61 74 20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 20 68 61 70 onvinced.that.public.logging.hap
7400 70 65 6e 65 64 20 77 69 74 68 6f 75 74 00 00 74 68 65 69 72 20 6b 65 79 2d 75 73 61 67 65 20 63 pened.without..their.key-usage.c
7420 61 6e 20 6e 6f 77 20 62 65 20 76 65 72 69 66 69 65 64 20 62 65 63 61 75 73 65 20 6e 6f 20 73 69 an.now.be.verified.because.no.si
7440 67 6e 69 6e 67 20 6f 70 65 72 61 74 69 6f 6e 20 67 6f 65 73 20 75 6e 6e 6f 74 69 63 65 64 2e 00 gning.operation.goes.unnoticed..
7460 6b 65 79 73 20 74 68 61 74 20 74 68 65 79 20 61 72 65 20 61 77 61 72 65 20 6f 66 2e 20 20 41 6e keys.that.they.are.aware.of...An
7480 79 20 66 61 6c 73 69 66 69 61 62 6c 65 20 63 6c 61 69 6d 20 74 68 61 74 20 61 20 73 69 67 6e 65 y.falsifiable.claim.that.a.signe
74a0 72 20 6d 61 6b 65 73 20 61 62 6f 75 74 00 6c 6f 67 67 69 6e 67 2e 20 20 4d 6f 6e 69 74 6f 72 73 r.makes.about.logging...Monitors
74c0 20 6c 6f 6f 6b 20 66 6f 72 20 73 69 67 6e 65 64 20 63 68 65 63 6b 73 75 6d 73 20 61 6e 64 20 64 .look.for.signed.checksums.and.d
74e0 61 74 61 20 74 68 61 74 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 70 75 62 6c 69 63 00 56 65 ata.that.correspond.to.public.Ve
7500 72 69 66 69 65 72 73 20 75 73 65 20 74 68 65 20 73 69 67 6e 65 72 27 73 20 64 61 74 61 20 69 66 rifiers.use.the.signer's.data.if
7520 20 69 74 20 69 73 20 61 63 63 6f 6d 70 61 6e 69 65 64 20 62 79 20 70 72 6f 6f 66 73 20 6f 66 20 .it.is.accompanied.by.proofs.of.
7540 70 75 62 6c 69 63 00 00 6c 6f 67 67 69 6e 67 2e 20 20 41 20 73 69 67 73 75 6d 20 6c 6f 67 20 64 public..logging...A.sigsum.log.d
7560 6f 65 73 20 6e 6f 74 20 68 65 6c 70 20 74 68 65 20 73 69 67 6e 65 72 20 77 69 74 68 20 61 6e 79 oes.not.help.the.signer.with.any
7580 20 64 61 74 61 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 00 74 68 65 20 73 69 67 6e 65 64 20 63 .data.distribution..the.signed.c
75a0 68 65 63 6b 73 75 6d 27 73 20 64 61 74 61 20 69 73 20 72 65 61 64 79 20 66 6f 72 20 64 69 73 74 hecksum's.data.is.ready.for.dist
75c0 72 69 62 75 74 69 6f 6e 20 77 69 74 68 20 70 72 6f 6f 66 73 20 6f 66 20 70 75 62 6c 69 63 00 69 ribution.with.proofs.of.public.i
75e0 6e 63 6c 75 73 69 6f 6e 20 70 72 6f 6f 66 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 74 68 61 74 nclusion.proof.is.available.that
7600 20 6c 65 61 64 73 20 75 70 20 74 6f 20 61 20 74 72 75 73 74 77 6f 72 74 68 79 20 4d 65 72 6b 6c .leads.up.to.a.trustworthy.Merkl
7620 65 20 74 72 65 65 20 68 65 61 64 2c 00 54 68 65 20 73 69 67 6e 69 6e 67 20 70 61 72 74 79 20 77 e.tree.head,.The.signing.party.w
7640 61 69 74 73 20 66 6f 72 20 74 68 65 69 72 20 73 75 62 6d 69 73 73 69 6f 6e 20 74 6f 20 62 65 20 aits.for.their.submission.to.be.
7660 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 65 20 6c 6f 67 2e 20 20 57 68 65 6e 20 61 6e 00 00 6b included.in.the.log...When.an..k
7680 65 79 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 44 4e 53 20 61 73 20 61 20 54 58 54 ey.is.configured.in.DNS.as.a.TXT
76a0 20 72 65 63 6f 72 64 20 74 6f 20 68 65 6c 70 20 6c 6f 67 20 6f 70 65 72 61 74 6f 72 73 20 63 6f .record.to.help.log.operators.co
76c0 6d 62 61 74 20 73 70 61 6d 2e 00 61 6e 64 20 61 20 68 61 73 68 20 6f 66 20 74 68 65 20 70 75 62 mbat.spam..and.a.hash.of.the.pub
76e0 6c 69 63 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 2e 20 20 41 20 68 61 73 68 20 6f 66 lic.verification.key...A.hash.of
7700 20 74 68 65 20 70 75 62 6c 69 63 20 76 65 72 69 66 69 63 61 74 69 6f 6e 00 64 61 74 61 2e 20 20 .the.public.verification.data...
7720 4d 69 6e 69 6d 61 6c 20 6d 65 74 61 64 61 74 61 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 6c 6f Minimal.metadata.must.also.be.lo
7740 67 67 65 64 2c 20 73 75 63 68 20 61 73 20 74 68 65 20 63 68 65 63 6b 73 75 6d 27 73 20 73 69 67 gged,.such.as.the.checksum's.sig
7760 6e 61 74 75 72 65 00 73 74 61 74 65 6d 65 6e 74 20 74 68 61 74 20 73 69 67 73 75 6d 20 6c 6f 67 nature.statement.that.sigsum.log
7780 73 20 61 63 63 65 70 74 2e 20 20 54 68 61 74 20 73 74 61 74 65 6d 65 6e 74 20 65 6e 63 6f 64 65 s.accept...That.statement.encode
77a0 73 20 61 20 63 68 65 63 6b 73 75 6d 20 6f 66 20 73 6f 6d 65 00 41 20 73 69 67 6e 65 72 20 77 61 s.a.checksum.of.some.A.signer.wa
77c0 6e 74 73 20 74 6f 20 6d 61 6b 65 20 74 68 65 69 72 20 6b 65 79 2d 75 73 61 67 65 20 74 72 61 6e nts.to.make.their.key-usage.tran
77e0 73 70 61 72 65 6e 74 2e 20 20 54 68 65 72 65 66 6f 72 65 2c 20 74 68 65 79 20 73 69 67 6e 20 61 sparent...Therefore,.they.sign.a
7800 00 00 60 60 60 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 46 69 67 ..```........................Fig
7820 75 72 65 20 31 3a 20 73 79 73 74 65 6d 20 6f 76 65 72 76 69 65 77 00 20 20 20 20 20 20 20 20 20 ure.1:.system.overview..........
7840 20 20 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ................................
7860 20 20 20 69 6e 76 65 73 74 69 67 61 74 65 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ...investigate..................
7880 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 00 20 20 20 20 20 20 20 20 20 20 ....................v...........
78a0 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 20 20 20 20 20 20 20 20 20 20 7c 20 63 6c 61 .....+---------+...........|.cla
78c0 69 6d 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 00 20 20 20 20 20 20 20 20 20 20 im.......+----------+...........
78e0 20 20 20 20 20 7c 20 57 69 74 6e 65 73 73 20 7c 20 20 20 20 20 20 20 20 20 20 20 7c 20 66 61 6c .....|.Witness.|...........|.fal
7900 73 65 20 20 20 20 20 20 20 7c 20 56 65 72 69 66 69 65 72 20 7c 00 20 20 20 20 20 20 20 20 20 20 se.......|.Verifier.|...........
7920 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 20 20 .....+---------+...........|....
7940 20 20 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 00 20 20 20 20 20 20 20 20 20 20 .........+----------+...........
7960 20 20 20 20 20 20 20 76 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d .......v..............+---------
7980 2b 20 20 20 20 20 20 20 20 20 20 20 76 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c +...........v..................|
79a0 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 3e 7c 20 4d 6f 6e 69 74 6f 72 20 7c 3c 2d 2d 2d 2d 2d 2d ..+---------->|.Monitor.|<------
79c0 2d 2b 20 20 7c 70 72 6f 6f 66 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 7c -+..|proof..................|..|
79e0 20 70 72 6f 6f 66 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 20 20 64 61 74 61 20 7c 20 .proof.....+---------+...data.|.
7a00 20 7c 6d 65 74 61 64 61 74 61 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 7c .|metadata..................|..|
7a20 20 6d 65 74 61 64 61 74 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 .metadata.....................|.
7a40 20 7c 64 61 74 61 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5e 20 20 7c 20 63 68 65 .|data..................^..|.che
7a60 63 6b 73 75 6d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 7c 00 20 cksum.....................|..|..
7a80 20 2b 2d 2d 2d 2d 2d 2b 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 20 20 20 20 20 .+-----+.......+---------+......
7aa0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 00 ...............+--------------+.
7ac0 20 20 7c 20 44 4e 53 20 7c 2d 2d 2d 2d 2d 2d 3e 7c 20 20 20 4c 6f 67 20 20 20 7c 2d 2d 2d 2d 2d ..|.DNS.|------>|...Log...|-----
7ae0 2d 2d 2d 2d 2d 2b 20 20 20 20 20 20 20 20 20 20 7c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 7c -----+..........|.Distribution.|
7b00 00 20 20 2b 2d 2d 2d 2d 2d 2b 20 48 28 76 6b 29 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 20 20 70 ...+-----+.H(vk).+---------+...p
7b20 72 6f 6f 66 20 20 7c 20 20 20 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d roof..|..........+--------------
7b40 2b 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 20 20 20 20 20 20 20 20 20 +.....................v.........
7b60 20 20 20 20 20 20 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 00 20 20 20 20 20 20 .......|................v.......
7b80 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5e ..............|................^
7ba0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 70 72 6f 6f 66 00 20 20 20 20 20 20 20 20 ................|.proof.........
7bc0 20 20 20 6d 65 74 61 64 61 74 61 20 7c 20 20 20 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d ...metadata.|..........+--------
7be0 2d 2d 2b 20 20 20 20 20 20 20 20 20 20 20 7c 20 6d 65 74 61 64 61 74 61 00 20 20 20 20 20 20 20 --+...........|.metadata........
7c00 20 20 20 20 63 68 65 63 6b 73 75 6d 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 7c 20 20 53 69 67 6e 65 ....checksum.+----------|..Signe
7c20 72 20 20 7c 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 64 61 74 61 00 20 20 20 20 20 20 20 20 20 20 r..|-----------+.data...........
7c40 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d .....................+----------
7c60 2b 00 60 60 60 00 77 65 20 67 69 76 65 20 61 20 62 72 69 65 66 20 70 72 69 6d 65 72 20 62 65 6c +.```.we.give.a.brief.primer.bel
7c80 6f 77 2e 00 41 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 73 69 67 73 75 6d 20 6c 6f 67 67 69 6e ow..An.overview.of.sigsum.loggin
7ca0 67 20 69 73 20 73 68 6f 77 6e 20 69 6e 20 46 69 67 75 72 65 20 31 2e 20 20 42 65 66 6f 72 65 20 g.is.shown.in.Figure.1...Before.
7cc0 67 6f 69 6e 67 20 69 6e 74 6f 20 64 65 74 61 69 6c 00 23 23 20 33 20 2d 20 44 65 73 69 67 6e 00 going.into.detail.##.3.-.Design.
7ce0 00 61 74 74 61 63 6b 73 2e 20 20 20 41 20 6c 6f 67 20 6f 70 65 72 61 74 6f 72 20 63 61 6e 20 61 .attacks....A.log.operator.can.a
7d00 74 20 62 65 73 74 20 64 65 6e 79 20 73 65 72 76 69 63 65 20 77 69 74 68 20 74 68 65 73 65 20 61 t.best.deny.service.with.these.a
7d20 73 73 75 6d 70 74 69 6f 6e 73 2e 00 09 5b 73 6c 6f 77 2d 64 6f 77 6e 5d 28 68 74 74 70 73 3a 2f ssumptions...[slow-down](https:/
7d40 2f 67 69 74 2e 73 69 67 73 75 6d 2e 6f 72 67 2f 73 69 67 73 75 6d 2f 74 72 65 65 2f 61 72 63 68 /git.sigsum.org/sigsum/tree/arch
7d60 69 76 65 2f 32 30 32 31 2d 30 38 2d 32 34 2d 63 68 65 63 6b 70 6f 69 6e 74 2d 74 69 6d 65 73 74 ive/2021-08-24-checkpoint-timest
7d80 61 6d 70 29 00 61 6e 64 00 09 5b 73 70 6c 69 74 2d 76 69 65 77 5d 28 68 74 74 70 73 3a 2f 2f 64 amp).and..[split-view](https://d
7da0 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 64 72 61 atatracker.ietf.org/doc/html/dra
7dc0 66 74 2d 69 65 74 66 2d 74 72 61 6e 73 2d 67 6f 73 73 69 70 2d 30 35 29 00 61 74 74 65 6d 70 74 ft-ietf-trans-gossip-05).attempt
7de0 73 00 77 69 74 6e 65 73 73 65 73 20 73 74 6f 70 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f s.witnesses.stop.following.proto
7e00 63 6f 6c 20 74 6f 20 70 72 6f 74 65 63 74 20 61 67 61 69 6e 73 74 20 61 20 6d 61 6c 69 63 69 6f col.to.protect.against.a.malicio
7e20 75 73 20 6c 6f 67 20 74 68 61 74 00 73 69 67 6e 61 74 75 72 65 20 73 63 68 65 6d 65 2e 20 20 57 us.log.that.signature.scheme...W
7e40 65 20 61 6c 73 6f 20 61 73 73 75 6d 65 20 74 68 61 74 20 61 74 20 6d 6f 73 74 20 61 20 74 68 72 e.also.assume.that.at.most.a.thr
7e60 65 73 68 6f 6c 64 20 6f 66 20 69 6e 64 65 70 65 6e 64 65 6e 74 00 46 6f 72 20 73 65 63 75 72 69 eshold.of.independent.For.securi
7e80 74 79 20 77 65 20 6e 65 65 64 20 61 20 63 6f 6c 6c 69 73 69 6f 6e 20 72 65 73 69 73 74 61 6e 74 ty.we.need.a.collision.resistant
7ea0 20 68 61 73 68 20 66 75 6e 63 74 69 6f 6e 20 61 6e 64 20 61 6e 20 75 6e 66 6f 72 67 65 61 62 6c .hash.function.and.an.unforgeabl
7ec0 65 00 00 48 6f 77 65 76 65 72 2c 20 61 20 6c 6f 67 20 6f 70 65 72 61 74 6f 72 20 77 6f 75 6c 64 e..However,.a.log.operator.would
7ee0 20 6f 6e 6c 79 20 64 6f 20 74 68 61 74 20 69 66 20 69 74 20 69 73 20 6c 69 6b 65 6c 79 20 74 6f .only.do.that.if.it.is.likely.to
7f00 20 67 6f 20 75 6e 6e 6f 74 69 63 65 64 2e 00 74 68 65 20 73 61 6d 65 20 61 70 70 65 6e 64 2d 6f .go.unnoticed..the.same.append-o
7f20 6e 6c 79 20 4d 65 72 6b 6c 65 20 74 72 65 65 20 74 6f 20 65 76 65 72 79 6f 6e 65 20 62 65 63 61 nly.Merkle.tree.to.everyone.beca
7f40 75 73 65 20 69 74 20 69 73 20 61 74 74 61 63 6b 65 72 2d 63 6f 6e 74 72 6f 6c 6c 65 64 2e 00 63 use.it.is.attacker-controlled..c
7f60 68 65 63 6b 73 75 6d 20 74 68 61 74 20 61 20 76 65 72 69 66 69 65 72 20 77 6f 75 6c 64 20 61 63 hecksum.that.a.verifier.would.ac
7f80 63 65 70 74 2e 20 20 41 20 6c 6f 67 20 63 61 6e 20 6d 69 73 62 65 68 61 76 65 20 62 79 20 6e 6f cept...A.log.can.misbehave.by.no
7fa0 74 20 70 72 65 73 65 6e 74 69 6e 67 00 54 68 65 20 6f 76 65 72 61 6c 6c 20 73 79 73 74 65 6d 20 t.presenting.The.overall.system.
7fc0 69 73 20 73 61 69 64 20 74 6f 20 62 65 20 73 65 63 75 72 65 20 69 66 20 61 20 6c 6f 67 20 6d 6f is.said.to.be.secure.if.a.log.mo
7fe0 6e 69 74 6f 72 20 63 61 6e 20 64 69 73 63 6f 76 65 72 20 65 76 65 72 79 20 73 69 67 6e 65 64 00 nitor.can.discover.every.signed.
8000 61 64 00 00 4a 01 00 00 5e 02 00 00 00 10 00 00 3e 00 00 00 00 00 00 00 b1 0f 00 00 90 0f 00 00 ad..J...^.......>...............
8020 8f 0f 00 00 40 0f 00 00 f2 0e 00 00 f1 0e 00 00 a1 0e 00 00 55 0e 00 00 da 0d 00 00 d9 0d 00 00 ....@...............U...........
8040 c1 0d 00 00 a2 0d 00 00 51 0d 00 00 00 0d 00 00 af 0c 00 00 68 0c 00 00 51 0c 00 00 50 0c 00 00 ........Q...........h...Q...P...
8060 19 0c 00 00 18 0c 00 00 ca 0b 00 00 7d 0b 00 00 31 0b 00 00 e1 0a 00 00 e0 0a 00 00 c4 0a 00 00 ............}...1...............
8080 76 0a 00 00 2c 0a 00 00 ec 09 00 00 eb 09 00 00 9d 09 00 00 10 09 00 00 a9 08 00 00 a8 08 00 00 v...,...........................
80a0 a7 08 00 00 8e 08 00 00 f8 07 00 00 a4 07 00 00 60 07 00 00 5f 07 00 00 37 07 00 00 c3 06 00 00 ................`..._...7.......
80c0 78 06 00 00 28 06 00 00 e0 05 00 00 df 05 00 00 8d 05 00 00 3d 05 00 00 14 05 00 00 cd 04 00 00 x...(...............=...........
80e0 84 04 00 00 35 04 00 00 d6 03 00 00 d5 03 00 00 8c 03 00 00 8b 03 00 00 71 03 00 00 21 03 00 00 ....5...................q...!...
8100 d1 02 00 00 91 02 00 00 5f 02 00 00 5e 02 00 00 58 02 00 00 58 02 00 00 58 02 00 00 04 02 00 00 ........_...^...X...X...X.......
8120 e7 01 00 00 e3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
8140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
8160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
8180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 69 67 6e 65 72 73 20 64 69 73 74 72 69 62 75 74 ...............Signers.distribut
81a0 65 20 61 74 20 6c 65 61 73 74 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 69 65 63 65 73 3a e.at.least.the.following.pieces:
81c0 00 74 00 53 69 67 6e 65 72 73 20 64 69 73 74 72 69 62 75 74 65 20 61 74 20 6c 65 61 73 74 20 74 .t.Signers.distribute.at.least.t
81e0 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 69 65 63 65 73 3a 00 74 68 65 20 64 00 53 69 67 6e 65 he.following.pieces:.the.d.Signe
8200 72 73 20 64 00 53 69 67 6e 65 72 73 20 00 53 69 67 6e 65 72 73 20 64 69 73 74 72 69 62 75 74 65 rs.d.Signers..Signers.distribute
8220 20 61 74 20 6c 65 61 73 74 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 69 65 63 65 73 3a 00 .at.least.the.following.pieces:.
8240 74 68 65 20 64 61 74 61 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 6f 6e 20 61 20 77 00 53 the.data...For.example,.on.a.w.S
8260 69 67 6e 65 72 73 20 64 69 73 74 72 69 62 75 74 65 20 61 74 20 6c 65 61 73 74 20 74 68 65 20 66 igners.distribute.at.least.the.f
8280 6f 6c 6c 6f 77 69 6e 67 20 70 69 65 63 65 73 3a 00 74 68 65 20 64 61 74 61 2e 20 20 46 6f 72 20 ollowing.pieces:.the.data...For.
82a0 65 78 61 6d 70 6c 65 2c 20 6f 6e 20 61 20 77 65 62 73 69 74 65 2c 20 69 6e 20 61 20 67 69 74 20 example,.on.a.website,.in.a.git.
82c0 72 65 70 6f 73 69 74 6f 72 79 2c 20 65 74 63 2e 00 73 74 61 72 74 2e 20 20 44 69 73 74 72 69 62 repository,.etc..start...Distrib
82e0 75 74 69 6f 6e 20 68 61 70 70 65 6e 73 20 75 73 69 6e 67 20 74 68 65 20 73 61 6d 65 20 6d 65 63 ution.happens.using.the.same.mec
8300 68 61 6e 69 73 6d 20 74 68 61 74 20 69 73 20 6e 6f 72 6d 61 6c 6c 79 20 75 73 65 64 20 66 6f 72 hanism.that.is.normally.used.for
8320 00 4f 6e 63 65 20 61 20 73 69 67 6e 65 72 20 68 61 73 20 63 6f 6c 6c 65 63 74 65 64 20 70 72 6f .Once.a.signer.has.collected.pro
8340 6f 66 73 20 6f 66 20 70 75 62 6c 69 63 20 6c 6f 67 67 69 6e 67 20 74 68 65 20 64 69 73 74 72 69 ofs.of.public.logging.the.distri
8360 62 75 74 69 6f 6e 20 70 68 61 73 65 20 63 61 6e 00 23 23 23 23 20 33 2e 32 2e 34 20 2d 20 44 69 bution.phase.can.####.3.2.4.-.Di
8380 73 74 72 69 62 75 74 69 6f 6e 00 00 55 73 65 2d 63 61 73 65 73 20 6c 69 6b 65 20 69 6e 73 74 61 stribution..Use-cases.like.insta
83a0 6e 74 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 73 75 61 6e 63 65 20 61 72 65 20 6e 6f 74 20 nt.certificate.issuance.are.not.
83c0 73 75 70 70 6f 72 74 65 64 20 62 79 20 64 65 73 69 67 6e 2e 00 00 09 5b 47 34 5c 5d 5d 28 68 74 supported.by.design....[G4\]](ht
83e0 74 70 73 3a 2f 2f 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 2f 64 tps://docs.google.com/document/d
8400 2f 31 36 47 2d 51 37 69 4e 33 6b 42 34 36 47 53 57 35 62 2d 73 66 48 35 4d 4f 33 6e 4b 53 59 79 /16G-Q7iN3kB46GSW5b-sfH5MO3nKSYy
8420 45 62 37 37 59 73 4d 37 54 4d 5a 47 45 2f 65 64 69 74 29 2e 00 09 5b 47 33 2c 5d 28 68 74 74 70 Eb77YsM7TMZGE/edit)...[G3,](http
8440 73 3a 2f 2f 70 65 74 73 79 6d 70 6f 73 69 75 6d 2e 6f 72 67 2f 32 30 32 31 2f 66 69 6c 65 73 2f s://petsymposium.org/2021/files/
8460 70 61 70 65 72 73 2f 69 73 73 75 65 32 2f 70 6f 70 65 74 73 2d 32 30 32 31 2d 30 30 32 34 2e 70 papers/issue2/popets-2021-0024.p
8480 64 66 29 00 09 5b 47 32 2c 5d 28 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 df)..[G2,](https://datatracker.i
84a0 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 64 72 61 66 74 2d 69 65 74 66 2d 74 72 61 6e etf.org/doc/html/draft-ietf-tran
84c0 73 2d 67 6f 73 73 69 70 2d 30 35 29 00 09 5b 5c 5b 47 31 2c 5d 28 68 74 74 70 73 3a 2f 2f 69 65 s-gossip-05)..[\[G1,](https://ie
84e0 65 65 78 70 6c 6f 72 65 2e 69 65 65 65 2e 6f 72 67 2f 73 74 61 6d 70 2f 73 74 61 6d 70 2e 6a 73 eexplore.ieee.org/stamp/stamp.js
8500 70 3f 61 72 6e 75 6d 62 65 72 3d 37 33 34 36 38 35 33 29 00 6e 65 65 64 20 66 6f 72 20 72 65 61 p?arnumber=7346853).need.for.rea
8520 63 74 69 76 65 20 67 6f 73 73 69 70 2d 61 75 64 69 74 20 70 72 6f 74 6f 63 6f 6c 73 00 54 68 65 ctive.gossip-audit.protocols.The
8540 20 61 64 64 65 64 20 6c 61 74 65 6e 63 79 20 69 73 20 61 20 74 72 61 64 65 2d 6f 66 66 20 74 68 .added.latency.is.a.trade-off.th
8560 61 74 20 73 69 6d 70 6c 69 66 69 65 73 20 73 69 67 73 75 6d 20 6c 6f 67 67 69 6e 67 20 62 79 20 at.simplifies.sigsum.logging.by.
8580 72 65 6d 6f 76 69 6e 67 20 74 68 65 00 49 74 20 74 68 75 73 20 74 61 6b 65 73 20 66 69 76 65 20 removing.the.It.thus.takes.five.
85a0 74 6f 20 74 65 6e 20 6d 69 6e 75 74 65 73 20 62 65 66 6f 72 65 20 61 20 73 69 67 6e 65 72 27 73 to.ten.minutes.before.a.signer's
85c0 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 70 68 61 73 65 20 63 61 6e 20 73 74 61 72 74 2e 00 00 .distribution.phase.can.start...
85e0 74 6f 20 6c 6f 67 73 20 73 6f 20 74 68 61 74 20 73 69 67 6e 65 72 73 20 63 61 6e 20 65 61 73 69 to.logs.so.that.signers.can.easi
8600 6c 79 20 66 65 74 63 68 20 66 69 6e 61 6c 69 7a 65 64 20 63 6f 73 69 67 6e 65 64 20 74 72 65 65 ly.fetch.finalized.cosigned.tree
8620 20 68 65 61 64 73 2e 00 61 70 70 65 6e 64 2d 6f 6e 6c 79 20 62 65 66 6f 72 65 20 64 6f 69 6e 67 .heads..append-only.before.doing
8640 20 61 20 63 6f 73 69 67 6e 61 74 75 72 65 20 6f 70 65 72 61 74 69 6f 6e 2e 20 20 43 6f 73 69 67 .a.cosignature.operation...Cosig
8660 6e 61 74 75 72 65 73 20 61 72 65 20 70 6f 73 74 65 64 20 62 61 63 6b 00 6c 6f 67 73 20 66 6f 72 natures.are.posted.back.logs.for
8680 20 73 6f 2d 63 61 6c 6c 65 64 20 5f 74 6f 2d 73 69 67 6e 5f 20 74 72 65 65 20 68 65 61 64 73 20 .so-called._to-sign_.tree.heads.
86a0 61 6e 64 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 65 79 20 61 72 65 20 66 72 65 73 68 20 61 and.verify.that.they.are.fresh.a
86c0 6e 64 00 53 69 67 73 75 6d 20 6c 6f 67 73 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 66 72 65 65 nd.Sigsum.logs.periodically.free
86e0 7a 65 20 74 68 65 20 6d 6f 73 74 20 63 75 72 72 65 6e 74 20 74 72 65 65 20 68 65 61 64 2c 20 74 ze.the.most.current.tree.head,.t
8700 79 70 69 63 61 6c 6c 79 20 65 76 65 72 79 20 66 69 76 65 20 6d 69 6e 75 74 65 73 2e 20 20 43 6f ypically.every.five.minutes...Co
8720 73 69 67 6e 69 6e 67 20 77 69 74 6e 65 73 73 65 73 20 70 6f 6c 6c 00 23 23 23 23 20 33 2e 32 2e signing.witnesses.poll.####.3.2.
8740 33 20 2d 20 57 61 69 74 20 66 6f 72 20 77 69 74 6e 65 73 73 20 63 6f 73 69 67 6e 69 6e 67 00 00 3.-.Wait.for.witness.cosigning..
8760 73 69 67 6e 65 72 20 68 61 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 6e 20 69 6e 63 6c 75 73 signer.has.to.wait.for.an.inclus
8780 69 6f 6e 20 70 72 6f 6f 66 20 61 6e 64 20 61 20 63 6f 73 69 67 6e 65 64 20 74 72 65 65 20 68 65 ion.proof.and.a.cosigned.tree.he
87a0 61 64 2e 00 43 65 72 74 69 66 69 63 61 74 65 20 54 72 61 6e 73 70 61 72 65 6e 63 79 2e 20 20 54 ad..Certificate.Transparency...T
87c0 68 65 72 65 66 6f 72 65 2c 20 73 69 67 73 75 6d 20 6c 6f 67 73 20 64 6f 20 6e 6f 74 20 70 72 6f herefore,.sigsum.logs.do.not.pro
87e0 76 69 64 65 20 6c 6f 77 20 6c 61 74 65 6e 63 79 20 2d 2d 20 74 68 65 00 72 65 71 75 65 73 74 20 vide.low.latency.--.the.request.
8800 69 73 20 61 63 63 65 70 74 65 64 2c 20 74 68 65 20 6c 6f 67 20 5f 74 72 69 65 73 5f 20 74 6f 20 is.accepted,.the.log._tries_.to.
8820 69 6e 63 6f 72 70 6f 72 61 74 65 20 74 68 65 20 73 75 62 6d 69 74 74 65 64 20 6c 65 61 66 20 69 incorporate.the.submitted.leaf.i
8840 6e 74 6f 20 69 74 73 20 4d 65 72 6b 6c 65 20 74 72 65 65 2e 20 20 54 68 65 72 65 20 61 72 65 20 nto.its.Merkle.tree...There.are.
8860 68 6f 77 65 76 65 72 20 6e 6f 20 5f 70 72 6f 6d 69 73 65 73 20 6f 66 20 70 75 62 6c 69 63 20 6c however.no._promises.of.public.l
8880 6f 67 67 69 6e 67 5f 20 61 73 20 69 6e 00 57 68 65 6e 20 61 20 73 75 62 6d 69 74 74 65 64 20 6c ogging_.as.in.When.a.submitted.l
88a0 6f 67 67 69 6e 67 00 00 00 74 68 65 20 73 69 67 6e 61 74 75 72 65 20 69 73 20 76 61 6c 69 64 2c ogging...the.signature.is.valid,
88c0 20 74 68 65 6e 20 68 61 73 68 65 73 20 69 74 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 73 20 74 68 .then.hashes.it.to.constructs.th
88e0 65 20 4d 65 72 6b 6c 65 20 74 72 65 65 20 6c 65 61 66 20 61 73 20 64 65 73 63 72 69 62 65 64 20 e.Merkle.tree.leaf.as.described.
8900 69 6e 20 53 65 63 74 69 6f 6e 20 33 2e 31 2e 00 6b 65 79 20 61 6e 64 20 64 6f 6d 61 69 6e 20 68 in.Section.3.1..key.and.domain.h
8920 69 6e 74 20 61 73 20 41 53 43 49 49 20 6b 65 79 2d 76 61 6c 75 65 20 70 61 69 72 73 2e 20 20 54 int.as.ASCII.key-value.pairs...T
8940 68 65 20 6c 6f 67 20 76 65 72 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 70 75 62 6c 69 63 20 he.log.verifies.that.the.public.
8960 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 20 69 73 20 70 72 65 73 65 6e 74 20 69 6e 20 44 verification.key.is.present.in.D
8980 4e 53 20 61 6e 64 20 75 73 65 73 20 69 74 20 74 6f 20 63 68 65 63 6b 20 74 68 61 74 00 54 68 65 NS.and.uses.it.to.check.that.The
89a0 20 73 69 67 6e 65 72 20 73 75 62 6d 69 74 73 20 74 68 65 69 72 20 73 68 61 72 64 20 68 69 6e 74 .signer.submits.their.shard.hint
89c0 2c 20 63 68 65 63 6b 73 75 6d 2c 20 73 69 67 6e 61 74 75 72 65 2c 20 70 75 62 6c 69 63 20 76 65 ,.checksum,.signature,.public.ve
89e0 72 69 66 69 63 61 74 69 6f 6e 00 00 73 69 6e 63 65 20 74 68 65 20 64 61 74 61 20 73 74 72 75 63 rification..since.the.data.struc
8a00 74 75 72 65 73 20 62 65 69 6e 67 20 65 78 63 68 61 6e 67 65 64 20 61 72 65 20 70 72 69 6d 69 74 tures.being.exchanged.are.primit
8a20 69 76 65 20 65 6e 6f 75 67 68 2e 00 75 73 65 20 61 20 73 69 6d 70 6c 65 20 41 53 43 49 49 20 66 ive.enough..use.a.simple.ASCII.f
8a40 6f 72 6d 61 74 2e 20 20 41 20 6d 6f 72 65 20 63 6f 6d 70 6c 65 78 20 70 61 72 73 65 72 20 6c 69 ormat...A.more.complex.parser.li
8a60 6b 65 20 4a 53 4f 4e 20 69 73 20 6e 6f 74 20 6e 65 65 64 65 64 00 53 69 67 73 75 6d 20 6c 6f 67 ke.JSON.is.not.needed.Sigsum.log
8a80 73 20 69 6d 70 6c 65 6d 65 6e 74 20 61 6e 20 48 54 54 50 28 53 29 20 41 50 49 2e 20 20 49 6e 70 s.implement.an.HTTP(S).API...Inp
8aa0 75 74 20 61 6e 64 20 6f 75 74 70 75 74 20 69 73 20 68 75 6d 61 6e 2d 72 65 61 64 61 62 6c 65 20 ut.and.output.is.human-readable.
8ac0 61 6e 64 00 23 23 23 23 20 33 2e 32 2e 32 20 2d 20 53 75 62 6d 69 74 20 72 65 71 75 65 73 74 00 and.####.3.2.2.-.Submit.request.
8ae0 00 4f 6e 63 65 20 70 72 65 73 65 6e 74 20 69 6e 20 44 4e 53 2c 20 61 20 76 65 72 69 66 69 63 61 .Once.present.in.DNS,.a.verifica
8b00 74 69 6f 6e 20 6b 65 79 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 73 75 62 73 65 71 75 65 tion.key.can.be.used.in.subseque
8b20 6e 74 20 6c 6f 67 20 72 65 71 75 65 73 74 73 2e 00 70 61 72 74 20 6f 66 20 61 20 64 65 66 65 6e nt.log.requests..part.of.a.defen
8b40 73 65 20 6d 65 63 68 61 6e 69 73 6d 20 74 68 61 74 20 68 65 6c 70 73 20 6c 6f 67 20 6f 70 65 72 se.mechanism.that.helps.log.oper
8b60 61 74 6f 72 73 20 74 6f 20 64 65 61 6c 20 77 69 74 68 20 6c 6f 67 20 73 70 61 6d 2e 00 63 68 65 ators.to.deal.with.log.spam..che
8b80 63 6b 20 74 68 61 74 20 5f 73 6f 6d 65 20 64 6f 6d 61 69 6e 5f 20 69 73 20 61 77 61 72 65 20 6f ck.that._some.domain_.is.aware.o
8ba0 66 20 74 68 65 20 73 69 67 6e 65 72 27 73 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 2e f.the.signer's.verification.key.
8bc0 20 20 54 68 69 73 20 69 73 00 54 68 65 20 73 69 67 6e 65 72 20 61 6c 73 6f 20 68 61 73 20 74 6f ..This.is.The.signer.also.has.to
8be0 20 64 6f 20 61 20 6f 6e 65 2d 74 69 6d 65 20 44 4e 53 20 73 65 74 75 70 2e 20 20 41 73 20 6f 75 .do.a.one-time.DNS.setup...As.ou
8c00 74 6c 69 6e 65 64 20 62 65 6c 6f 77 2c 20 6c 6f 67 73 20 77 69 6c 6c 00 00 54 68 65 20 73 69 67 tlined.below,.logs.will..The.sig
8c20 6e 65 72 20 73 69 67 6e 73 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 73 68 61 72 64 20 68 69 6e ner.signs.the.selected.shard.hin
8c40 74 20 61 6e 64 20 63 68 65 63 6b 73 75 6d 2e 00 00 6e 6f 6e 2d 6f 76 65 72 6c 61 70 70 69 6e 67 t.and.checksum...non-overlapping
8c60 20 73 68 61 72 64 2e 00 32 30 32 31 22 2e 20 20 53 68 61 72 64 20 68 69 6e 74 73 20 65 6e 73 75 .shard..2021"...Shard.hints.ensu
8c80 72 65 20 74 68 61 74 20 61 20 6c 6f 67 27 73 20 6c 65 61 76 65 73 20 63 61 6e 6e 6f 74 20 62 65 re.that.a.log's.leaves.cannot.be
8ca0 20 72 65 70 6c 61 79 65 64 20 69 6e 20 61 00 68 69 6e 74 20 72 65 70 72 65 73 65 6e 74 69 6e 67 .replayed.in.a.hint.representing
8cc0 20 61 6e 20 61 62 73 74 72 61 63 74 20 73 74 61 74 65 6d 65 6e 74 20 6c 69 6b 65 20 22 73 69 67 .an.abstract.statement.like."sig
8ce0 73 75 6d 20 6c 6f 67 73 20 74 68 61 74 20 61 72 65 20 61 63 74 69 76 65 20 64 75 72 69 6e 67 00 sum.logs.that.are.active.during.
8d00 68 61 73 68 20 6f 66 20 61 6e 20 65 78 65 63 75 74 61 62 6c 65 20 62 69 6e 61 72 79 20 6f 72 20 hash.of.an.executable.binary.or.
8d20 73 6f 6d 65 74 68 69 6e 67 20 65 6c 73 65 2e 20 20 54 68 65 20 73 69 67 6e 65 72 20 61 6c 73 6f something.else...The.signer.also
8d40 20 73 65 6c 65 63 74 73 20 61 20 73 68 61 72 64 00 41 20 73 69 67 6e 65 72 20 73 65 6c 65 63 74 .selects.a.shard.A.signer.select
8d60 73 20 61 20 63 68 65 63 6b 73 75 6d 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 6c 6f 67 67 s.a.checksum.that.should.be.logg
8d80 65 64 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 74 20 63 6f 75 6c 64 20 62 65 20 74 68 ed...For.example,.it.could.be.th
8da0 65 00 23 23 23 23 20 33 2e 32 2e 31 20 2d 20 50 72 65 70 61 72 65 20 61 20 72 65 71 75 65 73 74 e.####.3.2.1.-.Prepare.a.request
8dc0 00 23 23 23 20 33 2e 32 20 2d 20 55 73 61 67 65 20 70 61 74 74 65 72 6e 00 00 6f 74 68 65 72 20 .###.3.2.-.Usage.pattern..other.
8de0 77 6f 72 64 73 2c 20 76 65 72 69 66 69 65 72 73 20 61 6e 64 20 6d 6f 6e 69 74 6f 72 73 20 6d 75 words,.verifiers.and.monitors.mu
8e00 73 74 20 6c 6f 63 61 74 65 20 73 69 67 6e 65 72 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 st.locate.signer.verification.ke
8e20 79 73 20 69 6e 64 65 70 65 6e 64 65 6e 74 6c 79 20 6f 66 20 6c 6f 67 73 2c 20 61 6e 64 20 74 72 ys.independently.of.logs,.and.tr
8e40 75 73 74 20 74 68 65 6d 20 65 78 70 6c 69 63 69 74 6c 79 2e 00 74 68 65 20 6c 69 6b 65 6c 69 68 ust.them.explicitly..the.likelih
8e60 6f 6f 64 20 74 68 61 74 20 61 6e 20 75 6e 74 72 75 73 74 65 64 20 6b 65 79 20 69 73 20 64 69 73 ood.that.an.untrusted.key.is.dis
8e80 63 6f 76 65 72 65 64 20 61 6e 64 20 75 73 65 64 20 62 79 20 6d 69 73 74 61 6b 65 2e 20 20 49 6e covered.and.used.by.mistake...In
8ea0 00 4e 6f 74 65 20 74 68 61 74 20 61 20 6b 65 79 20 68 61 73 68 20 69 73 20 6c 6f 67 67 65 64 20 .Note.that.a.key.hash.is.logged.
8ec0 72 61 74 68 65 72 20 74 68 61 6e 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 69 74 73 65 6c rather.than.the.public.key.itsel
8ee0 66 2e 20 20 54 68 69 73 20 72 65 64 75 63 65 73 00 00 64 61 74 61 20 74 68 61 74 20 61 20 63 68 f...This.reduces..data.that.a.ch
8f00 65 63 6b 73 75 6d 20 72 65 70 72 65 73 65 6e 74 73 2e 20 20 57 68 65 72 65 20 64 61 74 61 20 69 ecksum.represents...Where.data.i
8f20 73 20 6c 6f 63 61 74 65 64 20 69 73 20 75 73 65 2d 63 61 73 65 20 73 70 65 63 69 66 69 63 2e 00 s.located.is.use-case.specific..
8f40 41 6e 79 20 61 64 64 69 74 69 6f 6e 61 6c 20 6d 65 74 61 64 61 74 61 20 74 68 61 74 20 69 73 20 Any.additional.metadata.that.is.
8f60 75 73 65 2d 63 61 73 65 20 73 70 65 63 69 66 69 63 20 63 61 6e 20 62 65 20 73 74 6f 72 65 64 20 use-case.specific.can.be.stored.
8f80 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 00 00 62 65 20 75 73 65 64 20 74 6f 20 76 65 72 69 66 as.part.of.the..be.used.to.verif
8fa0 79 20 74 68 65 20 73 69 67 6e 61 74 75 72 65 2e 00 2d 20 2a 2a 6b 65 79 5f 68 61 73 68 2a 2a 3a y.the.signature..-.**key_hash**:
8fc0 20 61 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 68 61 73 68 20 6f 66 20 74 68 65 20 73 69 67 .a.cryptographic.hash.of.the.sig
8fe0 6e 65 72 27 73 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 6b 65 79 20 74 68 61 74 20 63 61 6e 00 ner's.verification.key.that.can.
generated by cgit v1.2.3 (git 2.46.0) at 2025-12-06 13:08:50 +0000