Blindfold: Store Operation

The "store" operation is used to encrypt data for storage on a cluster of nodes.

Max: 4096 bytes0/4096

Node Configuration

12345678
23
min: 2, max: 3

KEY TYPE

SecretKey Seed
Same seed = same key

OUTPUT

STORE OPERATION REFERENCE

SINGLE NODE

Implementation: XSalsa20 stream cipher + Poly1305 MAC
Types: 32-bit signed integer, UTF-8 string (4096 bytes max)
Security: Authenticated encryption

MULTIPLE NODES

Implementation: XOR-based secret sharing
Types: 32-bit signed integer, UTF-8 string (4096 bytes max)
Security: Distributed across cluster nodes

KEY TYPES

SecretKey:Contains blinding masks for exclusive access control
ClusterKey:Coordination key without cryptographic material

THRESHOLD

Using a n-of-m threshold, we try all combinations of n shares. The malicious node appears in all failing decryptions and none of the successful ones.