commit 1ab8df43983e5c6e4e5651753b4454723a1ce632
parent 619ad2df452427a497b72ab1eab1c7cbe9df3569
Author: Martin Schanzenbach <schanzen@gnunet.org>
Date: Mon, 20 Dec 2021 15:02:06 +0100
fix references and chapters
Diffstat:
1 file changed, 4 insertions(+), 7 deletions(-)
diff --git a/draft-schanzen-gns.xml b/draft-schanzen-gns.xml
@@ -163,7 +163,7 @@
in the public key cipher identified by the "ztype".
The contents of a zone are cryptographically signed before
being published.
- Records are grouped by their label, and encrypted (<xref target="recordencryption"/>)
+ Records are grouped by their label, and encrypted (see <xref target="zone_types"/>)
using an encryption key derived from the label and the zone public key.
Instead of the zone private key "d", the signature MUST
be created using a blinded public/private key pair "d'" and "zk'".
@@ -1155,7 +1155,7 @@ value := GET(key)
"label" of the contained records.
</t>
<section anchor="blinding" numbered="true" toc="default">
- <name>Storage Key Derivations</name>
+ <name>Storage Key</name>
<t>
Given a label, the storage key "q" is derived as follows:
</t>
@@ -1178,7 +1178,7 @@ q := SHA512 (HDKD-Public(zk, label))
</dd>
</dl>
</section>
- <section anchor="wire" numbered="true" toc="default">
+ <section anchor="records_block" numbered="true" toc="default">
<name>Records Block</name>
<t>
GNS records are grouped by their labels and published as a single
@@ -1273,9 +1273,6 @@ q := SHA512 (HDKD-Public(zk, label))
The encrypted resource records with a total size of SIZE - 16.
</dd>
</dl>
- </section>
- <section anchor="recordencryption" numbered="true" toc="default">
- <name>Record Data</name>
<t>
A symmetric encryption scheme is used to encrypt the resource records
set RDATA into the BDATA field of a GNS RRBLOCK.
@@ -1462,7 +1459,7 @@ example.com = zk2
<xref target="blinding" />.</li>
<li>Perform a storage query GET(q) to retrieve the RRBLOCK.</li>
<li>Verify and process the RRBLOCK and decrypt the BDATA contained
- in it as defined in <xref target="recordencryption" />.</li>
+ in it as defined by its Zone Type (see also <xref target="records_block" />).</li>
</ol>
<t>
Upon receiving the RRBLOCK from the storage, apart from verifying the
