需要一种安全的方式来公开显示哈希值

发布于 2024-09-15 19:44:48 字数 709 浏览 6 评论 0原文

我正在构建一个 Windows 应用程序来存储敏感文件的备份。我的应用程序的目的是存储文件的副本及其哈希值。然后,程序或用户将公开显示哈希值,以防用户需要证明他们在某个时间拥有敏感文件的备份。

动机:

这可能有用的一些情况是:

  • 某人在一家公司工作,他们认为自己可能会被指控做非法事情。如果他们被指控随着时间的推移更改了某些数据,那么在一段时间内保留与其案件相关的敏感文件的副本会很方便。
  • 政客可能会记录他们每天所做的事情,其中​​许多是关于机密或敏感主题的,然后希望能够在以后如果他们被指控某些事情时披露她的文件(例如,如果中央情报局说他们听取了关于酷刑的简报……)。不是绝对的证据,但很难为每种潜在情况创建假备份文件,尤其是在未来几年。 需要明确的是,这个应用程序主要只是我练习编码技能的借口。我不建议使用任何类型的未经专业人士审查的加密软件。

可能的解决方案:

对于我的应用程序,我需要找到一个公开存储哈希值的好地方。到目前为止,我的想法是:

  1. 通过电子邮件将哈希值发送给一群人。 (缺点:可能会惹恼人们,但会创建可追踪的记录)
  2. 在公共博客上发布哈希值(缺点:如果我遇到严重的法律麻烦,拥有资源的人可能会尝试攻击我使用的免费服务并删除我的数据)
  3. 使用某些存储文档但不允许删除它们的在线安全服务来发布哈希值。 (我不确定是否存在这样的东西。)

公开显示我的哈希值的最安全、最方便的方法是什么?

I am building a windows application to store backups of sensitive files. The purpose of my application is to store a copy of a file with its hash. The program or user will then display the hash publicly in case the user needs to prove they had the backup of the sensitive file at a certain time.

Motivation:

Some situations where this might be useful are:

  • Someone has a job at a company where they think they might be accused of doing something illegal. If they were accused of changing some data over time, it would be convenient to have copies of sensitive files related to their case over a period of time.
  • A politician might take notes about things they did each day, many of them about classified or sensitive subjects, and then want to be able to disclose her files at a later date if they are accused of something (for instance, if the CIA said they were briefed on torture…). Not absolute proof, but it would be hard to create fake backup files for every potential scenario, especially several years into the future.
    Just to be clear, this application is mostly just an excuse for me to practice my coding skills. I don’t recommend using any type of cryptographic software that hasn’t been scrutinized by several professionals.

Possible Solutions:

For my application, I need to find a good place to publicly store the hash values. Here are my ideas so far:

  1. Send the hash values to a group of people through email. (disadvantage: could annoy people, but would create a traceable record)
  2. Publish the hash values on a public blog (disadvantage: if I ever got in serious legal trouble someone with resources could try to attack the free service I used and erase my data)
  3. Publish the hash values using some online security service that stores documents but does not allow you to delete them. (I am not sure something like this exists.)

What is the most secure and convenient way to publicly display my hash values?

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(2

丢了幸福的猪 2024-09-22 19:44:48

对一组哈希值进行哈希处理,以便只记录一个哈希值。然后在一份广泛存档的报纸的分类广告中发布这个哈希值。

Hash your set of hashes so that you have only one hash to record. Then publish this hash in the classifieds of a widely archived newspaper.

得不到的就毁灭 2024-09-22 19:44:48

真正安全吗?将哈希值打印在一张纸上,并附上法律文本,大意是“在 XX/XX/XXXX 这一天,我确认这些哈希值能够准确识别这些具有这些日期的文件。” (不是律师,请找一位律师来验证这一点),然后进行公证。然后,将这张纸保存在安全的地方。

Truly secure? Print out the hashes on a piece of paper along with a legal text to the effect of, "On this day XX/XX/XXXX I affirm these hashes to be accurately identifying these files with these dates." (not a lawyer, get one to verify this), then have it notarized. Then, save that piece of paper in a secure location.

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文