A Crypto Trick I Haven't Read

[pers_d7pyzaKeymaster]

A system parallel to Java Jar’s could achieve much higher performance with alternative designs that either trusted key signers or trusted a stored table of trusted namespace/hash values as previously validated. That’s actually an independent point. What prevents Java implementations from doing the 2nd thing?

[josh]

The tricks that further lower the low performance hit for hash checks:

a) lazy loading

b) security policy switch that includes “check before every code run” vs. periodic check. Periodic check then becomes background check that is done on most code runs that are not on/off Unix style utilities, so the window of risk in the normal case is low.

[Author]

Posts