ConceptGhost Key Attack
Ghost Key Attack
An attack method against key transparency systems in which a malicious server temporarily replaces a user's public key to steal messages and subsequently restores the original public key to bypass consistency checks.
Timeline (last 90 days)
Oct 20
IronDict's consistency proof relies on a "randomized consistency mechanism": the difference vector between adjacent epochs is multiplied by a random challenge and then accumulated, and since the server must commit the update before learning the challenge, it can defend against "ghost key" attacks.
Unverified50%