Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Consider adding padding to payload #352

Open
alexmturner opened this issue Mar 4, 2022 · 2 comments · Fixed by #1030
Open

Consider adding padding to payload #352

alexmturner opened this issue Mar 4, 2022 · 2 comments · Fixed by #1030
Labels
possible-future-enhancement Feature request with no current decision on adoption

Comments

@alexmturner
Copy link
Collaborator

The length of the payload's plaintext may inadvertently reveal details about its contents (e.g. the number of contributions). To protect against leaking this through the encrypted payload, we may want to pad the plaintext to a fixed size.
@alexmturner alexmturner mentioned this issue Mar 11, 2022
Merged
alexmturner added a commit that referenced this issue Mar 14, 2022
@alexmturner
Update value encoding to have a fixed length (#355)
d732ca5 
This partially addresses #352 by ensuring that no information about each contribution is revealed through the length of the value's encoding.
@csharrison csharrison added the possible-future-enhancement Feature request with no current decision on adoption label Jun 26, 2023
@alexmturner
Copy link
Collaborator Author

Note the latest discussion of this is happening here: patcg-individual-drafts/private-aggregation-api#56

alexmturner added a commit that referenced this issue Sep 19, 2023
@alexmturner
Spec: Pad the payload with null contributions
7635596 
Resolves #352.

See also related spec change for the Private Aggregation API:
patcg-individual-drafts/private-aggregation-api#98
@alexmturner alexmturner mentioned this issue Sep 19, 2023
Merged
alexmturner added a commit that referenced this issue Sep 19, 2023
@alexmturner
Add padding the payload to the aggregate explainer
0e31a94 
See #352 and the spec change #1030.
@alexmturner alexmturner mentioned this issue Sep 19, 2023
Merged
alexmturner added a commit that referenced this issue Sep 26, 2023
@alexmturner
Add padding the payload to the aggregate explainer (#1031)
842661c 
See #352 and the corresponding spec change #1030.
alexmturner added a commit that referenced this issue Sep 26, 2023
@alexmturner
Spec: Pad the payload with null contributions (#1030)
f39ff57 
Resolves #352.

See also the related spec change for the Private Aggregation API: patcg-individual-drafts/private-aggregation-api#98. See also the corresponding ARA explainer change: #1031.
@alexmturner
Copy link
Collaborator Author

Reopening to capture that we may change the padding scheme to be more direct in the future

@alexmturner alexmturner reopened this Sep 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
possible-future-enhancement Feature request with no current decision on adoption
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Spec: Pad the payload with null contributions WICG/attribution-reporting-api
2 participants
@csharrison @alexmturner