bren2010 / draft-keytrans Goto Github PK

Currently, the prefix tree commits to one key-version pair per leaf. I would argue that the leafs should commit to lists of key-version pairs (as the Merkle^2 paper suggests). This way, users can more easily monitor that the server did not include a fake key before to the current epoch.

There are two aspects to this:

1. We want to be able to add a certain number of fake entries to hide the actual size of the log.
2. We want to be able to add pre-existing key-value pairs without having one log entry per pair (like we would for key-value pairs added after log creation).

It should be very efficient to have a large number of fake prefix tree entries. We also want to not leak the number of real entries that a log starts with