notes on crypto operations.md

Terms

• Sign XXX = Sign the digest of XXX

Exaustive List of Cryptographic Operations

• Clients should encrypt the payload using per-file symmetric key before passing it to the middleware.
• Clients should sign the arguments using their own private key and include it to the request to the middleware.
• Middleware should verify the arguments using the public key.
• Middleware should sign DataCapsule header using writer-private key and include the signature of it in DataCapsule before sending it to DCServer.
• Middleware should encrypt per-file symmetric key using its (some kind of) key and store it in InodeRecord.
• Clients should decrypt the payload using per-file symmetric key after they get the records from DCServer.