Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Opaque Wrappers and Patching: Negative Results

Published

Author(s)

Paul E. Black, Monika Singh

Abstract

When a patch is released for buggy software, bad actors may be able to analyze the patch and create an attack on unpatched machines. A wrapper could block attacking inputs, but it, too, gives attackers critical information. An opaque wrapper hides such information if it can be implemented. Hashing and Bloom filters can only implement opaque wrappers in very special circumstances. We describe Zero-Knowledge Proofs, Fully Homomorphic Encryption, and Oblivious Transfer Protocols to show that they cannot help, either. Although we see no way to implement general opaque wrappers, we hope this idea spurs research.
Citation
Computer (IEEE Computer)
Volume
52
Issue
12

Keywords

Opaque wrapper, Bloom filter, information hiding, software patching, zero-day bugs, cybersecurity.
Created November 21, 2019, Updated November 22, 2019