mirror of
https://github.com/lux-apps/papers.git
synced 2026-11-02 11:39:52 +00:00
zeekay
abf99d05fc
Restructured from flat .tex/.pdf files into per-paper subdirectories. Added Antje Worring as co-author on all papers. Synced PDFs to pdfs/ for download site.
59 lines
2.2 KiB
TeX
59 lines
2.2 KiB
TeX
\section{Compliance Architecture}
|
|
|
|
\label{sec:compliance}
|
|
%% =====================================================================
|
|
|
|
\subsection{Regulatory Share Distribution}
|
|
|
|
The threshold $t$ and share distribution are configured to enforce
|
|
regulatory access policy:
|
|
|
|
\begin{table}[h]
|
|
\centering
|
|
\begin{tabular}{lccl}
|
|
\toprule
|
|
\textbf{Configuration} & $t$ & $n$ & \textbf{Share Distribution} \\
|
|
\midrule
|
|
Regulator can decrypt alone & 1 & 5 & Regulator holds 1 share \\
|
|
Regulator + 1 custodian & 2 & 5 & Regulator: 1, custodians: 4 \\
|
|
Regulator + quorum & 3 & 7 & Regulator: 1, custodians: 6 \\
|
|
Multi-regulator & 3 & 7 & SEC: 1, FINRA: 1, custodians: 5 \\
|
|
\bottomrule
|
|
\end{tabular}
|
|
\caption{Example share distributions for different compliance regimes.}
|
|
\label{tab:share-dist}
|
|
\end{table}
|
|
|
|
The key design principle is that the regulator always has the
|
|
\emph{ability} to obtain $t$ shares (either by holding them directly or
|
|
by compelling custodians via legal process), but the operator
|
|
\emph{never} has any shares.
|
|
|
|
\subsection{Forced Decryption Protocol}
|
|
|
|
When a regulator issues a lawful decryption order:
|
|
|
|
\begin{enumerate}[nosep]
|
|
\item The regulator identifies the ciphertext(s) to be decrypted and
|
|
presents a signed decryption request to the committee.
|
|
\item Each compelled committee member computes their partial decryption
|
|
$d_i$ and submits it to the regulator.
|
|
\item The regulator reconstructs the plaintext using Algorithm~\ref{alg:decrypt}.
|
|
\item An on-chain audit log records that decryption was performed
|
|
(without revealing the plaintext), providing transparency.
|
|
\end{enumerate}
|
|
|
|
This protocol ensures that decryption is auditable: the on-chain record
|
|
proves that a lawful decryption occurred, and the threshold structure
|
|
ensures that no unauthorized decryption is possible.
|
|
|
|
\subsection{Operator Cannot Collude}
|
|
|
|
Even if the operator is subpoenaed or compromised, it cannot assist in
|
|
decryption because it holds zero shares. The operator's contribution
|
|
to the system is purely computational: it evaluates homomorphic circuits
|
|
using only public material. This architectural separation means that
|
|
compromising the operator reveals no plaintext data.
|
|
|
|
%% =====================================================================
|