Hacker News new | ask | show | jobs
by geoduck14 1400 days ago
Ok, I'll byte. Let's take a hypothetically example that might just happen.

Imagine a company has a Wikipedia hosted by a 3rd party. I interpret E2EE as: after I submit a post, it is encrypted, and the servicing company can't look at the unencrypted data, my coworkers can decrypt the posts.

It is simple to ask "how would you support linking to posts" - but "how would you support searching for posts"?

Would you maintain a key-value lookup list? Would you handle semantic search? Are there E2EE algorithms that facilitate enhanced searching?

2 comments

So, searching through encrypted text is a really interesting problem!

It's actually possible under some ciphers / search algorithms - if the client generates encrypted inverted index entries when submitting a post, and encrypts their (vectorized) search query using the same key, the server can compare them and return a scored list of IDs.

You do need to weaken the encryption scheme somewhat - in particular, term-frequency analysis becomes possible.

> Ok, I'll byte.

Whether it was intentional or not, +1 Funny.