Hacker News new | ask | show | jobs
by carrotcypher 1364 days ago
> FHE gives you NO guarantee about the code that is running on the encrypted data.

You mean in order to validate the data is authentic? Otherwise the code running on the data is irrelevant, as it can't access the data itself (and thus preserves the before-mentioned privacy).

1 comments

The code decrypts the data at some point (for use, presentation, etc). If the code is crappy, insecure, etc. then the data will be exposed, and the data being encrypted wont help at all...
Decrypted on the local computer, not the untrusted remote computer as it were.
If the same company makes the software at the local end, there's still code there than can expose the data or the encryption key...
Big assumption there.