News for hackers. Stuff that matters.
Re:Time to Encrypt the Cloud by hvidgaard on Tuesday February 21, 2017 @08:15AM (#13695168)
They are two very different things.

E2E is a term that dictates that when I send information, only the intented reciepient can decrypt it, under the assumption that the keys are safe.

Zero knowledge proofs is a constuct where I can prove something to you, without leaking any information. For instance, you want to buy a house, but before the seller wants to sign, he wants proof that you can actually pay x $ in down payment. Traditionally you would go down to your bank, get a piece of paper stating that you have x $ locked and only usable for this purchage for the next 60 days. It doesn't say how much you have in your account, where the money is from or anything else. A zero knowledge proof is the same, just digital.

E2E would not help here, because it doesn't prove anything, it's just a term about the comunication being safe.

Re:Time to Encrypt the Cloud by homakov on Tuesday February 21, 2017 @08:49AM (#13695348)
I know what you mean, ZK as in password auth. Then why in the first place encrypted storage was called zero knowledge? Complete misuse of the term.
Re:Time to Encrypt the Cloud by hvidgaard on Tuesday February 21, 2017 @09:12AM (#13695539)
Not really. My example could just as well be done with any public key crypto system. If you want better examples, see the SO post https://mathoverflow.net/questions/22624/example-of-a-good-z...

But misuse of the term is most likely just because they didn't understand it in the first place. It is well defined, but rather abstract.

Re:Time to Encrypt the Cloud by floatboth on Tuesday February 21, 2017 @11:59AM (#13697071)
Because if you encrypt data before uploading it to a server, the server has no (zero) knowledge about what that data is?
Re:Time to Encrypt the Cloud by homakov on Tuesday February 21, 2017 @12:14PM (#13697240)