~/talk

Package Transparency for WebAssembly Registries

on YouTube 34m
Talkat CloudNativeSecurityCon North America 2023 · 2023-02-01..02-02· [webassembly, security]

speaker

name:Kyle Brown
links:none on file

resources

video:https://youtu.be/yjPRcGCwaTI
slides:none on file

summary

Warg is a concrete protocol that makes a Wasm package registry auditable by publishing per-package append-only signed logs and a global verifiable map (Merkle + sparse radix trees) whose paired root checkpoints are signed by the registry. Clients verify only relevant package leaves; long-running monitors process all checkpoints to detect mississued updates, hidden yanks, or key rotations. Reference implementation is in Rust with HTTP APIs and protobufs and is intended to compile to Wasm for wide deployment.

AI-written summary · about

chapters (13)

  1. 0:00Introduction
  2. 3:49Why WebAssembly matters
  3. 4:53Need for secure registries
  4. 6:37Certificate transparency for registries
  5. 8:25Warg implementation
  6. 15:23Verifiable logs and maps
  7. 19:55Mitigating attacks
  8. 21:19Summary
  9. 22:03Q&A
  10. 26:13Registry use cases
  11. 27:40Key compromise recovery
  12. 31:31Extending Warg
  13. 32:15Implementation details

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.