awesome-LAFS

A curated list of things related to Tahoe-LAFS and its wider ecosystem. See the Awesome Lists GitHub topic for more such lists on many different subjects.

Contributions welcome!

Capability-based Security

• Christine Lemmer-Webber, 2018: Petnames: A humane approach to secure, decentralized naming Petname systems try to fulfil all three desirable properties.

• ERights.org E is an object-capability programming language and platform for writing distributed, secure, and robust software.

• Good Practices for Capability URLs by the W3C TAG (Technical Architecture Group) gives an introduction, examples, potential issues and recommendations when handling capability URLs. It includes a short chapter on Tahoe-LAFS.

  • Lecture: Mark S. Miller, Immunity from Viruses, Safety from Geeks Bearing Gifts (May 9, 2002)

• Marc Stiegler, 2005: An Introduction to Petname Systems

• Mark Samuel Miller: Robust Composition: Towards a Unified Approach to Access Control and Concurrency Control

• Miller, Yee, Shapiro 2003: Capability Myths Demolished

• UCAN (User Controlled Authorization Network) is a trustless, secure, local-first, user-originated authorization and revocation scheme.

• Wikipedia: The Object-capability model

• Wikipedia: The Principle of Least Authority (PoLA)

• Zooko's triangle is a trilemma of three properties that some people consider desirable for names of participants in a network protocol: global, secure, and memorable. Zooko conjectured that no single kind of name can achieve more than two.

Implementations

• Cap’n Proto Data interchange format with a capablity-based RPC protocol.

• Capsicum Practical capabilities for UNIX.

  • Capsicum in FreeBSD is part of FreeBSD's main branch.
  • Talk@BSDCan2014: Andrea Ross: Capsicum and Casper - more than a lipstick on a pig

• CHERI (Capability Hardware Enhanced RISC Instructions) extends conventional processor Instruction-Set Architectures (ISAs) with architectural capabilities to enable fine-grained memory protection and highly scalable software compartmentalization.

• Fil-C is "a memory safe implementation of the C and C++ programming languages you already know and love". It uses InvisiCaps, a capability system for pointers.

• Fuchsia is Google's capability-based "modern open source operating system that's simple, secure, updatable, and performant" (Wikipedia on Fuchsia).

• Redox Unix-like general-purpose microkernel-based operating system written in Rust. Its namespaces functionality is inspired by Capsicum.

• WASI The WebAssembly System Interface (WASI) is an ABI for Web Assembly (WASM).

  • Lin Clark: WASI: A system interface to run WebAssembly outside the web Employing capability-based security for robust sandboxing.
  • Talk: Ed Schouten, 32C3 (2015): CloudABI - Pure capability-based security for UNIX CloudABI is a predecessor of WASI.

Forward Error Correction (FEC) / Erasure Coding

• ZFEC on GitHub efficient, portable erasure coding tool

• ZFEX on GitHub a fork to utilize SIMD instructions (benchmarks)

• FECpp and accompanying blog post introduce using SSE2 to optimize the GF(2⁸) multiplications and implements a bitwise-compatible algorithm to zfex.

(Client-Side) Encryption

• ...

Secure network transfer

• Twisted An event-driven networking engine. Tahoe-LAFS relies heavily on Twisted.

• Magic Wormhole transfers data and files securely between two computers.

• FOWL Get TCP streams from one computer to another, safely.

• iroh Iroh is a library for building on direct connections between devices.

Distributed Storage

• Tahoe-LAFS

• Sia

• IPFS "store NFTs" 😹

Tools that work with Tahoe-LAFS

• Magic Folder syncs local folders to a Tahoe-LAFS grid.

  • The Magic Folder Data Model allows multiple writers.

• Rclone syncs and mounts over 70 cloud storage protocols. (Tahoe-LAFS support via its SFTP frontend)