Security and Integrity Guarantees

[ntoufoudis]

Chronicle provides tamper-detectable audit logging through:

• hash chaining
• signed checkpoints
• verifiable export datasets

I'd be interested in hearing feedback from developers and security professionals:

• Are there additional integrity guarantees that would be useful?
• Are there threat models Chronicle should consider?
• Are there verification techniques we should explore?

Security discussions are especially welcome.