Here is a weak attack on the full sealer.
There are two conspirators, X and Y.
X and Y each report the booty.
In regard to sealer logic we have often said that you need both unsealer and a sealed box to get the innards.
No one had both and the limited communications channel between them should have prevented the conspiracy.
If only the sealer code could invoke a sealed box all would be well.
Perhaps OCaml’s module system can fix this, but I am not confident.
- X holds an unsealer U.
- Y holds box B which holds b which X wants.
- Y wants to help x get b.
- X and Y can communicate but only integers to each other.
This pattern is still useful but I need to think thru the ramifications of this attack.
It seems limiting to assume that all holders of an unsealer have the same goals.
Just now (2016 June 19) I see no use of sealers that Stiegler’s pattern does not provide.