Physalia: Redistribution-Resistant Content Protection for Decentralized Storage
Physalia secret-shares decentralized storage data so leaking protected content requires full redistribution bandwidth.
The paper presents Physalia, an access-control system for decentralized storage that secret-shares the data itself rather than only an encryption key, forcing an adversary to transmit the full content to leak it. A robustness transform turns any computational secret-sharing scheme into a robust one using signatures with ephemeral keys and constant-size metadata per share, instead of error correction. The authors prove the transform secure and evaluate Physalia on the Walrus decentralized storage system with an on-chain access policy.
- Secret-shares the data itself, not only the decryption key.
- Adversary must pay full data size in redistribution bandwidth.
- Robustness transform uses ephemeral-key signatures and constant metadata.
- Evaluated end-to-end on Walrus with an on-chain access policy.
Full article188 words · extracted from arxiv.org · click to collapse
In decentralized storage systems, access control is often implemented by encrypting the data before upload and sharing the decryption key with authorized parties. A leaked key, however, makes the data publicly accessible, which lowers the barrier to content piracy below that of traditional systems, where piracy requires redistributing the full data. We present Physalia, an end-to-end access-control system for decentralized storage that secret-shares the data itself, instead of just the key, across multiple servers. Leaking the data then requires transmitting it in full: We formalize this intuition and introduce the redistribution bandwidth an adversary must pay to leak protected content and show that Physalia raises it to the size of the data. Sharing across untrusted servers requires robustness against corrupted shares. We develop a robustness transform that turns any computational secret sharing scheme into a robust one and which is of independent interest. In contrast to existing schemes that rely on error correction, it uses signatures with ephemeral keys and adds only constant-size metadata per share. We show that this transform is secure and evaluate Physalia end-to-end on the Walrus decentralized storage system with an on-chain access policy.
Text extracted automatically; images, tables and formatting may be missing. Original: https://arxiv.org/abs/2609.28277