In the interest of scientific method, OSDI encourages authors to make
publicly available the experimental systems from which their published
results derive. This package contains the code and data involved in the
paper by Jon Howell and David Kotz, End to End Authorization, that
appeared at OSDI 2000.

DISCLAIMERS

Please be warned that the code and data belong to a simple snapshot of
that used for the conference. I've made no effort to define the "entry
point" to the code, or clearly document the data and how it appears in
the published results. The good news, however, is that I am including
the Matlab code I used to generate the published results, including the
graphs. Therefore, with sufficient patience, one can work backwards from
the statistical results, to the raw data that contributed to those
statistics, to the experiment that generated that raw data. Also good news,
I have included the <em>timingexp</em> Java package that includes test
harnesses for each of the tests that appear in the raw data. Therefore,
you can work all the way back through the test harness to discover the
actual code that ran to produce the data.
Finally, although I have now given the very patient enough information
to recover the performance results, it should be clear from reading the
paper that the exciting results of this work are not its performance
numbers. :v) Instead, the structure of the infrastructure, channels, and
applications, and the system they implement, is what the interested
reader may be most interested in studying.

DOCUMENTATION

The first volume of my dissertation (available as Dartmouth Computer
Science Technical Report #TR2000-278) goes into more detail than the
OSDI paper, and includes discussions of the formal semantics behind the
system. (The semantics appeared in condensed form at ESORICS 2000.) The
second volume of my dissertation (available as Dartmouth Computer
Science Technical Report #TR2000-379) includes typeset versions of the
documentation for the packages included in this distribution.

DEPENDENT PACKAGES

My package depends on Morcos' SDSI/SPKI 2.0 implementation, available
at:

http://theory.lcs.mit.edu/~cis/sdsi/sdsi2/java/SDSI_Java_Intro.html

To integrate Morcos' SDSI implementation into this tree, perform these
steps:

cd code
tar xzf sdsi20-java0.1.0-src.tar.gz
cd sdsi
patch -p1 < sdsi.patch

EXPERIMENTAL DATA

The experimental data appear in the directory snowflake-timing/timedata/.
The Matlab code to analyze those data appears in snowflake-timing/.

COPYRIGHT

The contents of this distribution are Copyright 2000 by Jon Howell.
It may be copied and distributed for research and scientific study only,
and no charge may be made for making copies. It may only be distributed
as this entire package, unmodified.  If you wish to use it for any other
purpose, you must receive written permission from Jon Howell.

I believe that the only patent that this code may be subject to is the
RSA patent, which has expired.
