On: Senator asks FBI director to name the cryptographe...

[benchaney]

> But suppose we could construct a truly limited mechanism that would give them the ability to recover only a small amount of encrypted data.

Do you believe that this is actually possible? How? I ask because this being doable is crux of your argument, and every proposal I have seen falls laughably short.

[cvwright → benchaney]

If you had asked me if single-server private information retrieval was possible, I'd have said no until I read papers on single-server PIR.

If you had asked me if oblivious RAM were possible, I'd have said no until I read papers on ORAM.

I think we could do a lot more than we are now.