Skip to content

Add secp256r1 Signing Keys #7718

Closed
@aaronc

Description

@aaronc

Summary

Add support for singing tranactions with the secp256r1/NIST P-256 algorithm (used in macOS/iOS/watchOS & Android secure enclaves). Already discussed in #4789 and #7074 but there was no standalone issue.

Problem Definition

Supporting the signing algorithm for the secure enclave in macOS/iOS/watchOS and Android Hardware-backed Keystore will allow these devices to basically function as hardware wallets. There has been speculation that the secp256r1/NIST P-256 algorithm was backdoored by the NSA, but this is unproven and users should be able to choose their desired level of security. For many users, having a smartphone-backed key for low security operations (as enabled by the other key management modules #7074) may be the best options.

Proposal

  • add a secp256r1/NIST P-256 PubKey implementation with addresses based on ADR 028
  • add support to the ante handler with a proper gas param
  • DON'T add support in the keyring because this is for mobile/desktop clients ONLY

For Admin Use

  • Not duplicate issue
  • Appropriate labels applied
  • Appropriate contributors tagged
  • Contributor assigned/self-assigned

Metadata

Metadata

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions