Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Research: Can we create the owner signature from a Ledger? #35

Open
mitschabaude opened this issue Oct 17, 2024 · 0 comments
Open

Research: Can we create the owner signature from a Ledger? #35

mitschabaude opened this issue Oct 17, 2024 · 0 comments

Comments

@mitschabaude
Copy link
Member

mitschabaude commented Oct 17, 2024

This would be a nice security improvement, because it means that while a "hot" browser wallet stores your credential and knows your data, it can't present the credential without signature from the HW wallet, so hacking the hot wallet does not imply stealing the user's credentials or impersonating them (except if the public data on the credential allows you to fully recreate it for a different owner, but that is often not the case)

How: Research the precise capabilities of Mina's Ledger module. What we need is a hash on an arbitrary field element, instead of a hash on a Mina payment.
(Note: Probably we only have "legacy" Poseidon with x -> x^5 available on the Ledger which would mean we need to adapt the in-circuit signature scheme to that, which would be tolerable)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant