File Your Feature Requests! #82
Replies: 30 comments 25 replies
-
Is it possible to have Polygon or other side chains added? |
Beta Was this translation helpful? Give feedback.
-
I've not tested it, but Matic is registered as SLIP-44 coin type
Thus where the Ethereum BIP-44 path for the first account is:
You should be able to enter your own path and substitute |
Beta Was this translation helpful? Give feedback.
-
In Gordian Seed Tool, click on Confirm this against a known account first. If it works for you, let us know here. |
Beta Was this translation helpful? Give feedback.
-
Until we have funding for greater support of other blockchains by Github Sponsors & Sustaining Patrons, I've added this as a short-term answer for this as feature request. BlockchainCommons/GordianSeedTool-iOS#112 |
Beta Was this translation helpful? Give feedback.
-
Gordian Seed Tool > Encrypted Data > Backup as SSKR Multi-Share > Print All Shares: A Feature Request for additional options I have multiple feature requests. I hope it's okay that I document then individually so you may comment on them individually. Group M of N: What I see... Group: 1 What I expect... Groups: 2 of 3 |
Beta Was this translation helpful? Give feedback.
-
Gordian Seed Tool > Encrypted Data > Backup as SSKR Multi-Share > Print All Shares: A Feature Request for additional options Save as PDF/PNG/GIF A user may want to have a PDF, PNG, or GIF output instead of printing all shares to a supported AirPrint printer. Provide them the option to have different outputs along with the ability to save locally on the device or remotely onto solutions they trust like Google Drive, Microsoft OneDrive, Dropbox, etc. |
Beta Was this translation helpful? Give feedback.
-
Gordian Seed Tool > Encrypted Data > Backup as SSKR Multi-Share > Print All Shares: A Feature Request for additional options Print Individual Shares In addition to including all shares onto a single printed document (or PDF/PNG/GIF), append additional pages of individual shares that are separated onto their own page of settings. For example: Benefits: Provide Layman Instructions Suggested content: About this document: This is a Sharded Secret Key Reconstruction (SSKR) document. SSKR is a method of taking a secret (like a cryptocurrency wallet seed phrase of 24-words) and breaking it up into pieces called shards. The secret can then be backed up by providing you and other trustees with copies of the various shards. You are 1 of 5 trustees, and 3 of 5 must gather to reconstruct the original secret. How to reconstruct the original secret:
Additional documentation:
Additional instructional videos:
|
Beta Was this translation helpful? Give feedback.
-
Thanks Jason, all good thoughts. We are focused on greater support of crypto-request/response and some bitcoin PSBT optimizations for 1.4, but will likely return to SSKR for 1.5. Also on our SSKR roadmap (likely post 1.5) is being able to encrypt additional information beyond the seed along with the shares, which is particularly relevant with multisig (you need to also save the xpubs for the other keys in descriptors) and for lightning. |
Beta Was this translation helpful? Give feedback.
-
Thank you Jason!
My pending payment in this area of blockchain real world data is being readied for filing and the concept is based on chain of custody evidence and since law and justice are crucial for civilization and fair dealing, i thank you again as a “no more fake anything” and my new “proof of truth” protocol is very exciting!
“Coldnsteel” the name of an ilder guitar teacher
Hieromonk Bartholomew
Diplomat, Kingdom of Hawaii, Judiciary
Question what you think you know
and
why
On Jan 18, 2022, at 6:45 PM, Jason Pearce ***@***.***> wrote:
Yes. I would welcome the ability to encrypt additional information with a focus on multisig and the Lightning Network. Thank you.
—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you commented.
|
Beta Was this translation helpful? Give feedback.
-
In Gordian Seed Tool > Scan, when I attempt to scan a QR code generated by https://github.com/SeedSigner/seedsigner, I get the "Unrecognized Format" error. Feature request is to support Seedsigner QR codes so that users could use your tool to add Sharded Secret Key Reconstruction (SSKR). |
Beta Was this translation helpful? Give feedback.
-
@jasonpearce: We had just noticed earlier this week that another QR from SeedSigner posted as an example on Twitter was malformed based on the ISO QR standards and thus was unreadable. We believe this is a bug in SeedSigner code somewhere. @wolfmcnally is working on a spec for UR-based seed that will also fit in a 25x25 QR grid, with the advantage of being self-identifying and having a checksum. Hopefully, we can get @SeedSigner and others to support it. We also are looking at an encrypted option with something called Another inspiration from SeedSigner efforts is that we hope to have an option in QR Tool for printing the QR big, which then you can tape on steel to make the QR using a punch. This requires some experimentation. |
Beta Was this translation helpful? Give feedback.
-
I hope I'm not abusing you with feature requests. I simply like what you've started and want to provide feedback and ideas. In Gordian Seed Tool > Scan, when I attempt to scan any multifactor QR backup code generated by Specter Desktop or Sparrow Desktop, I get the "Unrecognized Format" error. Feature request is to support multifactor QR codes from both Specter and Sparrow. In one of those apps, it provides multiple QR code export formats for different kinds of hardware wallets. Some of the QR codes were animated, others were not. I tried them all (Bluewallet, Cobo, Keystone, Specter, Sparrow, etc.). The Gordian Seed Tool didn't accept any of them. My desired use for your application would be to backup and securely store most singlesig seed phrases and multisig wallet configurations from a variety of popular software and hardware wallets that use QR codes. So far, most of my efforts and testing are failing or appear to be incompatible. Is there something I could do or test better that might be more helpful or constructive? If so, please let me know. Thank you. |
Beta Was this translation helpful? Give feedback.
-
I think the your Specter & Sparrow QR problems are a different problem than the @SeedSigner compact QR problem. Can we get your version numbers for both, or an example? Or steps to a specific generated QR that failed? |
Beta Was this translation helpful? Give feedback.
-
We have a new beta version of Gordian Seed Tool for iOS and macOS 1.3.3 (46) in Testfilight at https://testflight.apple.com/join/0LIl6H1h
Could you signup for TestFlight and download this test release and give us your feedback on this version? It is allways a challenge to get fresh eyes on a new version for weird edge-cases that core designers can't see. |
Beta Was this translation helpful? Give feedback.
-
Export Shares Individually I love that you provide three export options: ByteWords, UR, and QR Code. I'm seeking a Combined option like the Print Individual Pages. A PNG or PDF that provided context like this: Group 1 of 3, Share 2 of 5 I'm worried that exporting a ByteWord, UR, or QR Code without context is a recipe for mixing up the distribution to individuals/heirs or adding complexity to using them to recover a seed phrase. Export Shares Individually > Share > Save Image or Save to files If I save a QR export to photos via Save Image, the filename is IMG_0069.jpg. It would be better if you automatically named it Group-1-of-3-Share-2-of-5.jpg. If I try to save a ByteWord, UR, or QR code to Save To Files, the default file name is just "text.txt". It would be better if you also automatically named these files. If I try to send as an Email, you could populate the Subject to state "Group 1 of 3, Share 2 of 3". (I know, the user's Sent folder would have all of the pieces for reassembly, even if he emailed nine different shares to nine different people. So not a great practice.) In short, if you add a naming convention for images and files, it would make this Export feature more helpful and less tedious. Export works |
Beta Was this translation helpful? Give feedback.
-
Thank you for the detailed feedback 🙏 |
Beta Was this translation helpful? Give feedback.
-
The words are only from the checksum, thus contain none of the sskr shard material. Mainly useful so you can request it back. |
Beta Was this translation helpful? Give feedback.
-
I’ve asked @shannona to look what else we should put on cover page. Part of the challenge is that SSKR can be used in different ways, self-sovereign singlesig, self-sovereign multisig, social key recovery, and with others various multi-person multisig or collaborative custody.
We have designed SSKR in hope that others will implement it as an ecosystem standard. Right now you can recover two ways, our apps on iOS & Mac, or on Linux from the command line. We hope soon with some of the dedicated hardware signers like Passport.
But it still probably can’t hurt to point to a web page of apps supporting sskr . |
Beta Was this translation helpful? Give feedback.
-
The design of these pages has been somewhat of a improvised compromise to date, as in social key recovery scenarios we are also wanting to avoid information in shards that might allow to identify who and how many others they might need to coerce to get additional shards. Thus the identifiers are only the checksums, and any shard can only know how many shards are in their group, not how many other groups or how many shards in those groups are needs for quorum. But these are all tradeoffs. Increasing security also likely reduces resilience. As we advance these standards and more adopt them we’ll likely need to adapt. |
Beta Was this translation helpful? Give feedback.
-
In general a person who receives an SSKR share also needs to receive instructions from the sender that are too case-specific for us to provide. The most general instruction we could provide would be "Keep this safe and return it to the person who gave it to you upon request. When returning it, make sure you are returning it to the actual person who gave it to you." How a trustee keeps it safe is outside the control of the sender, and thus necessarily up to the trustee, including how to avoid confusing it with other similar items they may be holding, and what medium to store it in. If a trustee receives it digitally, they could print it out and save the physical representation somewhere, or they could keep it digital and keep it in a password manager or even just a file on their hard drive, as long as they can find it. This is part of why social key recovery has redundancy like M of N thresholds: a trustee may become uncontactable, or the share they are holding could become lost or corrupted. |
Beta Was this translation helpful? Give feedback.
-
A corollary to the above is that, other than keeping their shares safe, and knowing who to return them to, trustees don't need to know anything else about what they're holding: not the number of groups, not the number of shares within each group, and not the group threshold or share thresholds within each group. The share itself includes a couple of these items, and we provide a bit more information on the printed share pages such as the group number and generation date, primarily as a convenience to the owner when distributing the shares. None of this information is for the benefit of the trustee. |
Beta Was this translation helpful? Give feedback.
-
Thanks @ChristopherA and @wolfmcnally for your comments. I can see that you're focused on a wide range of use cases and standards (as you should be) that go beyond the subset of use cases I have in mind -- which I appreciate. The use case I have in mind: In this case, there's a reasonable degree of trust (they are loved family members). While the multisig and hardware wallets are the primary X of Y means of spending those funds, each hardware wallet's backup seed phrase should also be distributed and recoverable. Already, while writing this use case I quickly understand that each use of your tool and SSKR is too specific to each user to account for the right balance of documentation or secrets (e.g. you are right). In my case, I want to favor ease of use over secrets and security (because I want non-technical family members to be able to recover funds). The security in this case study comes from geographical distribution of information, but your tool would have no way of knowing that. In my case study, I'd want to provide each family member paper and a USB jump drive with the SSKR shards, which is why I would prefer better X of Y notation and filename naming conventions. You've made great points about other case studies that would want to keep that information secret. Thanks for your time and contributions to security. |
Beta Was this translation helpful? Give feedback.
-
Per @jasonpearce, I'd suggest the following additional changes to the "Print" overview page:
I'm hesitant to put in a QR to download the app because that might muddle the QRs that define the shares on later pages. Hopefully the source code URLs will take care of that in a worst case. For the individual pages, I might just add the admonishment:
|
Beta Was this translation helpful? Give feedback.
-
@jasonpearce @jblachly @moskovich: The next beta of Gordian Seed Tool 1.3.3 (47) is available on TestFlight for both macOS and iOS.
Here is a current list of all the default file names saved when using share sheet to file system related services: Could you take a look at this TestFlight, and your own save-to file system needs, and see if these choices work for you? We tend to be too conservative here for purely self-sovereign recovery scenarios (as @jasonpearce described above "multisig wallet with geographically distributed hardware wallets…geographically distributed family members to inherit the funds secured") as opposed to more pure social-key recovery or multi-person multisig scenarios. There is a balance here between security against collusion and compromise, and reliability for resilience. |
Beta Was this translation helpful? Give feedback.
-
Interesting dilemma. I can see others wanting to send it as file. But I can see your point. I know I never ran into this problem as I largely use the iOS version and use the copy to clipboard share sheet option when I want to paste in Signal, text or email. With this version, we now can copy to clipboard in macOS (this was not available before), and we've restored the erase clipboard function (only on iOS, not macOS). Is there some reason you'd prefer not to use the clipboard share sheet? |
Beta Was this translation helpful? Give feedback.
-
Some minor changes that I think might help clarity: UR for response -> UR response Generally I think that aligning as much as possible to [content] [encoding] [identification] will help keep things consistently clear. |
Beta Was this translation helpful? Give feedback.
-
@shannona I'm wondering if it should instead be [identification] [content] [encoding] so that similar items together? |
Beta Was this translation helpful? Give feedback.
-
Testing 1.3.3 (47) > Backup > SSKR > Export Shares Individually In general, excellent. QR to Photos: Photo file names are still IMG_0074.png instead of SSKR QR DRUM MONK IDEA DULL.png Bytewords or UR to Files: Naming convention is good, but BlueWallet attempts to open the files when selected (but does nothing with them). I don’t recall that happening before. They are .txt files, so I’m not sure why BlueWallet tries to open them. |
Beta Was this translation helpful? Give feedback.
-
Testing 1.3.3 (47) > Backup > SSKR > Print All Shares Also great. Does not yet have the additional wording and instructions mentioned earlier. Print: Printing worked well. |
Beta Was this translation helpful? Give feedback.
-
Testing 1.3.3 (47) > Backup > SSKR > All Shares As… To Files: Also worked for both options. Also with your naming convention .txt. When select from files, Blue Wallet also tries to open both of them (but does nothing). |
Beta Was this translation helpful? Give feedback.
-
If you'd like to request a feature for a Gordian app, please post a new topic here.
Please be sure to tell us what Gordian app you're talking about.
Please be as specific you can about the feature.
Finally, please also tell us why you'd like to see the feature: sometimes there's a great reason for something, but we might not realize it based on just a feature request. Or, alternatively, it might let us identify another feature we're considering that could accomplish the same thing.
Beta Was this translation helpful? Give feedback.
All reactions