Passkey Proof of Concept with the WebAuthn API for a Ed25519 Key Pair

[khanhhuy-bkdn]

Show and tell project type

Builder Bounty Submission

Github Repo Link

https://github.com/orgs/DN-Blockchain/repositories

Video Walkthough Link

passkey-ed25519-video.1.mov

Project Description

Project that demonstrates a secure authentication system using WebAuthn with Ed25519 key pairs. The system includes both backend and frontend components, allowing users to register and authenticate using cryptographic keys securely stored on their devices. The frontend (Client) provides a simple user interface for interacting with this system.

Application App Link

https://nillion-passkey-frontend.vercel.app/

Passkey Registration Flow

Passkey Authentication Flow

Database structure

What problems does your project solve? How does it preserve privacy for users?

This WebAuthn Passkey System addresses several key issues in modern authentication:

1. Enhance security

   • Strong authentication: WebAuthn provides a significantly more robust security layer than traditional passwords by utilizing biometric factors (such as fingerprints or facial recognition) or physical security keys (like USB security keys).
   • Protection against attacks: The use of Ed25519 key pairs and WebAuthn significantly reduces the risk of common attacks such as brute-force attacks, phishing, and replay attacks.
   • Enhanced privacy: By keeping private keys securely stored on the user's device and preventing their transmission to the server, the risk of key compromise is significantly reduced.

2. Enhanced convenience:

   • Simplified authentication process: Users only need to use their devices for authentication, eliminating the need to remember complex passwords.
   • Cross-Platform Support: Enables seamless authentication across different devices and platforms that support WebAuthn.

3. Privacy protection:

   • No sensitive data disclosure: WebAuthn does not require the disclosure of sensitive personal information, safeguarding user privacy.

How does the project use Nillion? Describe and link to any Nada programs

No response

Is there anything else you want to share?

No response

Optional - Link your project and team members' social handles

No response

Optional - Team ETH Address(es)

0xa85e506C1E0577176cDcE13664c8626C0DEcc6D6