-
Notifications
You must be signed in to change notification settings - Fork 220
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: functional wallet encryption (issue #5007) #5043
fix: functional wallet encryption (issue #5007) #5043
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is better, but I'd prefer the encryption and decryption to occur in the conversion to and from the .....Sql
types, so that a ....Sql
type is always encrypted and the non-sql type is always decrypted, but zeroized
base_layer/wallet/src/key_manager_service/storage/sqlite_db/key_manager_state.rs
Outdated
Show resolved
Hide resolved
base_layer/wallet/src/key_manager_service/storage/sqlite_db/mod.rs
Outdated
Show resolved
Hide resolved
0e700cf
to
142f835
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We are going backwards with regards to zeroizing the data after use.
I made a comment how to fix this in the PR
base_layer/wallet/src/key_manager_service/storage/sqlite_db/mod.rs
Outdated
Show resolved
Hide resolved
base_layer/wallet/src/key_manager_service/storage/sqlite_db/key_manager_state.rs
Show resolved
Hide resolved
base_layer/wallet/src/key_manager_service/storage/sqlite_db/mod.rs
Outdated
Show resolved
Hide resolved
base_layer/wallet/src/output_manager_service/storage/sqlite_db/output_sql.rs
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
utACK
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
utACK
Description
Wallet encryption and decryption is now done via pure methods, instead of mutating in place the required fields, see #5007.
Motivation and Context
Address issue #5007.
How Has This Been Tested?
Existing unit tests.