-
Notifications
You must be signed in to change notification settings - Fork 219
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat!: ledger metadata signature with receiver adress confirmation #6462
feat!: ledger metadata signature with receiver adress confirmation #6462
Conversation
Test Results (CI) 3 files 126 suites 41m 30s ⏱️ Results for commit 4e6a0d0. ♻️ This comment has been updated with latest results. |
Test Results (Integration tests) 2 files + 2 1 errors 9 suites +9 20m 23s ⏱️ + 20m 23s For more details on these parsing errors and failures, see this check. Results for commit 4e6a0d0. ± Comparison against base commit 310a470. ♻️ This comment has been updated with latest results. |
… hash those hashes
18b29d2
to
0baae9c
Compare
0baae9c
to
5ce49b1
Compare
applications/minotari_ledger_wallet/comms/src/accessor_methods.rs
Outdated
Show resolved
Hide resolved
applications/minotari_ledger_wallet/wallet/src/handlers/get_one_sided_metadata_signature.rs
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good
Description
Send the user spend public key to the ledger for script generation and user validation via the ledger device.
Motivation and Context
Initially we though we would need to send all the parts to the ledger, instead we will change the format by hashing the script, and hashing all other fields, then hashing those hashes.
This allows us to hash the other fields, and send just the hash to the ledger instead of serializing all the independent parts (covenants, encrypted data, etc.) As they have variable lengths and it gets messy quick.
Then we can send just the receiver public spend key to the ledger, and use it to generate the entire TariScript for the message, after the user has verified the address on the ledger screen.
How Has This Been Tested?
What process can a PR reviewer use to test or verify this change?
Breaking Changes