mpc-recovery
mpc-recovery copied to clipboard
near
Integrate Key Derivation
Our preferable design will include Key Derivation. Let's add a simplified logic, that generate the users key out of the root key and user internal id.
@abacabadabacaba have you found a good Rust library for Key Derivation? Maybe you have some code snippets? We already want to integrate it to the project. Even without MPC part.
Optional for POC1, but really nice to have. Otherwise we will need to use the same key, or have a database.
Seems unlikely that this is happening for POC1. There are also just general concerns regarding this approach, reposting @DavidM-D's message here for context completeness:
Apparently aggregate key derivation isn’t safe because of something called a Wagner attack. I got sent a paper explaining why that’s the case but I have not even attempted to read it. So we’re going to be using lots of keys instead https://eprint.iacr.org/2020/945
