aztec-packages
aztec-packages copied to clipboard
Epic: Authorization
Areas for authentication:
- The PXE should prevent apps from accessing other apps' secrets via oracle calls
- The PXE should check whether the code about to be run actually does belong to a particular contract address
- The PXE might need to call back to a user/wallet/dapp to ask "Hey, this contract address needs this capsule data to continue provide it at your own risk"
- The PXE might need to convey to a dapp "Hey, I've simulated this tx and here are the details, here's what's going to be made public, and it's going to cost this much"
- The dapp says to the wallet "Please sign this mysterious message".
- The dapp says to the wallet "Please sign this mysterious transaction"
### Tasks
- [ ] Preventing apps from accessing other apps' states.
- [ ] Preventing apps from accessing other accounts' states.
- [ ] https://github.com/AztecProtocol/aztec-packages/issues/9133
- [ ] Securing secret data.
- [ ] Using hardware wallet to seed keys' randomess.
- [ ] https://github.com/AztecProtocol/aztec-packages/issues/3745