Orie Steele

Results 1091 comments of Orie Steele

does lib p2p support multicodec / base58 ? Its possible that is also a better future facing target than PEM. I recently implemented support for `did:key` with secp256k1, and added...

I opened: https://github.com/libp2p/js-libp2p-crypto/issues/177 I'm not sure about the best way to layer these things, but I'd personally love to see less PEM and JWK and more multicodec.

I don't know who those people are / this is the only repo I am aware of... I created the issue to try and flush them out so I could...

^ that PR was merged, here are some other projects that support it to test against. https://libauth.org/interfaces/secp256k1.html#signmessagehashschnorr

can i get a link to the format of the complete bytes for the resource identified by `genesis-cid-bytes`? (I want to see what genesis data is)

^ exactly... for example, here is how we generate `X25519` keys today: ``` { "@context": [ "https://www.w3.org/ns/did/v1", "https://w3id.org/security/suites/jws-2020/v1" ], "id": "did:key:z6LSq2MnTYfm1MqSV6uy9d2DTLLAvNqU1Bwn5u6SrhXGePQ7", "verificationMethod": [ { "id": "did:key:z6LSq2MnTYfm1MqSV6uy9d2DTLLAvNqU1Bwn5u6SrhXGePQ7#z6LSq2MnTYfm1MqSV6uy9d2DTLLAvNqU1Bwn5u6SrhXGePQ7", "type": "JsonWebKey2020", "controller": "did:key:z6LSq2MnTYfm1MqSV6uy9d2DTLLAvNqU1Bwn5u6SrhXGePQ7",...

imo how you derive a public key or private key is out of scope for the spec.... that includes curve conversion, mnemonics, or key generation functions that take passwords.

yep, if the multicodec says "ed25519 public key that will be converted to x25519 public key" thats fine... but still likely to trigger security folks who don't want to see...

@dmitrizagidulin - https://www.iana.org/assignments/jose/jose.xhtml#web-key-use - https://www.iana.org/assignments/jose/jose.xhtml#web-key-elliptic-curve > So if we shouldn't do that with Ed25519 keys, then same applies to RSA and P-256. No, because we are not using Ed25519 for...

> Hmm, to me, calling it a different key and saying that there's a security-related concern because it's the same key is having it both ways. Sure, but thats an...