Epic: Secret NFTs 🔐

[ipapandinas]

This issue specifies the design choices took for the Secret NFTs pallet implementation in the SDK. Feel free to comment on certain misunderstandings and new suggestions are warm welcomed.

The 2 main sections are:

Minting

Flow

		graph TD;
		A[Init API]-->B;
	  B[Create Keyring]-->F;
	  B-->W;
	  
	  C[Create PGP Key Pair] -- public PGP Key -->D;
	  C -- secret PGP Key --> V;
	  D[Encrypt Secret] --> E;
	  E[IPFS upload: Secret + Public PGP Key] --> F;
	  F[On Chain: Mint Secret NFT] --> W;
	  
	  V[Generate SSS] --> W;
	  W[Format Payload: Data + Signature] --> Y;
	  X[Get Enclaves] --> Y[SGX Upload];
	  
	  
	  style A fill:#fff,stroke:#333,color: #000,stroke-dasharray: 5,stroke-width:2px
	  style B fill:#fff,stroke:#333,color: #000,stroke-dasharray: 5,stroke-width:2px

Sub tasks

• #123 @Victor-Salomon
• #124 @dhammani
• #125 @ipapandinas

Viewing

Flow

		graph TD;
		Z[Init API]-->Y;
	  Y[Create Keyring]-->X;
	  X[SGX get: SSS]-->W;
	  W[Construct PGP Private Key] --> F;
	  
	  V[NFT ID] --> X
	  V --> C
	  
	  C[Chain storage get: Secret Offchain Data] -- IPFS hash --> D;
	  D[IPFS get: Secret Metadata] -- IPFS hash --> E;
	  E[IPFS get: Encrypted Secret File] --> F;
	  F[Decrypt Secret File]
	  
	  
	  style Z fill:#fff,stroke:#333,color: #000,stroke-dasharray: 5,stroke-width:2px
	  style Y fill:#fff,stroke:#333,color: #000,stroke-dasharray: 5,stroke-width:2px
	  style V fill:#fff,stroke:#333,color: #000,stroke-dasharray: 5,stroke-width:2px

Sub tasks

• #127 @dhammani

Production ready

• #135 @dhammani
• #134 @ipapandinas
• #143 @ipapandinas
• #136 (optionnal - TBD)

Notes

Lifecycle states

Secret NFTs will have the following lifecycle associated with them: Pending Mint -> Minted -> Burned.

Glossary:

• TEE: Trusted Execution Environment
• SGX: Intel Software Guard Extensions
• DEK: Data Encryption Key
• SSS: Shamir Secret Sharing
• PGP: Pretty Good Privacy (encryption program)

References

• TIP500 TEE Enclave
• TIP510 Secret NFT
• TIP520 SGX