BlockchainCommons / BlockchainCommons/Community

PROJECT: Collaborative Seed Recovery (CSR)

Đang mở
#149 15 bình luận 3 reaction 0 người được giao Xem trên GitHub
program: gordian
Ngôn ngữ chính
Không có dữ liệu ngôn ngữ
Star
68
Fork
7
Chỉ số merge pull request
Không có pull request nào được merge trong 30 ngày

Mô tả

Collaborative Seed Recovery, or CSR, is a new system intended to automate the recovery of seeds and other sensitive digital data in a way that is safe, secure, and simple to use. It is not a methodology to prevent compromise, but simply to add resilience to recovery in the case of failure or loss.

CSR allows for the recovery of seeds and other secrets by dividing responsibility for recovery up between multiple devices, some (but not all) of which will be necessary for recovery. Its baseline recovery mechanism uses self-sovereign recovery, while more advanced scenarios allow for social recovery. Backup is meant to be largely automated, especially in the baseline scenario, while recovery may require some user intervention.

CSR is built using _SSKR_ to lock _crypto-envelopes_ of data and to allow recovery using a variety of _authentication_ methods.

Please see the [CSR Overview](https://hackmd.io/D1caESQTRFi0FRtW1kNwMg) for more information.

**TODO: Documentation & Prep**

- [x] Decide Who Will Be Involved at Each Principal Company
- [ ] Share Individual Goals
- [x] Decide Shamir or VSS
- [x] Write Use Cases
- [ ] Write Cryptographic Design
- [ ] Write System Requirements
- [ ] Spec Out Automated `crypto-envelope` with multiple types of SSKR Permits (2 of 3 + 4 of 9) + metadata
- [ ] Spec out related `crypto-requests`
- [ ] Update any necessary papers, test vectors, etc
- [ ] Create Reference App for Sending SSKRs
- [ ] Write White Paper
- https://github.com/BlockchainCommons/Gordian/blob/master/Docs/CSR.md
- [x] Clearly define: CSR does not defend the use of your keys, it simply makes recovery easy and minimizes SPOFs in recovery.
- [x] Lay out how it works
- [ ] Describe why Proxy, Bitmark, and other parties would support it.
- [ ] Build a roadmap for a fall release.
- [ ] Preview how this will lead to CKM in 2023.

**TODO: Specification Work**

- [ ] Design Hash Inclusion Proof for Envelope

**TODO: Level 0**

- [ ] Design Level 0 of CSR
- [ ] User makes no decisions
- [ ] One Share is stored in iCloud
- [ ] Information on location of other shares is stored in iCloud
- [ ] Other shares are stored on remote sites in an automated way
- [ ] User must do no auth to recover, other than verify their iCloud login
- [ ] Develop Level 0 of CSR

**TODO: Level 1**

- [ ] Design Level 1 of CSR
- [ ] User makes one choice for a share to be given to someone
- [ ] Option: offline
- [ ] Option: given to a friend running an app
- [ ] Option: given to an online service
- [ ] At least two shares for automated recovery are deleted
- [ ] Auth is required for new share management
- [ ] Develop Level 1 of CSR

**TODO: Post-Release**
- [ ] Write test cases
- [ ] Choose a branding name
- [ ] Decide if there is a seal for this

This is expected to be a joint project of Blockchain Commons, Bitmark, and Proxy with a planned start date around July 5th.

**Essential Links: CSR**

* [CSR Overview](https://hackmd.io/D1caESQTRFi0FRtW1kNwMg)
* [CSR & CKM Use Cases](https://hackmd.io/ZbRiwvUfQSy-1RKM15bM8Q)
* [CSR Intro for RWOT](https://github.com/WebOfTrustInfo/rwot11-the-hague/blob/master/advance-readings/collaborative-seed-recovery-csr.md)
* [CSR Intro Poster for RWOT](https://github.com/WebOfTrustInfo/rwot11-the-hague/blob/master/advance-readings/posters/collaborative-seed-recovery-csr-poster.pdf)

**Essential Links: SSKR**

* [SSKR for Developers](https://github.com/BlockchainCommons/crypto-commons/blob/master/Docs/sskr-developers.md)
* [SSKR Test Vector](https://github.com/BlockchainCommons/crypto-commons/blob/master/Docs/sskr-test-vector.md)
* [Developing SSKR Share Scenarios](https://github.com/BlockchainCommons/SmartCustody/blob/master/Docs/SSKR-Sharing.md)
* [The Dangers of Secret-Sharing Schemes](https://github.com/BlockchainCommons/SmartCustody/blob/master/Docs/SSKR-Dangers.md)

**Essential Links: URs**

* [Uniform Resources (UR)](https://github.com/BlockchainCommons/Research/blob/master/papers/bcr-2020-005-ur.md)
* [UR Type Definition for Sharded Secret Key Reconstruction (SSKR)](https://github.com/BlockchainCommons/Research/blob/master/papers/bcr-2020-011-sskr.md)
* [URs: An Overview](https://github.com/BlockchainCommons/crypto-commons/blob/master/Docs/ur-1-overview.md)
* [A Guide to Using URs for SSKR](https://github.com/BlockchainCommons/crypto-commons/blob/master/Docs/ur-3-sskrs.md)
* [A Guide to Using UR Request & Response](https://github.com/BlockchainCommons/crypto-commons/blob/master/Docs/ur-99-request-response.md)
* [Crypto-Request Test Vectors](https://github.com/BlockchainCommons/crypto-commons/blob/master/Docs/crypto-request-test-vectors.md)

Hướng dẫn đóng góp

Mở hướng dẫn đóng góp

Hướng nghiên cứu

Bắt đầu với các tài liệu được liên kết CSR Overview và CSR & CKM Use Cases, sau đó đọc các tài liệu SSKR, UR và crypto-request được tham chiếu. Issue này bao gồm nhiều luồng công việc về thiết kế, đặc tả, triển khai và tài liệu chưa được đánh dấu hoàn tất, thay vì chỉ một điểm bắt đầu; công việc chỉ được hoàn thành khi một luồng công việc cụ thể được xác định phạm vi và phần thiết kế, yêu cầu, kiểm thử hoặc ứng dụng tham chiếu tương ứng được hoàn tất.

Do mô hình lập chỉ mục viết ra từ nội dung của issue.

Đánh giá

Công nghệ
cryptography
Lĩnh vực
cryptography, documentation, security
Loại issue
Tính năng
Độ khó
5/5
Thời gian dự kiến
Hơn một tuần
Mức độ hoạt động
Đình trệ
Độ rõ ràng
Cần làm rõ
Mức phù hợp với người mới
18/100

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.