guardianproject / guardianproject/proofmode-android

Allow management of private key and/or identity

Open
#84 3 comments 2 reactions 1 assignee Claimed by @cstiens View on GitHub
Dominant language
Kotlin
Stars
262
Forks
46
PR merge metrics
No merged PRs in 30d

Description

Right now it's difficult to demonstrate ownership of a key and the associated signed files. One can take new pictures and show that those are signed with the same key as any photo requiring proof of ownership, but if the app has to be reinstalled or a phone is lost then there is no backup of the secret and it is essentially impossible to prove who produced the evidence.

A simple improvement is to give the user the option to set or modify the `keyId` string to something unique and identifiable.

https://github.com/guardianproject/proofmode/blob/39b6a9e5c7b2ddd627f39b25548c24b73cecdd21/android-libproofmode/src/main/java/org/witness/proofmode/crypto/PgpUtils.java#L78

This probably also requires allowing the user to generate and swap between multiple keys if there is a need to generate both anonymous and attributable evidence.

A more robust approach is to allow users to manage the private key. Being able to import an existing key as in #40 would be ideal. Exporting the private key or an encrypted backup would also be minimal solutions to the problem.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.