signalapp / signalapp/SecureValueRecovery2
Use passkeys PRF extension as improvement/alternative
Nobody has claimed this yet.
- Dominant language
- C++
- Stars
- 59
- Forks
- 26
- PR merge metrics
- No merged PRs in 30d
Description
Passkeys now support PRF extension which means that if the app is has passkey registered with it (with the user app identity, and not web), then you can use PRF extension by passing Phone+Pin and retrieve a seed for KDF, which then can be used to create encrypted payload, and stored in opaque location, or even offline/backup services.
The passkeys themselves provide pre-authorization, and rate limiting.
We just released a whole whitepaper on it
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are identified in the issue. Start by reading the linked whitepaper and the existing SecureValueRecovery2 design, then determine how the proposed passkey PRF flow fits the project. Done would require an agreed scope and implementation plan before coding can begin.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- authentication, cryptography, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100