opencoin / opencoin-memoranda Goto Github PK

CC @jhb

As long as WebCrypto hasn't arrived, we have to use other libs for JS clients. Accidentally, we are using Leemon Baird's BigInt library, but we are not too happy with it, and we need other stuff as well (e.g. sha256 and PKCS1).

We should do performance tests with the most promising JS crypto libs:

• BigInt encoding/decoding, BigInt inversion (= calculate unblinder) and low-exponent exponentiation (blinding) with these libs: Baird, Wu, Shapiro, Shop-js (Hanewinkel says that was the fastest RSA he found) and (RSA test only) OpenPGP.js
• Sha256 tests with SJCL, Crypto-js and jsSHA/OpenPGP.js

There is an authentication_info field in the validate messages, but what does a client need to put in there? And is it even required, e.g. if the client had a secret key, she could sign the validate message. We need to specifiy something here.

RSA-PSS (http://tools.ietf.org/html/rfc3447) is designed to protect against a number of risks that come with simplistic hash-the-zeropad-then-sign.

We should research whether one/some of these threats are relevant to OC. If not, we can allow the simple hash+RSA for OC.

• http://tools.ietf.org/html/rfc3447

What determines that a coin is unique?

hash of:

• serial
• serial + signature
• whole payload
• serial + mint_key_id
• ....