rubixchain / finao-spv-poc

Transform Encryption

This Rust program demonstrates how to use the Recrypt library to encrypt, transform, and decrypt data using public and private keys.

Overview

The program performs the following steps:

create_key_pair() - create new Encryption KeyPairs and Signing Keypairs using rng returns pub_key: [u8; 33], pvt_key: [u8; 32], sign_key: [u8; 32], ver_key: [u8; 33],

encrypt_data() - encrypt data to delegators pub key and splits into fragments. Retruns ciphertext and fragments

decrypt_data() - decrypt data to be called by delegator by passing cipher text and relevant private key

Usage

Clone the repository or download the source code.

Compile and run the program: cargo run

Review the output and any assertion errors to understand the behavior of the umbral-rs library.

Dependencies

This program depends on the following crates:

umbral-pre: A crate that provides cryptographic primitives for data encryption, transformation, and decryption. We are using v0.2.0 for compatitbiltiy reasons.

finao-spv-poc's Issues

dApp : Access control for private data

A smart contract package that will encrypt the user data before adding to ledger. Only the data owner DID will be able to decrypt and view content by default.
The owner can later provide 'consent' for other DIDs to access the data by transform encryption scheme.

dApp : interface to write data to ledger

All contents written by user will be tagged private or public. This issue should create a web app UI/UX interface form for user to add data and tag them as private or public. The structure of the form to be confirmed.

Infra : Sandbox setup

Crate a sandbox environment ( 5 users + 5 validators ) for FINAO SPV PoC.

dApp: orchestration to connect chain and Wasm

A connector module to link the web requests (adding content to ledger) with the web3 chain , smart contract Wasm environment.

dApp : Smart contract logic for data management

A smart contract in RUST to perform

1. On chain R&W of public and private data
2. Encryption and Decryption of private data by access control

UI/UX : User enrollement and DID creation

Workflow

1. User performs a web app signup with mail ID and password
2. Triggers Decentralised Identity creation ( /createDID) . The private key and private shares are returned back to the web2 gateway
3. Send welcome link to users mail ID connect to sandbox network

Web server: Client - Rubix interaction

A web server to connect the client requests to rubix nodes. This web server also acts as a custodial wallet for data signature.
Also create a db to hold web login details and wallet information.