DFFML Rolling Alice: Engineering Logs: Volume 0: Architecting Alice, 12 May 2022

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Architecting Alice: Volume 0: Context: Part 28: Confirmed Decision to use Same Private for X/Ed25519

Description

https://github.com/intel/dffml/discussions/1369#discussioncomment-2733252

A

A

A

I think we're back.

A

Okay, wow that's bright.

A

A

Protocol small formal recipes for stateful interactions.

B

A

There you go aries.

A

A

Out of my protocol single message sent by the sender, okay,.

A

Look for creating a period did and the genesis version of its did doc can be done at any time. It does not require communication registering to peer id with the other party or parties in a relationship. Relat requires a specific protocol.

A

This is the only protocol that must be supported by an implementation that targets, layer, 2a or 2b support.

A

Registration, okay, so this is the only only register is layer 2a to be okay.

A

Okay, because pure data days are supposed to be only resolvable, for example, only by peers resolution requests and this method must not be honored. They do not come from your peers.

A

A

Encrypted connection requesting an inviter okay, so do we? We do need this encrypted. We do need this encryption key. Okay,.

A

A

Is lib sodium cross platform message can be encrypted in python on a merged, cpu decrypted here choosing yeah these people know what they're doing. Okay.

A

First, read the previous section all right, so we know that we need to do it.

A

Signing keys can be referred to.

A

A

You say: sign ed k, sign ed pk curve, sk.

A

Okay, sick key to a public key okay.

A

You can avoid it using distinct keys for signing encryption yeah. If you can afford it. Using distinct keys for signing encryption is still highly recommended, yeah, okay, so yeah. That would be great, but I think for our situation. We need to pull out the portion there.

A

A

A

What do we have here.

A

Let's see this json web key kid thumbprint, okay, so that's the information that we have about it. Okay and thumbprint.

A

Is that all what is this thing.

A

Cash keep okay cash pre-k.

A

Okay: let's take a look at the api.

A

Json web key: let's go look at what's his name.

A

A

Hey beaverton no way.

A

What happens here.

A

Hello, did you know ssh, you can see a good flow.

A

We try to look on.

A

To look over here could have account work on no match.

A

B

B

A

A

So I'm really glad I didn't go to bed.

A

This is interesting.

A

This is very interesting, so what can we do with this information? um Okay,.

A

A

What can we do with this information.

A

A

A

A

Can we do ssh over webrtc.

A

Here's what I'm thinking if we can use the same key for our dids with github, and we can communicate over webrtc's channels with.

A

A

Ssh with ssh during the in doing the um basically doing a um no. We don't need to do that. Okay, yeah, because you could do a challenge response.

B

A

I wonder: okay.

A

What could we, how could we do something here.

A

So if you host ssh server so ssh server with the key pair.

A

Here is ssh0 with the cube here.

A

How do you do this?

A

How do you exchange messages.

A

How do you open communication.

A

Well, somebody has some okay. So how do you open communication.

A

You have to post somewhere to some channel.

B

A

That can be arbitrary.

A

All right give me the keys.

A

A

A

Where did that go.

B

A

A

That post go from.

A

A

A

A

That's the formulas.

A

Signal does this okay? Well, if signal's doing it, that's good.

A

They use the x freed, it's not carrying a v coordinate, so it can map to two keys. They solve it by defining the average point. So it's here and then negating the average secret scalar to it also comes out with more issues. Do not have any other secret. You could try, but that says go back to take on this of us.

A

See each other what why can't slime? Okay,.

A

A

Okay use this curve.

A

A

A

B

A

A

Leads to what all right.

A

To encrypt, take the y coordinate of the public key and convert it to a? U coordinate, which we use as the x two two five five one: nine public key. If I'm real static, decrease.

A

Two players might end up with different v coordinates if they were to calculate them, but in exit nine, the shared secret is just a recording, so no one will notice that remains over to your future. Work is testing cross protocol attacks, one that really concerns me.

A

And saying it will tell you if they decrease also the last generation, if you're used to log into an ssh server.

A

Okay, so let's see.

A

A

This morning, key.

A

Converts turn ed to see the key and stores it in sk.

A

A

Sorry to save some time cpu cycles, crypto sign open encryption.

A

A

A

Converts into the secret key in what format, though, super key in what format.

A

uh When it is reused, when is it secure to reuse key material.

A

A

Okay, where's json web token.

A

Okay, export private: let's look at export private here.

A

A

All right so p print.

A

P print- oh, I guess I say it with the next p. There's two p's in there p print v print. Oh I'm adding an extra p. What do you know if you print to some web key.

A

What's up with that, it dumps it in a string.

A

Okay, so crv kid ktyx.

A

Thanks for private.

A

No private key available.

B

A

That's interesting, so that's why we can use it for signing.

B

B

A

Sshs key okay! So if we can use this thing for encryption.

A

Oh yeah, this is why this whole thing. So basically you can sign something for this key and you can create this did, but that doesn't necessarily mean you own the private portion.

A

It just means you know that the public portion, so you can sign something for it that so that's what they were talking about with that genesis situation, so you have to you really have to tie things to this. The signing aspect, which is what we're running into right here, is because we're right off the bat saying well, I want to sign another link.

A

How can we do this? uh Can we.

A

We want to generate, I want to generate a key.

A

What about this age project.

A

Let's for yeah.

A

Interesting keys.

A

A

X, two five: five one: nine.

A

A

Actually, this one x.

A

Okay, can we do.

A

What's this community cryptography.

A

A

Okay, hey look at this.

A

A

A

A

That's what we're looking for.

A

A

That you exactly what we wanted, I believe so I think this is where we'll do the uh let's see. This is where he does the ad.

A

A

So this is where he does the thing he talks about in his blog, where he enables.

A

Doing something with ssh this each public key is 90.

A

Here it is yep yep, yep yep there. It is.

A

A

Okay, so recipients test and ssh.

A

So let's go check out the um docs a little more here.

A

Hsh, okay, ssh keys, also imports encryption to.

A

Encrypting to decrypting, with their respective private key.

A

Into a github user, this is what we're looking for here.

A

Combining ssh keys to put in dasha you can easily encrypt the file to the ssh keys listed on a yeah yeah. This is exactly what we're looking for.

A

B

A

A

A convenience feature: okay,.

A

A

B

That's somewhere all right.

A

Our public key, so we're just going to make we basically we make up a public key.

A

And then we make up a publix shared secret.

B

Right now, okay,.

B

A

Look at the shirt secret. We get our phone public key.

A

So we created a random buffer data. We get our public key shared secret. I think it's adding to ephemeral when it does this and then tweak scalar size.

A

Okay, how are you full th tweak? Okay, so it takes this hash puts it into this tweak and then it says: shared secret tweak.

A

A

Recipient ssh key marshall, so we take the recipient's public key. We marshal it into whatever this format is and then we do.

A

Our hkdf with sha-256.

A

A

And then stitch fingerprint make okay, we create a song.

A

And then we do okay, wrapped key wrap.

A

A

Okay: okay, new idea here is okay,.

A

Unwrap multi-unwrap.

A