New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

支持加密传输一些敏感信息 #70

Open

5 tasks

wangshijun opened this issue Jan 29, 2023 · 1 comment

Assignees

Labels

priority/important-tech-debt

Collaborator

wangshijun commented Jan 29, 2023

某些情况下我们需要在 DID Connect 过程中把传递的信息加密，避免被窥探（或许我们默认应该做成加密的）

这就需要应用、钱包、SDK 都支持加密特性，结合之前的使用和 https://webencrypt.org/library/ 上的列表，我们可以选用 tweetnacl，具体的 todo 包括：

验证不同语言实现的兼容性：https://www.npmjs.com/package/tweetnacl https://github.com/tancred/tweetnacl-objc https://github.com/uport-project/tweetnacl-k https://github.com/InstantWebP2P/tweetnacl-java 这部分最好实现在 mcrypto 模块里面
确定保持向前兼容的方案：如何交换 pk，如何加解密数据
SDK Reference 实现
钱包 Reference 实现
Blocklet 升级

wangshijun self-assigned this

wangshijun added the priority/important-tech-debt label

mave99a commented Jan 29, 2023

现在不是https的吗？那么本身协议层已经加密了呀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment