Skip to content

RFC 0022: Account key derivations#296

Open
valentunn wants to merge 3 commits into
mainfrom
rfc/0022
Open

RFC 0022: Account key derivations#296
valentunn wants to merge 3 commits into
mainfrom
rfc/0022

Conversation

@valentunn

@valentunn valentunn commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

@valentunn
valentunn requested review from a team July 20, 2026 12:50
valentunn and others added 2 commits July 20, 2026 20:14
Resolves the AccountAlias review-fixture conflict in favor of main's
shape (shared PROOF_CONTEXT/RING_LOCATION constants plus the CreateProof
case), which supersedes the branch-side repair of the same fixture.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​parity/​truapi@​0.5.0 ⏵ 0.5.08110010097100

View full report


### ECDH key derivations

Keys used for ECDH-based E2E encryption are **sr25519** keys, hard-derived

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ECDH keys are not sr25519. Currently, P-256 NIST keys are used but we need to migrate to x25519 as it is faster, supported by community (most recent protocols, for example, TLS 1.3 uses it. The only problem I see here is that we need to use a standard for HDKD but one we have SLIP-0010 uses numbers as path component whereas we suggesting to use arbitrary UTF-8 strings.

@valentunn valentunn Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bad wording here. What's meant is that we use sr25510 + substrate derivations and then hash the private key to obtain material for the p256 keys. Will fix

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants