search

animist-io / whale-island

Bluetooth LE server for an Ethereum IoT client that provides location-based oracle services to mobile Dapps.
http://animist.io
20 stars 2 forks source link

Possibility of whale-island decrypting publications? #64

Open cgewecke opened 7 years ago

cgewecke commented 7 years ago

It might be nice to write instructions to a contract using the nodes' public keys and have them decrypted when published at the node. This isn't super cool from a smart-contract perspective since the encryption has to be done by a third party that wants to hide info from contract participants before they arrive somewhere, but it would really help with spoofing for some apps.

The one thing that would be better than is an algo to RSA encrypt randomly generated values in Solidity - in other words to handle everything w contract logic. In principle this is possible?

cgewecke commented 7 years ago

Per alex beregszaszi's RSA verify post - this is not meaningfully possible until there is generic bigint capability.

Other super basic questions: are there actually some visibility issues here? e.g. the intermediate state of an internal function is visible?

Also: The random value generation thread

cgewecke commented 7 years ago

eth-random. This is believed to be safe for low value contracts. Gameable by miners (or something).

See zeppelin slack (mid sept) for extensive discussion of this btw zoultu and package author.