boltlabs-inc / key-mgmt-spec

Formal specification for the key management project
MIT License
3 stars 2 forks source link

Separate internal `user_id` from user account information used in OPAQUE. #102

Closed indomitableSwan closed 2 years ago

indomitableSwan commented 2 years ago

In the current implementation, we conflated the user account information used in OPAQUE (normally, e.g., a user email or other memorable account information) with an internal, universally unique identifier for the user (user_id).

We fixed this conflation problem in the specification; for more details see:

This epic will be complete when the implementation reflects these changes, which includes:

marsella commented 2 years ago

Some preliminary work is on the 131-register-cryptography branch, which makes the two different types but doesn't start to define where they are each used and created.

marsella commented 2 years ago

I am not confident about separating this work into multiple issues. I think it might have to be one big PR. I will make sub-issues for now but I'm afraid they will end up all being done in one.

indomitableSwan commented 2 years ago

I am not confident about separating this work into multiple issues. I think it might have to be one big PR. I will make sub-issues for now but I'm afraid they will end up all being done in one.

I wouldn't work too hard on making separate issues in that case.