search

input-output-hk / offchain-metadata-tools

Tools for creating, submitting, and managing off-chain metadata such as multi-asset token metadata
Apache License 2.0
46 stars 32 forks source link

Metadata signing process #41

Open gitmachtl opened 2 years ago

gitmachtl commented 2 years ago

@sevanspowell hi, we soon have the feature to have the policy key on a hw-ledger. this is already working but is not released yet for the public. so we have a great security upgrade here for NFTs/NFs. the thing is, you need a signed entry for each parameter in the json file for the registry. i am not a haskell programmer, i looked at the code of the token-metadata-creator. would it be possible to get detailed information on how to sign the entries? i saw that is is based on a combinations of the black2b_256 hashes of the subject, the entry name, the value and the sequence number somehow?

i wanna collect some information so we can pass it on to vacuumlabs to discuss a maybe implementation into the cardano-app for ledger/trezor hw-wallets. because it would be bummer to have policy keys securely on a hw-wallet, but not being able to register the tokens with that policyid in the registry.

gitmachtl commented 2 years ago

Or maybe we can introduce some new methods to proof the ownership via a specific transaction onchain that is made via a hw-wallet and that contains proofing metadata or so? To offload that from the cardano-app completely. Adding a secondary "helper-key" in an OR configuration for the policy would make the whole hw-singing obsolete. But maybe the signing is easy and small enough so it can be fitted within cardano-app in the future.