search

integritee-network / worker

Integritee off-chain worker and sidechain validateer
Apache License 2.0
89 stars 46 forks source link

get_state function should require account holder's signature #19

Closed brenzi closed 4 years ago

brenzi commented 5 years ago

right now, anyone can call substratee-worker's get_counter for any account.

worker should only return counter value of a verified caller -> use ed25519 signature

clangenb commented 5 years ago

Done. but now the get_counter function requires an ed25519 public key as an account, which is used at the same time to verify the signature. Hence the client's cli interface needs to be adjusted to genereate public keys from the input.

brenzi commented 5 years ago

The current implementation is invalid as the signature is verified by the worker (untrusted) instead of the worker enclave (trusted)

brenzi commented 4 years ago

by ow we should be able to work with sr25519, right?

clangenb commented 4 years ago

yes