search

openwallet-foundation / credo-ts

Typescript framework for building decentralized identity and verifiable credential solutions
https://credo.js.org
Apache License 2.0
273 stars 200 forks source link

Create a guide/document covering how to store wallet parts, on mobile, using AFJ #740

Open 2byrds opened 2 years ago

2byrds commented 2 years ago

We want to document how wallet parts are securely stored on a mobile app, using AFJ. This includes storing cryptographic material (mnemonic, passphrase, private keys, etc) and SSI related items like DIDs/VCs/Relationships/history. It should adhere to https://github.com/hyperledger/aries-rfcs/blob/main/concepts/0051-dkms/dkms-v4.md and https://github.com/hyperledger/aries-rfcs/tree/main/concepts/0440-kms-architectures and https://github.com/hyperledger/aries-mobile-agent-react-native/blob/main/docs/design/OS-specific-security-settings.md https://hyperledger-indy.readthedocs.io/projects/sdk/en/latest/docs/design/003-wallet-storage/README.html

swcurran commented 2 years ago

Highly recommend you look into Aries Askar for much of that: https://github.com/hyperledger/aries-askar

FYI, if folks were wondering if Askar should be used vs. Indy SDK, here are some interesting load test results to look at -- it's not even close anymore:

Twice the performance and no degradation over time.

2byrds commented 2 years ago

Highly recommend you look into Aries Askar for much of that: https://github.com/hyperledger/aries-askar

FYI, if folks were wondering if Askar should be used vs. Indy SDK, here are some interesting load test results to look at -- it's not even close anymore:

Twice the performance and no degradation over time.

Thank you for the information @swcurran !

TimoGlastra commented 2 years ago

FYI, if folks were wondering if Askar should be used vs. Indy SDK, here are some interesting load test results to look at -- it's not even close anymore:

Damn, these numbers are insane. Nice!

genaris commented 2 years ago

Highly recommend you look into Aries Askar for much of that: https://github.com/hyperledger/aries-askar

FYI, if folks were wondering if Askar should be used vs. Indy SDK, here are some interesting load test results to look at -- it's not even close anymore:

Twice the performance and no degradation over time.

This is pretty interesting. The same could be achieved in AFJ maintaining current functionality by switching from indy-sdk to askar + aries-vcx + indy-vdr?

TimoGlastra commented 2 years ago

This is pretty interesting. The same could be achieved in AFJ maintaining current functionality by switching from indy-sdk to askar + aries-vcx + indy-vdr?

Let's hope so 🤞. We don't really have performance tests for AFJ. However it looks like the data generator is set up quite generic so it shouldn't be too complex to add support for AFJ.