private-attribution / ipa

A raw implementation of Interoperable Private Attribution

MIT License

40 stars 23 forks source link

Helper binary requires public key for match key encryption, but it shouldn't #1121

Open akoshelev opened 2 months ago

akoshelev commented 2 months ago

In order to start a helper binary, one must provide the path to public key for match key encryption

 target/release/helper --network $CONFIGDIR/h$IDENTITY/pub/network.toml --identity $IDENTITY --tls-cert $CONFIGDIR/h$IDENTITY/pub/h$IDENTITY.pem --tls-key $CONFIGDIR/h$IDENTITY/h$IDENTITY.key --port 443 --mk-public-key $CONFIGDIR/h$IDENTITY/pub/h${IDENTITY}_mk.pub --mk-private-key $CONFIGDIR/h$IDENTITY/h${IDENTITY}_mk.key

there should be no reason for it - helpers only decrypt the match keys, never encrypt it

eriktaubeneck commented 2 months ago

1161 addresses this. Is the same true for `--tls-cert`? Presumably `helper_party` should only need to known `--tls-key` and the certs for other helpers, but not it's own public cert.