Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Abstraction layer for crypto primitives #30

Open
peacekeeper opened this issue Dec 19, 2014 · 0 comments
Open

Abstraction layer for crypto primitives #30

peacekeeper opened this issue Dec 19, 2014 · 0 comments
Assignees
Labels
Milestone

Comments

@peacekeeper
Copy link
Member

Currently, we store private keys inside XDI graphs. They are persisted in the graph store. We need some abstraction layer here that allows private keys to be handled more securely. Similar considerations apply to the handling of secret tokens.

There is a certain abstraction mechanism for some crypto operations already in place. For example, in order to validate signatures on an incoming XDI message, the corresponding public key could be obtained using XDI discovery, it could be hardcoded in a configuration file, or it could come from other sources. This abstraction is a good start, but needs to be improved.

See also:

https://github.com/projectdanube/xdi2/wiki/AuthenticationSignatureInterceptor
https://github.com/projectdanube/xdi2/wiki/AuthenticationSecretTokenInterceptor

@peacekeeper peacekeeper self-assigned this Dec 19, 2014
@peacekeeper peacekeeper added this to the release-0.7 milestone Dec 19, 2014
@peacekeeper peacekeeper modified the milestones: release-0.7, release-0.8 Jun 9, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant