Replies: 1 comment
-
Question: Should we use a key derivation function (KDF)? Why did we not use a secure key derivation function? Answer: What we used is a secure derivation function, it is just very simple. Typically KDFs are very complicated to implement. In our case, we have something specific to KERIpy. Given a KEL you can recalculate the path. The bug was the lack of a delimiter between the ridx and kidx because it makes the path ambiguous when you get high enough numbers. There's nothing preventing support for other key derivation functions. |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
When recovering from just the bran/passcode then there is no delimiter between the ridx and kidx which means that you have more than a single digit in ridx or kidx then indexes become ambiguous.
How should we solve this issue?
This started from Fergal's SignifyTS issue: WebOfTrust/signify-ts#300
A corresponding KERIpy issue is opened here: #928
Beta Was this translation helpful? Give feedback.
All reactions