Global Feed Post Login
Replying to Avatar Vitor Pamplona

We need to make sharded nsecs the default for Nostr.

Amethyst partially signs with its share of the nsec and sends to Amber. Amber can only finish the signature or reject. Amber should not be able to reassemble the nsec from any event from Amethyst (or any other app).

Now repeat this for every single Nostr app.

No single app has the full nsec. The only way to "leak" an nsec is to break into the code of both apps at the same time.

Frost does that. But for singing only.

We also need sharded encryption and decryption schemes.

Avatar
ManiMe 9mo ago

But wait …

Does Frost allow for the “co-signing” client to gain access to the main “npub” (not nsec) … cause it would need to know this in order to read and write to lists, profiles, ect… let alone access to “other” users’ main pubkeys for Outbox ect…

nostr:nevent1qqsy6g7me5e9l3578matphmn03v5538phptvm762gcavddugjulrdcszyr0k07d8usgj2azuheavl0wdqd530qxxg00hhtts7hfppredflpqqqcyqqqqqqgpzdmhxue69uhhyetvv9ukzcnvv5hx7un8qyxhwumn8ghj7mn0wvhxcmmvqyf8wumn8ghj7ur4wfcxcetsv9njuetnqyw8wumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctvqyt8wumn8ghj7un9d3shjtnwdaehgu3wvfskueqr5h0pw

Reply to this note

Please Login to reply.

Discussion

No replies yet.