cashmaney / tendermint-validator Goto Github PK

Just to get the ball rolling I figured the lowest hanging fruit is smooth integration with plaintext keys in the same format that cosmos uses, so people can just port their existing keys there.

But a more holistic approach would also support importing and exported encrypted keys, so they could live solely in a secure environment

Would be cool to expand the concept to an array of MPC-based signers, using TLS between the enclaves.

Also, using ed25519 for the signing should make the implementation easier (albeit MPC is rarely easy)

Mainly just to get rid of debug symbols/unnecessary stuff, since I don't have a commercial Intel license, and I don't think it makes sense to get one right now anyways (also, I don't need Intel attestation right now)

There is basic double signing protection using a watermark file (I haven't really tested it, though) but the interesting question IMO is does it make sense to do it inside the enclave?