creator

KMS Creator

The KMS Creator generates encrypted seeds with two goals:

• It is verifiable that the encrypted seed was generated inside a Creator enclave, even after the enclave is terminated.
• The encrypted seed can be decrypted by KMS root server enclaves.

The first goal is achieved by the creator attaching a signature to the encrypted seed whose private key is generated inside the enclave and public key is present in remote attestations. Once generated, the seed, signature and a remote attestation can be preserved indefinitely as proof.

The second goal is achieved through the condition parameter. It attaches a decryption condition to the encrypted seed that allows the creator to restrict who can decrypt it. In the common case, this would be checking if an address is approved by the KmsRoot smart contract that verifies remote attestations before approving KMS root servers.

Build

cargo build --release

Reproducible builds

Reproducible builds can be done using Nix. The monorepo provides a Nix flake which includes this project and can be used to trigger builds:

nix build -v .#kms.creator.<output>

Supported outputs:

• default, cargo build output
• service, systemd service config

Usage

$ kms-creator --help
Usage: kms-creator [OPTIONS] --condition-path <CONDITION_PATH> --dkg-public-key <DKG_PUBLIC_KEY>

Options:
      --listen-addr <LISTEN_ADDR>
          DKG listening address [default: 0.0.0.0:1100]
      --signer <SIGNER>
          Path to file with private key signer [default: /app/secp256k1.sec]
      --condition-path <CONDITION_PATH>
          File path for the condition for the seed
      --dkg-public-key <DKG_PUBLIC_KEY>
          DKG ceremony public key
  -h, --help
          Print help
  -V, --version
          Print version

Example

$ curl <ip:port>/generate
544d4b69000100009293c43099822c1c52b001c0a...

The response follows this format (with || denoting concatenation) - <encrypted seed>||<64-byte secp256k1 public key>||<32 byte x25519 public key>||<65-byte signature>. The public keys correspond to keys derived from the seed using specific derivation paths and can be used to prove knowledge of the decrypted seed.

License

This project is licensed under the GNU AGPLv3 or any later version. See LICENSE.txt.