Protocol and application for providing Kerckhoffian, 0-trust, deviceless coercion-resistance in self-custody. For details, see docs. To understand the protocol, refer to the white paper and executive summary.
Protocol and application for providing Kerckhoffian, 0-trust, deviceless coercion-resistance in self-custody. To understand the protocol, refer to the white paper and executive summary.
The following steps will allow an easy memorization of the path demonstrated in demo 1 within as little as 1-2 hours:
- Download, install, and learn how to use Anki in your system;
- Download (or clone from repository) and import demo 1 Anki deck;
- Study deck;
- Download (or clone from repository) directory src specifically in version
e8b1551c08a3d59ee8cf30f2b5dfa803556a00a6 - In your system's terminal, open the directory, activate venv and then run main.py;
- Enter
viboniboasmofiasbrchsprorirerugugucavehistmiinciwibowifltuoras the required inputSA0 - You have, now, started to navigate the same tree as demonstrated in demo 1 from it's root. Continue as practiced with the aforementioned Anki deck until the leave.
- By confirming with input 1 to the correct leave, you should get the following output:
53ffb290aa668cd5050e94aeecbb7046ce349d8ff775e409fcba45f6164a22d00e8cfb91e6836da62e7f7362cca30539b7f57f55e5c4a1cdf27a86997b99b2c6ee7760838ac0454e3e2f87714d303550b49063ff89934ecdb48e6c328f1c4561a9b7374232cdd8a71077653ca8091fc2b43b89f615ddac37aedfacd28bb605ba. This is an improper BIP39 seed, ie a seed that should not be used because it's trivially obtainable --- it or ways to obtain it have been published. - Just like the seed, all the addresses derived from it are improper and, therefore should not be used. One of them, obtained upon loading wallet with the seed in previous item, will be
bc1q3qjatkwlrxvkah0uphr2vj3lqqd73l22n7djl9. In your favorite blockchain explorer, you can confirm that it's first two transactions were, respectively, receiving 198964 Sats, and then having them removed back (before publication). Obs.: in cases like that, it's advisable to utilize a coinjoin service to preserve privacy.
This section will provide you by a quick guide to start.
This project depends on the following packages:
- argon2-cffi = 23.1.0
- argon2-cffi-bindings = 21.2.0
- cffi = 1.16.0
- numpy = 1.25.0
- Pillow = 10.1.0
- pycparser = 2.21
- PyQt5 = 5.15.10
- PyQt5-Qt5 = 5.15.2
- PyQt5-sip = 12.13.0
Follow the following to get your environment ready:
- Install system package requirements:
sudo apt install python3-setuptools python3-virtualenv qtbase5-dev qt5-qmake cmake- Set up a python virtual environment and activate it:
python3 -m venv .venv
source .venv/bin/activate- Install the requirements:
pip install -r requirements.txt- Now, you can run the app using the following:
cd Great_Wall/src/greatwall/
python3 gui.pyNOTE: The previously described method to run app is not the recommend one, but as we still in the development cycle this is the simplest way to get things ready :).
Coming soon. An advanced, knowledgeable, tech-savvy reader, will, at this point, have understood what is to come and can improvise the steps by themselves. In a nutshell, all you have to do is to securely manage1 a brute-force resistant SA0, true-randomly generate a path vector of L_i's, and memorize them procedurally as explained in the session above. For better effect, user can implement non-trivial Time-Lock Puzzle, to impose desired time on derivation of SA3 from SA0. To prevent leakage of critical content through Anki, a simple scheme with salt and pepper can be done so to avoid the need to modify Anki, but we'll leave this for a next time.
Footnotes
-
That is, either memorize it, or deterministically derive it from other brute-force resistant secret information, or symmetrically encrypt it with a master key falling back in one of 2 previous cases and manage well the encrypted database. ↩