/secure-enclave-keosd

EOS keosd with Touch ID Secure Enclave

Primary LanguageShellMIT LicenseMIT

secure-enclave-keosd

Download Latest

secure-enclave-keosd

Run Hardware-based EOS wallet with your Macbook Pro Touch ID.

Download latest release.

If your device is compromised, the key could also become compromised. As an added layer of protection, you can store a private key in the Touch ID Secure Enclave. Keep your EOS wallet secure with your finger.

Overview

EOS officially supports secure enclave hardware wallet in v1.1.0. The Secure Enclave is a hardware-based key manager that’s isolated from the main processor to provide an extra layer of security. When you store a private key in the Secure Enclave, you never actually handle the key, making it difficult for the key to become compromised. Instead, you instruct the Secure Enclave to create the key, securely store it, and perform operations with it. You receive only the output of these operations, such as encrypted data or a cryptographic signature verification outcome.

Usage

You can run keosd.app directly. If you want to run with option, try below:

$ ./keosd.app/Contents/MacOS/keosd --http-server-address=localhost:8900 --http-validate-host=false

Unlock SecureEnclave wallet:

$ cleos wallet unlock -n SecureEnclave

Create secure enclave key:

$ cleos wallet create_key -n SecureEnclave R1

Hooray! 🎉 You can create account with secure enclave key.

Links

License

This project is licensed under the MIT License. See LICENSE for more detail.

Reference