-
-
Notifications
You must be signed in to change notification settings - Fork 589
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Cross Signing Support #832
Conversation
Start of cross-signing impl
and restore them from the key backup. NB. This has an interface change to restoreKeyBackup where I've changed it to take a backupInfo rather than a version (this also saves us re-fetching the backup metadata in the case of a passphrase restore).
whenever we get the SSK, ie. when creating or restoring a backup
and verify our own against our locally stored private part
because Travis and npm now have a thing where they combust if your package-lock is out of sync
This was causing all the cross-signing stuff to fail and was almost certainly the cause of element-hq/element-web#8213
Sp we don't stop tracking our own
* Put back babel-eslint for class-properties * Allow arrow functions without params This makes the style more consistent with react-sdk. NB. The line lengths are still inconsistent but it's not clear which way to go on that yet.
Right, lots more stuff fixed - ptal! |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hooray, looks great! 😁 I have left a few more comments, but I expect they can be addressed / deferred without another round of review.
Co-Authored-By: J. Ryan Stinnett <[email protected]>
Co-Authored-By: J. Ryan Stinnett <[email protected]>
Co-Authored-By: J. Ryan Stinnett <[email protected]>
Co-Authored-By: J. Ryan Stinnett <[email protected]>
Co-Authored-By: J. Ryan Stinnett <[email protected]>
Co-Authored-By: J. Ryan Stinnett <[email protected]>
Co-Authored-By: J. Ryan Stinnett <[email protected]>
Co-Authored-By: J. Ryan Stinnett <[email protected]>
ca1bdaa
to
04b57bb
Compare
Not Just For Backups Anymore
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🎉
#832 added cross-signing checks for backup trust but we failed to merge in the check for the the backup being trusted locally. Fixes element-hq/element-web#11404
Some variables were changed during the course of the initial cross-signing PR (#832) without updating the storage path to match, so we weren't storing / loading cross-signing info for devices in the end. This updates storage and loading to match where the data now lives in memory.
As per matrix-org/matrix-spec-proposals#1756
There are also some things in here which will need speccing in addition to the MSC above (as it currently stands), most notably, putting the SSK & USK in the backup auth_data.