Output Icepick command blobs as a JSON blob that isn't passed through to the subcommand when `--generate-input-only` is passed

ryan commented

2024-12-09 17:00:49 +00:00

Owner

Example:

icepick sol transfer-token --generate-input-only 1 $token_address $to_address $from_address

This will generate:

{
 "operation": "transfer-token",
 "derived-keys": [],
 "blob": {},
 "values": {
  "amount": 1,
  "token-address": "$token_address",
  "to-address": "$to_address",
  "from-address": "$from_address",
 },
}

We assume we can generate the JSON blob in a deterministic manner so all signatures can be concatenated into a common file and verified in one operation

Example: ```sh icepick sol transfer-token --generate-input-only 1 $token_address $to_address $from_address ``` This will generate: ```json { "operation": "transfer-token", "derived-keys": [], "blob": {}, "values": { "amount": 1, "token-address": "$token_address", "to-address": "$to_address", "from-address": "$from_address", }, } ``` We assume we can generate the JSON blob in a deterministic manner so all signatures can be concatenated into a common file and verified in one operation

ryan added this to the Custody Framework project 2024-12-09 17:13:41 +00:00

ryan commented

2024-12-09 21:40:47 +00:00

Author

Owner

pass the policy and signatures as a blob to a separate module so the policy module can exist as its own enclave

ryan commented

2024-12-09 21:46:39 +00:00

Author

Owner

engine --{ request, signatures }> policy engine
policy engine --{ request, policy engine signature (PES)}> engine --> transaction generator
transaction generator --{ transaction, request, PES, key derivation requests}> engine
engine --{ transaction, request, PES, derivation account requests }> key derivation module
key derivation module --{ transaction, request, PES, derived keys }> engine --> coin signer module
coin signer module --{ signed transaction, request, PES }> engine --> coin broadcaster module
coin broadcaster module --> internet

``` engine --{ request, signatures }> policy engine policy engine --{ request, policy engine signature (PES)}> engine --> transaction generator transaction generator --{ transaction, request, PES, key derivation requests}> engine engine --{ transaction, request, PES, derivation account requests }> key derivation module key derivation module --{ transaction, request, PES, derived keys }> engine --> coin signer module coin signer module --{ signed transaction, request, PES }> engine --> coin broadcaster module coin broadcaster module --> internet ```

ryan commented

2024-12-09 21:49:33 +00:00

Author

Owner

encrypt the key in transit from the key derivation module to the coin signer module

ryan added this to the Icepick v0.2.0 milestone 2024-12-12 20:28:34 +00:00

ryan commented

2024-12-12 20:28:43 +00:00

Author

Owner

Closing in favor of Icepick Workflows

ryan closed this issue

2024-12-12 20:28:44 +00:00

Output Icepick command blobs as a JSON blob that isn't passed through to the subcommand when --generate-input-only is passed #20

Output Icepick command blobs as a JSON blob that isn't passed through to the subcommand when `--generate-input-only` is passed #20