Skip to main content

Crypto Overview

Scope

  • Crypto component
  • Reusable crypto libraries

Summary

  • The crypto component:
    • Provides consistent APIs for cryptographic functions
    • Used by other components of the replica's stack
    • Provides secure storage and generation of secret keys
  • The crypto component consists of two main pieces:
    • External API: Identifier to Key Mapping (IDKM)
      • Stores node public keys
      • Stores threshold signature public keys
      • Called using node identifiers
      • Maps node identifiers to the appropriate keys and algorithms
      • Fetches public keys of other nodes from the Registry canister on the NNS subnet
    • Internal API: Crypto Service Provider (CSP)
      • Generates and stores secret keys
      • Called using node identifiers and secret key IDs
      • Performs cryptographic operations

Resources

Codebase