Skip to content

Harden secret derivation: non-extractable CryptoKey, secure wallet-sign, simplified SecureStorage#124

Open
babkenmes wants to merge 4 commits intodevfrom
feature/secret-derivation-hardening
Open

Harden secret derivation: non-extractable CryptoKey, secure wallet-sign, simplified SecureStorage#124
babkenmes wants to merge 4 commits intodevfrom
feature/secret-derivation-hardening

Conversation

@babkenmes
Copy link
Copy Markdown
Contributor

  • Move key derivation to use non-extractable CryptoKey throughout the auth and wallet-sign layers
  • Simplify SecureStorage to store CryptoKey directly via IndexedDB structured cloning
  • Update all blockchain wallet-sign implementations to use createProtectedKey
  • Add secret-derivation safety rules for Claude Code

…gn, simplified SecureStorage

- Move key derivation to use non-extractable CryptoKey throughout the auth and wallet-sign layers
- Simplify SecureStorage to store CryptoKey directly via IndexedDB structured cloning
- Update all blockchain wallet-sign implementations to use createProtectedKey
- Add secret-derivation safety rules for Claude Code

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 1, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
trainapp Ready Ready Preview Apr 10, 2026 10:09am

Request Review

Base automatically changed from feature/react-package to dev April 3, 2026 13:28
- Changed the return type of the deriveKeyFromTronWallet function from Uint8Array to CryptoKey for improved type safety and clarity.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants