wholetrans/docs-matrix-spec
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add information about using SSSS for cross-signing and key backup.

Browse source
This commit is contained in:
Hubert Chathi 2021-04-27 17:17:48 -04:00 • committed by Richard van der Hoff
parent 4b40ecc53d
commit bb06dbdb2a
1 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
content/client-server-api/modules/end_to_end_encryption.md
View file

@ -944,6 +944,13 @@ example, if Alice and Bob verify each other using SAS, Alice's
`mac` property. Servers therefore must ensure that device IDs will not `mac` property. Servers therefore must ensure that device IDs will not
collide with cross-signing public keys. collide with cross-signing public keys.
The cross-signing private keys can be stored on the server or shared with other
devices using the [Secrets](#secrets) module. When doing so, the master,
user-signing, and self-signing keys are identified using the names
`m.cross_signing.master`, `m.cross_signing.user_signing`, and
`m.cross_signing.self_signing`, respectively, and the keys are base64-encoded
before being encrypted.
###### Key and signature security ###### Key and signature security
A user's master key could allow an attacker to impersonate that user to A user's master key could allow an attacker to impersonate that user to
@ -1083,6 +1090,11 @@ as follows:
When reading in a recovery key, clients must disregard whitespace, and When reading in a recovery key, clients must disregard whitespace, and
perform the reverse of steps 1 through 3. perform the reverse of steps 1 through 3.
The recovery key can also be stored on the server or shared with other devices
using the [Secrets](#secrets) module. When doing so, it is identified using the
name `m.megolm_backup.v1`, and the key is base64-encoded before being
encrypted.
###### Backup algorithm: `m.megolm_backup.v1.curve25519-aes-sha2` ###### Backup algorithm: `m.megolm_backup.v1.curve25519-aes-sha2`
When a backup is created with the `algorithm` set to When a backup is created with the `algorithm` set to