sharing-mnemonic-demo.md

About Bitcoin menu unlocking

• This time BIP-39 has been implemented. It's first time of bitcoin menu in the self-sovereign browser.
  • https://github.com/Browser-for-SSI/gecko-dev-pkg-distributor/releases/tag/v0.7.0mvp-128.10.0esr
• New two APIs, generation and shareWith
  • generation API
    • Generating the mnemonic by BIP-39
    • https://api-docs-30b126.gitlab.io/api-references/window.ssi/ssi.bitcoin/generate.html
  • shareWith API
    • Sharing the bitcoin secrets encrypted by NIP-44 with a counter party
    • https://api-docs-30b126.gitlab.io/api-references/window.ssi/ssi.bitcoin/shareWith.html

About Breez SDK WASM

• wasm transplantation and coming to web apps
  • https://njump.me/nevent1qvzqqqqqqypzp9c36x46sp4r52zl7058696eqtp0y5r5rpsdn3jeq0ytt6rra0vpqywhwumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctv9uqsuamnwvaz7tmwdaejumr0dshsqgqjcxrqcwaapqygs6pa9gh08tq7upvqm0fys7hdfmfw43eyq9fueg8uzaqj
• Pay attention here
  • mnemonic is passing as the plain text
  • https://github.com/studioTeaTwo/wasm-example-app/blob/browser-demo/src/services/walletService.ts#L23-L26

Demo scenario

Summary

• Customising that wasm demo app to use new APIs in the browser
  • mnemonic is encrypted and shared using new API (but this demo will decrypt it right away)
  • https://github.com/studioTeaTwo/wasm-example-app/commit/5eeff3c70b82e41776327379111ecb2aa77362ee#diff-0555e293f4190323dc482dcd1b9ee4c4f4247c56e9feb929d1eb5baca3117674R39-R49

Flow

1. Launching the self-sovereign browser
2. Generating at least one key in "Nostr" menu at about:selfsovereignindividual
3. Accessing and generating mnemonic on the demo app
   • https://wasm-browser-demo.vercel.app/
   • List of APIs used - these call the dialog

1. window.ssi.bitcoin.generate
2. window.ssi.bitcoin.shareWith
3. window.ssi.nostr.getPublicKey
And decryption by nostr-tools

4. Confirming the result on setting page in the browser
   • Access to about:selfsovereignindividual
   • check list

[] Same mnemonic in the app and on the settings page?
[] When/where is the mnemonic generated?
[] How is the shared history confirmed?

NOTE

• It's not solved yet. Because it's:
  • needed holding/payloading their nostr's secret key somehow inside the SDK
  • able to be got the decrypted secret on memory by a intermediate web app on the same domain