Skip to content

Commit

Permalink
Update ARCs/arc-0060.md
Browse files Browse the repository at this point in the history
Co-authored-by: Stéphane <[email protected]>
  • Loading branch information
ehanoc and SudoWeezy authored Jan 15, 2025
1 parent 1bfcfde commit ed75904
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion ARCs/arc-0060.md
Original file line number Diff line number Diff line change
Expand Up @@ -72,7 +72,7 @@ Must be a JSON object with the following properties:
| `signer` | `bytes` | public key of the signer. This can the public related to an Algorand address or any other Ed25519 public key. |
| `domain` | `string` | This is the domain requesting the signature. It can be a URL, a DID, or any other identifier. It **MUST** be presented to the user to inform them about the context of the signature. |
| `requestId` | `string` | It is used to identify the request. It **MUST** be unique for each request. |
| `authenticatedData` | `bytes` | It **MUST** include, at least, the `sha256` hash of the `domain` requesting a signture. The wallet **MUST** do an integrity check on the first 32 bytes of `authenticatedData` to match the hash. It **COULD** also include signature counters, network flags or any other unique data to prevent replay attacks or to trick user to sign unrelated data to the scope. The wallet **SHOULD** validate every field in `authenticatedData` before signing. Each `Scope` **MUST** specify if `authenticatedData` should be appended to the hash of the `data` before signing. |
| `authenticatedData` | `bytes` | It **MUST** include, at least, the `sha256` hash of the `domain` requesting a signature. The wallet **MUST** do an integrity check on the first 32 bytes of `authenticatedData` to match the hash. It **MAY** also include signature counters, network flags or any other unique data to prevent replay attacks or to trick user to sign unrelated data to the scope. The wallet **SHOULD** validate every field in `authenticatedData` before signing. Each `Scope` **MUST** specify if `authenticatedData` should be appended to the hash of the `data` before signing. |
| `hdPath` | `string` | This field is **optional**. It is required if the wallet supports BIP39 / BIP32 / BIP44. This field **MUST** be a BIP44 path in order to derive the private key to sign the `data`. The wallet **MUST** validate the path before signing. |

#### `metadata`
Expand Down

0 comments on commit ed75904

Please sign in to comment.