XRPtoolkit

[Duke67]

It seems there still is a need for solution to keep your XRPs safe, while still having them available for occasional and sometimes even for more active use.

Ripple technology is in many aspects ahead of Bitcoin and other cryptos. I find offline transaction signing one its best features. In today’s world, when no computer can be considered safe anymore, offline signing allows you to keep all sensitive information offline and thus secure and safe.

I have prepared a set of tools that follows and leverages Ripple’s Reliable Transaction Submission. It will allow you to monitor Ripple network, ledgers, your accounts and balances. The offline part will also enable you to securely create new accounts, prepare and securely sign payments and submit such offline-generated payments to XRP ledger. For transferring offline generated data to an online device it uses QR codes and this makes active XRP use quick and quite convenient.

Unfortunately, this package is not entirely suitable for beginners. It aims more at mid-experienced to advanced users. 

Also, I wanted to keep those scripts simple and plain and allow anyone to see, understand and inspect its source. This is why some results/error processing is just very subtle.

More information, how-to, installation, syntax, examples, download: https://github.com/Duke67/xrptoolkit-nodejs

Download:

• Node.js scripts (offline): https://github.com/duke67/xrptoolkit-nodejs 
• Android app (online): https://play.google.com/store/apps/details?id=com.duke67.XRPtk 

 

The Android application is only available for download from Google Play store and it’s not yet open source (I may make it available later on). Even if not currently available for code review, this architecture can really give you a peace-of-mind because the real magic of this solution is that the online device only sees either public, or signed+encrypted information. 

iOS app – unfortunately not available now, who wants to develop it? Also, feel free to improve or enhance the toolkit or contact me with any idea you may have.

Cheers!

 

[pucksterpete]

Great job man!!!

[Xi195]

Thanks for doing this @Duke67

[Mercury]

Featured and pinned

[Guest]

Great stuff...  The QR code solves the tiny concern of transferring USB sticks around the place...  I did it last weekend (not using this wonderful tool set) and it was joyous.   

Can I ask about:

Secret2addressQR

$ node secret2addressQR [SECRET]

• Extracts Ripple address (public) from Ripple secret (private)
• Displays all data including QR codes in a web browser
• If no secret is provided, it creates a new address

But isn't that new address now without a key?   A black hole?    Or have I misunderstood (as I often do...)   

[Duke67]

7 hours ago, Tinyaccount said:

Secret2addressQR

$ node secret2addressQR [SECRET]

• Extracts Ripple address (public) from Ripple secret (private)
• Displays all data including QR codes in a web browser
• If no secret is provided, it creates a new address

But isn't that new address now without a key?   A black hole?    Or have I misunderstood (as I often do...)   

@Tinyaccount, it then creates a new keypair, both secret and account part. The QR version of the script initially shows just the address, while secret is hidden for additional safety. Click Reveal button to see both parts of the address.

Thank you all for reviewing the code!

[Guest]

9 hours ago, Duke67 said:

Thank you all for reviewing the code!

I'm sure others are doing that....    but I should point out that I didn't....   I was just perusing...  

[Atomic1221]

On 11/2/2017 at 12:39 PM, Duke67 said:

It seems there still is a need for solution to keep your XRPs safe, while still having them available for occasional and sometimes even for more active use.

Ripple technology is in many aspects ahead of Bitcoin and other cryptos. I find offline transaction signing one its best features. In today’s world, when no computer can be considered safe anymore, offline signing allows you to keep all sensitive information offline and thus secure and safe.

I have prepared a set of tools that follows and leverages Ripple’s Reliable Transaction Submission. It will allow you to monitor Ripple network, ledgers, your accounts and balances. The offline part will also enable you to securely create new accounts, prepare and securely sign payments and submit such offline-generated payments to XRP ledger. For transferring offline generated data to an online device it uses QR codes and this makes active XRP use quick and quite convenient.

Unfortunately, this package is not entirely suitable for beginners. It aims more at mid-experienced to advanced users. 

Also, I wanted to keep those scripts simple and plain and allow anyone to see, understand and inspect its source. This is why some results/error processing is just very subtle.

More information, how-to, installation, syntax, examples, download: https://github.com/Duke67/xrptoolkit-nodejs

Download:

• Node.js scripts (offline): https://github.com/duke67/xrptoolkit-nodejs 
• Android app (online): https://play.google.com/store/apps/details?id=com.duke67.XRPtk 

 

The Android application is only available for download from Google Play store and it’s not yet open source (I may make it available later on). Even if not currently available for code review, this architecture can really give you a peace-of-mind because the real magic of this solution is that the online device only sees either public, or signed+encrypted information. 

iOS app – unfortunately not available now, who wants to develop it? Also, feel free to improve or enhance the toolkit or contact me with any idea you may have.

Cheers!

 

@Duke67 Are you interested in making a consumer based app out of this? I’m willing to fund development. I’m currently working on another project but while I get a more well-equipped team and do further data compilation I have a few gap months.

If yes PM with what you think it’ll take and your vision. I’m sure you have had some ideas formulating about where to go next  —and I’ve got a couple of my own that can build on this too

If you prefer PM that’s cool too.

Edited January 25, 2018 by Atomic1221

[gray]

Been gone for a while and recently came back and looked at this... awesome idea! I'm definitely interested in helping with this/developing something similar into a more complete package that would be relatively easy to use.

[gray]

Small update to XRPToolkit got merged today: dependency tracking using package.json file and native support for RippleWarpWallet-based accounts using Warp2account and Warp2accountQR on the offline computer -> https://github.com/Duke67/xrptoolkit-nodejs

[Vader-DeWelt]

Just throwing this out, with total disregard to relevance to the current thread ...

What are the pros/cons around embedding a wasm interpreter or v8 in the cryptocurrency server? (so in this case, in rippled).

Somewhat along the lines of Ethereum's EVM. Except with web assembly because that is 1) obviously the future and 2) provides a good intermediate language that can be targeted from lots of other languages/sdk's

 

[FlyingFox]

18 hours ago, gray said:

Small update to XRPToolkit got merged today: dependency tracking using package.json file and native support for RippleWarpWallet-based accounts using Warp2account and Warp2accountQR on the offline computer -> https://github.com/Duke67/xrptoolkit-nodejs

Hi Gray, great stuff!  Couldn't get the "node warp2account" command to work as complains of "Error: Cannot find module 'iced-coffee-script/lib/coffee-script/iced'".

Any chance this can be added to the yarn install procedure so I can take it to the air gapped offline computer to work?  Have tried with online Mac OSX and offline Ubuntu Mate on RPi, same error.

Thanks for the update,

FF

[gray]

7 hours ago, FlyingFox said:

Hi Gray, great stuff!  Couldn't get the "node warp2account" command to work as complains of "Error: Cannot find module 'iced-coffee-script/lib/coffee-script/iced'".

Any chance this can be added to the yarn install procedure so I can take it to the air gapped offline computer to work?  Have tried with online Mac OSX and offline Ubuntu Mate on RPi, same error.

Thanks for the update,

FF

Hi FlyingFox! I actually just noticed this error independently and have adjusted it so it should be fixed now!

[FlyingFox]

6 hours ago, gray said:

Hi FlyingFox! I actually just noticed this error independently and have adjusted it so it should be fixed now!

Great job, all working. An excellent addition!

 

[Vader-DeWelt]

How do you use this toolkit to avoid issues like this one with ethereum:

https://ret2got.wordpress.com/2018/01/19/how-your-ethereum-can-be-stolen-using-dns-rebinding/#more-151

? I'm going to assume that offline signing, in an app that does not allow itself to be controlled via json-rpc, would be fine ?

Don't know as much as I should about ethereum, but does the wallet really run an rpc server? why would you do that? that seems like a bad idea right out of the gate. advantages?