Jump to content

Recommended Posts

Great stuff...  The QR code solves the tiny concern of transferring USB sticks around the place...  I did it last weekend (not using this wonderful tool set) and it was joyous.  :) 

Can I ask about:

Secret2addressQR

$ node secret2addressQR [SECRET]

  • Extracts Ripple address (public) from Ripple secret (private)
  • Displays all data including QR codes in a web browser
  • If no secret is provided, it creates a new address

But isn't that new address now without a key?   A black hole?    Or have I misunderstood (as I often do...)  :) 

Share this post


Link to post
Share on other sites
7 hours ago, Tinyaccount said:

Secret2addressQR

$ node secret2addressQR [SECRET]

  • Extracts Ripple address (public) from Ripple secret (private)
  • Displays all data including QR codes in a web browser
  • If no secret is provided, it creates a new address

But isn't that new address now without a key?   A black hole?    Or have I misunderstood (as I often do...)  :) 

@Tinyaccount, it then creates a new keypair, both secret and account part. The QR version of the script initially shows just the address, while secret is hidden for additional safety. Click Reveal button to see both parts of the address.

Thank you all for reviewing the code!

Share this post


Link to post
Share on other sites
On 11/2/2017 at 12:39 PM, Duke67 said:

It seems there still is a need for solution to keep your XRPs safe, while still having them available for occasional and sometimes even for more active use.

Ripple technology is in many aspects ahead of Bitcoin and other cryptos. I find offline transaction signing one its best features. In today’s world, when no computer can be considered safe anymore, offline signing allows you to keep all sensitive information offline and thus secure and safe.

I have prepared a set of tools that follows and leverages Ripple’s Reliable Transaction Submission. It will allow you to monitor Ripple network, ledgers, your accounts and balances. The offline part will also enable you to securely create new accounts, prepare and securely sign payments and submit such offline-generated payments to XRP ledger. For transferring offline generated data to an online device it uses QR codes and this makes active XRP use quick and quite convenient.

Unfortunately, this package is not entirely suitable for beginners. It aims more at mid-experienced to advanced users. 

Also, I wanted to keep those scripts simple and plain and allow anyone to see, understand and inspect its source. This is why some results/error processing is just very subtle.


More information, how-to, installation, syntax, examples, download: https://github.com/Duke67/xrptoolkit-nodejs


Download:

 

The Android application is only available for download from Google Play store and it’s not yet open source (I may make it available later on). Even if not currently available for code review, this architecture can really give you a peace-of-mind because the real magic of this solution is that the online device only sees either public, or signed+encrypted information. 

iOS app – unfortunately not available now, who wants to develop it? Also, feel free to improve or enhance the toolkit or contact me with any idea you may have.

Cheers!

 

@Duke67 Are you interested in making a consumer based app out of this? I’m willing to fund development. I’m currently working on another project but while I get a more well-equipped team and do further data compilation I have a few gap months.

If yes PM with what you think it’ll take and your vision. I’m sure you have had some ideas formulating about where to go next :) —and I’ve got a couple of my own that can build on this too

If you prefer PM that’s cool too.

Edited by Atomic1221

Share this post


Link to post
Share on other sites

Been gone for a while and recently came back and looked at this... awesome idea! I'm definitely interested in helping with this/developing something similar into a more complete package that would be relatively easy to use.

Share this post


Link to post
Share on other sites

Just throwing this out, with total disregard to relevance to the current thread ...

What are the pros/cons around embedding a wasm interpreter or v8 in the cryptocurrency server? (so in this case, in rippled).

Somewhat along the lines of Ethereum's EVM. Except with web assembly because that is 1) obviously the future and 2) provides a good intermediate language that can be targeted from lots of other languages/sdk's

 

Share this post


Link to post
Share on other sites
18 hours ago, gray said:

Small update to XRPToolkit got merged today: dependency tracking using package.json file and native support for RippleWarpWallet-based accounts using Warp2account and Warp2accountQR on the offline computer -> https://github.com/Duke67/xrptoolkit-nodejs

Hi Gray, great stuff!  Couldn't get the "node warp2account" command to work as complains of "Error: Cannot find module 'iced-coffee-script/lib/coffee-script/iced'".

Any chance this can be added to the yarn install procedure so I can take it to the air gapped offline computer to work?  Have tried with online Mac OSX and offline Ubuntu Mate on RPi, same error.

Thanks for the update,

FF

Share this post


Link to post
Share on other sites
7 hours ago, FlyingFox said:

Hi Gray, great stuff!  Couldn't get the "node warp2account" command to work as complains of "Error: Cannot find module 'iced-coffee-script/lib/coffee-script/iced'".

Any chance this can be added to the yarn install procedure so I can take it to the air gapped offline computer to work?  Have tried with online Mac OSX and offline Ubuntu Mate on RPi, same error.

Thanks for the update,

FF

Hi FlyingFox! I actually just noticed this error independently and have adjusted it so it should be fixed now!

Share this post


Link to post
Share on other sites
6 hours ago, gray said:

Hi FlyingFox! I actually just noticed this error independently and have adjusted it so it should be fixed now!

Great job, all working. An excellent addition!

 

Share this post


Link to post
Share on other sites

How do you use this toolkit to avoid issues like this one with ethereum:

https://ret2got.wordpress.com/2018/01/19/how-your-ethereum-can-be-stolen-using-dns-rebinding/#more-151

? I'm going to assume that offline signing, in an app that does not allow itself to be controlled via json-rpc, would be fine ?

Don't know as much as I should about ethereum, but does the wallet really run an rpc server? why would you do that? that seems like a bad idea right out of the gate. advantages?

Share this post


Link to post
Share on other sites

×