Verify key shares

​

How it works

1. Using the key share to sign some data
2. Verifying the signature using the original data and the key share’s public key

​

Verify active key shares

1. Follow the instructions in Verify key shares to trigger recurring or one-time key share verification in Cobo Portal.
2. Cobo Portal will verify the signed message and displays the result. If you want to verify by yourself, you can use either online tools or your local environment.
   Currently, key share verification through the Cobo Portal is only supported for Organization-Controlled Wallets.
   • Using online tools
     1. Go to Google Colab
     2. Paste the verification code below
        • You can retrieve the original and signed message by clicking next to the key share you want to check.
        • You can run the info group command to get the share public key.
     import ed25519
     from hashlib import sha256
     
     message = bytes.fromhex("<ORIGINAL_MESSAGE>")
     public = "<SHARE_PUBLIC_KEY>"
     signature = '<SIGNATURE>'
     
     VerifyKey = ed25519.VerifyingKey(bytes.fromhex(public))
     print("VerifyKey: ", VerifyKey.to_bytes().hex())
     
     hashmsg = sha256(message)
     print("Hash message: ", hashmsg.hexdigest())
     
     try:
         VerifyKey.verify(signature, hashmsg.digest(), encoding='hex')
         print("ed25519 verify pass!")
     except:
         print("ed25519 verify failed!")
     
     3. Run the code to verify signatures
   • Local verification
     1. Set up your environment:
     pip3 install ecdsa
     pip3 install ed25519
     
     2. Create a checker.py file with the verification code above.
     3. Run the code to verify signatures

​

Manual key share verification and callback risk control

embedded_risk_control_rules:
  enable: true
  key_share_sign:
    reject_all: true

​

Verify backup key shares