Skip to content

Add a Signing Envelope (FRC-102) when signing arbitrary messages in Lotus CLI (and API?) #13373

@eshon

Description

@eshon

Checklist

  • This is not brainstorming ideas. If you have an idea you'd like to discuss, please open a new discussion on the lotus forum and select the category as Ideas.
  • I have a specific, actionable, and well motivated feature request to propose.

Lotus component

  • lotus daemon - chain sync
  • lotus fvm/fevm - Lotus FVM and FEVM interactions
  • lotus miner/worker - sealing
  • lotus miner - proving(WindowPoSt/WinningPoSt)
  • lotus JSON-RPC API
  • lotus message management (mpool)
  • Other

What is the motivation behind this feature request? Is your feature request related to a problem? Please describe.

lotus wallet sign should adopt FRC-102 which has been approved.

Describe the solution you'd like

lotus wallet sign should adopt from the above FRC-102:

  • version-0x46-f - add a signing envelope with a "Filecoin Signed Message" prefix for native messages
  • version-0x45-e - add a signing envelope with an "Ethereum Signed message" prefix for FEVM messages

Adding some signing envelope is to prevent spoofing transactions when asking users to sign arbitrary messages and this is widely adopted in the Ethereum community.

Describe alternatives you've considered

ledger-filecoin (for Ledger HW), iso-filecoin and FilSnap have adopted this FRC-102 standard.

There might also be Filecoin JSON RPC API endpoints that may need to be updated.

Additional context

No response

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

Status

🎉 Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions