Skip to content

Add a Signing Envelope (FRC-102) when signing arbitrary messages in Lotus CLI (and API?) #13373

@eshon

Description

@eshon

Checklist

  • This is not brainstorming ideas. If you have an idea you'd like to discuss, please open a new discussion on the lotus forum and select the category as Ideas.
  • I have a specific, actionable, and well motivated feature request to propose.

Lotus component

  • lotus daemon - chain sync
  • lotus fvm/fevm - Lotus FVM and FEVM interactions
  • lotus miner/worker - sealing
  • lotus miner - proving(WindowPoSt/WinningPoSt)
  • lotus JSON-RPC API
  • lotus message management (mpool)
  • Other

What is the motivation behind this feature request? Is your feature request related to a problem? Please describe.

lotus wallet sign should adopt FRC-102 which has been approved.

Describe the solution you'd like

lotus wallet sign should adopt from the above FRC-102:

  • version-0x46-f - add a signing envelope with a "Filecoin Signed Message" prefix for native messages
  • version-0x45-e - add a signing envelope with an "Ethereum Signed message" prefix for FEVM messages

Adding some signing envelope is to prevent spoofing transactions when asking users to sign arbitrary messages and this is widely adopted in the Ethereum community.

Describe alternatives you've considered

ledger-filecoin (for Ledger HW), iso-filecoin and FilSnap have adopted this FRC-102 standard.

There might also be Filecoin JSON RPC API endpoints that may need to be updated.

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    Status

    📌 Triage

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions