Skip to content

Commit 0507fe8

Browse files
chore: incorporate updated template & review feedback
1 parent a41500e commit 0507fe8

2 files changed

Lines changed: 87 additions & 52 deletions

File tree

ADRs/0004-separate-consensus-and-p2p-keys.md

Lines changed: 0 additions & 52 deletions
This file was deleted.
Lines changed: 87 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,87 @@
1+
# Separation of Transport and Application Keys
2+
3+
- Status: in review
4+
- Deciders: Pocket Network Protocol Team
5+
- Date: 2023-05-19
6+
7+
**Table of Contents**
8+
9+
- [Summary](#summary)
10+
- [Problem Statement](#problem-statement)
11+
- [Background](#background--origin-document--technical-story-)
12+
- [Decision Drivers](#decision-drivers-)
13+
- [Considered Options](#considered-options-)
14+
- [Decision Outcome](#decision-outcome-)
15+
- [Positive Consequences](#positive-consequences-)
16+
- [Negative Consequences](#negative-consequences-)
17+
- [Pros and Cons of the Options](#pros-and-cons-of-the-options-)
18+
- [Option 1: Use a single private key for both P2P and other functionalities](#option-1)
19+
- [Option 2: Use separate private keys for P2P and other functionalities](#option-2)
20+
- [References](#references-)
21+
22+
## Summary
23+
24+
In the context of maintaining a secure and robust network, facing the concern of key compromise, we decided for Option 2, separating keys between P2P and other functionalities (consensus, utility etc.), and neglected Option 1, to achieve better security posture, flexibility, and isolation, accepting the increased complexity in identity management, because this approach provides a more holistic and secure solution for the network.
25+
26+
## Problem Statement
27+
28+
We need to decide whether to use separate private keys for P2P and other functionalities (like consensus and utility related logic), or use a single private key for all purposes. Combining the keys could simplify the identity management, but may also increase security risks and impact system quality.
29+
30+
## Background
31+
32+
[Consolidate and Refactor Node Identity](https://github.com/pokt-network/pocket/issues/348)
33+
34+
## Decision Drivers
35+
36+
- Security: Minimizing the risks associated with key compromise
37+
- Simplification: Reducing complexity in identity management
38+
- Flexibility: Allowing different key management strategies for different modules
39+
- Isolation: Minimizing the impact of compromise on other system components
40+
- Optionality: Enabling future changes and extensions to the protocol
41+
42+
## Considered Options
43+
44+
1. Use a single private key for both P2P and other functionalities
45+
2. Use separate private keys for P2P and other functionalities
46+
47+
## Decision Outcome
48+
49+
Chosen option: 2, because this approach provides a better security posture, enables greater flexibility in key management strategies, and isolates the impact of potential key compromises.
50+
51+
### Positive Consequences
52+
53+
- Improved security: Compromise of one private key does not directly impact the other functionalities
54+
- Flexibility: Different key management strategies can be applied to each functionality
55+
- Isolation: Minimizes the impact of compromise on other system components
56+
57+
### Negative Consequences
58+
59+
- Increased complexity: Requires managing separate private keys for different functionalities
60+
61+
## Pros and Cons of the Options
62+
63+
### Option 1: Use a single private key for both P2P and other functionalities
64+
65+
Pros:
66+
67+
- Simplifies identity management
68+
69+
Cons:
70+
71+
- A compromise in one functionality directly impacts the other functionalities
72+
- Limits the ability to apply different key management strategies to each functionality
73+
74+
### Option 2: Use separate private keys for P2P and other functionalities
75+
76+
Pros:
77+
78+
- Improves security by isolating potential compromises
79+
- Allows for greater flexibility in key management strategies
80+
81+
Cons:
82+
83+
- Increases complexity in managing separate private keys for different functionalities
84+
85+
## References
86+
87+
- [Consolidate and Refactor Node Identity](https://github.com/pokt-network/pocket/issues/348)

0 commit comments

Comments
 (0)