Skip to content

README.md

Latest commit

 

History

History
70 lines (50 loc) · 3.47 KB

README.md

File metadata and controls

70 lines (50 loc) · 3.47 KB
Raw

Authenticators (examples)

Warning — Unaudited, non-canonical example authenticators. Not for production use. Canonical authenticators live in base/eip-8130 (P256Authenticator, WebAuthnAuthenticator, DelegateAuthenticator, plus built-in K1_AUTHENTICATOR at address(1)).

These contracts implement IAuthenticator.authenticate(hash, data) → actorId. They are the old src/verifiers/ set (renamed verifier → authenticator) plus a payer policy for the toy privacy pool in src/privacy/.

Transaction context

Gas-payer authenticators inspect the transaction's calls, gas limit, and max cost at validation time. The shipped {ITransactionContext} precompile in eip-8130 does not expose those methods (only sender / payer / senderActorId, and only while the protocol is dispatching calls). These examples therefore cannot run against that precompile as-shipped — they take an {IExtendedTransactionContext} address instead.

Two aggregation sketches live here:

  • Pairing-sum (BLS-only): inclusion still uses {BLSAuthenticator} per tx; a sealed block stores one G2 and pointers ({IBLSAggregateContext}). Demo: forge script script/BLSAggregateDemo.s.sol.
  • Draft-shaped (representation byte + facts): inline and aggregated share one actorId; a mock context stubs the block STARK and isDependencyProven. See aggregation/. Demo: forge script script/SignatureAggregationDemo.s.sol.

Buckets

Pure function

Stateless (or precompile-only) signature checks. No Keystore lookup, no transaction-context reads.

Path Algorithm
pure/AlwaysValidAuthenticator Always succeeds; fixed ALWAYS_VALID actorId (keyless / dangerous)
pure/BLSAuthenticator BLS12-381 pairing (EIP-2537)
pure/Groth16Authenticator Groth16 over BN254 (generic VK-in-calldata)
pure/MultisigAuthenticator secp256k1 M-of-N
pure/SchnorrAuthenticator secp256k1 Schnorr via ecrecover

Canonical counterparts (not duplicated here): K1_AUTHENTICATOR, P256Authenticator, WebAuthnAuthenticator.

Keystore bounded

Authentication that consults another account's Keystore config (one hop).

None in this folder — the canonical {DelegateAuthenticator} in base/eip-8130 is the keystore-bounded authenticator.

Gas payers

Payer-scoped actors. They ignore the signed hash and instead pin phase-0 repayment so the payer is made whole. All of them need {IExtendedTransactionContext} (see above).

Path What
gas-payers/ChainlinkPayerAuthenticator ERC-20 sponsorship priced via a Chainlink ETH/USD feed; optional blocklist
gas-payers/AeroPayerAuthenticator ERC-20 sponsorship quoted via Aerodrome WETH/TOKEN
gas-payers/SimplePoolAuth Sponsors a SimplePool spend (phase 0: spend + payFee)

The pool is not an authenticator — see src/privacy/README.md.

Signature aggregation (draft stub)

Path What
aggregation/HashSchemeAuthenticator Cheap ML-DSA stand-in (sig = keccak256(hash ‖ pk)) with INLINE / AGGREGATED
aggregation/AggregatableBLSAuthenticator Real BLS INLINE; AGGREGATED reads {isFactProven}
aggregation/AggregationWrapper AGG_WRAP: message = keccak256(hash ‖ depsCommitment) + optional inner auth
aggregation/MockAggregationContext Stub STARK / TX_CONTEXT (proveFact, isDependencyProven)