feature/1114 implement account interface (#1167)

- **refactor: move session-related code to middleware package**
- **refactor: update PKL build process and adjust related
configurations**
- **feat: integrate base.cosmos.v1 Genesis module**
- **refactor: pass session context to modal rendering functions**
- **refactor: move nebula package to app directory and update templ
version**
- **refactor: Move home section video view to dedicated directory**
- **refactor: remove unused views file**
- **refactor: move styles and UI components to global scope**
- **refactor: Rename images.go to cdn.go**
- **feat: Add Empty State Illustrations**
- **refactor: Consolidate Vault Index Logic**
- **fix: References to App.wasm and remove Vault Directory embedded CDN
files**
- **refactor: Move CDN types to Models**
- **fix: Correct line numbers in templ error messages for
arch_templ.go**
- **refactor: use common types for peer roles**
- **refactor: move common types and ORM to a shared package**
- **fix: Config import dwn**
- **refactor: move nebula directory to app**
- **feat: Rebuild nebula**
- **fix: correct file paths in panels templates**
- **feat: Remove duplicate types**
- **refactor: Move dwn to pkg/core**
- **refactor: Binary Structure**
- **feat: Introduce Crypto Pkg**
- **fix: Broken Process Start**
- **feat: Update pkg/* structure**
- **feat: Refactor PKL Structure**
- **build: update pkl build process**
- **chore: Remove Empty Files**
- **refactor: remove unused macaroon package**
- **feat: Add WebAwesome Components**
- **refactor: consolidate build and generation tasks into a single
taskfile, remove redundant makefile targets**
- **refactor: refactor server and move components to pkg/core/dwn**
- **build: update go modules**
- **refactor: move gateway logic into dedicated hway command**
- **feat: Add KSS (Krawczyk-Song-Song) MPC cryptography module**
- **feat: Implement MPC-based JWT signing and UCAN token generation**
- **feat: add support for MPC-based JWT signing**
- **feat: Implement MPC-based UCAN capabilities for smart accounts**
- **feat: add address field to keyshareSource**
- **feat: Add comprehensive MPC test suite for keyshares, UCAN tokens,
and token attenuations**
- **refactor: improve MPC keyshare management and signing process**
- **feat: enhance MPC capability hierarchy documentation**
- **refactor: rename GenerateKeyshares function to NewKeyshareSource for
clarity**
- **refactor: remove unused Ethereum address computation**
- **feat: Add HasHandle and IsAuthenticated methods to HTTPContext**
- **refactor: Add context.Context support to session HTTPContext**
- **refactor: Resolve context interface conflicts in HTTPContext**
- **feat: Add session ID context key and helper functions**
- **feat: Update WebApp Page Rendering**
- **refactor: Simplify context management by using single HTTPContext
key**
- **refactor: Simplify HTTPContext creation and context management in
session middleware**
- **refactor: refactor session middleware to use a single data
structure**
- **refactor: Simplify HTTPContext implementation and session data
handling**
- **refactor: Improve session context handling and prevent nil pointer
errors**
- **refactor: Improve session context handling with nil safety and type
support**
- **refactor: improve session data injection**
- **feat: add full-screen modal component and update registration flow**
- **chore: add .air.toml to .gitignore**
- **feat: add Air to devbox and update dependencies**

pkg/crypto/tecdsa/dklsv1/dealer/dealer.go

@@ -0,0 +1,83 @@
+//
+// Copyright Coinbase, Inc. All Rights Reserved.
+//
+// SPDX-License-Identifier: Apache-2.0
+//
+
+// Package dealer implements key generation via a trusted dealer for the protocol [DKLs18](https://eprint.iacr.org/2018/499.pdf).
+// The trusted dealer produces the same output as the corresponding DKG protocol and can be used for signing without
+// additional modifications.
+// Note that running actual DKG is ALWAYS recommended over a trusted dealer.
+package dealer
+
+import (
+	"crypto/rand"
+
+	"github.com/pkg/errors"
+
+	"github.com/onsonr/sonr/pkg/crypto/core/curves"
+	"github.com/onsonr/sonr/pkg/crypto/ot/base/simplest"
+	"github.com/onsonr/sonr/pkg/crypto/ot/extension/kos"
+	"github.com/onsonr/sonr/pkg/crypto/tecdsa/dklsv1/dkg"
+)
+
+// GenerationAndDeal produces private key material for alice and bob which they can later use in signing.
+// Running actual DKG is ALWAYS recommended over using this function, as this function breaks the security guarantees of DKG.
+// only use this function if you have a very good reason to.
+func GenerateAndDeal(curve *curves.Curve) (*dkg.AliceOutput, *dkg.BobOutput, error) {
+	aliceSecretShare, bobSecretShare, publicKey := produceKeyShares(curve)
+	aliceOTOutput, bobOTOutput, err := produceOTResults(curve)
+	if err != nil {
+		return nil, nil, errors.Wrap(err, "couldn't produce OT results")
+	}
+	alice := &dkg.AliceOutput{
+		PublicKey:      publicKey,
+		SecretKeyShare: aliceSecretShare,
+		SeedOtResult:   aliceOTOutput,
+	}
+	bob := &dkg.BobOutput{
+		PublicKey:      publicKey,
+		SecretKeyShare: bobSecretShare,
+		SeedOtResult:   bobOTOutput,
+	}
+	return alice, bob, nil
+}
+
+func produceKeyShares(curve *curves.Curve) (aliceSecretShare curves.Scalar, bobSecretShare curves.Scalar, publicKey curves.Point) {
+	aliceSecretShare = curve.Scalar.Random(rand.Reader)
+	bobSecretShare = curve.Scalar.Random(rand.Reader)
+	publicKey = curve.ScalarBaseMult(aliceSecretShare.Mul(bobSecretShare))
+	return aliceSecretShare, bobSecretShare, publicKey
+}
+
+func produceOTResults(curve *curves.Curve) (*simplest.ReceiverOutput, *simplest.SenderOutput, error) {
+	oneTimePadEncryptionKeys := make([]simplest.OneTimePadEncryptionKeys, kos.Kappa)
+	oneTimePadDecryptionKey := make([]simplest.OneTimePadDecryptionKey, kos.Kappa)
+
+	// we'll need a receiver because in its constructor random bits will be selected.
+	receiver, err := simplest.NewReceiver(curve, kos.Kappa, [simplest.DigestSize]byte{})
+	if err != nil {
+		return nil, nil, errors.Wrap(err, "couldn't initialize a receiver")
+	}
+	packedRandomChoiceBits, randomChoiceBits := receiver.Output.PackedRandomChoiceBits, receiver.Output.RandomChoiceBits
+
+	for i := 0; i < kos.Kappa; i++ {
+		if _, err := rand.Read(oneTimePadEncryptionKeys[i][0][:]); err != nil {
+			return nil, nil, errors.WithStack(err)
+		}
+		if _, err := rand.Read(oneTimePadEncryptionKeys[i][1][:]); err != nil {
+			return nil, nil, errors.WithStack(err)
+		}
+		oneTimePadDecryptionKey[i] = oneTimePadEncryptionKeys[i][randomChoiceBits[i]]
+	}
+
+	senderOutput := &simplest.SenderOutput{
+		OneTimePadEncryptionKeys: oneTimePadEncryptionKeys,
+	}
+	receiverOutput := &simplest.ReceiverOutput{
+		PackedRandomChoiceBits:  packedRandomChoiceBits,
+		RandomChoiceBits:        randomChoiceBits,
+		OneTimePadDecryptionKey: oneTimePadDecryptionKey,
+	}
+	return receiverOutput, senderOutput, nil
+}

pkg/crypto/tecdsa/dklsv1/dealer/dealer_test.go

@@ -0,0 +1,49 @@
+package dealer_test
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/require"
+	"golang.org/x/crypto/sha3"
+
+	"github.com/onsonr/sonr/pkg/crypto/core/curves"
+	"github.com/onsonr/sonr/pkg/crypto/tecdsa/dklsv1/dealer"
+	"github.com/onsonr/sonr/pkg/crypto/tecdsa/dklsv1/sign"
+)
+
+func Test_DealerCanGenerateKeysThatSign(t *testing.T) {
+	curveInstances := []*curves.Curve{
+		curves.K256(),
+		curves.P256(),
+	}
+	for _, curve := range curveInstances {
+		aliceOutput, bobOutput, err := dealer.GenerateAndDeal(curve)
+		require.NoError(t, err)
+
+		alice := sign.NewAlice(curve, sha3.New256(), aliceOutput)
+		bob := sign.NewBob(curve, sha3.New256(), bobOutput)
+
+		message := []byte("A message.")
+		seed, err := alice.Round1GenerateRandomSeed()
+		require.NoError(t, err)
+		round3Output, err := bob.Round2Initialize(seed)
+		require.NoError(t, err)
+		round4Output, err := alice.Round3Sign(message, round3Output)
+		require.NoError(t, err)
+		err = bob.Round4Final(message, round4Output)
+		require.NoError(t, err, "curve: %s", curve.Name)
+	}
+}
+
+func Test_DealerGeneratesDifferentResultsEachTime(t *testing.T) {
+	curve := curves.K256()
+	aliceOutput1, bobOutput1, err := dealer.GenerateAndDeal(curve)
+	require.NoError(t, err)
+	aliceOutput2, bobOutput2, err := dealer.GenerateAndDeal(curve)
+	require.NoError(t, err)
+
+	require.NotEqual(t, aliceOutput1.SecretKeyShare, aliceOutput2.SecretKeyShare)
+	require.NotEqual(t, bobOutput1.SecretKeyShare, bobOutput2.SecretKeyShare)
+	require.NotEqualValues(t, aliceOutput1.SeedOtResult.RandomChoiceBits, aliceOutput2.SeedOtResult.RandomChoiceBits)
+	require.NotEqualValues(t, bobOutput1.SeedOtResult.OneTimePadEncryptionKeys, bobOutput2.SeedOtResult.OneTimePadEncryptionKeys)
+}