Could I generate a Secret from a CryptoKit Key?

[ralvarez-airata]

I am trying to implement peer-did with this library and I am trying to generate the keys on runtime. Is it possible? I saw that you have jose-swift, is it posible with these libraries?

[goncalo-frade-iohk]

To answer your question, you can generate the keys in runtime, but you generate them upon creating a DID.

And then you use the DID to send the message, the library will request the private key (secret).

This library is agnostic to the did method.

But the way it works is (let's use peer did).

A did has verification methods and each method has an ID, now as an example let's say you want to send signed didcomm message from a DID (did:peer:bobDID) to a DID (did:peer:aliceDID).

Upon resolving bobDID, that has a verification method of type authentication with a public key with an ID "did:peer:bobDID#0".

The didcomm library will require from you the private key (secret) that is pair with the public key "did:peer:bobDID#0".

Then it will prepare and sign the message with this secret.

When aliceDID receives the message, DIDcomm library will resolve bobDID on her Alice side and verify if the message was sent by bob, using the public key "did:peer:bobDID#0".

[goncalo-frade-iohk]

Btw you have this peer-did library as well. You can use them together.

https://github.com/beatt83/peerdid-swift

[beatt83]

@ralvarez-airata you can create the keys needed with CryptoKit that is Apple framework. Curve25519.Signing.PrivateKey and Curve25519.Agreement.PrivateKey