arkfile

Review of BlueWallet PayNym Integration done with the help of Claude Opus 4.6

Original Prompt:

"Please help me review the PayNym / BIP47 integration in this BlueWallet app repo ( https://github.com/linkinparkrulz/BlueWallet/releases/tag/v1.0.0 ). I am wondering about cryptographic and security best practices and if you can see any obvious gaps at first blush. e.g. How are secrets and credentials generated, stored, shared, refreshed and/or deleted, for example?"

Follow-up Prompt:

"Please double check the high and medium priority issues you brought up, confirm their validity and offer suggestions for remediation or improvement, and write each of these out in paragraph format as much as possible. Note filenames, function names and/or line numbers where relevant in your review."

arkfile

I've been working on Arkfile for over a year now. I have been using mostly AI tools to build out and co-design the system with me. I have learned a lot about CGO (Go + C), OPAQUE Auth protocol, and rqlite database innards.

I am excited to continue building it out.

As I have been working on it, I've adapted to the realities of what I'm trying to build. Where the rubber meets the road, building truly zero-knowledge systems is hard.

I had a mental model going in of performing client-side encryption and decryption of files.

I've adjusted from thinking that I must do all of this in Go with Web Assembly on the client side, to now accepting the tradeoffs of using the Web Crypto API and using TypeScript on the client-side instead for the browser side of the app.

arkfile

Setting Up Fedora 42 XFCE with LUKS Encryption and XLibre in VirtualBox

Download the Fedora 42 XFCE Spin ISO from the official Fedora Spins website and create a VirtualBox VM. I recommend creating one with 8GB RAM, 4 CPUs, and at least 40GB of disk space.

Important: If you have VirtualBox Extension Pack installed, uninstall it first as it may cause driver conflicts with XLibre.

Boot from the ISO and start the installer. When you reach the Installation Destination screen, select Custom/Manual partitioning.

Choose Standard Paritioning and check "Encrypt my data".

arkfile

Erasure Coding Notes & Links

"The RAID system built into Linux uses Reed-Solomon. It has a carefully tuned Reed-Solomon implementation in C that is part of the RAID module. Microsoft Azure uses a similar, but different, erasure coding strategy. We’re not sure exactly what Amazon S3 and Google Cloud Storage use because they haven’t said, but it’s bound to be Reed-Solomon or something similar. Facebook’s new cold storage system also uses Reed-Solomon."

https://www.backblaze.com/blog/reed-solomon/

---

"CDs can recover from scratches that corrupt up to 4000 bits thanks to the clever use of two Reed-Solomon codes."