donau

Donation authority for GNU Taler (experimental)
Log | Files | Refs | Submodules | README | LICENSE

commit f6147b01989563435ea723da76aabca9a3a69959
parent 9f34bf4659a9f8dda5e8d2b148711c0afa072f95
Author: Matyja Lukas Adam <lukas.matyja@students.bfh.ch>
Date:   Fri, 29 Mar 2024 01:03:29 +0100

[doc] some changes

Diffstat:
Adoc/flows/meetings/02_20-03-2024.md | 38++++++++++++++++++++++++++++++++++++++
Adoc/flows/meetings/03_27-03-2024.md | 31+++++++++++++++++++++++++++++++
Ddoc/flows/meetings/03_29-03-2024.md | 33---------------------------------
3 files changed, 69 insertions(+), 33 deletions(-)

diff --git a/doc/flows/meetings/02_20-03-2024.md b/doc/flows/meetings/02_20-03-2024.md @@ -0,0 +1,38 @@ +# Meeting 20.03.2024 + +## gana + +we can not delete the gana submodul from the donau. We use the gana from the exchange for the error codes, but not for the signature codes. + +how to update gana: + +1. update gnu-taler-error-codes/registry.rec and gnu-taler-error-codes/taler_error_codes.rst (Donau error code (ec) 8600 - 8700. + +2. update gana in exchange + + ```bash + cd contrib/gana + git pull + checkout master + git add . # gana-bumb commit and push + # install exchange + ``` + +## keys + +the keys route has two main tasks: + +1. act as route and return requested keys + +2. sign for other routes! -> Other routes do not have access to the private keys! +- We do not sort the keys therefore we don't need a heap. We can directly iterate over the donation unit map. +- krd_array can be deleted. Its already hashed ??? +- Put KeysResponseData into the main datastructure. It contains the etag (year in our case and version) + +## issue receipts + +We must ensure that the update the receipts to date of a charity and the receipt request are both saved in the database or thrown away. To do this, we need transactions. Its best practice to try a database insert 3 times to reduce the risk of serialization errors (if it has not worked after 3 times, the error is probably somewhere else). + +## uncrystify + +install uncrystify. If so you cant upload bad formated code. With uncrystify you can automatically format the code. diff --git a/doc/flows/meetings/03_27-03-2024.md b/doc/flows/meetings/03_27-03-2024.md @@ -0,0 +1,31 @@ +# Meeting 29.03.2024 + +## documentation + +The abstract/summary and the introduction with purpose/motivation of the thesis should be understandable for everyone. The rest should be understandable for a for a normal computer science bachelor graduate. The Abstract/Summary will be interesting for ngos, foundations, tax offices that show interest in such a system. + +Michiel leenaars did agree to write a motivational foreword for our thesis. He had the initial idea for the DONAU project. -> Note him and the NLnet foundation in the acknowledgment. + +## upcoming meeting with tax office + +Short presentaion Short superficial presentation of the project 10 - 15 minutes. + +Questions: + +- How big is the fraud? Is this a problem? How many donations were not recognized? What is being done about it? + +- How are donation receipts checked? How are larger donations checked? + +## issue receipts + +if adding the issue receipt request does not work, try jumping back to the function with goto. Attention clean up memory. + +The stored primary key hash of the issued receipts should be made from as much as possible -> the hash should be made from the budis, keys and the charity signature. + +## keys + +The cs and rs helper should have a additional row if the private key is lost or not. + +## Some thoughts + +An interesting attack on donau would be to smuggle in a false public key. This would allow the attacker to issue unlimited donation receipts. diff --git a/doc/flows/meetings/03_29-03-2024.md b/doc/flows/meetings/03_29-03-2024.md @@ -1,33 +0,0 @@ -# Meeting 29.03.2024 - -## documentation - -The abstract/summary and the introduction with purpose/motivation of the thesis should be understandable for everyone. The rest should be understandable for a for a normal computer science bachelor graduate. The Abstract/Summary will be interesting for ngos, foundations, tax offices that show interest in such a system. - -Michiel leenaars did agree to write a motivational foreword for our thesis. He had the initial idea for the DONAU project. -> Note him and the NLnet foundation in the acknowledgment. - -## upcoming meeting with tax office - -Short presentaion Short superficial presentation of the project 10 - 15 minutes. - -Questions: - -- How big is the fraud? Is this a problem? How many donations were not recognized? What is being done about it? - -- How are donation receipts checked? How are larger donations checked? - -## issue receipts - -if adding the issue receipt request does not work, try jumping back to the function with goto. Attention clean up memory. - -The stored primary key hash of the issued receipts should be made from as much as possible -> the hash should be made from the budis, keys and the charity signature. - -## keys - -The cs and rs helper should have a additional row if the private key is lost or not. - - - -## Some thoughts - -An interesting attack on donau would be to smuggle in a false public key. This would allow the attacker to issue unlimited donation receipts.