Compatibility with Mithril

Open
#56 15 comments 0 reactions 1 assignee View on GitHub

@perturbing is already working on this.

Since Sep 2, 2025.

Assessment

This issue has not been assessed yet.

Description

We need to find a way to co-exist with Mithril signer. The Mithril signer uses KES keys to sign a verification key, see https://mithril.network/doc/manual/operate/run-signer-node#mithril-signer-deployment-model

This signing happens at every epoch, and in the current design it directly accesses the KES.skey from disk.

To avoid Mithril signer having to deal with securely handling KES keyss obtained from KES-Agent, a potential solution is to include a signing service within KES-agent itself such that it can receive a request and a message (the mithril verificaiton key) and sign it.

This tikcet is about exploring feasibility of this solution as well as exploring alternatives.

Dominant language
Haskell
Stars
2
Forks
13
PR merge metrics
No merged PRs in 30d

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from IntersectMBO/kes-agent

All issues in IntersectMBO/kes-agent

Similar issues

More Haskell issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.