Feature request: encrypted keystore for signing, alternative to .env private key
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 35/100
Research direction
Start by tracing how cre-cli currently reads CRE_ETH_PRIVATE_KEY from .env or the environment, then review the proposed cre wallet import, cre wallet list, and workflow simulate --account entry points. Done would include encrypted local account storage, password prompts for use, account listing without key exposure, and no plaintext private key requirement.
Written by the indexing model from the issue text.
Description
Right now the CLI reads the signing key from CRE_ETH_PRIVATE_KEY in .env (or a raw env var). That means the key sits unencrypted on disk for as long as the project exists, which isn't great even for testnet work.
Foundry solved this a while back with cast wallet import <name> --interactive - it prompts for the key + a password once, encrypts it (ERC-2335), and after that you just do --account <name> and get a password prompt instead of a plaintext key anywhere in the project.
Would be great if cre-cli had something similar, e.g.
cre wallet import <name>- prompt for pk + password, store encrypted locallycre workflow simulate ... --account <name>- password prompt instead of reading .envcre wallet list- list configured accounts, obviously without exposing the keys
Since a lot of us are coming from Foundry, this would match a pattern people already expect and cut down on keys ending up in .env files, shell history, or accidentally committed.
Not attached to ERC-2335 specifically if there's a preferred format on your end - just flagging the gap. Happy to help implement once there's agreement on direction.
- Dominant language
- Go
- Stars
- 24
- Forks
- 25
- Avg merge
- 10h 10m
- Merged PRs (30d)
- 13
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from smartcontractkit/cre-cli
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
smartcontractkit/cre-cli#430 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 55/100
smartcontractkit/cre-cli#582 ·
-
Difficulty 5/5 Over a week Newbie friendliness 15/100
smartcontractkit/cre-cli#507 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 52/100
smartcontractkit/cre-cli#393 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 48/100
smartcontractkit/cre-cli#328 ·
All issues in smartcontractkit/cre-cli
Similar issues
-
area/dev-productivity area/disaster-recovery area/ipcei kind/enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
kind/bug status/0-triage
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
🤔 refinement needed
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
equinor/radix-operator#1979 ·