diff --git a/docs/celo-codebase/protocol/identity/encrypted-cloud-backup.md b/docs/celo-codebase/protocol/identity/encrypted-cloud-backup.md index 547471c01d..3a9cf23f11 100644 --- a/docs/celo-codebase/protocol/identity/encrypted-cloud-backup.md +++ b/docs/celo-codebase/protocol/identity/encrypted-cloud-backup.md @@ -1,8 +1,7 @@ --- -title: Encrypted Cloud Backup +title: Pin/Password Encrypted Cloud Backup (PEAR 🍐) --- - Secure and reliable account key backups are critical to the experience of non-custodial wallets, and Celo more generally. Day-to-day, users store their account keys on their mobile device, but if they lose their phone, they need a way to recover access to their account. Described in this document is a protocol for encrypted backups of a user's account keys in their cloud storage account. @@ -47,7 +46,7 @@ On Android, when the user opts-in, they should be prompted to select a Google ac On iOS, the user need not be prompted as there is a single Apple account on the device and the permissions architecture allows access to application-specific iCloud data without prompting the user. In the background, the chosen PIN or password and a locally generated salt value should be used to query ODIS. -The resulting hardened key should be used to encrypt the account key mnemonic. +The resulting hardened key should be used to encrypt the BIP-39 account key mnemonic. The encrypted mnemonic and metadata, including the salt, should be stored in the user's cloud storage. ### Recovery diff --git a/docs/celo-codebase/protocol/identity/smart-contract-accounts.md b/docs/celo-codebase/protocol/identity/smart-contract-accounts.md index 29ca7026f4..f608161cb7 100644 --- a/docs/celo-codebase/protocol/identity/smart-contract-accounts.md +++ b/docs/celo-codebase/protocol/identity/smart-contract-accounts.md @@ -31,7 +31,7 @@ In general, smart contract accounts allow the someone other than the account own ### Account recovery -Smart contract accounts can also be useful if a user ever loses their phone and backup account key. +Smart contract accounts can also be useful if a user ever loses their phone and recovery phrase. Unlike EOAs, smart contract accounts can support account recovery methods that do not rely solely on recovering the underlying keys. The meta-transaction wallet implements [a function](https://github.com/celo-org/celo-monorepo/blob/master/packages/protocol/contracts/common/MetaTransactionWallet.sol#L101-L108) to assign another Celo address as the Guardian of the account. This Guardian can be a simple backup key or a smart contract implementing social recovery, [KELP](https://eprint.iacr.org/2021/289), or another account recovery protocol.