Skip to main content

Namebump is a registrationless, key-authenticated name registry where writes bump prior values.

Project description

Namebump

Part of the Warpgate project: https://www.warpgate.io/

Namebump is a registrationless key-value store where names are claimed using public-key signatures. Storage is limited per IP address, requiring renewal as IPs change. Unused names are bumped over time if not renewed.

import namebump
import asyncio

async def main():
    # Generate your public key.
    kp = namebump.Keypair.generate()

    # Save a value at a unique name (must be unique.)
    await namebump.put("your unique name", "value", kp)

    # Get your val back -> value.
    value = await namebump.get("your unique name")

    # Delete it:
    await namebump.delete("your unique name", kp)

asyncio.run(main())

You can also make the software only store values if it doesn't need to bump an existing one but doing this:

    await namebump.put(name, val, kp, namebump.DONT_BUMP)

Or make it throw on full:

    await namebump.put(name, val, kp, namebump.THROW_BUMP)

To manually specify a server to use:

# Client also takes a nic param
# See aionetiface for usage if you want to load a specific NIC.
client = await namebump.Client(
    ("127.0.0.1", 5300),
    b"compressed ECDSA secp256k1 pub key of server"
)

client.put ... get etc

to run your own server:

    import the database into mysql: scripts/namebump.sql
    generate a keypair: python3 scripts/gen_keys.py
    edit env vars: scripts/set_env.sh

. scripts/set_env.sh
python3 -m namebump.server

Who can register names?

Anyone. There's no captcha or registration system. Instead, names are associated with public keys and are given out on a first-come basis. The system is meant to allow software to use a secure KVS without having to host anything themselves. For this reason all requests are encrypted with ephemeral keys using ECIES and authenticated with ECDSA. Resource usage is limited by IP, so as long as a name is available and the IP still has capacity left requests are accepted.

How does resource capacity work?

The system allocates a name limit per IP. The algorithm depends on the type of IP. eg: IPv4 or IPv6. Each IP is free to store as many names within their limits. Though names expire over-time if they aren't updated. Additionally, storing new names past the limit can be made to bump older names if the caller wants. The behavior for bumping depends on the client (bump, dont bump, error on full.)

What prevents someone hijacking my name?

As long as the name is renewed before it expires the name stays associated with the public key that first claimed it. However, ownership and persistence are only a consequence of how the names are used. It's up to the owner to make sure the names they need stay renewed.

What about if my IP changes?

If your IP changes a person could fill up the name queue for your old IP to try bump off your name before you renew it. However, the software requires names to exist for a minimum time-frame before they can be bumped. This prevents such an attack from displacing names. Storing a name automatically associates that name with the IP that stored it.

How can you store names for the entire IP space?

There's only about 4 billion IPv4 addresses. IPv6 obviously isn't feasible to index totally, but if you break down the sub-components of the IPv6 address you can discard a great portion of it and build a resource limitation scheme. Overall, storage should fit within 4 TBs.

Where are names stored?

On a single server for now. The architecture in the future could be federated or decentralized across nodes (.tld -> server(S).) The design here for the data structures and resource limits would make for a novel storage system that could be improved in the future.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

namebump-0.0.10.tar.gz (28.6 kB view details)

Uploaded Source

File details

Details for the file namebump-0.0.10.tar.gz.

File metadata

  • Download URL: namebump-0.0.10.tar.gz
  • Upload date:
  • Size: 28.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for namebump-0.0.10.tar.gz
Algorithm Hash digest
SHA256 41e0efda50de327da4d66897f4c0ac23a3b6a4b23e9e2856ae507d8d47eff9b9
MD5 ebd8c2166eaf2b1220321c943baf4143
BLAKE2b-256 ed8f4bc12e1a40834fa270fb9a97289470a027bebfdd52919e5f2a8b9cfdfe73

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page