ComputeLedger: Cryptographically Signed Compute‑Usage Receipts with Embedded Public Key

Описание и применение

ComputeLedger обеспечивает подписанные и хэш‑цепочечные квитанции использования вычислений, где публичный ключ включён в подпись, предотвращая подмену ключа. Инструмент проверяет целостность и подлинность, но не истинность метрик.

Задача

A signed compute‑usage receipt can still be forged if the public key is not bound inside the signed payload, allowing attackers to re‑sign with a different key.

Результат

ComputeLedger provides a tamper‑evident, verifiable receipt format that binds the public key to the signed payload, preventing key‑swap forgery. Security audit uncovered and fixed two runtime bugs, improving robustness.

Рабочий процесс

• Generate Ed25519 keypair and store PEM file locally
• Run compute job with computeledger run --provider on‑prem --hardware nvidia-a100 -- python train.py
• ComputeLedger captures job metadata, embeds publicKey, canonicalizes payload, hashes, and signs with private key
• Output signed receipt JSON
• Verify receipt with computeledger verify <receipt.json>
• Ledger verifies hash chain and signature against embedded publicKey

Доказательства

If the public key travels next to the signed payload rather than as a hashed part of it, nothing stops someone from taking a receipt, generating their own fresh Ed25519 keypair, re‑signing the same claim under their own key, and handing you a receipt that verifies perfectly.

Источник

The public key is a field inside the payload that gets hashed and signed, not metadata bolted on afterward.

Источник

Two bugs were caught during a security audit: unhandled JSON parse errors and missing validation for gpu-hours/flops.

Источник