We're excited to announce that Openfort has successfully deployed compatible smart accounts on ZKsync and the Elastic Chain. 

Openfort smart account support for ZKsync and Elastic Chain

Openfort adds ZKsync and Elastic Chain support


Openfort is now live on the Soneium Minato testnet, bringing account abstraction to Sony’s new Ethereum Layer 2. This integration allows developers to build smoother onchain gaming experiences for the Soneium community.

## What is Soneium?

[Soneium](https://soneium.org/en/) is a Layer 2 blockchain developed by Sony Block Solutions Labs. It is designed to bridge the gap between traditional entertainment and decentralized technology, offering a scalable and user-friendly environment for apps and games. By integrating with Soneium, Openfort provides the wallet infrastructure needed to make interacting with this new network as simple as using any modern app.


### Key Benefits
- **Seamless Onboarding**: Players can join on-chain games without the complexity of managing seed phrases or external wallets.

- **Enhanced User Experience**: Our account abstraction technology enables smoother, more intuitive interactions within games and gamified applications.
- **Improved Security**: Smart account features provide advanced security measures to protect players' assets and identities.
- **Flexible Transactions**: Gamers can execute complex in-game actions with ease, thanks to programmable accounts and gasless transactions.

## Why Soneium?
[Soneium](https://soneium.org/en/) aims to make blockchain technology more accessible and scalable. Its focus on entertainment, gaming, and finance aligns perfectly with Openfort's mission to simplify Web3 gaming.

By leveraging Soneium's infrastructure and Openfort's account abstraction toolkit, developers can create more engaging and user-friendly blockchain games. We're excited to work alongside Soneium and its partners to drive innovation in the gaming industry. Stay tuned for more updates as we continue to expand our support for game developers and players on this cutting-edge platform.

## Related reading

- [A beginner's guide to Web3 gaming infrastructure and how platforms like Soneium fit in](/blog/introduction-to-web3-gaming-infrastructure)
- [Embedded wallets explained: the technology behind seamless player onboarding](/blog/embedded-wallet-explained)
- [See how Openfort brings the same account abstraction capabilities to ZKsync](/blog/openfort-zksync-elastic-chain)


We're thrilled to announce that Openfort is deploying account abstraction capabilities on Soneium, Sony's new Ethereum Layer 2 blockchain.

Openfort account abstraction support for Sony Soneium Layer 2

Openfort adds Soneium


We’ve reached a major milestone in making our infrastructure more secure and transparent. Our Shamir’s Secret Sharing (SSS) library, implemented in Go, has successfully passed a security audit by Cure53. This ensures that the cryptographic foundation of our wallet system meets the highest standards for safety.

## What is Shamir’s Secret Sharing (SSS)?

Shamir’s Secret Sharing is a cryptographic method used to split a "secret" (like a private key) into multiple parts, called shares. A specific number of these shares (the threshold) is required to reconstruct the original secret. This prevents any single point of failure—if one share is lost or stolen, the secret remains safe. At Openfort, we use SSS to power our non-custodial wallet infrastructure, giving players a seamless login experience without compromising security.


You can find our [Go SSS library](https://github.com/openfort-xyz/shamir-secret-sharing-go) and the [full audit report](https://drive.google.com/file/d/1fQ5lCg-JgH_TcSt9hCwcIv-psP_8Nbze/view?usp=sharing).

## The Importance of Shamir's Secret Sharing

Shamir's Secret Sharing Scheme (SSS) is a cryptographic primitive that allows a secret to be divided into multiple parts, or shares, with a threshold number required to reconstruct the original secret. This technique is crucial for secure key management and distribution in various cryptographic applications, including blockchain wallets and secure multi-party computation.

Fun Fact: Shamir's Secret Sharing Scheme was invented by Adi Shamir, one of the creators of the RSA algorithm, in 1979. It's a testament to its robustness that it remains a crucial part of modern cryptography over four decades later!

### Deep Dive: How SSS Works

At its core, SSS relies on a fascinating property of polynomials: any degree-k polynomial can be uniquely identified by any set of k+1 distinct points. Here's how it works:

1. **Encoding the Secret**: The secret S is encoded into a polynomial f(x) of degree k-1 over a finite field Fp. The polynomial takes the form:

   f(x) = S + r₁x + r₂x² + ... + rₖ₋₁xᵏ⁻¹

   where S is the secret (constant term) and r₁, r₂, ..., rₖ₋₁ are random coefficients.

2. **Generating Shares**: n distinct shares are generated by evaluating f(x) at different points. Each share is an ordered pair (xᵢ, f(xᵢ)).

3. **Recovering the Secret**: Any k shares can reconstruct the original polynomial using Lagrange interpolation, allowing recovery of the secret S by evaluating f(0).

## Our Audit Journey

In our commitment to security and transparency, we engaged Cure53, a renowned security firm, to conduct a thorough cryptography review and source code audit of our Go SSS library. The audit, completed in August 2024, focused on ensuring the correctness and security of our implementation.

### Key Findings and Implemented Solutions

1. **Overall Soundness**: The audit revealed that our SSS library is generally sound and correctly implemented. The use of GF(2^8) for the underlying field was noted as a good choice for simplification and future-proofing.

2. **Timing Variance Resolution**: A low-severity issue (OFT-01-001) was identified, showing a small timing variance in the GF256 multiplication. We've addressed this by implementing a constant-time solution, enhancing the library's resistance to potential timing attacks.

3. **Enhanced Input Validation**: Following the auditors' suggestion (OFT-01-002), we've implemented more robust input validation during the reconstruction process. This improvement enhances the library's resilience against potential attacks and ensures smoother error handling.

### Technical Deep Dive: Ensuring Implementation Security

One critical aspect of SSS implementation that our library carefully addresses is the "zero share problem". This occurs when a share's x-coordinate is zero, potentially revealing the secret directly. Our Go implementation includes safeguards against common pitfalls:

- **Counter-based shares**: We ensure our share generation starts from 1, not 0, avoiding accidental zero shares.
- **User input handling**: Our library implements strict checks to prevent user-supplied values or identifiers that could lead to zero shares.
- **Secure random number generation**: We use Go's crypto/rand package to generate secure random numbers, mitigating the risk of zero or predictable shares.

These measures, along with the improvements suggested by the audit, make our SSS library a robust and secure choice for developers. If you're curious, check how we're combining the SSS library with [Shield](https://opensigner.dev) and our [security approach](https://www.openfort.io/security) at Openfort.

## Our Commitment to Open Source

We're excited to announce that we're open-sourcing both our SSS library and the full audit report. As the first of its kind implemented in Go, we believe this library will be a valuable addition to the cryptographic community.

By making our library and audit results public, we aim to:

1. Contribute to the broader understanding of secure SSS implementations
2. Invite peer review and continuous improvement of our codebase
3. Provide a valuable resource for developers and researchers in the field, especially those working with Go

Fun Fact: The concept of open-source security is often referred to as "Linus's Law", named after Linus Torvalds: "Given enough eyeballs, all bugs are shallow."

## Looking Ahead

The audit results have provided us with valuable insights, and we've already implemented the suggested improvements. We're committed to maintaining the highest standards of security and will continue to invest in regular audits and open collaboration.

We encourage the community to review our library, provide feedback, and contribute to its ongoing development. Together, we can build a more secure foundation for on-chain applications.



Discover how Openfort's Shamir’s Secret Sharing (SSS) cryptography library passed audit testing to ensure a more secure wallet infrastructure

Shamir Secret Sharing Library Audited

- [What is the ZKsync Elastic Chain?](#what-is-the-zksync-elastic-chain)
- [Key highlights:](#key-highlights)
- [Related reading](#related-reading)

Openfort has successfully deployed compatible smart accounts on ZKsync. This integration brings native account abstraction to ZKsync’s high-performance Layer 2 network and the broader ZK Chain ecosystem.

[What is the ZKsync Elastic Chain?](#what-is-the-zksync-elastic-chain)

The Elastic Chain is a network of ZK Chains (like ZKsync and Sophon) that are interconnected to act as a single, scalable blockchain. It uses zero-knowledge proofs to allow for high transaction speeds and low costs while maintaining Ethereum-level security. By supporting this ecosystem, Openfort allows developers to build smooth, gasless experiences for players across multiple ZK-powered networks.

Native support for ZKsync’s account abstraction model

Seamless deployment process using ZKSync's custom tools

Enhanced transaction flexibility and security for users

Potential for gas-free transactions and advanced account features

Our smart accounts on ZKsync enable developers to build more user-friendly apps and games with features like social recovery, multi-signature control, and customizable spending limits. By leveraging ZKsync’s scalability and Openfort's account infrastructure, we're paving the way for mainstream adoption of on-chain applications.

Stay tuned for a detailed tutorial on how to integrate these smart accounts into your ZKsync projects. We can't wait to see what innovative use cases the community builds with this new capability!

What are embedded smart accounts and how do they enable features like social recovery

[What are embedded smart accounts and how do they enable features like social recovery](/blog/embedded-smart-accounts)

How gas sponsorship works behind the scenes to enable gas-free transactions

[How gas sponsorship works behind the scenes to enable gas-free transactions](/blog/technical-dive-gas-sponsorship)

Openfort brings similar smart account capabilities to Kroma, another ZK-powered chain

[Openfort brings similar smart account capabilities to Kroma, another ZK-powered chain](/blog/openfort-integrates-with-kroma)

Openfort adds ZKsync and Elastic Chain support

In this article

Let your business run on stablecoins

In this article

Let your business run on stablecoins

What is the ZKsync Elastic Chain?

Key highlights:

Keep Reading

Shamir Secret Sharing Library Audited

Openfort adds Soneium

Try Openfort Free