# \#security

**URL:** https://forum.canton.network/tag/security/134.md

[Latest](https://forum.canton.network/latest.md) · [Categories](https://forum.canton.network/categories.md) · [Tags](https://forum.canton.network/tags.md)

---

## [Rütli — open-source threshold KMS (FROST-Ed25519) for Canton validators: request for SIG Security review & champion](https://forum.canton.network/t/rutli-open-source-threshold-kms-frost-ed25519-for-canton-validators-request-for-sig-security-review-champion/9433)

<div class="topic-metadata">

**Author:** [@StakeCraft](https://forum.canton.network/u/StakeCraft)\
**Replies:** 1\
**Last updated:** [November 1, 2026, 9:19pm UTC](https://forum.canton.network/t/rutli-open-source-threshold-kms-frost-ed25519-for-canton-validators-request-for-sig-security-review-champion/9433 "2026-11-01T21:19:48Z")

</div>

Hi all, I’m Vasily from Stakecraft. We’ve built Rütli, an open-source (Apache-2.0), self-hosted threshold KMS for Canton node keys: GitHub - Stakecraft/rutli: Open-source, self-hosted threshold KMS (FROST-ed25519) for C…

---

## [How Can We Close the Security Tooling Gap for Canton & DAML? We’re Building Grisoco AI](https://forum.canton.network/t/how-can-we-close-the-security-tooling-gap-for-canton-daml-we-re-building-grisoco-ai/9214)

<div class="topic-metadata">

**Author:** [@security\_grisoco](https://forum.canton.network/u/security_grisoco)\
**Replies:** 0\
**Last updated:** [September 23, 2026, 5:12pm UTC](https://forum.canton.network/t/how-can-we-close-the-security-tooling-gap-for-canton-daml-we-re-building-grisoco-ai/9214 "2026-09-23T17:12:03Z")

</div>

DAML has a very different security model from Solidity — but it doesn’t yet have the same mature ecosystem of automated security-analysis tools. For EVM contracts, developers can turn to tools like Slither, Mythril, Ech…

---

## [Is there any certification for the security researcher?](https://forum.canton.network/t/is-there-any-certification-for-the-security-researcher/9077)

<div class="topic-metadata">

**Author:** [@Jes](https://forum.canton.network/u/Jes)\
**Replies:** 5\
**Last updated:** [September 3, 2026, 9:05am UTC](https://forum.canton.network/t/is-there-any-certification-for-the-security-researcher/9077 "2026-09-03T09:05:28Z")

</div>

Hi everyone, I’m a security researcher. I just came across the Canton network and see how it could be really valuable. I’m diving into its ecosystem. Currently, I have been learning the DAML training program. I have pas…

---

## [DA Position on Post-Quantum Cryptography](https://forum.canton.network/t/da-position-on-post-quantum-cryptography/7877)

<div class="topic-metadata">

**Author:** [@nycnewman](https://forum.canton.network/u/nycnewman)\
**Replies:** 2\
**Last updated:** [August 26, 2026, 7:55pm UTC](https://forum.canton.network/t/da-position-on-post-quantum-cryptography/7877 "2026-08-26T19:55:05Z")

</div>

We occasionally get asked about PQC support and our position on the threat to Canton / Canton Network from quantum computing. Below are some thoughts on the topic: Digital Asset is tracking the state of quantum computin…

---

## [Questions about the nature of Canton keys with an external GCP KMS + recommended best practice for key provisioning](https://forum.canton.network/t/questions-about-the-nature-of-canton-keys-with-an-external-gcp-kms-recommended-best-practice-for-key-provisioning/7405)

<div class="topic-metadata">

**Author:** [@Julius\_William](https://forum.canton.network/u/Julius_William)\
**Replies:** 2\
**Last updated:** [September 25, 2024, 8:00am UTC](https://forum.canton.network/t/questions-about-the-nature-of-canton-keys-with-an-external-gcp-kms-recommended-best-practice-for-key-provisioning/7405 "2024-09-25T08:00:15Z")

</div>

Hi all, I am setting up a Canton on Fabric environment using a distributed domain topology with GCP KMS and had a few questions regarding the provisioning of Canton keys via GCP KMS. I am including a table of cryptogra…

---

## [Unable to load OpenSSL in canton executable](https://forum.canton.network/t/unable-to-load-openssl-in-canton-executable/6541)

<div class="topic-metadata">

**Author:** [@Marcin\_Ziolek](https://forum.canton.network/u/Marcin_Ziolek)\
**Replies:** 1\
**Last updated:** [May 12, 2023, 8:12am UTC](https://forum.canton.network/t/unable-to-load-openssl-in-canton-executable/6541 "2023-05-12T08:12:41Z")

</div>

I have noticed that when running canton by directly invoking it via its jar and configuring the TLS the application throws exception unable to load the required libraries. It then reverts to using the JDK version of the …

---

## [Authentication and authorisation with Java Bindings?](https://forum.canton.network/t/authentication-and-authorisation-with-java-bindings/4816)

<div class="topic-metadata">

**Author:** [@jaypeeda](https://forum.canton.network/u/jaypeeda)\
**Replies:** 1\
**Last updated:** [June 30, 2022, 2:29pm UTC](https://forum.canton.network/t/authentication-and-authorisation-with-java-bindings/4816 "2022-06-30T14:29:33Z")

</div>

Hi team, May I know how Authentication and authorisation with Java Bindings ? Cheers, Jean-Paul

---

## [How are keys generated and managed in Canton?](https://forum.canton.network/t/how-are-keys-generated-and-managed-in-canton/4270)

<div class="topic-metadata">

**Author:** [@jaypeeda](https://forum.canton.network/u/jaypeeda)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 2:18pm UTC](https://forum.canton.network/t/how-are-keys-generated-and-managed-in-canton/4270 "2022-04-07T14:18:30Z")

</div>

Hi team, May I know how are keys generated and managed in Canton (for participant and domain) ? Thanks for your support ! Jean-Paul

---

## [AWS configuration to connect React App with JSON API](https://forum.canton.network/t/aws-configuration-to-connect-react-app-with-json-api/3414)

<div class="topic-metadata">

**Author:** [@jaypeeda](https://forum.canton.network/u/jaypeeda)\
**Replies:** 2\
**Last updated:** [November 10, 2021, 6:53pm UTC](https://forum.canton.network/t/aws-configuration-to-connect-react-app-with-json-api/3414 "2021-11-10T18:53:28Z")

</div>

Hi team, We are setting up a React App and Json api on client servers which uses AWS. How and what should be the configuration in AWS in order to connect the React App which uses SSL to the JSON API which doesn’t suppo…

---

## [PKI integration with Daml](https://forum.canton.network/t/pki-integration-with-daml/3380)

<div class="topic-metadata">

**Author:** [@Luciano](https://forum.canton.network/u/Luciano)\
**Replies:** 3\
**Last updated:** [October 27, 2021, 6:33pm UTC](https://forum.canton.network/t/pki-integration-with-daml/3380 "2021-10-27T18:33:23Z")

</div>

Here’s a scenario I’m wondering about. Is it possible to: Write Daml app with a front-end that runs in your browser, and have the browser verify (client-side) that contracts have been signed by parties with a valid SSL …

---

## [Can Smart Contracts Compliment Conventional IT Security?](https://forum.canton.network/t/can-smart-contracts-compliment-conventional-it-security/2376)

<div class="topic-metadata">

**Author:** [@quidagis](https://forum.canton.network/u/quidagis)\
**Replies:** 1\
**Last updated:** [April 5, 2021, 2:25pm UTC](https://forum.canton.network/t/can-smart-contracts-compliment-conventional-it-security/2376 "2021-04-05T14:25:43Z")

</div>

I was just reading this article today on Twitter: Former Utilities Employee Tampers with Water Supply and I thought about the core issues in this story: Former employee Had functional access to remote login Knowledge …
