Files
consensus/protocol
zeekay b9b2d72eaf fix: security hardening — BLS deserialization, constant-time proofs, CertBundle panic
- C-1 CRITICAL: verifyBLSAggregate now deserializes via bls.SignatureFromBytes
- C-2 HIGH: CertBundle.Verify panics (use VerifyWithKeys instead)
- C-3 HIGH: VerifyCompressed renamed to validateCompressedStructure
- createVerkleCommitment now returns error (bounds check on stateRoot)
- compressPath bounds check for short stateRoot
- Regression tests for all fixes
2026-03-24 16:55:49 -07:00
..
2025-11-06 10:32:37 -08:00
2025-11-06 10:32:37 -08:00