zeekayandHanzo Dev 027508102b Bind every signer's commitment in the round-2 transcript ...

Hash walked the commitment map D by dense index 0..len(D)-1, but D is
keyed by party id. For any signer set that is not {0,1,...,k-1} that walk
read absent low indices and skipped the present high ones, so the parties
at the high indices could replace their round-1 commitment without moving
the digest that seeds u and the per-pair masks — a signer could equivocate
its commitment after the fact. Walk D by the agreed set T instead, which
is already written into the transcript, so every commitment is bound in a
fixed order.

Co-authored-by: Hanzo Dev <[email protected]>

2026-08-21 11:01:03 -07:00

..

hash_test.go

harden: hedged 256-bit nonce key, DRY CT comparator, honest CT/proof docs

2026-06-21 08:21:58 -07:00

hash.go

Bind every signer's commitment in the round-2 transcript

2026-08-21 11:01:03 -07:00

shamir_test.go

corona: rename module path github.com/luxfi/pulsar → github.com/luxfi/corona

2026-05-11 14:55:26 -07:00

shamir.go

refactor(hash,primitives): route SP 800-185 + Lagrange onto luxfi/mlwe v0.2.1

2026-06-28 13:02:56 -07:00

transcript_binding_test.go

Bind every signer's commitment in the round-2 transcript

2026-08-21 11:01:03 -07:00