mirror of
https://github.com/luxfi/mpc.git
synced 2026-09-24 00:26:24 +00:00
- M-1 CRITICAL: Remove legacy key share fallback (cross-tenant leak) - M-2 HIGH: orgID now required string on all Node methods (not variadic) - M-3 HIGH: Key material zeroing after signing sessions - Thread orgID through MPCBackend interface, all API handlers - Reshare + TFHE sessions use OrgScopedKey for reads/writes - Remove hardcoded JWT default (fail-hard if not set) - Add warning log for empty orgID legacy path - Regression tests: TestGetKeyShareWithFallback_M1_CrossTenantLeak