zeekay
5106e6b61a
feat: BLS threshold + security hardening + ZapDB KMS-backing
Security (from red team review):
- Replay protection: request_id + timestamp freshness on sign API
- Ed25519 message auth re-enabled on all protocol messages
- DKG timeout (5min) + signing timeout (30s) with watchdog
- Dedup map TTL cleanup (10min expiry, 2min sweep)
BLS threshold signing:
- KeyTypeBLS + keygen/signing sessions
- TrustedDealer pattern for BLS DKG
- CBOR serialization for BLS config
- 8 tests
ZapDB KMS-backing:
- HSM PasswordProvider wired to ZapDB init
- Supports: AWS KMS, GCP KMS, Azure KV, env, file
- Default env for backward compat
- 19 tests
Also: sr25519 sessions, fixed SignWireMessage build break
2025-12-27 21:54:46 -08:00
..
2025-12-27 21:54:46 -08:00
2025-12-27 18:09:37 -08:00
2025-08-02 22:30:28 -05:00
2025-12-27 09:26:29 -08:00
2025-08-02 22:30:28 -05:00
2024-09-21 20:52:40 +07:00
2025-12-27 18:09:37 -08:00
2025-12-27 09:26:29 -08:00
2025-12-27 09:26:29 -08:00
2025-12-27 21:54:46 -08:00
2025-12-27 21:54:46 -08:00
2025-12-27 21:54:46 -08:00
2025-12-27 21:54:46 -08:00
2025-08-02 22:27:51 -05:00
2025-08-02 22:27:51 -05:00
2025-12-27 16:03:48 -08:00
2025-12-27 16:23:40 -08:00
2025-12-27 16:36:55 -08:00
2025-12-25 10:44:16 -08:00
2025-12-27 21:54:46 -08:00
2025-12-27 16:03:48 -08:00
2025-12-27 18:16:15 -08:00
2025-12-27 16:50:10 -08:00
2025-12-27 16:10:26 -08:00
2025-12-27 12:05:25 -08:00
2025-12-27 18:16:15 -08:00
2025-12-27 21:54:46 -08:00
2025-08-02 22:30:28 -05:00