lux/mpc
2
0
Fork 0
mirror of https://github.com/luxfi/mpc.git synced 2026-09-24 00:26:24 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
e3936dc59cc4afc5ae8af0e2dd3ffc394e943713
mpc/pkg
T
History
zeekay e3936dc59c feat: per-user shard encryption + wallet isolation 
EncryptedKVStore: AES-256-GCM wrapper over ZapDB for per-user shard encryption.
Each user's key shards encrypted with a unique DEK:

  user DEK = HMAC-SHA256(masterKey, "mpc:shard:" + orgID + ":" + userID)
  org DEK  = HMAC-SHA256(masterKey, "mpc:org:" + orgID)

Three layers of MPC data protection:
  1. ZapDB ChaCha20-Poly1305 (node-level, existing)
  2. EncryptedKVStore AES-256-GCM (per-user, NEW)
  3. API filter on createdBy (access control, NEW)

Even if ZapDB is fully dumped, individual users' shards are
independently encrypted. Wrong user key → decryption fails.

5 new tests: roundtrip, key uniqueness, wrong-key rejection,
empty values, org vs user key separation.
2026-03-24 14:58:54 -07:00
..
api
feat: per-user wallet isolation — non-admin users only see their own wallets
2026-03-24 12:58:36 -07:00
backup
feat: tx lifecycle tracking, Shamir backup sharding, settlement engine
2026-03-02 14:22:05 -08:00
client
Fix remaining import formatting issues
2025-08-02 22:30:28 -05:00
common
chore: sync dependencies and format code
2026-02-04 15:47:51 -08:00
config
fix: goimports formatting + CGO_ENABLED=0 for CI tests
2026-03-22 12:50:58 -07:00
constant
Implement connection for prod
2024-09-21 20:52:40 +07:00
db
fix: goimports formatting + CGO_ENABLED=0 for CI tests
2026-03-22 12:50:58 -07:00
encoding
chore: sync dependencies and format code
2026-02-04 15:47:51 -08:00
encryption
chore: sync dependencies and format code
2026-02-04 15:47:51 -08:00
event
security: add orgID multi-tenancy isolation, rename badger to zapdb
2026-03-22 12:02:30 -07:00
eventconsumer
fix: goimports formatting + CGO_ENABLED=0 for CI tests
2026-03-22 12:50:58 -07:00
hsm
feat: BLS threshold + security hardening + ZapDB KMS-backing
2026-03-19 01:15:33 -07:00
identity
feat: BLS threshold + security hardening + ZapDB KMS-backing
2026-03-19 01:15:33 -07:00
infra
Fix linting issues
2025-08-02 22:27:51 -05:00
keyinfo
Fix linting issues
2025-08-02 22:27:51 -05:00
kms
feat(mpc): key listing, KMS backup/restore, API-only backend, CGGMP21 config serialization
2026-03-01 18:12:18 -08:00
kvstore
feat: per-user shard encryption + wallet isolation
2026-03-24 14:58:54 -07:00
logger
fix(ci): goimports formatting, no-panic logger test, remove unconvert
2026-03-01 18:40:56 -08:00
messaging
chore: remove bridge stub, fix all TODOs with real implementations
2025-12-25 10:44:16 -08:00
mpc
security: fix keygen org-scoping + orgID injection prevention
2026-03-22 20:38:12 -07:00
protocol
feat(mpc): key listing, KMS backup/restore, API-only backend, CGGMP21 config serialization
2026-03-01 18:12:18 -08:00
settlement
fix: goimports formatting + CGO_ENABLED=0 for CI tests
2026-03-22 12:50:58 -07:00
smart
fix(ci): goimports with local-prefixes=github.com/luxfi/mpc
2026-03-01 19:10:22 -08:00
threshold
fix(crypto): real Lagrange aggregation, proper ECDSA sign shares, FROST Schnorr verification
2026-03-01 18:16:57 -08:00
transport
security: add orgID multi-tenancy isolation, rename badger to zapdb
2026-03-22 12:02:30 -07:00
txtracker
fix: goimports formatting with local-prefixes (matches golangci-lint)
2026-03-22 13:17:50 -07:00
types
security: add orgID multi-tenancy isolation, rename badger to zapdb
2026-03-22 12:02:30 -07:00
utils
Fix remaining import formatting issues
2025-08-02 22:30:28 -05:00