zeekay
c7f126adbf
feat: BLS threshold + security hardening + ZapDB KMS-backing
Security (from red team review):
- Replay protection: request_id + timestamp freshness on sign API
- Ed25519 message auth re-enabled on all protocol messages
- DKG timeout (5min) + signing timeout (30s) with watchdog
- Dedup map TTL cleanup (10min expiry, 2min sweep)
BLS threshold signing:
- KeyTypeBLS + keygen/signing sessions
- TrustedDealer pattern for BLS DKG
- CBOR serialization for BLS config
- 8 tests
ZapDB KMS-backing:
- HSM PasswordProvider wired to ZapDB init
- Supports: AWS KMS, GCP KMS, Azure KV, env, file
- Default env for backward compat
- 19 tests
Also: sr25519 sessions, fixed SignWireMessage build break
2026-03-19 01:15:33 -07:00
..
2026-03-19 01:15:33 -07:00
2026-03-02 14:22:05 -08:00
2025-08-02 22:30:28 -05:00
2026-02-04 15:47:51 -08:00
2025-08-02 22:30:28 -05:00
2024-09-21 20:52:40 +07:00
2026-03-02 14:22:05 -08:00
2026-02-04 15:47:51 -08:00
2026-02-04 15:47:51 -08:00
2026-03-19 01:15:33 -07:00
2026-03-19 01:15:33 -07:00
2026-03-19 01:15:33 -07:00
2026-03-19 01:15:33 -07:00
2025-08-02 22:27:51 -05:00
2025-08-02 22:27:51 -05:00
2026-03-01 18:12:18 -08:00
2026-03-01 18:33:01 -08:00
2026-03-01 18:40:56 -08:00
2025-12-25 10:44:16 -08:00
2026-03-19 01:15:33 -07:00
2026-03-01 18:12:18 -08:00
2026-03-02 16:38:54 -08:00
2026-03-01 19:10:22 -08:00
2026-03-01 18:16:57 -08:00
2026-02-25 01:13:36 -08:00
2026-03-02 16:38:54 -08:00
2026-03-19 01:15:33 -07:00
2025-08-02 22:30:28 -05:00