Files
mpc/pkg
zeekay fe9baa2ab7 security: fix keygen org-scoping + orgID injection prevention
Three fixes:

1. OrgScopedKey sanitizes colons in orgID to prevent key injection
   via the ":" separator (e.g. orgID "evil:org:fake" would create
   ambiguous key paths).

2. All 5 keygen sessions (CGGMP21, FROST, BLS, SR25519, LSS) now
   write key shares with OrgScopedKey(orgID, key) instead of bare
   keys. Previously keygen wrote unscoped but signing read scoped,
   causing key-not-found errors in multi-tenant deployments.

3. Added orgID field to session struct and threaded it through all
   keygen constructors and Node.Create*KeyGenSession methods using
   variadic orgID ...string for backward compatibility.
2026-03-22 20:38:12 -07:00
..
2024-09-21 20:52:40 +07:00
2025-08-02 22:27:51 -05:00
2025-08-02 22:27:51 -05:00