KarpelesLab / libwallet / 26095158091

22%

push

github

wltwallet: wire dklstss keygen + sign for new secp256k1 wallets

Wallets stamped with Protocol="dkls23" now route keygen and sign
through tss-lib's DKLs23 implementation instead of GG18/ecdsatss.

Keygen builds the same UUID-based PartyIDs the legacy path uses so
the saved committee can be reconstructed at sign time; the share
binary (which carries OT-extension setup state) is wrapped in a
dklsKeyWrapper and routed through the existing
cryptutil.Bottle/opener encryption pipeline alongside other Schema
values.

Sign requires exactly T+1 signers — surfaced as a clean
libwallet-level error rather than letting dklstss.NewSigning fail
per-party. Output stays DER-encoded so callers (Account.Sign,
SignEthereumDigest, ...) don't branch on protocol; HD tweaks pass
through to NewSigning as *big.Int unchanged.

Existing wallets keep working: empty/legacy Protocol values still
dispatch to initializeWallet (GG18) and the curve-based sign path.
Step 3 of the dkls23+frost modernisation; reshare is deferred to a
follow-up.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

130 of 173 new or added lines in 2 files covered. (75.14%)

3798 of 16745 relevant lines covered (22.68%)

113.69 hits per line