KarpelesLab / libwallet / 26148353421
22%

DEFAULT BRANCH: master
Ran
Jobs 1
Files 121
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 22.26%. Remained the same
26148353421

push

github

MagicalTux 
go.mod: bump tss-lib v2.2.8 → v2.2.9

Big upstream security-hardening release covering both dklstss and
frosttss. Highlights from the upstream log:

  - frost: encrypted r2 shares (X25519 + HKDF + ChaCha20-Poly1305)
    instead of the previous plaintext-over-broker shape;
  - frost: nonce_generate(secret) per RFC 9591 §4.1, identity +
    sid binding hardened in DKG round 1, per-dealer PoK on wi
    during resharing, deep Xi scrub via Key.Zeroize;
  - frosttss.Key gains Version + ValidateBasic;
  - dklstss: checked signing party (broker-driven Mul-then-check
    with identifiable abort), signing-time echo-broadcast defense
    against K_i equivocation, echo-coverage fix that closes the
    omitted-dealer hole, sid-binding hardening (mix T into
    keygen/refresh sessions, pub.Y in DKG OT prefix);
  - dklstss: hash validation, format-magic-byte, secp256k1 curve
    check on import.

All in-process protocol coverage (TestDklsWalletEndToEnd /
TestFrostWalletEndToEnd / TestReshareDklsEndToEnd /
TestReshareFrostEndToEnd / TestPromoteToDkls23EndToEnd /
TestPromoteToFrostEndToEnd / TestMigrateOneChainBothCurves /
TestMultiCreateWallet) plus the rest of the libwallet test suite
still pass against v2.2.9 without local changes — the new API
surface (Version, Zeroize, checked party) is additive and our
existing call sites don't need to opt in to consume the security
improvements.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

3918 of 17601 relevant lines covered (22.26%)

108.02 hits per line

Jobs
ID Job ID Ran Files Coverage
1 26148353421.1 121
22.26
 GitHub Action Run
Source Files on build 26148353421