oasisprotocol / oasis-core

48%

master: 48%

LAST BUILD ON BRANCH peternose/trivial/churp-zeroize-secrets

branch: peternose/trivial/churp-zeroize-secrets

CHANGE BRANCH

x

Reset

• peternose/trivial/churp-zeroize-secrets
• amela/fix/parameters-proposal-output
• andrej/bugfix/sgx-cpu-change-err
• andrej/bugfix/txpool-checktx-fix
• andrej/feature/bump-go-1.25
• andrej/feature/netrunner-loglevel
• andrej/feature/remove-config-migrate
• andrej/feature/runtime-get-unconfirmed-tx-rpc
• andrej/fix/oasis-export-quotes
• andrej/fix/observer-reg
• andrej/stable/23.0.x/backport-5534
• andrew7234/provefreshness-tx-body
• dependabot/cargo/crossbeam-channel-0.5.15
• dependabot/cargo/curve25519-dalek-4.1.3
• dependabot/cargo/openssl-0.10.72
• dependabot/cargo/rust-3b67d8197d
• dependabot/cargo/rust-4d370464b0
• dependabot/cargo/rust-5bf93e7619
• dependabot/cargo/rust-96b6ef7715
• dependabot/cargo/rust-a06f5bcda9
• dependabot/cargo/rust-bbc81ecac6
• dependabot/cargo/rust-ca2a6ef9f2
• dependabot/cargo/rust-db41af5e4f
• dependabot/cargo/tendermint-68f620519d
• dependabot/cargo/tests/runtimes/simple-rofl-tdx/crossbeam-channel-0.5.15
• dependabot/cargo/tests/runtimes/simple-rofl-tdx/tokio-1.43.1
• dependabot/cargo/tokio-1.44.2
• dependabot/cargo/x25519-dalek-2.0.1
• dependabot/go_modules/go/github.com/cosmos/gogoproto-1.7.0
• dependabot/go_modules/go/github.com/pion/interceptor-0.1.39
• dependabot/go_modules/go/github.com/prometheus/client_golang-1.19.0
• dependabot/go_modules/go/github.com/prometheus/procfs-0.13.0
• dependabot/go_modules/go/github.com/stretchr/testify-1.9.0
• dependabot/go_modules/go/golang.org/x/crypto-0.21.0
• dependabot/go_modules/go/golang.org/x/crypto-0.31.0
• dependabot/go_modules/go/golang.org/x/net-0.24.0
• dependabot/go_modules/go/golang.org/x/net-0.30.0
• dependabot/go_modules/go/golang.org/x/net-0.37.0
• dependabot/go_modules/go/google.golang.org/grpc-1.62.1
• dependabot/go_modules/go/google.golang.org/grpc-1.67.1
• dependabot/go_modules/go/google.golang.org/protobuf-1.35.1
• jberci/feat/tcb-reorder
• jberci/feature/go
• jberci/feature/observers
• jberci/fix/observers
• kostko/feature/attestation-retry
• kostko/feature/badger-4.3.0
• kostko/feature/bump-libp2p-0.32.2
• kostko/feature/bump-libp2p-0.36.3
• kostko/feature/bump-libp2p-0.36.5
• kostko/feature/bump-libp2p-0.37.2
• kostko/feature/bump-libp2p-0.39.0
• kostko/feature/bump-libp2p-0.42.0
• kostko/feature/bump-rust-2024-01-08
• kostko/feature/bump-rust-2025-02-22
• kostko/feature/bump-rust-toolchain-2024-03-04
• kostko/feature/bump-rust-toolchain-2024-07-09
• kostko/feature/bump-rust-toolchain-2024-07-09-docker
• kostko/feature/bump-tendermint-rs-0.35.0
• kostko/feature/bump-tendermint-rs-0.40.3
• kostko/feature/bundle-noelf
• kostko/feature/cometbft-0.37.11-oasis1
• kostko/feature/cometbft-0.37.5-oasis1
• kostko/feature/cometbft-0.37.6-oasis1
• kostko/feature/cometbft-0.37.7-oasis1
• kostko/feature/cometbft-0.37.9-oasis1
• kostko/feature/consensus-mgp
• kostko/feature/debug-mock-signers
• kostko/feature/debug-nonsgx-pcs
• kostko/feature/default-sync-trustperiod
• kostko/feature/detached-comps-autoenable
• kostko/feature/entity-id
• kostko/feature/fix-windows-build
• kostko/feature/goreleaser-2.9.0
• kostko/feature/gov-proposal-names
• kostko/feature/gov-vote-noentity
• kostko/feature/id-show-address
• kostko/feature/km-client-rtid
• kostko/feature/log-manager
• kostko/feature/mocksgx-futures
• kostko/feature/pathbadger
• kostko/feature/pcs-tcbevaldatanumbers
• kostko/feature/pcs-update-early
• kostko/feature/qemu-cid-pool
• kostko/feature/release-pre
• kostko/feature/rhp-timeout-metric
• kostko/feature/rofl
• kostko/feature/rofl-detached
• kostko/feature/rofl-provisioner-app
• kostko/feature/rt-attest-labels
• kostko/feature/rt-attestation-refactor
• kostko/feature/rt-client-storage
• kostko/feature/rt-consensus-roothash-state-accessor
• kostko/feature/rt-endorsedtee-verifyonly
• kostko/feature/rt-executor-iosingleroot
• kostko/feature/rt-load-balancing
• kostko/feature/rt-manifest-enclaveidentity
• kostko/feature/rt-moar-threads
• kostko/feature/rt-registry-improve
• kostko/feature/rt-tx-tree-direct-ndb
• kostko/feature/sgx-pcs-tcb-evalnums-cache
• kostko/feature/sgx-policy-yaml
• kostko/feature/storage-default-pathbadger
• kostko/feature/storage-perrt-fetchpool
• kostko/feature/supress-sanity-check-logs
• kostko/feature/tdx-basic-networking
• kostko/feature/tdx-drive-rw
• kostko/feature/tdx-more-resources
• kostko/feature/tdx-persistent-image
• kostko/feature/tdx-provisioner
• kostko/feature/tdx-qemu-resize
• kostko/feature/tdx-qemu-termination
• kostko/feature/tdx-quotes
• kostko/feature/tokeninfo-state
• kostko/feature/update-size-genesis-defaults
• kostko/feature/upgrade-gov-stakethreshold
• kostko/feature/upgrade-max-tx-size
• kostko/feature/upgrade-nohalt
• kostko/feature/vault
• kostko/fix/beacon-getepochblock
• kostko/fix/bundle-load-manifest-skip
• kostko/fix/cfg-migration-cdb
• kostko/fix/cfg-prune-errmsg
• kostko/fix/ci-benchmarks-rofl
• kostko/fix/ci-longtests-rofl
• kostko/fix/cometbft-0.37.15-oasis1
• kostko/fix/deranged-type-inference
• kostko/fix/e2e-byzantine-pcs
• kostko/fix/erpc-client-controller
• kostko/fix/km-epoch-desync
• kostko/fix/km-height-desync
• kostko/fix/light-client-bg-sync
• kostko/fix/light-client-block-peers
• kostko/fix/light-client-nil-header
• kostko/fix/localstorage-close
• kostko/fix/notifier-component-queues
• kostko/fix/observer-compute-role
• kostko/fix/observer-registration
• kostko/fix/pathbadger-early-seqno-commit
• kostko/fix/pricediscovery-fp-init
• kostko/fix/remove-km-rpc-retry-sticky
• kostko/fix/rhp-wait-ready
• kostko/fix/rofl-handler-notify-reg-nil
• kostko/fix/rofl-label-attestation-field
• kostko/fix/rofl-submittx-timeout
• kostko/fix/rt-abort-incorrect
• kostko/fix/rt-admission-policy
• kostko/fix/rt-attest-labels-map
• kostko/fix/rt-bundle
• kostko/fix/rt-deps
• kostko/fix/rt-exec-abort-ctx
• kostko/fix/rt-host-multi-early-unlock
• kostko/fix/rt-host-sgx-nilderef
• kostko/fix/rt-log-manager-api
• kostko/fix/rt-misc
• kostko/fix/rt-process-pdeathsig
• kostko/fix/rt-rak-freshness
• kostko/fix/rt-suspended-epochchg
• kostko/fix/rt-suspended-freshepoch
• kostko/fix/rt-txpool-seencache-remove
• kostko/fix/rt-verifier-sync
• kostko/fix/tdx-consensus-verifier-seal
• kostko/stable/23.0.x/backport-5462
• kostko/stable/23.0.x/backport-5466
• kostko/stable/23.0.x/backport-5473
• kostko/stable/23.0.x/backport-5481
• kostko/stable/23.0.x/backport-multi-3
• kostko/stable/23.0.x/backport-multi-4
• kostko/stable/24.1.x/backport-multi
• kostko/stable/24.3.x/backport-5909
• kostko/stable/24.3.x/backport-6032
• martin/bugfix/storage-sync
• martin/feature/batch-history-reindex-writes
• martin/feature/cached_bundles_clean-up
• martin/feature/cli/compact-db-instances
• martin/feature/optimize-state-sync
• martin/feature/p2p-advertize-only-servers
• martin/feature/parallelize-checkpoint-creation-v2
• martin/feature/show-checkpoints
• martin/feature/show-history-reindex-round
• martin/feature/speed-up-history-reindex
• martin/feature/split-storagesync-p2p
• martin/feature/split-storagesync-p2p-v2
• martin/fix/e2e/histor-reindex-race
• martin/internal-avoid-global-config
• martin/internal/improve-history-reindex-e2e
• martin/internal/remove-legacy-storagesync-p2p
• martin/internal/rework-roothash-block-history-interface
• martin/internal/state-sync-worker-only-syncing
• martin/internal/upgrade-net
• martin/trivial/fix-setBit-bug
• martin/trivial/fix/make-lint
• martin/trivial/mkvs/db/api/remove-subtree-interface
• martin/trivial/remove-unused-mkvs
• martin/trivial/simplify-mkvs-iterator
• martin/trivial/state-sync-refactor
• martin/trivial/state-sync-refactor-1
• martin/trivial/stop-reindexing-round-results
• master
• matevz/add-docs-license
• matevz/fix/enable-sgx-loader-test-runner
• matevz/fix/runtime-fixture-elf-sgx
• peternose/breaking/events-root
• peternose/breaking/km-policy
• peternose/bugfix/boxed-dispatcher
• peternose/bugfix/churp
• peternose/bugfix/close-idle-conns
• peternose/bugfix/delayed-discrepancy
• peternose/bugfix/eden-genesis-sigs
• peternose/bugfix/fetch-peers-when-needed
• peternose/bugfix/fix-abort-on-panic
• peternose/bugfix/improve-seed-node-performance
• peternose/bugfix/km-cleanup
• peternose/bugfix/km-race-conditions
• peternose/bugfix/nil-host-in-aggregate
• peternose/bugfix/no-km-policy-updates
• peternose/bugfix/no-sandbox
• peternose/bugfix/retry-scheduling
• peternose/bugfix/rpc-client-panic
• peternose/bugfix/runtime-abort
• peternose/bugfix/service-termination
• peternose/bugfix/ttl-overwrite
• peternose/bugfix/unordered-deployments
• peternose/cfg/light-client
• peternose/cfg/remove-may-generate
• peternose/feature/active-version
• peternose/feature/authorize-connect-calls
• peternose/feature/block-results
• peternose/feature/churp-apply
• peternose/feature/churp-confirm
• peternose/feature/churp-create
• peternose/feature/churp-dealer
• peternose/feature/churp-dealer-deal
• peternose/feature/churp-encode
• peternose/feature/churp-flag
• peternose/feature/churp-handler
• peternose/feature/churp-handoff
• peternose/feature/churp-kdc
• peternose/feature/churp-kdf
• peternose/feature/churp-key-shares
• peternose/feature/churp-metrics
• peternose/feature/churp-stake
• peternose/feature/churp-upgrade-handler
• peternose/feature/churp-worker
• peternose/feature/clean-bundles-startup
• peternose/feature/concurrent-peer-feedbacks
• peternose/feature/handler-242
• peternose/feature/handoffs
• peternose/feature/hot-loading
• peternose/feature/kdc
• peternose/feature/keyformat-uniqueness
• peternose/feature/lagrange
• peternose/feature/lagrange-coefficients
• peternose/feature/latest-height
• peternose/feature/multiple-txs
• peternose/feature/one-is-running
• peternose/feature/poly-ops
• peternose/feature/rofl-upgrade
• peternose/feature/rpc-client-concurency
• peternose/feature/same-block-validation-cleanup
• peternose/feature/stateless-client
• peternose/feature/test-enclave-init
• peternose/feature/upgrade-handler-241
• peternose/feature/verification-vector
• peternose/internal/bump-crypto-0.35.0
• peternose/internal/bump-ring-0.17.13
• peternose/internal/churp-constant-time
• peternose/internal/consensus-software-version
• peternose/internal/debug-assertions
• peternose/internal/deprecate-checksum
• peternose/internal/enclave-rpc-ctx
• peternose/internal/fetch-key-shares-concurrently
• peternose/internal/fix-go-mod-tidy
• peternose/internal/go-1.24.0
• peternose/internal/in-memory-storage
• peternose/internal/km_init_status_fix
• peternose/internal/release-mode
• peternose/internal/remove-feature-rpc-peer-id
• peternose/internal/remove-get-signer-nonce
• peternose/internal/rpc-cleanup
• peternose/internal/verify-bp-leading-coefficients
• peternose/stable/23.0.x/backport-5469
• peternose/stable/23.0.x/backport-5476
• peternose/stable/23.0.x/backport-5480
• peternose/stable/23.0.x/backport-5660
• peternose/stable/23.0.x/backport-multi
• peternose/test/km-sessions
• peternose/trivial/add-manager-ctx
• peternose/trivial/audit-ignore-RUSTSEC-2023-0071
• peternose/trivial/basic-pointer-ops
• peternose/trivial/bump-upgrade-test
• peternose/trivial/cargo-build-failure
• peternose/trivial/churp-fix-proactivization
• peternose/trivial/churp-rename-player
• peternose/trivial/churp-retain-shareholder
• peternose/trivial/churp-rpc-verify-committee
• peternose/trivial/clean-light-service
• peternose/trivial/custom-bundle-explosion
• peternose/trivial/decouple-apps-client-services
• peternose/trivial/decouple-p2p-consensus
• peternose/trivial/default-bundle-registry
• peternose/trivial/deprecate-get-signer-nonce
• peternose/trivial/disable-km-hotloading
• peternose/trivial/elf-metadata
• peternose/trivial/event-tx-hash
• peternose/trivial/ext-secrets
• peternose/trivial/fix-churp-test
• peternose/trivial/fix-comments
• peternose/trivial/fix-component-json
• peternose/trivial/fix-handoff-interval
• peternose/trivial/fix-invalid-round
• peternose/trivial/fix-km-client
• peternose/trivial/fix-km-rotation-failure-test
• peternose/trivial/fix-legacy-manifest-version
• peternose/trivial/fix-lint-eden
• peternose/trivial/fix-overflow
• peternose/trivial/fix-roothash-watch-blocks
• peternose/trivial/fix-set-coefficient
• peternose/trivial/fix-storage-early-sync-test
• peternose/trivial/fix-tests
• peternose/trivial/fix-threshold
• peternose/trivial/fixture-name
• peternose/trivial/improve-multi-host
• peternose/trivial/increase-parallelism-sgx-full
• peternose/trivial/km-decouple-secrets
• peternose/trivial/km-policy-storage
• peternose/trivial/lazy-light-client
• peternose/trivial/light-query-factory
• peternose/trivial/limit-poly-gen-loop
• peternose/trivial/minor-fixes
• peternose/trivial/mock-block-height
• peternose/trivial/move-prune-handler
• peternose/trivial/multi-versions
• peternose/trivial/multiple-providers
• peternose/trivial/nolint-directives
• peternose/trivial/organize-immutable-state
• peternose/trivial/persistent-lb-store
• peternose/trivial/refactor-cleanup
• peternose/trivial/refactor-code
• peternose/trivial/refactor-consensus-backend
• peternose/trivial/refactor-handoff
• peternose/trivial/refactor-km-acl
• peternose/trivial/refactor-light-client
• peternose/trivial/refactor-notifier
• peternose/trivial/refactor-service-descriptor
• peternose/trivial/remove-block-meta
• peternose/trivial/remove-churp-flag
• peternose/trivial/remove-genesis-provider
• peternose/trivial/remove-handler-factory
• peternose/trivial/remove-key-manager-master-secret-rotation-feature
• peternose/trivial/remove-same-block-consensus-validation-feature
• peternose/trivial/reorganize-secret-sharing
• peternose/trivial/reset-nonce
• peternose/trivial/revert-eden-fix
• peternose/trivial/rm-services-backend
• peternose/trivial/rpc-auth-tee
• peternose/trivial/service-client-ctx
• peternose/trivial/service-converter
• peternose/trivial/setable-beacon-backend
• peternose/trivial/simplify-backend
• peternose/trivial/simplify-create-provisioner
• peternose/trivial/simplify-roothash-watch-blocks
• peternose/trivial/simplify-service-client
• peternose/trivial/skip-prune-heights
• peternose/trivial/speed-up-upgrade-test
• peternose/trivial/ss-clean-deps
• peternose/trivial/ss-poly-core-ops
• peternose/trivial/tls-provider
• peternose/trivial/truncate-block-time
• peternose/trivial/undo-fix-gas-charge
• ptrus/feature/aesmd-docker-pcs
• ptrus/feature/aesmd-logs
• ptrus/feature/bump-go-1.22.2
• ptrus/feature/bump-quic-go
• ptrus/feature/bump-tarpaulin
• ptrus/feature/get-diff-metric
• ptrus/feature/go-1.22
• ptrus/feature/go-1.22.1
• ptrus/feature/grpc-loopback-insecure
• ptrus/feature/past-round-roots
• ptrus/feature/pcs-methods-public
• ptrus/feature/pebbledb
• ptrus/feature/proofs-explicit-internal
• ptrus/feature/rocksdb
• ptrus/feature/rs-round-roots
• ptrus/feature/rust-proof-builder
• ptrus/feature/tests-dcap
• ptrus/feature/tx-gas-used
• ptrus/fix/RUSTSEC-2024-0006
• ptrus/fix/archive-queries-runtime
• ptrus/fix/checkpoint-genesis-io
• ptrus/fix/disk-read-write-metrics
• ptrus/fix/parametrs-change-pp
• ptrus/fix/ppid-pcs-fixes
• ptrus/fix/reference-comparsion
• ptrus/fix/response-err-fix
• ptrus/fix/round-roots-error
• ptrus/fix/state-missing-version
• ptrus/fix/status-mode
• ptrus/stable/22.2.x/backport-5403
• ptrus/stable/22.2.x/backport-5622
• ptrus/stable/23.0.x/backport-disk-metrics
• ptrus/stable/23.0.x/backports
• ptrus/stable/23.0.x/basckport-5457
• ptrus/stable/23.0.x/basckports
• ptrus/stable/23.0.x/go-1.21.8
• ptrus/stable/24.3.x/bump-libp2p-0.37.2
• stable/22.2.x
• stable/23.0.x
• stable/24.0.x
• stable/24.2.x
• stable/24.3.x
• stable/25.0.x
• stable/25.3.x
• stable/25.4.x
• tjanez/readme-badges

Build # #5426

Build Type

Pull #5928

Committed by peternose

Commit Message

secret-sharing/src/poly: Restrict add/sub/mul assign std ops

The AddAssign, SubAssign, and MulAssign functions can now be used
only when the prime field supports zeroization. This ensures that
any leftover data from heap reallocation, when the right-hand-side
polynomial has more coefficients than the left-hand-side, is zeroized.

An alternative solution is to remove these functions, but this
could lead to performance drawbacks.

Pull Request Pull Request #5928: secret-sharing: Zeroize sensitive data

Run Details

182 of 229 new or added lines in 15 files covered. (79.48%)

4541 of 9539 relevant lines covered (47.6%)

1.04 hits per line