Skip to content

Protect validated transaction inputs with threshold encryption #2393

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
huitseeker merged 26 commits into from
Jul 29, 2026
Merged

Protect validated transaction inputs with threshold encryption #2393

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
26 commits
Select commit Hold shift + click to select a range
e6c4b67
Add Golden storage key adapter
huitseeker Jul 27, 2026
5402581
Expose encoded Golden key parts
huitseeker Jul 27, 2026
950e7d7
Add private record envelope
huitseeker Jul 27, 2026
32e1ea8
Validate stored private record fields
huitseeker Jul 27, 2026
30c4585
Persist encrypted private records
huitseeker Jul 27, 2026
52a745d
Handle private records on block replacement
huitseeker Jul 27, 2026
4704de6
Add threshold private record decryption
huitseeker Jul 27, 2026
95d454a
Store protected validator inputs
huitseeker Jul 27, 2026
4c9040c
Backfill protected validator inputs
huitseeker Jul 27, 2026
2cb654d
Test protected input backfill
huitseeker Jul 27, 2026
28d913d
Test stored threshold record opening
huitseeker Jul 27, 2026
d367a01
feat(validator): issue private record shares locally
huitseeker Jul 28, 2026
a8149d2
docs(changelog): note threshold private records
huitseeker Jul 28, 2026
3775b0d
build: use published Golden crates
huitseeker Jul 28, 2026
15663a6
feat(validator): require threshold private storage
huitseeker Jul 28, 2026
7447833
ci: configure Golden storage key fixtures
huitseeker Jul 28, 2026
6139cd5
ci: format Golden fixture documentation
huitseeker Jul 28, 2026
f7c07ed
fix(validator): adapt Phase 2 to multi-validator node
huitseeker Jul 29, 2026
808396c
refactor(validator): keep Golden secret out of RPC service
huitseeker Jul 29, 2026
6c52c30
refactor(validator): simplify private record storage
huitseeker Jul 29, 2026
c025753
fix(validator): require decryption share output
huitseeker Jul 29, 2026
d75fdc7
fix(compose): use insecure Golden storage fixture
huitseeker Jul 29, 2026
0e39087
docs: keep changelog entries in pull request metadata
huitseeker Jul 29, 2026
63d0115
feat(validator): export threshold recovery targets
huitseeker Jul 29, 2026
6219bdd
fix(validator): use canonical trace fields
huitseeker Jul 29, 2026
ad01157
refactor(validator): simplify private record operator surface
huitseeker Jul 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -286,6 +286,10 @@ jobs:
USE_REMOTE_PROVER: "0"
WAIT_BLOCKS: "30"
RUN_DIR: ${{ runner.temp }}/bench-local-run
MIDEN_VALIDATOR_STORAGE_KEY_EPOCH: "0909090909090909090909090909090909090909090909090909090909090909"
MIDEN_VALIDATOR_STORAGE_KEY_SETUP_CONTEXT: ${{ github.workspace }}/scripts/testdata/insecure-golden-storage-key/setup-context.wire
MIDEN_VALIDATOR_STORAGE_KEY_PUBLIC_SET: ${{ github.workspace }}/scripts/testdata/insecure-golden-storage-key/public-key-set.wire
MIDEN_VALIDATOR_STORAGE_KEY_SECRET_SHARE: ${{ github.workspace }}/scripts/testdata/insecure-golden-storage-key/secret-share.wire
run: |
export PATH="$PWD/target/release:$PATH"
./scripts/bench-local.sh
Expand Down
Loading
Loading