Skip to content

Conversation

@Woft257
Copy link

@Woft257 Woft257 commented Jan 22, 2026

Changes

  • Added security.ZeroBytes(...) for marshaled key/share buffers (keyData, keyBytes) in signing/keygen/reshare flows.
  • Added security.ZeroEcdsaKeygenLocalPartySaveData(...) / security.ZeroEddsaKeygenLocalPartySaveData(...) to wipe key share fields after use.
  • Added unit tests for zeroization helpers in pkg/security.

Files touched

  • pkg/mpc/ecdsa_signing_session.go
  • pkg/mpc/eddsa_signing_session.go
  • pkg/mpc/ecdsa_keygen_session.go
  • pkg/mpc/eddsa_keygen_session.go
  • pkg/mpc/ecdsa_resharing_session.go
  • pkg/mpc/eddsa_resharing_session.go
  • pkg/security/zeroize.go
  • pkg/security/zeroize_test.go

Notes

This improves deterministic cleanup; Go GC is treated as fallback.

@anhthii
Copy link
Contributor

anhthii commented Jan 24, 2026

@vietddude please help review

@anhthii anhthii requested a review from vietddude January 24, 2026 01:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants