I’ve release v1.4.0 which solves all previous issues while providing solution to all critical issues and improvements:
CRITICAL FIXES and IMPROVEMENTS:
- context propagation ensure resources are used meaningfully and operation are stopped when no longer needed
- SecureMemory Enclaves added and fully implemented protecting the master seed in memory( currently they is still a small window at which the master seed is still visible that is during the enclave creation)
- critical bug where the hex is used instead of the actually seed for key generation
- bug related to validation, checks for hex lenght(64) not the actual bytes lenght(32)
- bug related to rate limiting where limit.limit is nil and panics
PREVIOUS STATED ISSUES(fixed with this release):
- DLEQ proof generation doesn’t copy before mutating(changes original values during generation of proof)
- Conversion to scalar could potentially result to overflow
- Wildcard used for revocation might trigger unexpected results in some cases
- Context not fully propagate which result in wasted result when operation is cancelled by client
- Key generation issue where carefully crafted credentials can pose as a legitimate one
Release v1.4.0 · rawbytedev/blindvault
Note: This version introduce huge changes which includes changes to key generation, this means that previous blindvault version credentials would not work with this new version