jwinterm 9d040b40f1 Harden the contract signing-context forget invariant ...

Remove the broken, commented-out SEC_KEY_FAKE key-scrubbing: a zero secret
key is rejected by secp, and the scrubbing was redundant. The signing
context holding sec_key/sec_nonce is forgotten by deleting the private
context in save_step once signed (retained only at step2 for safe cancel),
and contexts are keyed by slate.id so a nonce is never reused across
messages.

Make that guarantee enforced rather than assumed: after a signed,
non-step2 save_step, verify the private context was actually removed and
error otherwise. Document the invariant at the sign site.

2026-06-03 08:03:35 -04:00

..

src

Harden the contract signing-context forget invariant

2026-06-03 08:03:35 -04:00

tests

Remove grin lib re-exports from util crate (#661)

2022-08-08 12:08:25 +01:00

Cargo.toml

Merge branch 'master' into contracts

2026-06-02 18:26:08 -04:00