jwinterm d9edee0743 Phase 1: view-only rangeproof rewind (recognize outputs from rewind_hash) ...

Replace the rewind_output stub with a real, view-only implementation:
- src/rewind.rs: derive the v3 rewind nonce (keyed BLAKE2b over the
  commitment) and rewind the Bulletproof via upstream grin_secp256k1zkp,
  then parse the 20-byte proof message into the authoritative key_id +
  value. Faithful minimal port of grin-ext's cross-validated crypto; no
  private key is ever involved. v3-only (legacy needs the master secret,
  same limit as grin-wallet's view-only scan); paths are advisory.
- src/grin.rs: wire rewind_output with hostile-input-safe hex decoding.
- Cargo.toml: depend on upstream grin_secp256k1zkp + blake2 (not the
  vendored fork — the server target needs no wasm patch).
- Golden-vector tests generated by grin's OWN reference ProofBuilder
  (depth-3 Grim + depth-4 Smirk [0,0,n,0]); proves byte-compatibility
  with the published secp crate. Passed an adversarial money-safety
  review (no false-positive/negative, panic-safe).

2026-07-09 12:25:16 -04:00

..

api.rs

Prepare for public release: generic wording, MIT LICENSE

2026-07-09 07:11:10 -04:00

config.rs

scaffold: grin-lws — Grin light-wallet-server (view-key scan + DB store)

2026-07-09 04:47:13 -04:00

db.rs

scaffold: grin-lws — Grin light-wallet-server (view-key scan + DB store)

2026-07-09 04:47:13 -04:00

error.rs

Prepare for public release: generic wording, MIT LICENSE

2026-07-09 07:11:10 -04:00

grin.rs

Phase 1: view-only rangeproof rewind (recognize outputs from rewind_hash)

2026-07-09 12:25:16 -04:00

main.rs

Phase 1: view-only rangeproof rewind (recognize outputs from rewind_hash)

2026-07-09 12:25:16 -04:00

rewind.rs

Phase 1: view-only rangeproof rewind (recognize outputs from rewind_hash)

2026-07-09 12:25:16 -04:00

scanner.rs

scaffold: grin-lws — Grin light-wallet-server (view-key scan + DB store)

2026-07-09 04:47:13 -04:00

secret.rs

Prepare for public release: generic wording, MIT LICENSE

2026-07-09 07:11:10 -04:00