Files

T

Laan Tungir 5d54ad8c68 Implement missing functionality and add versioning system

Fix 7 incomplete implementations found in the audit (plans/incomplete_implementations_audit.md):

- NIP-06 (CRITICAL): Full BIP-32 HD path derivation (m/44'/1237'/0'/0/0)
  with SLIP-0010 ed25519 variant. Restores C/Rust key compatibility.
  13 tests with official BIP-32 test vectors.
- NIP-03 (HIGH): Real OpenTimestamps verification - OTS binary parser,
  Merkle proof execution, Bitcoin attestation comparison. 10 tests.
- Validator (HIGH): All 8 AuthRuleType variants enforced (was 2/8).
  Added HashBlacklist, MimeWhitelist, MimeBlacklist, SizeLimit,
  RateLimit, Custom. 12 new tests.
- Nsigner: 3 new transports (Serial, FD-pair, Qubes qrexec) + algorithm
  verbs (ed25519, x25519, ML-DSA-65, ML-KEM-768, OTP). Fixed derive_hmac
  algorithm config and role_path propagation. 23 tests.
- Cashu: 5 new mint operations (melt quote, mint tokens, swap, check
  spent, restore keysets) with typed structs. 11 tests.
- Blossom: head_blob, file-path upload/download, BlossomSigner trait
  for remote signers. 5 tests.

Add versioning system: VERSION file, CHANGELOG.md, increment_and_push.sh
script for semantic version bumps with git tagging and pushing.

Total tests: 202 (was 143). Workspace version baseline set to 0.0.0.

2026-08-17 09:13:27 -04:00

3.2 KiB

Raw Blame History

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

NIP-06: Full BIP-32 HD path derivation (m/44'/1237'/0'/0/0) with bip32_master_key, bip32_derive_child (hardened + non-hardened), bip32_derive_path, parse_bip44_path. Restores C/Rust key compatibility.
NIP-06: SLIP-0010 ed25519/x25519 derivation (slip10_master_key, slip10_derive_child, slip10_derive_path, keypair_from_seed_ed25519).
NIP-06: 13 test vectors including official BIP-32 vectors and a pinned mnemonic vector cross-verified against a Python reference.
NIP-03: Real OpenTimestamps verification — OTS binary file parser, Merkle proof execution (append/prepend/SHA-256/RIPEMD-160/SHA-1/double SHA-256), Bitcoin block header attestation comparison. Replaces the Ok(true) placeholder stub.
NIP-03: 10 tests including tampered-root and malformed-file cases.
Validator: Enforce all 8 AuthRuleType variants — HashBlacklist, MimeWhitelist (OR-combined), MimeBlacklist, SizeLimit, RateLimit (stateful per-IP windowed counter), Custom. The _ => {} fallthrough that silently allowed denied requests is removed.
Validator: 12 new tests covering every rule type.
Nsigner: Three new transports — SerialTransport (CDC-ACM via serialport), FdTransport (Unix FD-pair via FromRawFd), QrexecTransport (Qubes qrexec via qrexec-client-vm).
Nsigner: Algorithm-based verbs — ed25519 sign/get_public_key, x25519 get_public_key/ecdh, ML-DSA-65 sign/verify, ML-KEM-768 encapsulate/decapsulate, OTP encrypt/decrypt.
Nsigner: derive_hmac now uses a configurable algorithm (default secp256k1); role_path is now sent in all RPC calls when set.
Nsigner: MockTransport test helper and 16 new tests.
Cashu: Five new mint operations — request_melt_quote, check_melt_quote, mint_tokens, swap_tokens, check_spent, restore_keysets. get_mint_keys now returns typed CashuKeysResponse.
Cashu: Typed structs CashuKeysetKeys, BlindedMessage, BlindSignature, MintResponse, Proof, CheckStateResponse, RestoreResponse. 11 tests.
Blossom: head_blob (HEAD request with header metadata extraction), upload_file (from file path), download_to_file (to file path).
Blossom: BlossomSigner trait for remote-signer support with create_auth_header_with_signer, upload_with_signer, delete_with_signer. 5 tests.
Versioning: VERSION file, CHANGELOG.md, increment_and_push.sh script for semantic version bumps with git tagging and pushing.

Fixed

NIP-06 (CRITICAL): keypair_from_seed no longer skips BIP-32 path derivation. The same mnemonic + path now produces identical keypairs in C and Rust, restoring identity portability.
NIP-03 (HIGH): verify_ots no longer returns Ok(true) for any non-empty input. It now performs real Merkle proof verification.
Validator (HIGH): 6 of 8 auth rule types are no longer silently allowed via a _ => {} fallthrough. Configured deny rules are now enforced.

3.2 KiB Raw Blame History

Changelog

[Unreleased]

Added

Fixed

3.2 KiB

Raw Blame History