Skip to content

fix: fault injection hardening for signature verification#233

Open
BitHighlander wants to merge 3 commits into
developfrom
fix/fault-injection
Open

fix: fault injection hardening for signature verification#233
BitHighlander wants to merge 3 commits into
developfrom
fix/fault-injection

Conversation

@BitHighlander
Copy link
Copy Markdown
Owner

Summary

  • Replaces simple ECDSA verify calls with F3-hardened version
  • Double SHA-256 computation with constant-time memcmp
  • Infective aggregation: accumulate all 3 verify results, no early return
  • Sentinel counter verifies all 3 executions completed

Test plan

  • CI green (lint, static-analysis, build)
  • Verify all 3 firmware signatures checked on boot

deps/device-protocol → 8ef74da (feat(ripple): memo + THORChain routing)
deps/python-keepkey  → bf870e6 (7.14.2: XRP memo + EVM depositWithExpiry + msg-signing)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant