Skip to content

Conversation

@jclapis
Copy link
Collaborator

@jclapis jclapis commented Jul 28, 2025

As requested in #329, this changes the TreeHash structs (and accompanying fields) to use B256 instead of the raw byte array type. It also does the same for domains, changing [u8; 4] to B32.

As a side-effect this cleans up some things that clippy suggested, like removing unnecessary .into() and extraneous reference operators and such.

@jclapis jclapis requested a review from ltitanb July 28, 2025 19:39
@jclapis jclapis self-assigned this Jul 28, 2025
@jclapis jclapis added the core Core part of the repo (signer, modules interface) label Jul 28, 2025
@jclapis jclapis mentioned this pull request Jul 30, 2025
@jclapis jclapis merged commit ce29c3a into prevent-cross-module-sigs Jul 30, 2025
1 check passed
@jclapis jclapis deleted the unify-b256 branch July 30, 2025 19:13
sambacha added a commit to manifoldfinance/commit-boost-client that referenced this pull request Aug 15, 2025
* bump version

* Successful cross-compilation, but runtime has memory allocation issues

* Working with OpenSSL static-linked

* Got dynamic linking working, added a feature flag to toggle dynamic vs. static

* Fixed the vendored build arg

* Reintroduced the cargo chef setup

* Ported the cross-compilation stuff into PBS

* Split the dockerfiles into separate builder / image definitions

* Added a build guide

* Refactored the Github release action to use the Docker builder

* Fixed the Docker image binary filenames

* Cleaned up the Darwin artifact step

* Made the CI workflow and justfile use the same toolchain as the source

* Revert "Made the CI workflow and justfile use the same toolchain as the source"

This reverts commit 58c6117.

* Testing removal of OpenSSL vendored option

* Updating just in the CI workflow

* Refactored the signer to support host and port config settings

* Updated docs

* Fixing Clippy in CI workflow

* Removed obviated CI setup

* Minor dedup of RwLock guard acquisition

* Added rate limiting for signer clients with repeated JWT auth failures

* Added Signer config validation

* Started unit test setup for the Signer

* Finished a basic signer module unit test

* Added a JWT failure unit test

* Added a rate limit test and cleaned up a bit

* Added unique ports to unit tests for parallel execution

* Cleaned up the build Dockerfile and removed an extra dependency layer

* Ported the build script over to the justfile

* Added a justfile recipe for installing protoc

* Update crates/cli/src/docker_init.rs

Co-authored-by: ltitanb <[email protected]>

* Added example signer config params

* Cleaned up signer config loading from feedback

* Added JWT auth fields to the example config

* Started building the JWT config file

* Added tests

* Started migration from JWTS_ENV to the config file

* Signing requests now uses the module's signing ID

* Finished added signing ID support and a quick test

* Fixed some example config parameters

* Added a test to ensure modules can't create the same sigs

* Made the jwt_config_file optional

* Started working on docs

* Redid implementation with the original JWTS env var

* Started the signer doc

* Overhauled the signing_id setup to be directly in the signed struct

* Made proposer commitments nested Merkle trees to allow Dirk support

* Added the signer request guide

* Added quotes to some HTML

* Added some simple JWT secret info

* Adding a closing tag

* Added prop commit signature verification helpers for modules to use

* Fixed some params in da_commit

* Cleaned load_module_signing_configs a bit

* Fixed some docs language

* Refactored into compute_prop_commit_signing_root

* CBST2-04: Update JWT secrets on reload and revoke module endpoint (Commit-Boost#295)

* Signing IDs are no longer optional in the config

* Refactored some of the signer consts for consistency

* Updated the Signer API docs

* Merge sigp-audit-fixes (Commit-Boost#348)

Co-authored-by: Manuel Iñaki Bilbao <[email protected]>
Co-authored-by: ltitanb <[email protected]>

* Move from [u8; 32] to B256 everywhere (Commit-Boost#347)

* Cleaned up some hashmap usage

* Removed compute_tree_hash_root()

* Some minor cleanup

* Fixed some docs

---------

Co-authored-by: eltitanb <[email protected]>
Co-authored-by: Joe Clapis <[email protected]>
Co-authored-by: ltitanb <[email protected]>
Co-authored-by: Manuel Iñaki Bilbao <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

core Core part of the repo (signer, modules interface)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants