Skip to content

docs: clarify ECDSA-2P scalar-detached blob is not public-only - #128

Merged
hsiuhsiu merged 1 commit into
masterfrom
docs/clarify-scalar-detached-blob-sensitivity
Aug 4, 2026
Merged

docs: clarify ECDSA-2P scalar-detached blob is not public-only#128
hsiuhsiu merged 1 commit into
masterfrom
docs/clarify-scalar-detached-blob-sensitivity

Conversation

@hsiuhsiu

@hsiuhsiu hsiuhsiu commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Rename the misleading public_key_blob parameter/variable to scalar_detached_key_blob across the ECDSA-2PC C++ and C APIs, and document that detach_private_scalar does not produce public-only material: for P1 the detached blob still retains the Paillier private key and c_key, whose decryption recovers the private scalar. Callers must protect it exactly like the full P1 key blob.

Update README.md and SECURE_USAGE.md with the corresponding guidance and adjust unit tests to the new naming.

…al- #462

Rename the misleading `public_key_blob` parameter/variable to `scalar_detached_key_blob` across the ECDSA-2PC C++ and C APIs, and document that `detach_private_scalar` does not produce public-only material: for P1 the detached blob still retains the Paillier private key and `c_key`, whose decryption recovers the private scalar. Callers must protect it exactly like the full P1 key blob.

Update README.md and SECURE_USAGE.md with the corresponding guidance and adjust unit tests to the new naming.
@cb-heimdall

cb-heimdall commented Aug 4, 2026

Copy link
Copy Markdown

✅ Heimdall Review Status

Requirement Status More Info
Reviews 2/2
Denominator calculation
Show calculation
1 if user is bot 0
1 if user is external 0
2 if repo is sensitive 0
From .codeflow.yml 2
Additional review requirements
Show calculation
Max 0
0
From CODEOWNERS 1
Global minimum 0
Max 2
2
1 if commit is unverified 0
Sum 2
CODEOWNERS ✅ None for this change

@hsiuhsiu hsiuhsiu changed the title docs: clarify ECDSA-2P scalar-detached blob is not public-only materi… docs: clarify ECDSA-2P scalar-detached blob is not public-only Aug 4, 2026
@hsiuhsiu
hsiuhsiu marked this pull request as ready for review August 4, 2026 15:56

@valery-osheter-cb valery-osheter-cb left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@hsiuhsiu
hsiuhsiu merged commit 56ff324 into master Aug 4, 2026
9 checks passed
@hsiuhsiu
hsiuhsiu deleted the docs/clarify-scalar-detached-blob-sensitivity branch August 4, 2026 17:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

4 participants