security: a transfer's memo, ticker and nonce are in no public object (pre-audit item 4) - #1102

Merged

cryptskii merged 15 commits into

mainfrom

security/minimum-disclosure

Oct 2, 2026

Commits on Oct 2, 2026

fix(crypto): SPHINCS+ takes the FIPS 205 structure, BLAKE3 kept (construction v2)
cryptskii
committed
3eaf0d8
test(crypto): each SPHINCS+ role hashes under its own address type
cryptskii
committed
36a9c2d
refactor(crypto): the host signs with the shared SPHINCS+ crate; algorithm id 0x0002
cryptskii
committed
22af3d9
test(core): fixtures name the declared signature algorithm, not a literal 1
cryptskii
committed
22d0945
test(core): the vectors construction version 2 moves
cryptskii
committed
9ab1d7d
docs(security): SPHINCS+ construction version 2 recorded; §6.70
cryptskii
committed
015a5ed
Merge main (#1099) into security/sphincs-structure-repair
claude
committed
4737a9e
WIP: item 4 minimum disclosure — transfer terms by commitment (not pushed)
claude
committed
544f6ba
WIP: item 4 test fixes (terms on stored BLE sessions; recovery gate by commit)
claude
committed
26922f7
Merge remote-tracking branch 'origin/main' into security/minimum-disclosure
claude
committed
d435995
item 4: cargo fmt
claude
committed
73da2a4
security: a transfer's memo, ticker and nonce are in no public object (pre-audit item 4)
claude
committed
de67d9d
Repin the 619 intent pins item 4 moved (code only)
claude
committed
b211a4c
item 4: no hard-coded or redundant nonce reaches TransferTerms::new
claude
committed
e60df85
Repin the 167 intent pins the nonce fix moved (code only)
claude
committed
083d30d