Security context

Highlights

Cryptographic Issues: 1 prior fix. Scrutinize any change in this area.

bls-signatures: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

Cryptographic Issues: A rogue-key attack vector existed in BLS signatures where a Proof of Possession (PoP) verification check failed to properly bind the signature to the public key, compromising key validation.

Signature Malleability: Discrepancies between individual and batch signature verification allowed malleable signatures and weak keys to bypass checks, requiring explicit pre-checks prior to calling batch verification.

Signature Mismatch: Invalid configuration mask bits processed during deserialization caused silent round-trip serialization mismatches, inadvertently invalidating transaction signatures.