We’ve simply launched FROST v3.0.0. You will discover frost-core and the ciphersuite crates accessible on crates.io. This secure launch follows v3.0.0-rc.0, which launched the majority of the modifications on this main model. In case you are upgrading from v2.x, please learn the RC launch put up for the complete image—the modifications described listed below are what’s new because the launch candidate. Full launch notes are on GitHub, and the up to date documentation guide is at frost.zfnd.org.
What Modified Since v3.0.0-rc.0
The modifications between the discharge candidate and the ultimate launch are modest however significant. On the safety entrance, SigningKey is not Copy and now implements ZeroizeOnDrop, which means signing keys are routinely wiped from reminiscence after they exit of scope. dkg::round2::Package deal has acquired the identical remedy. These modifications cut back the window throughout which delicate key materials exists in reminiscence and produce FROST consistent with safety greatest practices for cryptographic implementations.
There may be additionally a bug repair: verify_signature_share() now appropriately calls the Ciphersuite::pre_commitment_aggregate() hook, which was added within the RC to assist customized pre-aggregation logic however was inadvertently omitted from the per-share verification path.
Lastly, PublicKeyPackage::new() now takes min_signers as an Possibility. Passing None is helpful when the edge isn’t recognized at development time—for instance, when deserializing packages from older variations.
Contributors
Thanks to everybody who contributed to this launch: @conradoplg, @natalieesk and @BeeFlea.
