Skip to content

v0.5.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Jul 02:44
v0.5.0
This tag was signed with the committer’s verified signature.
kwsantiago Kyle 🐆
GPG key ID: 23AE8A8EA7E24E38
Verified
Learn about vigilant mode.
8d7d3a4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Threshold-OPRF vault unlock with TPM attestation: a FROST group can gate a secret unlock behind a threshold-OPRF over secp256k1, with each participant's frost network serve enforcing a TPM2 remote-attestation policy (opt-in; oprf-provision / oprf-unlock CLI, --tpm-tcti) (#618–#643).
  • HD FROST wallets (BIP-32 / BIP-86): FROST groups derive child keys by composing a BIP-32 tweak with FROST signing and emit BIP-86 HD taproot descriptors, with the derivation path carried through the sign wire protocol (closes #487) (#668–#672).
  • Software distributed key generation: users without hardware can run DKG entirely in software (frost network dkg), with participants authenticated against the signed group roster to close a relay-index hijack, plus bounded decoy-flood handling on both software and hardware paths (#673, closes #674, closes #676).
  • Signing hardening: PSBT prevout amounts are validated against a chain view before signing (closes #502); structured-payload verification defeats cross-domain label spoofs (closes #529); NIP-98 approval prompts surface the URL/method being authorized (#665, #667, #677).
  • Cryptographic robustness: RNG health-check failures return a recoverable error instead of panicking in key/secret/vault-header generation; the post-refresh group-key check was corrected; TLS certificate pinning supports multiple pins per host for safe rotation; AEAD/deps advanced (RustCrypto 0.11, quinn-proto RUSTSEC-2026-0037) (#686, #688, #694, #696, #645, #641).
  • Multi-node availability: keep-state replication over a Nostr relay, with a shared cluster vault data key, enables high-availability multi-node operation (#698, #700).
  • Test coverage: extensive new mutation-killing and integration coverage across the DKG, PSBT, ECDH, and signing coordination paths (#681–#693).

Install

  • CLI / Desktop: download the asset for your platform from the Assets section below.
  • StartOS: bundled via keep-startos.
  • Build from source: see the README.

Verify

sha256sum -c SHA256SUMS

Full changelog

v0.4.9...v0.5.0

Assets 11
Loading