Skip to content

Releases: ztsalexey/wallet-privacy-testkit

Release list

Wallet Privacy Testkit 0.2.0

Wallet Privacy Testkit 0.2.0 Latest
Latest

Choose a tag to compare

View all tags
@ztsalexey ztsalexey released this 06 Sep 04:24
v0.2.0
3ccf62c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Wallet Privacy Testkit 0.2.0 packages the recovery verifier, continuous-traffic analysis, metadata forwarding, and a reproducible two-wallet privacy study.

python -m pip install wallet-privacy-testkit==0.2.0
  • Five recovery scenarios cover lost responses, a wallet crash, indexer restart, outage, and switching indexers, with actual balance and confirmation observations and a live negative control.
  • The expanded study freezes a calibration-only detector before repeated sessions, emulated network conditions, and evaluation with the independent zcash-devtool development wallet.
  • All 45 payments in 15 study sessions confirmed. The 9,207-byte frozen cutoff missed every independent-wallet send-active window: its largest client records were three bytes below the cutoff. This is a detector transfer failure, not a wallet privacy ranking.
  • Forty tests pass on Python 3.11–3.13 across Linux and macOS. Fresh OrbStack ARM64 and native Linux Docker runs validate recovery; the exact release wheel also passes all 40 tests and independently reproduces the study.

Complete study results and retained metadata · Methodology and limits · Docker/OrbStack lab

This remains a research preview. Scheduled sends align with scoring windows; sessions share wallet/node state; the independent development wallet has a different process lifecycle; and stream conditioning is not a real WAN. The results do not establish identity inference, public-transaction linkage, or real-world wallet privacy. The source archive includes the lab and evidence; the wheel installs the CLI and library.

The wheel and source archive were audited and tested before publication. SHA256SUMS matches the checksum file committed in this tag. PyPI publication uses Trusted Publishing with attestations. Licensed MIT OR Apache-2.0.

Post-publication verification completed: both PyPI artifact metadata hashes and downloaded bytes match the tagged checksums; both publication attestations name this repository, publish.yml, and the pypi environment. A clean, uncached PyPI installation passed all 40 tests and pip check, reproduced the complete study report, and verified its recovery observations. Successful publication workflow.

Assets 5
Loading

Wallet Privacy Testkit 0.1.0 — research preview

Wallet Privacy Testkit 0.1.0 — research preview Pre-release
Pre-release

Choose a tag to compare

View all tags
@ztsalexey ztsalexey released this 05 Sep 20:08
v0.1.0
9adf384

Wallet Privacy Testkit for Zcash 0.1.0

This research-preview release extracts the reusable adversarial layer from a complete Zingolib/Zebra/lightwalletd regtest experiment.

It includes:

  • a byte-preserving TLS forwarder that logs record lengths and timing without decryption;
  • a lightwalletd-compatible relay that can fail before submission, after one accepted submission, or after every submission response;
  • a size-only candidate matcher that divides credit across ties and reports a random reference;
  • 14 tests for parsing, byte preservation, invalid traces, CLI validation, failure boundaries, duplicate responses, input validation, and retry byte identity;
  • a sanitized Zingolib v5 case study and an explicit comparison with existing Zcash and general-purpose tools.

The release does not claim that encrypted size alone deanonymizes normal wallet traffic. It does not claim a current unfixed Zingolib bug. Its case study used a favorable observer model on an isolated NU6.2 regtest chain. Current development code contains related delivery recovery logic.

The next adoption milestone is one maintainer-acknowledged integration into an existing wallet or ecosystem test suite.

The installed wheel was also exercised against released Zingolib v5.0.0, lightwalletd, and Zebra. A newly constructed transaction was accepted before its response was lost, stayed byte-identical across four attempts, appeared in the real node mempool, and reached three confirmations in node and wallet state.

Version 0.1.0 is available on PyPI. The publishing workflow verified the GitHub release checksums and used Trusted Publishing with package attestations, without a stored PyPI credential. Both published artifact hashes match the reviewed release. A clean PyPI installation passed all 14 tests, CLI checks, and dependency consistency checks.

Install this release

Requires Python 3.11 or newer. Download the wheel from the assets below, then:

python3 -m venv .venv
source .venv/bin/activate
python -m pip install ./wallet_privacy_testkit-0.1.0-py3-none-any.whl
wpt --help

Version 0.1.0 is now available on PyPI. In an activated virtual environment, run python -m pip install wallet-privacy-testkit==0.1.0. Both artifact hashes match the reviewed GitHub release, publication attestations are available, and all 14 tests passed against a clean PyPI installation.

To verify downloads, place the wheel and source archive in a dist/ directory beside SHA256SUMS, then run shasum -a 256 -c SHA256SUMS (macOS) or sha256sum -c SHA256SUMS (Linux).

Validation: all six GitHub CI jobs passed for Python 3.11–3.13 on Linux and macOS; the installed wheel passed all 14 local tests. Both distributions passed package metadata and release-content audits.

Loading