Skip to content

Wallet Privacy Testkit 0.1.0 — research preview

Pre-release
Pre-release

Choose a tag to compare

View all tags
@ztsalexey ztsalexey released this 05 Sep 20:08
· 9 commits to main since this release
v0.1.0
9adf384

Wallet Privacy Testkit for Zcash 0.1.0

This research-preview release extracts the reusable adversarial layer from a complete Zingolib/Zebra/lightwalletd regtest experiment.

It includes:

  • a byte-preserving TLS forwarder that logs record lengths and timing without decryption;
  • a lightwalletd-compatible relay that can fail before submission, after one accepted submission, or after every submission response;
  • a size-only candidate matcher that divides credit across ties and reports a random reference;
  • 14 tests for parsing, byte preservation, invalid traces, CLI validation, failure boundaries, duplicate responses, input validation, and retry byte identity;
  • a sanitized Zingolib v5 case study and an explicit comparison with existing Zcash and general-purpose tools.

The release does not claim that encrypted size alone deanonymizes normal wallet traffic. It does not claim a current unfixed Zingolib bug. Its case study used a favorable observer model on an isolated NU6.2 regtest chain. Current development code contains related delivery recovery logic.

The next adoption milestone is one maintainer-acknowledged integration into an existing wallet or ecosystem test suite.

The installed wheel was also exercised against released Zingolib v5.0.0, lightwalletd, and Zebra. A newly constructed transaction was accepted before its response was lost, stayed byte-identical across four attempts, appeared in the real node mempool, and reached three confirmations in node and wallet state.

Version 0.1.0 is available on PyPI. The publishing workflow verified the GitHub release checksums and used Trusted Publishing with package attestations, without a stored PyPI credential. Both published artifact hashes match the reviewed release. A clean PyPI installation passed all 14 tests, CLI checks, and dependency consistency checks.

Install this release

Requires Python 3.11 or newer. Download the wheel from the assets below, then:

python3 -m venv .venv
source .venv/bin/activate
python -m pip install ./wallet_privacy_testkit-0.1.0-py3-none-any.whl
wpt --help

Version 0.1.0 is now available on PyPI. In an activated virtual environment, run python -m pip install wallet-privacy-testkit==0.1.0. Both artifact hashes match the reviewed GitHub release, publication attestations are available, and all 14 tests passed against a clean PyPI installation.

To verify downloads, place the wheel and source archive in a dist/ directory beside SHA256SUMS, then run shasum -a 256 -c SHA256SUMS (macOS) or sha256sum -c SHA256SUMS (Linux).

Validation: all six GitHub CI jobs passed for Python 3.11–3.13 on Linux and macOS; the installed wheel passed all 14 local tests. Both distributions passed package metadata and release-content audits.

Assets 5
Loading