We now have simply launched FROST v3.0.0. You’ll find frost-core and the ciphersuite crates accessible on crates.io. This secure launch follows v3.0.0-rc.0, which launched the majority of the modifications on this main model. If you’re upgrading from v2.x, please learn the RC launch put up for the total image—the modifications described listed below are what’s new because the launch candidate. Full launch notes are on GitHub, and the up to date documentation guide is at frost.zfnd.org.
What Modified Since v3.0.0-rc.0
The modifications between the discharge candidate and the ultimate launch are modest however significant. On the safety entrance, SigningKey is not Copy and now implements ZeroizeOnDrop, which means signing keys are robotically wiped from reminiscence after they exit of scope. dkg::round2::Package deal has obtained the identical therapy. These modifications scale back the window throughout which delicate key materials exists in reminiscence and convey FROST consistent with safety greatest practices for cryptographic implementations.
There may be additionally a bug repair: verify_signature_share() now accurately calls the Ciphersuite::pre_commitment_aggregate() hook, which was added within the RC to assist customized pre-aggregation logic however was inadvertently omitted from the per-share verification path.
Lastly, PublicKeyPackage::new() now takes min_signers as an Choice. Passing None is helpful when the edge shouldn’t be recognized at building time—for instance, when deserializing packages from older variations.
Contributors
Thanks to everybody who contributed to this launch: @conradoplg, @natalieesk and @BeeFlea.