fix: F-2026-18199 | [Dual Defense] TSS Setup Message Signs an Unverified Hash (Payload vs SigningHash Split) - #309

Merged

Aman035 merged 6 commits into

audit-fixesfrom

Aug 19, 2026

Commits on Aug 18, 2026

fix: bind verified signing hash to the DKLS setup message before ACK (F-2026-18199)
Aman035
committed
e994237

Commits on Aug 19, 2026

fix: bind setup participants for keygen, keyrefresh and quorumchange too (F-2026-18199)
Aman035
committed
cc7d305
refactor: consolidate setup binding into one entry point and one helper file (F-2026-18199)
Aman035
committed
d4e86bd
test: move setup decoder tests to utils_test and cover both symmetrically (F-2026-18199)
Aman035
committed
79c7dec
test: end-to-end proof that a mismatched payload hash refuses session and emits no shares (F-2026-18199)
Aman035
committed
c438e6d
fix: bind setup threshold by parsing the setup TLV, closing the downgrade gap (F-2026-18199)
Aman035
committed
ceded63