Skip to content

4.0.4 - Device RNG awarness checks and security hardening - #77

Merged
boldbitcoin merged 14 commits into
mainfrom
v4.0.4
Aug 6, 2026
Merged

4.0.4 - Device RNG awarness checks and security hardening#77
boldbitcoin merged 14 commits into
mainfrom
v4.0.4

Conversation

@boldbitcoin

@boldbitcoin boldbitcoin commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Summary This PR supersedes #76 and merges release branch v4.0.4 into main.

Key Changes

  • Hardens RNG/entropy handling in MPC-related flows and tooling.
  • Adds RNG device-awareness/validation plumbing in native modules and UI surfaces.
  • Improves chaincode/session randomness checks and error handling behavior.
  • Updates tests covering MPC attempt-id entropy behavior.
  • Includes release/version bump updates for 4.0.4.

Notes

bbtc added 11 commits August 4, 2026 20:18
Formal single-snapshot audit at commit ac9ceeb:
verdict ready-for-production (with conditions), risk scores A=1.5/10 B=2.5/10,
9 findings + 4 positive controls, S1-S7 scenario table, comparative analysis
vs hardware/single-sig/MPC wallets, open items (GG18 sessionNonce).
@boldbitcoin boldbitcoin changed the title 4.0.4 - RNG checks and security hardening 4.0.4 - Device RNG awarness checks and security hardening Aug 6, 2026

@kar1timmins kar1timmins left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@boldbitcoin
boldbitcoin merged commit 2fa77d8 into main Aug 6, 2026
0 of 2 checks passed
@boldbitcoin
boldbitcoin deleted the v4.0.4 branch August 6, 2026 17:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants