Skip to content

fix: tagging secrets not being scoped by sender#24772

Merged
nventuro merged 2 commits into
merge-train/fairies-v5from
nico/f-830-aztec-packages-out-of-scope-senders-app-tagging-secret
Jul 20, 2026
Merged

fix: tagging secrets not being scoped by sender#24772
nventuro merged 2 commits into
merge-train/fairies-v5from
nico/f-830-aztec-packages-out-of-scope-senders-app-tagging-secret

Conversation

@nventuro

Copy link
Copy Markdown
Contributor

This fixes a scoping bug where an account's ivsk would be used to produce an ECDH shared secret even if that account was not in scope. The base wallet class was adjusted to put these in scope when an explicit sender is selected for tagged messages.

@nventuro
nventuro requested a review from nchamo July 17, 2026 18:11
Comment thread yarn-project/wallet-sdk/src/base-wallet/base_wallet.ts Outdated
@nventuro
nventuro enabled auto-merge (squash) July 20, 2026 18:13
@nventuro
nventuro merged commit 4994006 into merge-train/fairies-v5 Jul 20, 2026
12 checks passed
@nventuro
nventuro deleted the nico/f-830-aztec-packages-out-of-scope-senders-app-tagging-secret branch July 20, 2026 18:41
PhilWindle pushed a commit that referenced this pull request Jul 21, 2026
This fixes a scoping bug where an account's ivsk would be used to
produce an ECDH shared secret even if that account was not in scope. The
base wallet class was adjusted to put these in scope when an explicit
sender is selected for tagged messages.

(cherry picked from commit 4994006)
PhilWindle pushed a commit that referenced this pull request Jul 21, 2026
This fixes a scoping bug where an account's ivsk would be used to
produce an ECDH shared secret even if that account was not in scope. The
base wallet class was adjusted to put these in scope when an explicit
sender is selected for tagged messages.

(cherry picked from commit 4994006)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants