pkc%feat: add fixed-length buffers for secret-holding types, enforce `subtle` and `zeroize` use with CodeQL, implement ungated byte bags for BLS and ECDSA types, add `enum_map` helper macro - #22

Merged

kwvg merged 19 commits into

dashpay:developfrom

kwvg:pkc_p0

Aug 3, 2026

Commits on Aug 3, 2026

sdk%chore: update rulers in vscode to match CodeQL, Rust linting
kwvg
committed
4a0c05f
sdk%lint: enable stricter rules for `script`, fix violations
kwvg
committed
00cd249
sdk%lint: enable stricter rules for `pkc`, fix violations
kwvg
committed
fc31bd0
sdk%fix: add redacted `Debug` impls for `Fr` and `VecEncoder`
kwvg
committed
193e7a2
types%feat(codec): enrich `DecodeError` with variant, error propagation
kwvg
committed
9cca2af
types%feat: add enum helper macro, propagate to `primitives`, `script`
kwvg
committed
ac24140
pkc%refac: restructure `k256` module into `ecdsa` with operational types
kwvg
committed
877f105
pkc%refac(ecdsa): expose `EcdsaError` without the feature gate
kwvg
committed
610c541
pkc%refac(tests): inline ecdsa discrete tests into source modules
kwvg
committed
daef291
types%refac(codec): fold the byte-newtype trait set into `derive_bytes!`
kwvg
committed
9d19611
types%feat(codec): add fixed-width `Arr{En,De}coder` for sensitive bufs
kwvg
committed
76b5572
sdk%lint(codeql): resolve trait impls through the type layer
kwvg
committed
0a19896
sdk%lint(codeql): add width, derive, zero and compare rules for secrets
kwvg
committed
4e2c3ca
pkc%feat(ecdsa): implement `EcdsaSkBytes` as `zeroize`d secret byte bag
kwvg
committed
600372c
pkc%feat(bls): define `BlsSchemeId` scheme discriminator trait
kwvg
committed
ab31069
pkc%feat(bls): define supported signature schemes w/ `BlsSigId`
kwvg
committed
4fe9fe3
pkc%feat(bls): implement `BlsPkBytes` as public key byte bag
kwvg
committed
b5892ef
pkc%feat(bls): implement `BlsSkBytes` as `zeroize`d secret byte bag
kwvg
committed
8dc0273
pkc%feat(bls): implement `BlsSigBytes` as signature byte bag
kwvg
committed
7ea891c

Navigation Menu

Uh oh!

pkc%feat: add fixed-length buffers for secret-holding types, enforce `subtle` and `zeroize` use with CodeQL, implement ungated byte bags for BLS and ECDSA types, add `enum_map` helper macro - #22

pkc%feat: add fixed-length buffers for secret-holding types, enforce `subtle` and `zeroize` use with CodeQL, implement ungated byte bags for BLS and ECDSA types, add `enum_map` helper macro#22
kwvg merged 19 commits into
dashpay:developfrom
kwvg:pkc_p0

Commits on Aug 3, 2026

sdk%chore: update rulers in vscode to match CodeQL, Rust linting

sdk%lint: enable stricter rules for `script`, fix violations

sdk%lint: enable stricter rules for `pkc`, fix violations

sdk%fix: add redacted `Debug` impls for `Fr` and `VecEncoder`

types%feat(codec): enrich `DecodeError` with variant, error propagation

types%feat: add enum helper macro, propagate to `primitives`, `script`

pkc%refac: restructure `k256` module into `ecdsa` with operational types

pkc%refac(ecdsa): expose `EcdsaError` without the feature gate

pkc%refac(tests): inline ecdsa discrete tests into source modules

types%refac(codec): fold the byte-newtype trait set into `derive_bytes!`

types%feat(codec): add fixed-width `Arr{En,De}coder` for sensitive bufs

sdk%lint(codeql): resolve trait impls through the type layer

sdk%lint(codeql): add width, derive, zero and compare rules for secrets

pkc%feat(ecdsa): implement `EcdsaSkBytes` as `zeroize`d secret byte bag

pkc%feat(bls): define `BlsSchemeId` scheme discriminator trait

pkc%feat(bls): define supported signature schemes w/ `BlsSigId`

pkc%feat(bls): implement `BlsPkBytes` as public key byte bag

pkc%feat(bls): implement `BlsSkBytes` as `zeroize`d secret byte bag

pkc%feat(bls): implement `BlsSigBytes` as signature byte bag