Skip to content

feat(aztec-nr): encrypt handshake log for indistinguishability#23638

Merged
nchamo merged 2 commits into
merge-train/fairiesfrom
nchamo/f-653-encrypt-handshake-log-v2
May 28, 2026
Merged

feat(aztec-nr): encrypt handshake log for indistinguishability#23638
nchamo merged 2 commits into
merge-train/fairiesfrom
nchamo/f-653-encrypt-handshake-log-v2

Conversation

@nchamo

@nchamo nchamo commented May 28, 2026

Copy link
Copy Markdown
Contributor

Summary

  • AES128-encrypts the handshake announcement log payload (eph_pk.x) so it produces a uniform 16-field log, matching all other private messages. Previously the handshake emitted a 2-field log (tag + raw eph_pk.x), letting an observer identify handshake transactions by log size.
  • The existing recipient-keyed handshake tag (DOM_SEP__NON_INTERACTIVE_HANDSHAKE_LOG_TAG) is preserved — only the payload is encrypted.
  • Updates test assertions to check for PRIVATE_LOG_SIZE_IN_FIELDS and compares ciphertexts instead of raw ephemeral key values.

Fixes F-653

@nchamo nchamo self-assigned this May 28, 2026
@nchamo nchamo requested a review from vezenovm May 28, 2026 18:02
@nchamo nchamo enabled auto-merge (squash) May 28, 2026 19:26
@nchamo nchamo merged commit 10bbb74 into merge-train/fairies May 28, 2026
14 checks passed
@nchamo nchamo deleted the nchamo/f-653-encrypt-handshake-log-v2 branch May 28, 2026 19:27
danielntmd pushed a commit to danielntmd/aztec-packages that referenced this pull request Jun 4, 2026
BEGIN_COMMIT_OVERRIDE
refactor(aztec-nr): use constructor methods for MessageDelivery variants
(AztecProtocol#23596)
docs: update testing_contracts.md for two-crate aztec new layout
(AztecProtocol#23617)
fix: drop usage of include and indexof on types that support equals
(AztecProtocol#23595)
fix: unused ts expressions in tests (AztecProtocol#23621)
feat(aztec-nr): Get tagging index for constrained delivery  (AztecProtocol#23359)
feat!: demote auth registry to non-protocol contract (AztecProtocol#23106)
feat(aztec-nr)!: embed BoundedVec max length in validation requests
(AztecProtocol#23622)
fix: regenerate standard contract addresses after auth registry demotion
(AztecProtocol#23640)
feat(aztec-nr): encrypt handshake log for indistinguishability (AztecProtocol#23638)
feat!: demote public_checks to non-protocol contract (AztecProtocol#23217)
fix: noir precommit re-staging inside worktrees (AztecProtocol#23628)
END_COMMIT_OVERRIDE
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants