[Bug]: Correctly handle WSTS nonce issues #1167
Labels
bug
Something isn't working
sbtc signer binary
The sBTC Bootstrap Signer.
signer state model
The sBTC bootstrap signer state model.
Milestone
Bug - Correctly handle WSTS nonce issues
1. Description
Whenever a signer gets a sign request over a particular message, the signers create a state machine if its for a transaction ID that they have never seen before. This leads to the signer having fresh state with fresh nonces. The issue is that we do this over the incoming transaction ID and not the message itself, leading to the same state machine being reused. When that happens nonces can be replayed leading to various attacks against the protocol.
1.1 Context & Purpose
Reusing the same WSTS state machine can lead to issues down the line due to nonce reuse. This ticket addresses such issues by ensuring the same nonces can't be reused.
2. Technical Details:
When a signer receives a
NonceRequest
message they should create new nonces.2.1 Acceptance Criteria:
3. Related Issues and Pull Requests (optional):
The text was updated successfully, but these errors were encountered: