-
Notifications
You must be signed in to change notification settings - Fork 2.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove --seed flag from account sign command #3382
Remove --seed flag from account sign command #3382
Conversation
This really should be merged for mainnet. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM pending CI
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@Meshiest To resolve cargo clippy
, you'll need to delete the line - utilities::ToBytes,
in cli/src/commands/account.rs
on line 23, and then rerun cargo +nightly clippy
.
@Meshiest Looks like clippy is still failing - https://app.circleci.com/pipelines/github/AleoNet/snarkOS/331/workflows/f77b15c2-96fc-4809-870b-8c8cfd34a98e/jobs/4208. You'll need to rerun |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approved, pending CI
Motivation
The
--seed
flag in theleo account sign
command is insecure asnonce
s in signatures are not intended to be seeded, reused, or shared. This PR removes that functionality to prevent anyone from accidentally using insecure functionality.Related PRs