Security Enhancements
- Keyset ID Verification: Added automatic verification of keyset IDs returned by mints (PR #338)
- New
verifyKeysetId()
function validates that mint-provided keyset IDs match the computed ID from the keyset keys - Integrated verification into
CashuWallet.getAllKeys()
andCashuWallet.getKeys()
methods - Throws error if keyset ID verification fails:
"Couldn't verify keyset ID {id}"
- New
Breaking Changes
None
Migration Notes
No action required from users. The keyset ID verification runs automatically and will throw an error if invalid keysets are encountered from mints.
Full Diff: v2.5.2...v2.5.3