[AIR-3][AIS-3][BPC-3][RES-3]

Cryptographic Validation Standards [BPC-3][AIS-3]

Overview

Add a brief overview of this document here.

Table of Contents

Compliance Requirements

  1. Secure RNG Implementation
  2. Must use crypto.randomBytes() in JS
  3. Rust requires rand_core with OsRng

  4. Test coverage: 100% for key generation paths

  5. BIP-341/342 Requirements javascript // Example compliant Taproot config const validScript = 'tr(SILENT_LEAF, {BIP342_SCRIPT})';

  6. SILENT_LEAF pattern mandatory

  7. OP_CHECKSIGADD required in Tapscripts

  8. Audit Trail | Date | Change Type | Details | |------------|-------------|--------------------------| | 2025-03-20 | Security | Upgraded RNG in keygen | | 2025-03-22 | Compliance | Added BIP-342 validation |

Validation Workflow

graph TD
    A[Start Validation] --> B{Check RNG}
    B -->|Secure| C[Verify BIP-341]
    B -->|Insecure| D[Fail Validation]
    C -->|Valid| E[Check Constants]
    C -->|Invalid| D
    E -->|All Good| F[Generate Report]

Security Patches Applied

Date Fix Type Details
2025-03-25 Cryptographic RNG Replaced all Math.random() usage
2025-03-25 BIP Compliance Added SILENT_LEAF validation
2025-03-25 Timing Attacks Implemented constant-time comp.
## See Also