View Issue Details

IDProjectCategoryView StatusLast Update
0010892Talerexchangepublic2026-02-04 19:00
ReporterFlorian Dold Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Product Versiongit (master) 
Target Version1.4Fixed in Version1.4 
Summary0010892: exchange should ensure that the set of newly signed denom keys is anchored at the same (withdrawal) start time
DescriptionThis allows the wallets (and linter tooling) to easily assess that exchange has indeed properly done the (offline) denom key signing.

If newly signed denoms are not anchored at the same start time, wallets can't distinguish between the following scenarios:
(a) The exchange dropped/changed the denom config (e.g. offers fewer denominations)
(b) The exchange operator forgot to offline-sign and upload new denominations
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Relationships

related to 0010893 informingFlorian Dold wallet should check that exchange signed sufficient denom keys before withdrawal/refresh 

Activities

Florian Dold

2026-01-19 17:16

manager   ~0027283

I guess to really ensure this, we need technically need to take all the withdrawal durations, compute the lcm, and sign at least that far ahead into the future. Right?

Christian Grothoff

2026-01-20 11:44

manager   ~0027290

Yes, it'll be a bit complicated, but totally doable.

Christian Grothoff

2026-02-02 08:50

manager   ~0027537

Fixed in b7e6a5b57..32c617992

Issue History

Date ModifiedUsernameFieldChange
2026-01-19 17:06Florian DoldNew Issue
2026-01-19 17:07Florian DoldSummaryexchange should ensure that the set of newly signed denom keys is anchored at the same start time => exchange should ensure that the set of newly signed denom keys is anchored at the same (withdrawal) start time
2026-01-19 17:09Florian DoldRelationship addedrelated to 0010893
2026-01-19 17:16Florian DoldNote Added: 0027283
2026-01-20 11:44Christian GrothoffStatusnew => implementing
2026-01-20 11:44Christian GrothoffTarget Version => 1.8
2026-01-20 11:44Christian GrothoffNote Added: 0027290
2026-01-25 15:22Christian GrothoffAssigned To => Christian Grothoff
2026-01-25 15:22Christian GrothoffStatusimplementing => assigned
2026-01-25 15:23Christian GrothoffStatusassigned => implementing
2026-02-01 17:14Christian GrothoffStatusimplementing => assigned
2026-02-02 08:50Christian GrothoffStatusassigned => informing
2026-02-02 08:50Christian GrothoffResolutionopen => fixed
2026-02-02 08:50Christian GrothoffFixed in Version => 1.4
2026-02-02 08:50Christian GrothoffNote Added: 0027537
2026-02-02 08:50Christian GrothoffProduct Version => git (master)
2026-02-02 08:50Christian GrothoffTarget Version1.8 => 1.4
2026-02-04 19:00Christian GrothoffStatusinforming => closed