View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0009828 | Taler | exchange | public | 2025-04-30 19:34 | 2026-10-09 19:45 |
| Reporter | oec | Assigned To | Resolution deadline | ||
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | high | Severity | feature | Reproducibility | always |
| Status | acknowledged | Resolution | reopened | ||
| Product Version | git (master) | ||||
| Target Version | post-1.0 | ||||
| Summary | 0009828: Redesign recoup to accomodate for changes in withdraw and refresh API's | ||||
| Description | With the latest changes to the withdraw and refresh protocols, an individual delivered/signed coin can not be identified within the withdraw or refresh tables - we only store the hash over all blinded planchets coming in and the hashes of those being signed. Therefore, right now the protocols for recoup for withdraw and refresh do not provide the necessary parameters in order to be able to perform _all_ of the following checks: 1) identify the right withdraw or refresh operation 2) ensure that the recouped coin was part of that operation 3) verify that the recoup request is signed by the recouped coin. 1) and 3) can already be done, but 2) is missing. | ||||
| Tags | compliance | ||||
| ID | Summary | Status | Assigned To | Estimated effort (hours) |
|---|---|---|---|---|
| 0007868 | recoup transaction not spec'ed in DD37 | feedback | Florian Dold | |
| This issue (hours) | ||||
| Its children (hours) | 0 | |||
| Together (hours) | 0 | |||
Nothing is missing: the plan can be finished.
| parent of | 0007868 | feedback | Florian Dold | recoup transaction not spec'ed in DD37 |
| related to | 0009902 | informing | Florian Dold | util: phase out TALER_cs_withdraw_nonce_derive |
| child of | 0008943 | implementing | integration test for recoup-refresh is incomplete | |
| child of | 0009898 | implementing | Parent issue for cleanup tasks post withdraw refactor and new refresh protocol | |
| Not all the children of this issue are yet resolved or closed. | ||||
| In particular, in the RecoupRequest object the exchange will need the array of all n blinded hashes of all coins that were signed during the corresponding request to withdraw or refresh. From this array, it can calculate the hash over all of them, allowing 1) and 2). The signature of the recouped coin over the request gives 3). | |
| The commit 0524afc73f0f286cc39b3e2a2f7c12689c9fb052 specifies the recoup objects for withdraw- and refresh-originated coins. | |
| Specification added with 0524afc73f0f286cc39b3e2a2f7c12689c9fb052 | |
| Should be fixed with commit below. | |
| Looks good, waiting for child bugs to be resolved. | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2025-04-30 19:34 | oec | New Issue | |
| 2025-04-30 19:38 | oec | Note Added: 0024734 | |
| 2025-04-30 20:15 | Christian Grothoff | Priority | normal => high |
| 2025-04-30 20:15 | Christian Grothoff | Status | new => implementing |
| 2025-04-30 20:16 | Christian Grothoff | Relationship added | child of 0008943 |
| 2025-04-30 20:16 | Christian Grothoff | Target Version | post-1.0 => 1.0 stretch goals |
| 2025-04-30 20:16 | Christian Grothoff | Relationship added | related to 0007868 |
| 2025-04-30 20:18 | Christian Grothoff | Tag Attached: compliance | |
| 2025-05-08 08:37 | oec | Relationship added | child of 0009898 |
| 2025-05-08 13:28 | Christian Grothoff | Relationship deleted | related to 0007868 |
| 2025-05-08 13:28 | Christian Grothoff | Relationship added | parent of 0007868 |
| 2025-05-08 13:29 | Christian Grothoff | Target Version | 1.0 stretch goals => post-1.0 |
| 2025-05-08 13:31 | Christian Grothoff | Relationship added | parent of 0006565 |
| 2025-06-18 10:53 | Christian Grothoff | Relationship added | child of 0009902 |
| 2025-07-09 12:16 | oec | Assigned To | => oec |
| 2025-07-09 12:16 | oec | Status | implementing => assigned |
| 2025-12-07 09:53 | Christian Grothoff | Status | assigned => implementing |
| 2026-08-31 21:30 | Florian Dold | Relationship replaced | related to 0009902 |
| 2026-09-24 12:28 | oec | Note Added: 0030031 | |
| 2026-09-24 12:29 | oec | Relationship deleted | parent of 0006565 |
| 2026-09-24 12:29 | oec | Status | implementing => informing |
| 2026-09-24 12:29 | oec | Resolution | open => fixed |
| 2026-09-24 12:29 | oec | Note Added: 0030032 | |
| 2026-09-24 15:06 | oec | Assigned To | oec => Christian Grothoff |
| 2026-09-24 15:06 | oec | Status | informing => feedback |
| 2026-09-24 15:06 | oec | Resolution | fixed => reopened |
| 2026-09-24 15:06 | oec | Note Added: 0030039 | |
| 2026-10-09 19:45 | Christian Grothoff | Note Added: 0030094 | |
| 2026-10-09 19:45 | Christian Grothoff | Assigned To | Christian Grothoff => |
| 2026-10-09 19:45 | Christian Grothoff | Status | feedback => acknowledged |