Merge pull request #78 from bsv-blockchain/feature/auth/certificates-port

Feature/auth/certificates port

Author: voyager1708

CHANGELOG.md

@@ -7,6 +7,7 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 ## Table of Contents
 
 - [Unreleased](#unreleased)
+- [1.0.8 - 2025-08-13](#108---2025-08-13)
 - [1.0.7.1- 2025-07-28](#1071---2025-07-28)
 - [1.0.7- 2025-07-28](#107---2025-07-28)
 - [1.0.6.1- 2025-07-03](#1061---2025-07-03)
@@ -43,6 +44,12 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 ### Security
 - (Notify of any improvements related to security vulnerabilities or potential risks.)
 
+---
+## [1.0.8] - 2025-08-13
+
+### Security
+- Applied measures for vulnerability reported on [ts-sdk#334](https://github.com/bsv-blockchain/ts-sdk/issues/334).
+
 
 ---
 ## [1.0.7.1] - 2025-07-28

bsv/__init__.py

@@ -1,23 +1,11 @@
-from .broadcasters import *
-from .broadcaster import *
-from .chaintrackers import *
-from .chaintracker import *
-from .constants import *
-from .curve import *
-from .fee_models import *
-from .fee_model import *
-from .script import * 
-from .hash import *
-from .utils import *
-from .transaction_preimage import *
-from .http_client import HttpClient, default_http_client
-from .keys import verify_signed_text, PublicKey, PrivateKey
-from .merkle_path import MerklePath, MerkleLeaf
-from .transaction import Transaction, InsufficientFunds
-from .transaction_input import TransactionInput
-from .transaction_output import TransactionOutput
-from .encrypted_message import *
-from .signed_message import *
+"""bsv Python SDK package minimal initializer.
 
+Avoid importing heavy submodules at package import time to prevent circular imports
+and reduce side effects. Import submodules explicitly where needed, e.g.:
+    from bsv.keys import PrivateKey
+    from bsv.auth.peer import Peer
+"""
 
-__version__ = '1.0.7.1'
+__version__ = '1.0.8'
+
+# Optionally expose convenient factories later if needed.

bsv/auth/auth_message.py

@@ -0,0 +1,31 @@
+# auth_message.py - Ported from AuthMessage.py for PEP8 compliance
+from typing import List, Optional, Any
+from bsv.keys import PublicKey
+
+
+class AuthMessage:
+    """Represents a message exchanged during the auth protocol."""
+
+    def __init__(
+        self,
+        version: str = "",
+        message_type: str = "",
+        identity_key: Optional[PublicKey] = None,
+        nonce: str = "",
+        initial_nonce: str = "",
+        your_nonce: str = "",
+        certificates: Optional[List[Any]] = None,  # Should be List[VerifiableCertificate]
+        requested_certificates: Optional[Any] = None,  # Should be RequestedCertificateSet
+        payload: Optional[bytes] = None,
+        signature: Optional[bytes] = None,
+    ):
+        self.version = version
+        self.message_type = message_type
+        self.identity_key = identity_key
+        self.nonce = nonce
+        self.initial_nonce = initial_nonce
+        self.your_nonce = your_nonce
+        self.certificates = certificates if certificates is not None else []
+        self.requested_certificates = requested_certificates
+        self.payload = payload
+        self.signature = signature

bsv/auth/cert_encryption.py

@@ -0,0 +1,20 @@
+from typing import Tuple, Optional
+
+
+def get_certificate_encryption_details(field_name: str, serial_number: Optional[str]) -> Tuple[dict, str]:
+    """
+    TS/Go準拠の証明書フィールド暗号化メタデータを返す。
+    - protocol_id: {'protocol': 'certificate field encryption', 'security_level': 1}
+    - key_id: serial_numberがあれば "{serial_number} {field_name}", なければ field_name
+    """
+    protocol_id = {
+        "protocol": "certificate field encryption",
+        "security_level": 1,
+    }
+    if serial_number:
+        key_id = f"{serial_number} {field_name}"
+    else:
+        key_id = field_name
+    return protocol_id, key_id
+
+