CommitWatch RSS
SC
← Developer activityStrong match

Sangbida Chaudhuri

Public commit activity attributed with strong match confidence. This page describes observable work, not personal trustworthiness.

@sangbida on GitHub ↗
79 commits1 monitored projects24 candidates0 high-risk analyses
Project constellation

Where the commits appear

Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.

Monitored External sample
Projects connected to Sangbida ChaudhuriA visual map of monitored and externally discovered repositories.SCdeveloper79Core Lightning
Monitored evidence

CommitWatch projects

Core LightningElements Project79 commits24 candidates0 high risk
External discovery

Other public projects

No external sample loaded yet.

Authenticated GitHub discovery can enrich this profile.
Analyzed activity

Recent published watches

Message quality and risk characterize commits, never the person.

Informational 15 AI analysisMessage 83 · Strong
EP Elements ProjectCore Lightning BitcoinLightning Network

pytest: changed old_hsmsecret to default to false.

This commit only updates test files and test helpers to match a new default wallet-seed format. It does not change production code, does not fix a vulnerability, and has no direct security impact on running Core Lightning nodes.

1279a589by Sangbida Chaudhuri+80−8610 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 54 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

lightningd: Fix penalty tx output derivation for BIP86 wallets

This fix corrects how Core Lightning derives wallet addresses used in penalty transactions when a newer BIP39-style secret is in use. Previously, the code always used the older BIP32 derivation even when the wallet was configured for BIP86…

Incorrect key derivation path for penalty transactionsPotential fund loss/unspendability after channel breach for BIP86 walletsMismatch between wallet address type and on-chain transaction output derivation
bf43fbb7by Sangbida Chaudhuri+23−91 file
No security note in commit
Open full analysis →Source commit ↗
Informational 23 AI analysisMessage 50 · Thin
EP Elements ProjectCore Lightning BitcoinLightning Network

lightningd: use bip86 derivation for anchor spend change outputs

This small change updates how Core Lightning creates the 'change' output when spending an anchor output in a Lightning channel. It now uses a newer, Taproot-specific key derivation method (BIP86) when available, instead of the older BIP32 …

Change in key derivation path for on-chain Taproot change outputConditional fallback to legacy BIP32 derivation preserves backward compatibilityNo explicit security bug, overflow, or authentication bypass visible in diff
fa96b601by Sangbida Chaudhuri+6−11 file
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 50 · Thin
EP Elements ProjectCore Lightning BitcoinLightning Network

lightningd: use BIP86 derivation for P2TR in HTLC rebroadcast change outputs

This change fixes how Core Lightning derives the public key used for 'change' outputs when rebroadcasting on-chain HTLC (Hashed Time-Locked Contract) transactions that pay to a Taproot (P2TR) address. Previously, the code always used the o…

Key derivation mismatch between BIP32 and BIP86 for Taproot outputsPotential fund lockup or unspendable change outputsHTLC rebroadcast change output handling
4b1f2a07by Sangbida Chaudhuri+6−11 file
No security note in commit
Open full analysis →Source commit ↗
Low 34 AI analysisMessage 78 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

jsonrpc: fix recover command for BIP86 wallets

This commit fixes the 'recover' command in Core Lightning so it correctly detects whether a wallet has already generated Bitcoin addresses. Previously, the check only looked at one counter used by older wallets, but a newer type of wallet …

Logic flaw in safety guard allowing recovery on non-empty walletMissing state variable check for new wallet type (BIP86)Potential wallet state corruption or loss of funds if recovery proceeds on an already-used wallet
0269d0c0by Sangbida Chaudhuri+2−11 file
No security note in commit
Open full analysis →Source commit ↗
Low 28 AI analysisMessage 85 · Strong
EP Elements ProjectCore Lightning BitcoinLightning Network

wallet/hsmd: fix signmessagewithkey for BIP86 wallets

This commit fixes a bug where the `signmessagewithkey` RPC command did not work for newer BIP86-style wallets. Previously, the wallet RPC only searched through older BIP32-derived addresses, and the HSM signing code always used BIP32 key d…

Functional bug in key derivation path selectionBIP86 wallet support added to message signing RPCHSM now derives signing key according to wallet type
5fdc56c5by Sangbida Chaudhuri+18−273 files
No security note in commit
Open full analysis →Source commit ↗
Low 32 AI analysisMessage 80 · Strong
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd: fix HSM sent an unknown message type error

This commit fixes a bug in Core Lightning's Hardware Security Module daemon (hsmd). When a user entered the wrong wallet passphrase, the daemon would crash with a confusing 'HSM sent unknown message type' error and print a stack trace. The…

Daemon crash on malformed inter-process messageMissing wire-protocol length prefix in IPC messageStack trace disclosure on user error (wrong passphrase)
4c7e2d44by Sangbida Chaudhuri+55−12 files
No security note in commit
Open full analysis →Source commit ↗
Informational 11 AI analysisMessage 68 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

common: add unified HSM secret handling module

This commit adds a new internal module for handling the secret key file used by Core Lightning's hardware security module (HSM). It introduces support for reading the existing plain and encrypted formats, plus new formats based on BIP39 wo…

Adds new cryptographic secret-handling moduleUses Argon2id and libsodium secretstream for encryptionIntroduces BIP39 mnemonic parsing and seed derivation
9977b72eby Sangbida Chaudhuri+614−03 files
No security note in commit
Open full analysis →Source commit ↗
Low 33 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd: use the new mnemonic-compatible hsm_secret routines.

This commit changes how Core Lightning's Hardware Security Module daemon (hsmd) creates and stores the master secret for new nodes. Instead of a raw 32-byte random secret (optionally encrypted with a password-derived key), new nodes now ge…

Change to root secret storage format and derivationDeprecation of encrypted-hsm in favor of hsm-passphraseRemoval of legacy encrypted hsm_secret upgrade path
218dc2feby Sangbida Chaudhuri+317−21811 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

exposesecret: Add support for mnemonic-based HSM secrets

This commit adds a new feature to the Core Lightning 'exposesecret' plugin. It allows users who have set up their node with a BIP39 mnemonic (a human-readable seed phrase) to retrieve that mnemonic through the plugin's API. The change also…

Feature addition, not a security patchAdds exposure of BIP39 mnemonic via exposesecret responseRefactors libwally memory context handling in mnemonic validation/derivation
de9c6305by Sangbida Chaudhuri+1190−101813 files
No security note in commit
Open full analysis →Source commit ↗
Informational 12 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

common: refactor hsm_secret to {secret_data,len,type}

This commit is a code refactor in Core Lightning's wallet secret handling. It changes how the HSM (Hardware Security Module-like) secret is stored internally so it can hold either the traditional 32-byte secret or a full 64-byte seed deriv…

0192b82eby Sangbida Chaudhuri+46−32 files
No security note in commit
Open full analysis →Source commit ↗
Informational 18 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd/libhsmd: change hsmd_init to have secret_data and secret_len

This is a preparatory code change for Core Lightning's HSM (the component that holds private keys). It changes an internal function so it can accept either a 32-byte or 64-byte root secret, keeping the existing 32-byte behavior intact. The…

Refactor of HSM root secret handling with variable-length inputUse of sodium_mlock on the new variable-length seedUse of notleak/tal_dup_arr to prevent memory-leak scanner false positives
fc981f4dby Sangbida Chaudhuri+21−93 files
No security note in commit
Open full analysis →Source commit ↗
Low 33 AI analysisMessage 68 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd/libhsmd: add BIP86 base-key

This commit adds support for deriving Bitcoin BIP86-style keys inside Core Lightning's Hardware Security Module (HSM) daemon. It introduces two new wire messages that let authorized clients ask the HSM to derive a BIP86 base key and to che…

New HSM capability/permission bit added (HSM_PERM_DERIVE_BIP86_KEY)New wire messages guarded by capability check in hsmd_check_client_capabilitiesHSM aborts on derivation mismatch (status_failed STATUS_FAIL_INTERNAL_ERROR)
63001745by Sangbida Chaudhuri+151−64 files
No security note in commit
Open full analysis →Source commit ↗
Informational 11 AI analysisMessage 80 · Strong
EP Elements ProjectCore Lightning BitcoinLightning Network

lightningd: store base and derive pubkeys locally

This commit adds experimental support for deriving Bitcoin public keys using the BIP86 standard inside Core Lightning. It stores a new base key locally in the main daemon and adds a command-line option to turn the feature on. The change al…

Removal of HSM permission bit HSM_PERM_DERIVE_BIP86_KEY (512) without replacing it with another explicit permissionFall-through in hsmd_check_client_capabilities for WIRE_HSMD_DERIVE_BIP86_KEY / WIRE_HSMD_CHECK_BIP86_PUBKEY after deleting the return statementNew local storage of sensitive extended public key (bip86_base) in lightningd process
16656652by Sangbida Chaudhuri+84−37 files
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 68 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd: find correct P2TR key for utxo

This commit fixes a bug in Core Lightning's HSM (Hardware Security Module daemon) where the wrong private key could be derived when spending a taproot (P2TR) UTXO. Previously, the code always used the older BIP32-style derivation for tapro…

Incorrect key derivation for P2TR UTXOs could prevent signing and spendingFix distinguishes BIP86 vs BIP32 taproot derivation pathsNo explicit security impact described by vendor in commit message
1b3e881dby Sangbida Chaudhuri+54−44 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 67 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

test: Add a psbt test and an index boundary test

This commit only adds two new automated tests to the project's test suite. It does not change any production code, so it cannot introduce a security vulnerability or fix one directly. The tests verify that BIP86 (a type of Bitcoin taproot …

c7f36951by Sangbida Chaudhuri+89−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 33 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

wallet: update wallet address generation logic to use unified BIP86/BIP32 approach

This commit refactors how Core Lightning generates wallet addresses. Instead of keeping two separate address types (legacy BIP32 and mnemonic-based BIP86), it now picks the derivation method based on the wallet's HSM secret type. The chang…

Change to HSM secret type handling and key derivation path selectionRemoval of separate BIP86 address type and RPC parameterAddition of tal_free(tlvs) to prevent memory leak
620eb080by Sangbida Chaudhuri+120−1856 files
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 80 · Strong
EP Elements ProjectCore Lightning BitcoinLightning Network

lightningd: scan outputs for BIP86 addresses

This commit fixes a wallet-recovery bug in Core Lightning. When a user restored a wallet that used BIP86 (a modern Bitcoin address type), the node failed to scan the blockchain for those addresses, so previously received funds would appear…

Funds-availability/recovery bugMissing address type in blockchain scan filterBIP86 Taproot output discovery gap
249fa036by Sangbida Chaudhuri+41−64 files
No security note in commit
Open full analysis →Source commit ↗
Informational 19 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd_wire: add HSM wire protocol support for secret type detection

This commit adds a small metadata field to the internal HSM (Hardware Security Module) initialization message so that lightningd can tell whether the wallet seed was created from a mnemonic phrase or from an older legacy secret. It is a pr…

Adds new wire-protocol TLV field for HSM secret type metadataTouches HSM initialization reply pathDoes not alter secret generation, storage, or access-control logic
266b8082by Sangbida Chaudhuri+25−148 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd: add BIP86 wire scaffolding (derive/check), no behavior yet

This commit only adds placeholder message types and stubs for a future BIP86 key-derivation feature. The new wire messages return an explicit 'not implemented yet' error and perform no actual key derivation, signing, or secret handling. Th…

New HSM wire messages added but not implementedStub handlers explicitly reject requests with 'not implemented yet'No secret derivation, signing, or memory handling of key material in this patch
121fcfc9by Sangbida Chaudhuri+34−03 files
No security note in commit
Open full analysis →Source commit ↗
Wrong identity?Names can collide and public author strings can be misleading.Contact commitwatch@karma-x.io →