rust-bitcoin

This commit hides the internal cryptographic key fields of PublicKey and PrivateKey from outside code, replacing direct access with controlled getter methods. It is a defensive hardening change that reduces the chance future callers will accidentally misuse or mutate the raw secp256k1 keys, but the commit itself does not fix a known exploitable bug.

This is a routine code cleanup in the rust-bitcoin library. It introduces new constructor functions named from_secp for creating public and private keys, and replaces direct internal field access with calls to those constructors. The old constructors are kept but marked as deprecated. There is no security bug being fixed here; the change is about improving code structure and preparing to hide internal details in the future.

This commit only changes a CI configuration file to add the 'hex' feature to automated testing matrices. It does not modify any runtime code, APIs, or dependencies that could affect security. There is no security issue or fix here.

This commit only updates generated API snapshot files (text listings of public types and methods). It does not change any source code, behavior, or fix any bug. The added lines reflect new methods like non_secure_erase and Drop that already exist in the actual library code; the removed line shows Hkdf no longer implements Copy. These are documentation/snapshot updates, not a security patch.

This commit adds a best-effort memory-clearing helper for two cryptographic building blocks (HMAC and HKDF) in the rust-bitcoin library. It tries to overwrite secret intermediate data with zeros when those objects are destroyed, but the authors explicitly note this is not a guaranteed security fix because the Rust compiler may still leave copies of the data elsewhere in memory. The change is defensive hardening rather than a fix for a known exploitable bug.

This commit only changes a test configuration file (rbmt.toml) to include an optional 'encoding' feature in the automated feature-flag testing matrix. It does not modify any production code, APIs, or security-sensitive logic. There is no security issue here.

This is a trivial code-style change. A developer replaced a direct import of the Encodable trait with its full path (encoding::Encodable) to make it clearer that the trait comes from another crate. No behavior, logic, or security properties changed.

This commit only adds Rust compiler hints (`#[inline]`) to a few small functions related to encoding and decoding block hashes. It does not change what the code does, only gives the compiler permission to embed these tiny functions directly at call sites for potential performance gains. There is no security relevance.

This commit simply reorders two blocks of code in a single Rust source file. It moves the implementation of the Decodable trait for BlockHash to appear earlier in the file, before the definition of its helper decoder type. The commit message and the diff confirm there is no change to program logic, behavior, or security.

This commit fixes a typo in an error message. The error message for a block hash decoding failure incorrectly said 'sequence decoder error' instead of 'block hash decoder error'. It is a cosmetic string correction with no security or functional impact.

This commit adds a new way to serialize (convert to bytes) Bitcoin peer-to-peer network addresses in the rust-bitcoin library. It does not appear to fix or introduce a security vulnerability; it is a routine implementation change replacing one serialization method with another while preserving the documented big-endian byte order.

This commit adds a new automated test that checks an Address object can be encoded to bytes and then decoded back to the same object. It does not change any production code, fix any bug, or alter behavior visible to users.

This commit adds a new way to decode Bitcoin peer-to-peer network addresses in the rust-bitcoin library. It is a feature/refactoring change that introduces a new decoder implementation and swaps test cases to use it. There is no indication in the commit that it fixes a security bug, vulnerability, or crash.

This commit simply deletes two helper shell scripts from the contrib/ directory that were used by the project's internal CI tooling. There is no change to the actual Rust Bitcoin library code, no change to how the software behaves at runtime, and no security relevance.

This commit simply deletes two compiled Rust library files (.rlib) that were accidentally added to the repository. There is no code change, no bug fix, and no security issue in the commit itself.

This commit is a routine build-maintenance change. It removes an old shell script used to update dependency lock files and switches the project to using a new internal tool called cargo-rbmt for the same task. There is no change to the actual Bitcoin library code, no security fix, and no vulnerability introduced.

This commit adds a safety limit when reading Bitcoin's 'CompactSize' numbers from serialized data. Before, a malformed message could claim an absurdly large number of elements (for example, billions of items in a list), which could be used to exhaust memory or trigger a panic. Now values above Bitcoin Core's documented maximum are rejected early during parsing. The change also refactors the parsing code so tests can still check non-minimal encoding without the new limit.

This is a tiny code cleanup change in the rust-bitcoin hashes library. It replaces a more verbose way of referring to a constant (<H as HashEngine>::BLOCK_SIZE) with a simpler equivalent (H::BLOCK_SIZE). The behavior of the program is unchanged, and there is no security relevance.

This commit only updates generated API snapshot files (text files listing public Rust traits and functions). It adds entries showing that several types now implement additional formatting traits like Binary, LowerHex, Octal, UpperHex, and Display. There is no actual code change in this commit, and nothing in it fixes or introduces a security problem.

This commit adds new ways to print or display several simple numeric wrapper types in the rust-bitcoin library, such as block heights, amounts, and timestamps. It does not change any security-sensitive logic, parsing, arithmetic, or network behavior. It is a routine API enhancement with no apparent security relevance.

This commit simply renames two Clippy lint settings in the project's configuration file to match updated Clippy lint names. It does not change any executable code, behavior, or security properties of the library.

This commit adds a new way to encode and decode the Bitcoin 'sendcmpct' P2P network message in the rust-bitcoin library. It is a straightforward feature addition that mirrors existing behavior: any non-zero byte is treated as 'true' for the send_compact flag. There is no indication of a security bug being fixed or introduced.

This commit adds new encoding and decoding machinery for a Bitcoin compact-block-relay data structure called HeaderAndShortIds. It preserves an existing safety check that prevents the combined number of short transaction IDs and prefilled transactions from overflowing a 16-bit limit. The change is mostly a refactor to use newer generic encoder traits; it does not appear to introduce a new vulnerability, but the author notes they do not fully understand why the overflow check guarantees safety of individual index differences.

This commit adds standard encoding and decoding machinery for a Bitcoin peer-to-peer message type called BlockTransactions. It does not change behavior, fix a bug, or close a security hole; it is a routine implementation of serialization traits used elsewhere in the crate.

This commit adds new encoding and decoding machinery for a 6-byte transaction identifier (ShortId) used in Bitcoin compact block relay (BIP 152). It is a routine feature addition that wires an existing type into a newer internal encoding framework. There is no indication of a bug, vulnerability, or security fix in the diff or commit message.