From 065eeac3b26ec7e95caf374232fd94fc58178abf Mon Sep 17 00:00:00 2001
From: jonesmarvin8 <83104039+jonesmarvin8@users.noreply.github.com>
Date: Tue, 23 Dec 2025 17:42:30 -0500
Subject: [PATCH] minor clean up and fmt

---
 .../src/key_management/key_tree/keys_public.rs         | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/key_protocol/src/key_management/key_tree/keys_public.rs b/key_protocol/src/key_management/key_tree/keys_public.rs
index 1b9d9dc..c3dcadb 100644
--- a/key_protocol/src/key_management/key_tree/keys_public.rs
+++ b/key_protocol/src/key_management/key_tree/keys_public.rs
@@ -67,14 +67,18 @@ impl KeyNode for ChildKeysPublic {
                 .expect("hash_value is 64 bytes, must be safe to get first 32"),
         )
         .unwrap();
-        //TODO: remove unwrap
+
         let csk = nssa::PrivateKey::try_new(
             csk.add_tweak(&Scalar::from_le_bytes(*self.csk.value()).unwrap())
-                .expect("TODO")
-                .secret_bytes(), //.secret_bytes().expect("TODO");
+                .expect("Expect a valid Scalar")
+                .secret_bytes(),
         )
         .unwrap();
 
+        if secp256k1::constants::CURVE_ORDER < *csk.value() {
+            panic!("Secret key cannot exceed curve order");
+        } 
+
         let ccc = *hash_value
             .last_chunk::<32>()
             .expect("hash_value is 64 bytes, must be safe to get last 32");