From 7a80ab026da8411fdb437099529448956b6f7417 Mon Sep 17 00:00:00 2001 From: Artem Gureev Date: Tue, 28 Jul 2026 11:23:12 +0000 Subject: [PATCH] refactor!(lee_core): bump the note-encryption KDF domain to v0.3 BREAKING! Before: note encryption KDF used 0.2 tag After: now uses 0.3 tag Mitigation: cipher keygen needs to utilize 0.3 tag after this commit --- lee/state_machine/core/src/encryption/mod.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lee/state_machine/core/src/encryption/mod.rs b/lee/state_machine/core/src/encryption/mod.rs index 13ad7f5e..19f7e741 100644 --- a/lee/state_machine/core/src/encryption/mod.rs +++ b/lee/state_machine/core/src/encryption/mod.rs @@ -135,7 +135,7 @@ impl EncryptionScheme { } fn kdf(shared_secret: &SharedSecretKey, nullifier: &Nullifier) -> [u8; 32] { - const PREFIX: &[u8; 20] = b"LEE/v0.2/KDF-SHA256/"; + const PREFIX: &[u8; 20] = b"LEE/v0.3/KDF-SHA256/"; let mut bytes = [0_u8; 20 + 32 + 32]; bytes[0..20].copy_from_slice(PREFIX); bytes[20..52].copy_from_slice(&shared_secret.0);