Skip to content

feat: add key rotation for validators#2364

Draft
juan518munoz wants to merge 1 commit into
nextfrom
jmunoz-add-key-rotation
Draft

feat: add key rotation for validators#2364
juan518munoz wants to merge 1 commit into
nextfrom
jmunoz-add-key-rotation

Conversation

@juan518munoz

@juan518munoz juan518munoz commented Jul 20, 2026

Copy link
Copy Markdown
Collaborator

Summary

Continues the transaction input encryption work from #2342 by adding a key rotation flow for the shared transaction encryption key.

Operators schedule a rotation by restarting every validator with two new options:

  1. --encryption-key.next.hex / MIDEN_VALIDATOR_NEXT_ENCRYPTION_KEY with the new shared secret.
  2. --encryption-key.next.rotation-block / MIDEN_VALIDATOR_NEXT_ENCRYPTION_KEY_ROTATION_BLOCK with the block at which it takes effect.

Changelog

[[entry]]
scope       = "validator"
impact      = "added"
description = "The shared transaction encryption key can be rotated. Operators schedule a rotation with `--encryption-key.next.hex` and `--encryption-key.next.rotation-block`, and `GetTransactionEncryptionKey` announces the next key ahead of the rotation."

[[entry]]
scope       = "rpc"
impact      = "breaking"
description = "`GetTransactionEncryptionKey` now returns a `TransactionEncryptionKeyResponse` wrapping the current key and, when a rotation is scheduled, the announced next key."

@juan518munoz
juan518munoz force-pushed the jmunoz-add-key-rotation branch from d631656 to 275b06f Compare July 21, 2026 14:59
Base automatically changed from jmunoz-tx-input-encryption-p1 to next July 22, 2026 05:39
@juan518munoz
juan518munoz force-pushed the jmunoz-add-key-rotation branch from 275b06f to 1c21222 Compare July 22, 2026 14:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant