Merge pull request #14 from LFDT-Lockness/dt

Remove slip10-like derivation and add stark-specific derivation

Author: survived

.github/workflows/rust.yml

@@ -9,24 +9,41 @@ env:
   CARGO_NET_GIT_FETCH_WITH_CLI: true
 
 jobs:
-  build-no-features:
+  check-no-features:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
     - uses: Swatinem/rust-cache@v2
       with:
         cache-on-failure: "true"
     - name: Build
-      run: cargo build 
-  build-and-test-all-features:
+      run: cargo check --no-default-features 
+  check:
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        features:
+        - slip10
+        - slip10,curve-secp256k1
+        - slip10,curve-secp256r1
+        - edwards
+        - stark
     steps:
     - uses: actions/checkout@v3
     - uses: Swatinem/rust-cache@v2
       with:
         cache-on-failure: "true"
     - name: Build
-      run: cargo build --all-features
+      run: cargo check --features ${{ matrix.features }} 
+  check-and-test-all-features:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    - uses: Swatinem/rust-cache@v2
+      with:
+        cache-on-failure: "true"
+    - name: Build
+      run: cargo check --all-features
     - name: Run tests
       run: cargo test --all-features --lib --tests
   doctest:

CHANGELOG.md

@@ -1,5 +1,13 @@
 # hd-wallet crate changelog
 
+## v0.6.0
+* Remove slip10-like derivation that can be instantiated with any curve: it is very inefficient
+  when instantiated with certain curves, and may also enable attacker to perform DoS attack by
+  finding derivation path that results into very long computation [#14]
+* Add stark-specific derivation: secure and efficient derivation for stark curve [#14]
+
+[#14]: https://github.com/LFDT-Lockness/hd-wallet/pull/14
+
 ## v0.5.1
 * Update docs and repo link [#11]