feature/1121 implement ucan validation (#1176)

- **refactor: remove unused auth components**
- **refactor: improve devbox configuration and deployment process**
- **refactor: improve devnet and testnet setup**
- **fix: update templ version to v0.2.778**
- **refactor: rename pkl/net.matrix to pkl/matrix.net**
- **refactor: migrate webapp components to nebula**
- **refactor: protobuf types**
- **chore: update dependencies for improved security and stability**
- **feat: implement landing page and vault gateway servers**
- **refactor: Migrate data models to new module structure and update
related files**
- **feature/1121-implement-ucan-validation**
- **refactor: Replace hardcoded constants with model types in attns.go**
- **feature/1121-implement-ucan-validation**
- **chore: add origin Host struct and update main function to handle
multiple hosts**
- **build: remove unused static files from dwn module**
- **build: remove unused static files from dwn module**
- **refactor: Move DWN models to common package**
- **refactor: move models to pkg/common**
- **refactor: move vault web app assets to embed module**
- **refactor: update session middleware import path**
- **chore: configure port labels and auto-forwarding behavior**
- **feat: enhance devcontainer configuration**
- **feat: Add UCAN middleware for Echo with flexible token validation**
- **feat: add JWT middleware for UCAN authentication**
- **refactor: update package URI and versioning in PklProject files**
- **fix: correct sonr.pkl import path**
- **refactor: move JWT related code to auth package**
- **feat: introduce vault configuration retrieval and management**
- **refactor: Move vault components to gateway module and update file
paths**
- **refactor: remove Dexie and SQLite database implementations**
- **feat: enhance frontend with PWA features and WASM integration**
- **feat: add Devbox features and streamline Dockerfile**
- **chore: update dependencies to include TigerBeetle**
- **chore(deps): update go version to 1.23**
- **feat: enhance devnet setup with PATH environment variable and
updated PWA manifest**
- **fix: upgrade tigerbeetle-go dependency and remove indirect
dependency**
- **feat: add PostgreSQL support to devnet and testnet deployments**
- **refactor: rename keyshare cookie to token cookie**
- **feat: upgrade Go version to 1.23.3 and update dependencies**
- **refactor: update devnet and testnet configurations**
- **feat: add IPFS configuration for devnet**
- **I'll help you update the ipfs.config.pkl to include all the peers
from the shell script. Here's the updated configuration:**
- **refactor: move mpc package to crypto directory**
- **feat: add BIP32 support for various cryptocurrencies**
- **feat: enhance ATN.pkl with additional capabilities**
- **refactor: simplify smart account and vault attenuation creation**
- **feat: add new capabilities to the Attenuation type**
- **refactor: Rename MPC files for clarity and consistency**
- **feat: add DIDKey support for cryptographic operations**
- **feat: add devnet and testnet deployment configurations**
- **fix: correct key derivation in bip32 package**
- **refactor: rename crypto/bip32 package to crypto/accaddr**
- **fix: remove duplicate indirect dependency**
- **refactor: move vault package to root directory**
- **refactor: update routes for gateway and vault**
- **refactor: remove obsolete web configuration file**
- **refactor: remove unused TigerBeetle imports and update host
configuration**
- **refactor: adjust styles directory path**
- **feat: add broadcastTx and simulateTx functions to gateway**
- **feat: add PinVault handler**

crypto/dkg/gennaro/round2.go

@@ -0,0 +1,90 @@
+//
+// Copyright Coinbase, Inc. All Rights Reserved.
+//
+// SPDX-License-Identifier: Apache-2.0
+//
+
+package gennaro
+
+import (
+	"fmt"
+
+	"github.com/onsonr/sonr/crypto/internal"
+	v1 "github.com/onsonr/sonr/crypto/sharing/v1"
+)
+
+type Round2Bcast = []*v1.ShareVerifier
+
+// Round2 computes the second round for Gennaro DKG
+// Algorithm 3 - Gennaro DKG Round 2
+// bcast contains all Round1 broadcast from other participants to this participant
+// p2p contains all Round1 P2P send message from other participants to this participant
+func (dp *Participant) Round2(bcast map[uint32]Round1Bcast, p2p map[uint32]*Round1P2PSendPacket) (Round2Bcast, error) {
+	// Check participant is not empty
+	if dp == nil || dp.curve == nil {
+		return nil, internal.ErrNilArguments
+	}
+
+	// Check participant has the correct dkg round number
+	if dp.round != 2 {
+		return nil, internal.ErrInvalidRound
+	}
+
+	// Check the input is valid
+	if bcast == nil || p2p == nil || len(bcast) == 0 || len(p2p) == 0 {
+		return nil, internal.ErrNilArguments
+	}
+
+	// 1. set sk = x_{ii}
+	sk := dp.pedersenResult.SecretShares[dp.id-1].Value
+
+	// 2. for j in 1,...,n
+	for id := range bcast {
+
+		// 3. if i = j continue
+		if id == dp.id {
+			continue
+		}
+
+		// Ensure a valid p2p entry exists
+		if p2p[id] == nil {
+			return nil, fmt.Errorf("missing p2p packet for id=%v", id)
+		}
+
+		// 4. If PedersenVerify(E, Q, x_ji, r_ji, {X_ji,...,X_jt}) = false, abort
+		xji := p2p[id].SecretShare
+		rji := p2p[id].BlindingShare
+		bvs := bcast[id]
+		if ok, err := dp.pedersen.Verify(xji, rji, bvs); !ok {
+			if err != nil {
+				return nil, err
+			} else {
+				return nil, fmt.Errorf("invalid share for participant id=%v", id)
+			}
+		}
+
+		// Store other participants' shares xji for usage in round 3
+		dp.otherParticipantShares[id].Share = p2p[id].SecretShare
+
+		// 5. sk = (sk+xji) mod q
+		// NOTE: we use the EcScalar class to add instead of
+		// just using big.Int Add and Mod
+		// because Ed25519 will fail with the big.Int Add and Mod
+		// and Ed25519 uses different little endian vs big endian
+		// in big.Int
+		t1 := sk.BigInt()
+		t2 := xji.Value.BigInt()
+		r := dp.scalar.Add(t1, t2)
+
+		sk = sk.Field().NewElement(r)
+	}
+
+	// Update internal state
+	dp.round = 3
+
+	// 7. Store ski as participant i's secret key share
+	dp.skShare = sk
+
+	// 6. EchoBroadcast {R_1,...,R_t} to all other participants.
+	return dp.pedersenResult.Verifiers, nil
+}