[Bug]: Signers can crash each other with invalid DkgPrivateShares

[djordon]

Bug - Signers can crash each other with invalid DkgPrivateShares

1. Description

This issue is that a malicious signer can cause other signers to panic by sending them empty DkgPrivateShares objects. This is a bug in WSTS and is tracked there by Trust-Machines/wsts#109.

1.1 Context & Purpose

A malicious signer can construct an empty (or nearly empty) DkgPrivateShares object and broadcast it to other signers. When they receive it they will crash, and their hopes and dreams will crash with it.

2. Technical Details:

The fix here will be on the WSTS side and it is here Trust-Machines/wsts#111. We still need to update the signer crate to use this version, so this ticket tracks that.

2.1 Acceptance Criteria:

• A signer cannot crash other signers if they broadcast empty DkgPrivateShares.

3. Related Issues and Pull Requests (optional):

Trust-Machines/wsts#109