CommitWatch RSS
SC
← Developer activityStrong match

Sangbida Chaudhuri

Public commit activity attributed with strong match confidence. This page describes observable work, not personal trustworthiness.

@sangbida on GitHub ↗
79 commits1 monitored projects24 candidates0 high-risk analyses
Project constellation

Where the commits appear

Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.

Monitored External sample
Projects connected to Sangbida ChaudhuriA visual map of monitored and externally discovered repositories.SCdeveloper79Core Lightning
Monitored evidence

CommitWatch projects

Core LightningElements Project79 commits24 candidates0 high risk
External discovery

Other public projects

No external sample loaded yet.

Authenticated GitHub discovery can enrich this profile.
Analyzed activity

Recent published watches

Message quality and risk characterize commits, never the person.

Low 28 AI analysisMessage 85 · Strong
EP Elements ProjectCore Lightning BitcoinLightning Network

wallet/hsmd: fix signmessagewithkey for BIP86 wallets

This commit fixes a bug where the `signmessagewithkey` RPC command did not work for newer BIP86-style wallets. Previously, the wallet RPC only searched through older BIP32-derived addresses, and the HSM signing code always used BIP32 key d…

Functional bug in key derivation path selectionBIP86 wallet support added to message signing RPCHSM now derives signing key according to wallet type
5fdc56c5by Sangbida Chaudhuri+18−273 files
No security note in commit
Open full analysis →Source commit ↗
Low 32 AI analysisMessage 80 · Strong
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd: fix HSM sent an unknown message type error

This commit fixes a bug in Core Lightning's Hardware Security Module daemon (hsmd). When a user entered the wrong wallet passphrase, the daemon would crash with a confusing 'HSM sent unknown message type' error and print a stack trace. The…

Daemon crash on malformed inter-process messageMissing wire-protocol length prefix in IPC messageStack trace disclosure on user error (wrong passphrase)
4c7e2d44by Sangbida Chaudhuri+55−12 files
No security note in commit
Open full analysis →Source commit ↗
Informational 11 AI analysisMessage 80 · Strong
EP Elements ProjectCore Lightning BitcoinLightning Network

lightningd: store base and derive pubkeys locally

This commit adds experimental support for deriving Bitcoin public keys using the BIP86 standard inside Core Lightning. It stores a new base key locally in the main daemon and adds a command-line option to turn the feature on. The change al…

Removal of HSM permission bit HSM_PERM_DERIVE_BIP86_KEY (512) without replacing it with another explicit permissionFall-through in hsmd_check_client_capabilities for WIRE_HSMD_DERIVE_BIP86_KEY / WIRE_HSMD_CHECK_BIP86_PUBKEY after deleting the return statementNew local storage of sensitive extended public key (bip86_base) in lightningd process
16656652by Sangbida Chaudhuri+84−37 files
No security note in commit
Open full analysis →Source commit ↗
Informational 19 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd_wire: add HSM wire protocol support for secret type detection

This commit adds a small metadata field to the internal HSM (Hardware Security Module) initialization message so that lightningd can tell whether the wallet seed was created from a mnemonic phrase or from an older legacy secret. It is a pr…

Adds new wire-protocol TLV field for HSM secret type metadataTouches HSM initialization reply pathDoes not alter secret generation, storage, or access-control logic
266b8082by Sangbida Chaudhuri+25−148 files
No security note in commit
Open full analysis →Source commit ↗
Low 33 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

wallet: update wallet address generation logic to use unified BIP86/BIP32 approach

This commit refactors how Core Lightning generates wallet addresses. Instead of keeping two separate address types (legacy BIP32 and mnemonic-based BIP86), it now picks the derivation method based on the wallet's HSM secret type. The chang…

Change to HSM secret type handling and key derivation path selectionRemoval of separate BIP86 address type and RPC parameterAddition of tal_free(tlvs) to prevent memory leak
620eb080by Sangbida Chaudhuri+120−1856 files
No security note in commit
Open full analysis →Source commit ↗
Low 33 AI analysisMessage 68 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd/libhsmd: add BIP86 base-key

This commit adds support for deriving Bitcoin BIP86-style keys inside Core Lightning's Hardware Security Module (HSM) daemon. It introduces two new wire messages that let authorized clients ask the HSM to derive a BIP86 base key and to che…

New HSM capability/permission bit added (HSM_PERM_DERIVE_BIP86_KEY)New wire messages guarded by capability check in hsmd_check_client_capabilitiesHSM aborts on derivation mismatch (status_failed STATUS_FAIL_INTERNAL_ERROR)
63001745by Sangbida Chaudhuri+151−64 files
No security note in commit
Open full analysis →Source commit ↗
Low 35 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd: take the passphrase raw, not the derived secret.

This commit changes how Core Lightning's main daemon (lightningd) sends an HSM passphrase to the separate HSM daemon (hsmd). Previously, lightningd derived an encryption key from the passphrase locally and sent that derived key to hsmd. No…

Change in inter-process secret handling: raw passphrase now crosses the lightningd->hsmd boundary instead of a derived keyLegacy encryption-key field retained but explicitly overridden, creating dual-path key material handlingPassphrase stored as a heap-allocated string in lightningd (ld->hsm_passphrase) rather than a derived secret that was previously discarded with sodium_munlock
e3fe739fby Sangbida Chaudhuri+47−247 files
No security note in commit
Open full analysis →Source commit ↗
Low 33 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd: use the new mnemonic-compatible hsm_secret routines.

This commit changes how Core Lightning's Hardware Security Module daemon (hsmd) creates and stores the master secret for new nodes. Instead of a raw 32-byte random secret (optionally encrypted with a password-derived key), new nodes now ge…

Change to root secret storage format and derivationDeprecation of encrypted-hsm in favor of hsm-passphraseRemoval of legacy encrypted hsm_secret upgrade path
218dc2feby Sangbida Chaudhuri+317−21811 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 73 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

hsmd: add BIP86 wire scaffolding (derive/check), no behavior yet

This commit only adds placeholder message types and stubs for a future BIP86 key-derivation feature. The new wire messages return an explicit 'not implemented yet' error and perform no actual key derivation, signing, or secret handling. Th…

New HSM wire messages added but not implementedStub handlers explicitly reject requests with 'not implemented yet'No secret derivation, signing, or memory handling of key material in this patch
121fcfc9by Sangbida Chaudhuri+34−03 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 67 · Adequate
EP Elements ProjectCore Lightning BitcoinLightning Network

test: Add a psbt test and an index boundary test

This commit only adds two new automated tests to the project's test suite. It does not change any production code, so it cannot introduce a security vulnerability or fix one directly. The tests verify that BIP86 (a type of Bitcoin taproot …

c7f36951by Sangbida Chaudhuri+89−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 80 · Strong
EP Elements ProjectCore Lightning BitcoinLightning Network

lightningd: scan outputs for BIP86 addresses

This commit fixes a wallet-recovery bug in Core Lightning. When a user restored a wallet that used BIP86 (a modern Bitcoin address type), the node failed to scan the blockchain for those addresses, so previously received funds would appear…

Funds-availability/recovery bugMissing address type in blockchain scan filterBIP86 Taproot output discovery gap
249fa036by Sangbida Chaudhuri+41−64 files
No security note in commit
Open full analysis →Source commit ↗
Wrong identity?Names can collide and public author strings can be misleading.Contact commitwatch@karma-x.io →