Fix g1 parameters values

Goal

Strengthen runtime security parameters around offence/equivocation reporting windows, and member account takeover resistance.

What changed

  • Increased ReportLongevity to ~28 days across all tests runtimes:
    • gtest: 28 * 24 * EPOCH_DURATION_IN_SLOTS
    • gdev: 28 * 24 * HOURS
  • Temporarily decrease ReportLongevity to to 1h for g1 runtime.
  • Increased ChangeOwnerKeyPeriod from 1 * MONTHS to 6 * MONTHS.
  • Increased IdtyCreationPeriod from 1 * DAYS to 5 * DAYS.

Reviewer notes

  • ChangeOwnerKeyPeriod = 6 months increases the recovery window for a legitimate member after compromise (revocation with the old key before durable account takeover).
  • IdtyCreationPeriod = 5 days aligns identity creation pacing with historical certification cadence and helps limit fake-identity request spam.
Edited by Éloïs

Merge request reports

Loading