Fix g1 parameters values
Goal
Strengthen runtime security parameters around offence/equivocation reporting windows, and member account takeover resistance.
What changed
- Increased
ReportLongevityto ~28 days across all tests runtimes:-
gtest:28 * 24 * EPOCH_DURATION_IN_SLOTS -
gdev:28 * 24 * HOURS
-
- Temporarily decrease
ReportLongevityto to 1h for g1 runtime. - Increased
ChangeOwnerKeyPeriodfrom1 * MONTHSto6 * MONTHS. - Increased
IdtyCreationPeriodfrom1 * DAYSto5 * DAYS.
Reviewer notes
-
ChangeOwnerKeyPeriod = 6 monthsincreases the recovery window for a legitimate member after compromise (revocation with the old key before durable account takeover). -
IdtyCreationPeriod = 5 daysaligns identity creation pacing with historical certification cadence and helps limit fake-identity request spam.
Edited by Éloïs