zolfa
/
tendermint
1
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 221 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
9827 Commits
183 Branches
291 MiB
 
 
 
 
 
 
Tree: e81b0e290e
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'e81b0e290e'
${ noResults }
tendermint/docs/architecture/adr-079-ed25519-verificatio...

2.9 KiB
Raw Blame History

ADR 079: Ed25519 Verification

Changelog

  • 2020-08-21: Initial RFC
  • 2021-02-11: Migrate RFC to tendermint repo (Originally RFC 003)

Author(s)

Context

Ed25519 keys are the only supported key types for Tendermint validators currently. Tendermint-Go wraps the ed25519 key implementation from the go standard library. As more clients are implemented to communicate with the canonical Tendermint implementation (Tendermint-Go) different implementations of ed25519 will be used. Due to RFC 8032 not guaranteeing implementation compatibility, Tendermint clients must to come to an agreement of how to guarantee implementation compatibility. Zcash has multiple implementations of their client and have identified this as a problem as well. The team at Zcash has made a proposal to address this issue, Zcash improvement proposal 215.

Proposal

  • Tendermint-Go would adopt hdevalence/ed25519consensus.

    • This library is implements ed25519.Verify() in accordance to zip-215. Tendermint-go will continue to use crypto/ed25519 for signing and key generation.

  • Tendermint-rs would adopt ed25519-zebra

Signature verification is one of the major bottlenecks of Tendermint-go, batch verification can not be used unless it has the same consensus rules, ZIP 215 makes verification safe in consensus critical areas.

This change constitutes a breaking changes, therefore must be done in a major release. No changes to validator keys or operations will be needed for this change to be enabled.

This change has no impact on signature aggregation. To enable this signature aggregation Tendermint will have to use different signature schema (Schnorr, BLS, ...). Secondly, this change will enable safe batch verification for the Tendermint-Go client. Batch verification for the rust client is already supported in the library being used.

As part of the acceptance of this proposal it would be best to contract or discuss with a third party the process of conducting a security review of the go library.

Status

Proposed

Consequences

Positive

  • Consistent signature verification across implementations
  • Enable safe batch verification

Negative

Tendermint-Go

  • Third_party dependency
    • library has not gone through a security review.
    • unclear maintenance schedule
  • Fragmentation of the ed25519 key for the go implementation, verification is done using a third party library while the rest uses the go standard library

Neutral

References

It’s 255:19AM. Do you know what your validation criteria are?