[DRAFT] security considerations for pectra (q1/25)

danny ryan's eips show his love for his craft and are very well-written, we hope he returns as a contributed later on
This commit is contained in:
autistic-symposium-helper 2024-11-28 14:16:55 -08:00 committed by GitHub
parent d4601dafd4
commit 8670a51564
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -0,0 +1,99 @@
## [DRAFT] security considerations for **[pectra](https://eips.ethereum.org/EIPS/eip-7600)** (q1/25)
<br>
* ✅🔐🏋🏻‍♀️ **[eip-2537: precompile for bls12-381 curve operations, by a. vlasov et al.](https://eips.ethereum.org/EIPS/eip-2537)**
- add bls signature verification and operations over bls12-381, a cryptographic primitive allowing to get 120+ bits of security for operations
- security: notes on constant time (tba)
<br>
* ✅🔐🤝🏋🏻‍♀️ **[eip-6110: supply validator deposits on chain, by m. kalinin et al.](https://eips.ethereum.org/EIPS/eip-61100)**
- faster for validators to deposit their eth (12 hours -> 30 min)
- security: data complexity, dos, weak subjectivity period (tba)
<br>
* ✅🔐🏋🏻‍♀️ **[eip-7002: execution layer triggerable exits, by djrtwo et al.](https://eips.ethereum.org/EIPS/eip-7002)**
- improve ux for validators, giving them more flexibility
- security: impact on existing custody relationships, fee overpayment (tba)
<br>
* ✅🔐🤝 **[eip-7251: increase the `MAX_EFFECTIVE_BALANCE`, by m. neuter et al.](https://eips.ethereum.org/EIPS/eip-7251)**
- biggest ux improvement for validators
- raise the validator stake limit (maximum effective balance from 32 -> 2048 eth, with reward compounding)
- potentially can reduce the number of inactive nodes and possibly improving the network efficiency
- security: attestation committees, aggregator selection, proposer selection probability, sync committee selection probability, churn invariants, fee overpayment (tba)
<br>
* ✅🔐🤝 **[eip-7549: move committee index outside attestation, by dappling](https://eips.ethereum.org/EIPS/eip-7549)**
- shuffle the consensus message, making it more efficient
- security: first block after fork, mutation over gossip (tba)
<br>
* ✅🔐🤝🏋🏻‍♀️ **[eip-7702: set eoa account code, by vub et al.](https://eips.ethereum.org/EIPS/eip-7702)**
- improve the functionality of crypto wallets by giving them smart contract properties (the so called "account abstraction")
- more usability in crypto, enhanced security features:
- batching (allowing multiple operations from the same user in one atomic transaction)
- sponsorship (an account can pay for a transaction on behalf of another account)
- privilege de-escalation (users can sign sub-keys and given them specific permissions that are much weaker than global access to the account)
- e.g.: gas fees could be outsourced to services to pay on another erc-20 token
- security: secure delegation, `tx.origin`, sponsored tx relayers, frontrunning initialization, tx propagation (tba)
<br>
* ✅🤝🏋🏻‍♀️ **[eip-7742: uncouple blob count between cl and el, by a. stokes](https://eips.ethereum.org/EIPS/eip-7742)**
- extend functionalities from blobs
- execution layer no longer verifies data blobss maximum value and instead gets this value dynamically from the consensus layer
<br>
* ✅🏋🏻‍♀️ **[eip-7685: general purpose execution layer requests, by lightclient](https://eips.ethereum.org/EIPS/eip-7685)**
- boost the interoperability between the execution and the consensus layer (helping with surge demand on the execution layer)
<br>
* ✅🏋🏻‍♀️ **[eip-2935: save historical block hashes from state, by vub et al.](https://eips.ethereum.org/EIPS/eip-2935)**
- increase amount of data from past blocks that can be stored on new blocks
- set the stage for verkle tree
- improves solo staking ux: enabling stateless validator clients, allowing staking nodes to run with very little hard disk space and quick sync
- security: notes on branch poisoning (tba)
<br>
* ✅🤝 **[eip-7594: peerdas - peer data availability Sampling, by djirtwo et al.](https://eips.ethereum.org/EIPS/eip-7594)**
- allow beacon nodes to perform data availability sampling, improving how da is handled across the network
- crucial feature for layer 2s (making them more efficient and cost-effective)
- compare to celestia (tba)
<br>
* ✅ **[eip-7692: evm object format meta, by a. beregszaszi et al.](https://eips.ethereum.org/EIPS/eip-7692)**
- add a bunch of evm object format for smart contract deployment and execution efficiency
- include optimized code validation, better function handling, more efficient data access instructions
<br>
* 🟡 **[eip-7623: increase calldata cost, by t. wahrstätter et al.](https://eips.ethereum.org/EIPS/eip-7623)**
- increasing the calldata cost for transactions (increase the cost of calldata to 10/40 gas for transactions that do not exceed a certain threshold of gas spent on evm operations)
- highligting data availability
<br>
* 🟡 **[eip-7762: increase `MIN_BASE_FEE_PER_BLOB_GAS`, by maxy riesnick](https://eips.ethereum.org/EIPS/eip-7762)**
- speed up discovery on blob space
- security: "rollups that use blobs as da will need to update their posting strategies"
<br>
----
### cool resources
<br>