mirror of
https://github.com/autistic-symposium/decentralized-protocols-toolkit.git
synced 2025-05-01 22:36:07 -04:00
8670a51564
danny ryan's eips show his love for his craft and are very well-written, we hope he returns as a contributed later on
4.9 KiB
4.9 KiB
[DRAFT] security considerations for pectra (q1/25)
- ✅🔐🏋🏻♀️ eip-2537: precompile for bls12-381 curve operations, by a. vlasov et al.
- add bls signature verification and operations over bls12-381, a cryptographic primitive allowing to get 120+ bits of security for operations
- security: notes on constant time (tba)
- ✅🔐🤝🏋🏻♀️ eip-6110: supply validator deposits on chain, by m. kalinin et al.
- faster for validators to deposit their eth (12 hours -> 30 min)
- security: data complexity, dos, weak subjectivity period (tba)
- ✅🔐🏋🏻♀️ eip-7002: execution layer triggerable exits, by djrtwo et al.
- improve ux for validators, giving them more flexibility
- security: impact on existing custody relationships, fee overpayment (tba)
- ✅🔐🤝 eip-7251: increase the
MAX_EFFECTIVE_BALANCE, by m. neuter et al.- biggest ux improvement for validators
- raise the validator stake limit (maximum effective balance from 32 -> 2048 eth, with reward compounding)
- potentially can reduce the number of inactive nodes and possibly improving the network efficiency
- security: attestation committees, aggregator selection, proposer selection probability, sync committee selection probability, churn invariants, fee overpayment (tba)
- ✅🔐🤝 eip-7549: move committee index outside attestation, by dappling
- shuffle the consensus message, making it more efficient
- security: first block after fork, mutation over gossip (tba)
- ✅🔐🤝🏋🏻♀️ eip-7702: set eoa account code, by vub et al.
- improve the functionality of crypto wallets by giving them smart contract properties (the so called "account abstraction")
- more usability in crypto, enhanced security features:
- batching (allowing multiple operations from the same user in one atomic transaction)
- sponsorship (an account can pay for a transaction on behalf of another account)
- privilege de-escalation (users can sign sub-keys and given them specific permissions that are much weaker than global access to the account)
- e.g.: gas fees could be outsourced to services to pay on another erc-20 token
- security: secure delegation,
tx.origin, sponsored tx relayers, frontrunning initialization, tx propagation (tba)
- ✅🤝🏋🏻♀️ eip-7742: uncouple blob count between cl and el, by a. stokes
- extend functionalities from blobs
- execution layer no longer verifies data blobs’s maximum value and instead gets this value dynamically from the consensus layer
- ✅🏋🏻♀️ eip-7685: general purpose execution layer requests, by lightclient
- boost the interoperability between the execution and the consensus layer (helping with surge demand on the execution layer)
- ✅🏋🏻♀️ eip-2935: save historical block hashes from state, by vub et al.
- increase amount of data from past blocks that can be stored on new blocks
- set the stage for verkle tree
- improves solo staking ux: enabling stateless validator clients, allowing staking nodes to run with very little hard disk space and quick sync
- security: notes on branch poisoning (tba)
- ✅🤝 eip-7594: peerdas - peer data availability Sampling, by djirtwo et al.
- allow beacon nodes to perform data availability sampling, improving how da is handled across the network
- crucial feature for layer 2s (making them more efficient and cost-effective)
- compare to celestia (tba)
- ✅ eip-7692: evm object format meta, by a. beregszaszi et al.
- add a bunch of evm object format for smart contract deployment and execution efficiency
- include optimized code validation, better function handling, more efficient data access instructions
- 🟡 eip-7623: increase calldata cost, by t. wahrstätter et al.
- increasing the calldata cost for transactions (increase the cost of calldata to 10/40 gas for transactions that do not exceed a certain threshold of gas spent on evm operations)
- highligting data availability
- 🟡 eip-7762: increase
MIN_BASE_FEE_PER_BLOB_GAS, by maxy riesnick- speed up discovery on blob space
- security: "rollups that use blobs as da will need to update their posting strategies"