Open n4ss opened 4 years ago
@huitseeker, can you look at this and get it resolved? @n4ss, how long can we defer on fixing this? We can revert the PR if this is critical or at least time-bound it so that either a fix lands or the PR is reverted.
@kchalkias for awareness
We’re aware of this, @n4ss is exploring a few options.
Can we just get rid of Merlin if don’t have bandwidth to fix it ? (not only as an optional dep)
feature selection doesn’t work with batch default enabled , because of feature unification .
Hi! Sorry you're running into this issue!
From my recollection of our design discussions, @huitseeker, @kchalkias, @valerini, an I decided to add merlin as a dependency for batch verification in order to provide what's usually termed "synthethic" randomness, which protects against systems with bad RNGs. When the batch_deterministic
mode is enabled, merlin is necessary because we use it to deterministically construct a protocol transcript and ratchet the underlying permutation function before constructing an RNG.
I'm no longer under contract, but I'm happy to look into the endianness issue unless someone else is already on it.
We're running in the following due to the bump of
ed25519-dalek
and our use of libra-crypto crate (https://github.com/libra/libra/pull/3350):I filed an issue in the nested dependency (
merlin
): https://github.com/dalek-cryptography/merlin/issues/58cc @kchalkias @huitseeker @thefallentree