mirror of
https://github.com/status-im/nimbus-eth2.git
synced 2025-01-09 13:56:23 +00:00
abe0d7b4ae
Instead of keeping a validator key list per EpochRef, this PR introduces a single shared validator key list in ChainDAG, and cleans up some other ChainDAG and key-related issues. The PR does not introduce the validator key list in the state transition - this is because we batch-check all signatures before entering the spec code, thus the spec code never hits the cache. A future refactor should _probably_ remove the threadvar altogether. There's a few other small fixes in here that make the flow easier to read: * fix `var ChainDAGRef` -> `ChainDAGRef` * fix `var QuarantineRef` -> `QuarantineRef` * consistent `dag` variable name * avoid using threadvar pubkey cache in most cases * better error messages in batch signature checking
66 lines
2.5 KiB
Nim
66 lines
2.5 KiB
Nim
# beacon_chain
|
|
# Copyright (c) 2018-2020 Status Research & Development GmbH
|
|
# Licensed and distributed under either of
|
|
# * MIT license (license terms in the root directory or at https://opensource.org/licenses/MIT).
|
|
# * Apache v2 license (license terms in the root directory or at https://www.apache.org/licenses/LICENSE-2.0).
|
|
# at your option. This file may not be copied, modified, or distributed except according to those terms.
|
|
|
|
# Mocking validator public and private keys
|
|
# ---------------------------------------------------------------
|
|
|
|
import
|
|
bearssl, eth/keys,
|
|
blscurve,
|
|
../../beacon_chain/spec/[datatypes, crypto, presets]
|
|
|
|
proc newKeyPair(rng: var BrHmacDrbgContext): BlsResult[tuple[pub: ValidatorPubKey, priv: ValidatorPrivKey]] =
|
|
## Generates a new public-private keypair
|
|
## This requires entropy on the system
|
|
# The input-keying-material requires 32 bytes at least for security
|
|
# The generation is deterministic and the input-keying-material
|
|
# must be protected against side-channel attacks
|
|
|
|
var ikm: array[32, byte]
|
|
brHmacDrbgGenerate(rng, ikm)
|
|
|
|
var
|
|
sk: SecretKey
|
|
pk: blscurve.PublicKey
|
|
if keyGen(ikm, pk, sk):
|
|
ok((ValidatorPubKey(blob: pk.exportRaw()), ValidatorPrivKey(sk)))
|
|
else:
|
|
err "bls: cannot generate keypair"
|
|
|
|
# this is being indexed inside "mock_deposits.nim" by a value up to `validatorCount`
|
|
# which is `num_validators` which is `MIN_GENESIS_ACTIVE_VALIDATOR_COUNT`
|
|
proc genMockPrivKeys(privkeys: var openArray[ValidatorPrivKey]) =
|
|
let rng = newRng()
|
|
for i in 0 ..< privkeys.len:
|
|
let pair = newKeyPair(rng[])[]
|
|
privkeys[i] = pair.priv
|
|
|
|
func genMockPubKeys(pubkeys: var openArray[ValidatorPubKey],
|
|
privkeys: openArray[ValidatorPrivKey]) =
|
|
for i in 0 ..< privkeys.len:
|
|
pubkeys[i] = toPubKey(privkeys[i]).toPubKey()
|
|
|
|
# Ref array necessary to limit stack usage / binary size
|
|
var MockPrivKeys* = newSeq[ValidatorPrivKey](defaultRuntimePreset.MIN_GENESIS_ACTIVE_VALIDATOR_COUNT)
|
|
genMockPrivKeys(MockPrivKeys)
|
|
|
|
var MockPubKeys* = newSeq[ValidatorPubKey](defaultRuntimePreset.MIN_GENESIS_ACTIVE_VALIDATOR_COUNT)
|
|
genMockPubKeys(MockPubKeys, MockPrivKeys)
|
|
|
|
type MockKey = ValidatorPrivKey or ValidatorPubKey
|
|
|
|
template `[]`*[N: static int](a: array[N, MockKey], idx: ValidatorIndex): MockKey =
|
|
a[idx.int]
|
|
|
|
when isMainModule:
|
|
echo "========================================"
|
|
echo "Mock keys"
|
|
for i in 0 ..< defaultRuntimePreset.MIN_GENESIS_ACTIVE_VALIDATOR_COUNT:
|
|
echo " validator ", i
|
|
echo " seckey: ", MockPrivKeys[i].toHex()
|
|
echo " pubkey: ", MockPubKeys[i]
|