You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
-22Lines changed: 0 additions & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,14 +32,11 @@ As a minor extension, we have adopted a slightly different versioning convention
32
32
- Support for recording client types origin (library, CLI and WASM) in the aggregator metrics.
33
33
34
34
-**UNSTABLE** :
35
-
36
35
- New UTxO-HD snapshot converter command for client CLI:
37
-
38
36
- Added the `tools utxo-hd snapshot-converter` command to the client CLI that converts a restored UTxO-HD snapshot to another flavor.
39
37
- Support for converting to `LMDB` on-disk and `Legacy` in-memory flavors.
40
38
41
39
- New api for client CLI partial cardano database restoration (aka Cardano DB V2):
42
-
43
40
- Support for switching the backend with parameter `--backend [v1,v2]` to `cardano-database` snapshot list, snapshot show and download subcommands:
44
41
- backend `v1` (default): support full database restoration only.
45
42
- backend `v2` (require `--unstable`): support full and partial database restoration.
@@ -63,7 +60,6 @@ As a minor extension, we have adopted a slightly different versioning convention
63
60
## Mithril Distribution [2517.0] - 2025-05-05
64
61
65
62
-**BREAKING** changes in Mithril client CLI and library:
66
-
67
63
- To fast bootstrap a Cardano node, the new `--include-ancillary` option has been added to the _Cardano node database_ command in the Mithril client CLI.
68
64
- Without this option, only final immutable files are downloaded, and the ledger state must be computed from the genesis block when the Cardano node starts.
69
65
- The `--include-ancillary` option requires the usage of an **ancillary verification key** (`--ancillary-verification-key` or `ANCILLARY_VERIFICATION_KEY`) which is specified in the [Networks configuration](https://mithril.network/doc/manual/getting-started/network-configurations) page.
@@ -92,7 +88,6 @@ As a minor extension, we have adopted a slightly different versioning convention
92
88
## Mithril Distribution [2513.0] - 2025-03-28
93
89
94
90
-**BREAKING** changes in Mithril nodes:
95
-
96
91
- Upgraded the minimum required `glibc` version from `2.31` to `2.35` for the pre-built Linux binaries
97
92
- Mithril signer with versions `<=0.2.200`**must be updated** following the cleanup of `Thales` era legacy code
98
93
- Mithril client library `with_snapshot_uploader` function has been renamed to `with_file_uploader`.
@@ -102,15 +97,13 @@ As a minor extension, we have adopted a slightly different versioning convention
102
97
- End support for **macOS x64 pre-built binaries** for the client CLI.
103
98
104
99
- Cardano database full certification:
105
-
106
100
- Creation of two separate archives for the immutable files and for the ancillary files.
107
101
- Added a signed manifest file to the ancillary archive (contains the list of all files in the archive and their sha256 hashes).
108
102
- Added client validation of the signature of the manifest file and the integrity of the files in the archive after downloading an ancillary archive.
109
103
110
104
-**UNSTABLE** Implement a follower signer registration mode in the aggregator.
- Implement the new signed entity type `CardanoDatabase`.
193
183
- Implement the signable builder for the signed entity type `CardanoDatabase`.
194
184
@@ -207,7 +197,6 @@ As a minor extension, we have adopted a slightly different versioning convention
207
197
## Mithril Distribution [2445.0] - 2024-11-07
208
198
209
199
-**BREAKING** changes in Mithril client library, CLI, and WASM:
210
-
211
200
- Remove deprecated `beacon` field from Mithril certificates.
212
201
- Clients from distribution [`2430`](#mithril-distribution-24300---2024-07-30) and above are compatible with this change.
213
202
@@ -236,7 +225,6 @@ As a minor extension, we have adopted a slightly different versioning convention
236
225
## Mithril Distribution [2442.0] - 2024-10-21
237
226
238
227
- Decentralization of the signature orchestration:
239
-
240
228
- Optimizations of the state machine used by the signer to create individual signatures.
241
229
242
230
- Support for buffering of incoming single signatures by the aggregator if it can not aggregate them yet.
@@ -272,7 +260,6 @@ As a minor extension, we have adopted a slightly different versioning convention
272
260
## Mithril Distribution [2437.1] - 2024-09-23
273
261
274
262
-**BREAKING** changes in Mithril client WASM:
275
-
276
263
- Implementation of seamless transition from **unstable** to **stable** features.
277
264
- A new `unstable` option in the client allows the usage of unstable features.
278
265
- The previous `client.unstable` implementation is not supported anymore and must be replaced with `client`.
@@ -288,13 +275,11 @@ As a minor extension, we have adopted a slightly different versioning convention
288
275
- Post `Chang` hard fork cleanup of the CI, devnet and infrastructure.
289
276
290
277
- Cardano transactions certification (stable for signer and aggregator):
291
-
292
278
- Support for Mithril signer memory optimization when signing Cardano transactions with multiple Merkle tree storage backends.
293
279
- Support infinite preloading of Cardano transactions in signer.
294
280
- Fix Cardano transactions rollbacks creating panics in signer and aggregator.
295
281
296
282
- Cardano stake distribution certification (stable for signer and aggregator):
297
-
298
283
- Implement the signable and artifact builders for the signed entity type `CardanoStakeDistribution`.
299
284
- Implement the HTTP routes related to the signed entity type `CardanoStakeDistribution` on the aggregator REST API.
300
285
- Added support in the `mithril-client` library for retrieving `CardanoStakeDistribution` by epoch or by hash, and for listing all available `CardanoStakeDistribution`.
@@ -325,7 +310,6 @@ As a minor extension, we have adopted a slightly different versioning convention
325
310
- Support better disk configuration in terraform deployments with the CI/CD workflows.
326
311
327
312
-**UNSTABLE** Cardano transactions certification:
328
-
329
313
- Make Cardano transaction signing settings configurable via the CD.
330
314
331
315
- Crates versions:
@@ -361,7 +345,6 @@ As a minor extension, we have adopted a slightly different versioning convention
361
345
- Field `beacon` becomes optional in `CertificatePendingMessage` response of `/certificate-pending` route.
362
346
363
347
-**UNSTABLE** Cardano transactions certification:
364
-
365
348
- Optimize the performances of the computation of the proof with a Merkle map.
366
349
- Handle rollback events from the Cardano chain by removing stale data.
367
350
- Preload Cardano transactions and Block Range Roots at signer & aggregator startup.
@@ -385,14 +368,12 @@ As a minor extension, we have adopted a slightly different versioning convention
385
368
## Mithril Distribution [2423.0] - 2024-06-12
386
369
387
370
-**BREAKING** changes in Mithril client CLI:
388
-
389
371
- The deprecated `snapshot` command is removed from the Mithril client CLI
390
372
- Use the `cardano-db snapshot` command instead.
391
373
392
374
- Update website and explorer user interface to use the new mithril logo.
393
375
394
376
-**UNSTABLE** Cardano transactions certification:
395
-
396
377
- Support computation of the Cardano Transactions signature and proving with the pre-computed Block Range Merkle Roots retrieved from the database.
397
378
- Prune Cardano Transactions from the signer database after the Block Range Merkle Roots have been computed.
398
379
- Implement a Chain Reader which retrieves blocks from the Cardano chain with Pallas through the `chainsync` mini-protocol.
@@ -414,7 +395,6 @@ As a minor extension, we have adopted a slightly different versioning convention
414
395
## Mithril Distribution [2418.1] - 2024-05-13
415
396
416
397
-**BREAKING** changes in Mithril client CLI:
417
-
418
398
- Certificate chain structure has been modified to remove coupling with immutable file number.
419
399
- Client needs to be updated to verify certificate chain.
420
400
@@ -423,7 +403,6 @@ As a minor extension, we have adopted a slightly different versioning convention
423
403
- Chain observers support the retrieval of the current Cardano chain point.
424
404
425
405
- Deprecate `portable` feature of `mithril-stm` and `mithril-client`:
426
-
427
406
- Instead, always enable BLST `portable` feature in `mithril-stm` for runtime check of intel ADX instruction set.
428
407
-`portable` feature now has no effect and should be removed from crate dependencies.
429
408
- Removed it from all other crates (including `mithril-common`).
@@ -447,7 +426,6 @@ As a minor extension, we have adopted a slightly different versioning convention
Copy file name to clipboardExpand all lines: README.md
-3Lines changed: 0 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -80,7 +80,6 @@ This repository consists of the following parts:
80
80
-[**Mithril signer**](./mithril-signer): the node of the **Mithril network** responsible for producing individual signatures that are collected and aggregated by the **Mithril aggregator**.
81
81
82
82
-[**Internal**](./internal): the shared tools and API used by **Mithril** crates.
83
-
84
83
-[**Mithril build script**](./internal/mithril-build-script): a toolbox for Mithril crates that uses a build script phase.
85
84
86
85
-[**Mithril cardano-node-chain**](./internal/cardano-node/mithril-cardano-node-chain): mechanisms to read and interact with the **Cardano chain** through a Cardano node, used by **Mithril network** nodes.
@@ -108,13 +107,11 @@ This repository consists of the following parts:
108
107
-[**Mithril signed entity prealoader**](./internal/signed-entity/mithril-signed-entity-preloader): a **preload** mechanism for the Cardano transaction signed entity, used by **Mithril network** nodes.
109
108
110
109
-[**tests**](./internal/tests): shared testing tools used by **Mithril** crates.
111
-
112
110
-[**Mithril api spec**](./internal/tests/mithril-api-spec): toolset to verify conformity of http routes against an Open Api specification, used by **Mithril network** nodes.
113
111
114
112
-[**Mithril test http server**](internal/tests/mithril-test-http-server): provides a test http server, used by **Mithril network** nodes.
115
113
116
114
-[**Mithril test lab**](./mithril-test-lab): the suite of tools that allow us to test and stress the **Mithril** protocol implementations.
117
-
118
115
-[**Mithril devnet**](./mithril-test-lab/mithril-devnet): the private **Mithril/Cardano network** used to scaffold a **Mithril network** on top of a **Cardano network**.
119
116
120
117
-[**Mithril end to end**](./mithril-test-lab/mithril-end-to-end): the tool used to run test scenarios against a **Mithril devnet**.
Copy file name to clipboardExpand all lines: SECURITY.md
-1Lines changed: 0 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -53,7 +53,6 @@ Please include as much details as needed to clearly qualify the issue:
53
53
a. **Mitigation**: Depending on the severity and criticity of the issue, the team can decide to disclose the issue publicly in the absence of a fix _if and only if_ a clear, simple, and effective mitigation plan is defined. This _must_ include instructions for users and operators of the software, and a time horizon at which the issue will be properly fixed (eg. version number).
54
54
55
55
b. **Fix**: When a fix is available and approved, it should be merged and made available as quickly as possible:
56
-
57
56
- All commits to the private repository are squashed into a single commit whose description _should not_ make any reference it relates to a security vulnerability
58
57
- A new Pull Request is created with this single commit
59
58
- This PR's review and merging is expedited as all the work as already been done
Copy file name to clipboardExpand all lines: docs/website/root/manual/operate/run-signer-node.md
-3Lines changed: 0 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -99,12 +99,10 @@ Note that this guide works on a Linux machine only.
99
99
:::
100
100
101
101
- To operate a **Cardano node** as a **stake pool**, you need:
102
-
103
102
- The pool's `operational certificate`
104
103
- The pool's `KES secret key`
105
104
106
105
- To access the file system of the **Cardano block producer** node for **production** deployment (or of the **Cardano relay** node for **naive** deployment), you will need the following permissions:
107
-
108
106
- Read rights on the `Database` folder (specified by the `--database-path` setting of the **Cardano node**)
109
107
- Read and write rights on the `Inter Process Communication` file (typically defined by the `CARDANO_NODE_SOCKET_PATH` environment variable used to launch the **Cardano node**)
- If you have already installed `Squid` via `apt` package manager, we recommend that you delete it before manually building it from source by running the following commands:
Copy file name to clipboardExpand all lines: docs/website/root/mithril/advanced/mithril-protocol/protocol.md
-1Lines changed: 0 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -103,7 +103,6 @@ a quorum of `k` valid signatures must be submitted.
103
103
- For every valid signature, the party creates a proof (`π`) containing a signature of the message, verification key, stake, and paths of the party in the Merkle tree.
104
104
105
105
- Then, multiple signatures can be aggregated together to form a certificate (`τ`) by:
106
-
107
106
- Verifying signatures from each party:
108
107
- Checking the party is authorized to sign for the given index (using the same procedure as signing)
Copy file name to clipboardExpand all lines: docs/website/root/mithril/advanced/threat-model.md
-2Lines changed: 0 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -114,7 +114,6 @@ For each asset, we first identify which part of the **CIA triad** (Confidentiali
114
114
- The KES key is present only on the block-producing (BP) node but needs to be shared with both the `cardano-node` process and the `mithril-signer` process.
115
115
- KES keys are needed by `mithril-signer` to sign a verification key along with an operational certificate that authenticates the key for this stake pool ID.
116
116
- This signing happens at every epoch.
117
-
118
117
-**Confidentiality**: Yes
119
118
Capturing KES private keys allows an attacker to impersonate a registered SPO on-chain and produce blocks on its behalf until the keys are rotated.
120
119
@@ -325,7 +324,6 @@ A DoS on the `mithril-aggregator`.
325
324
Data integrity of the Cardano block producer’s on-disk database could be compromised either by the action of the Mithril signer or by an attacker with access to the signer.
0 commit comments