RiB Newsletter #30
Welcome to the #30 edition of Rust in Blockchain, the monthly newsletter about Rust, distributed systems, cryptography, and other industry topics. Previous: #29.
This month RiB received donations of:
- A handsome chunk of ETH from the MASQ project, and KauriHero.
- The rustinblockchain.bit name on DAS, the Decentralized Account System, from janewu.
We are grateful.
Thanks
Thanks to contributors: Adam Szkoda, Adrien LF, Amir Taaki, Justin, Michael Ward, Radha, y2kappa, Brian Anderson, Aimee Zhu. Thank you for your help!
RiB needs help to keep up with Rust blockchain projects. If you follow a particular project, or otherwise find information that is beneficial to the Rust & blockchain community, please contribute to the next issue by submitting a PR to the next draft.
Project Spotlight
Each month we like to shine a light on a notable Rust blockchain project. This month that project is…
wagyu
is a command line cryptocurrency wallet generator,
with support for Bitcoin, Ethereum, Monero, and Zcash.
It can generate both standard and hierarchical deterministic (HD) wallets.
It is from the Aleo project.
A useful tool for those that create a lot of wallets.
Interesting Things
News
Blog Posts and Discussions
Papers
- A Performance Evaluation of Pairing-Based Broadcast Encryption Systems
- Experimenting with Collaborative zk-SNARKs: Zero-Knowledge Proofs for Distributed Secrets
- An Improved Range Proof with Base-3 Construction
- On Cryptocurrency Wallet Design
- Public Report – Zendoo Proof Verifier Cryptography Review
- Securing Proof-of-Stake Nakamoto Consensus Under Bandwidth Constraint
- Information Dispersal with Provable Retrievability for Rollups
- Post-Quantum Zero Knowledge, Revisited (or: How to do Quantum Rewinding Undetectably)
- InterTrust: Towards an Efficient Blockchain Interoperability Architecture with Trusted Services
Projects
- DAS, the Decentralized Account System. DAS is a multi-chain protocol for maintaining various types of identity information. It stores its data on the Nervos Network (CKB), but by using CKB’s rent model and capability for verifying foreign-chain transactions it mostly lets users avoid direct interaction with the CKB chain.
- brainwallet. Rust command line program for Bitcoin brainwallet.
- AlephBFT. Rust implementation of Aleph Protocol, which is an asynchronous and Byzantine fault tolerant consensus protocol aimed at ordering arbitrary messages (transactions).
- Polygon Miden. A STARK-based virtual machine.
- ark-plonk. A pure Rust PLONK implementation using arkworks as a backend.
- Scrypto. Language for building DeFi apps on Radix.
- Zeekoe. Zero-knowledge layer-2 payment channels.
Security Advisories
Monthly security advisories, from RustSec, and GitHub Advisories. Bold entries here are especially relevant to blockchain projects.
- RUSTSEC-2021-0122: Vulnerability in
flatbuffers
. Generated code can read and write out of bounds in safe code. This is a critical, network-exposed vulnerability, and users of this crate must take action. - RUSTSEC-2021-0125: Panic on incorrect date input to
simple_asn1
. - RUSTSEC-2021-0123: Vulnerability in
fruity
. ConvertingNSString
to a String Truncates at Null Bytes. - RUSTSEC-2021-0124: Vulnerability in
tokio
. Data race when sending and receiving after closing a oneshot channel. - RUSTSEC-2021-0126: Vulnerability in rust-embed.
RustEmbed generated
get
method allows for directory traversal when reading files from disk. - CVE-2021-3917:
coreos-installer
< 0.10.0 writes world-readable Ignition config to installed system. - CVE-2021-43174: Memory exhaustion in
routinator
. - CVE-2021-43790: Use after free in
lucet
.
Most Active in November
Parity: 341 merged PRs (1, 2, 3, 4, 5), 148 closed issues (1, 2, 3, 4, 5), 122 open issues (1, 2, 3, 4, 5)
NEAR: 264 merged PRs (1, 2, 3), 56 closed issues (1, 2, 3), 86 open issues (1, 2, 3)
Solana: 222 merged PRs (1, 2), 36 closed issues (1, 2), 45 open issues (1, 2)
Project Updates
Aleo
126 merged PRs (1, 2, 3, 4), 23 closed issues (1, 2, 3), 38 open issues (1, 2, 3, 4)
Anoma
27 merged PRs (1, 2), 31 closed issues (1, 2), 33 open issues (1, 2)
ChainSafe
31 merged PRs (1, 2), 31 closed issues (1, 2), 44 open issues (1, 2)
COMIT
0 merged PRs, 1 closed issues (1), 4 open issues (1)
Concordium
29 merged PRs (1, 2, 3), 10 closed issues (1, 2), 4 open issues (1, 2)
Conflux
11 merged PRs (1), 1 closed issues (1), 5 open issues (1)
DarkFi
3 merged PRs (1), 0 closed issues, 3 open issues (1)
Dfinity
20 merged PRs (1, 2, 3, 4), 4 closed issues (1, 2, 3), 9 open issues (1, 2, 3, 4)
Diem
211 merged PRs (1), 17 closed issues (1), 35 open issues (1)
Elrond
56 merged PRs (1, 2), 0 closed issues, 1 open issues (1)
Findora
23 merged PRs (1, 2), 14 closed issues (1), 5 open issues (1)
Fluence
16 merged PRs (1, 2, 3), 7 closed issues (1, 2), 35 open issues (1, 2, 3)
Golem
25 merged PRs (1, 2), 29 closed issues (1), 29 open issues (1)
Grin
6 merged PRs (1), 2 closed issues (1), 3 open issues (1)
Holochain
40 merged PRs (1, 2, 3), 5 closed issues (1, 2), 3 open issues (1)
IOTA
19 merged PRs (1), 3 closed issues (1), 9 open issues (1)
Lighthouse
17 merged PRs (1, 2), 16 closed issues (1, 2), 15 open issues (1)
MobileCoin
32 merged PRs (1, 2), 1 closed issues (1), 2 open issues (1)
NEAR
264 merged PRs (1, 2, 3), 56 closed issues (1, 2, 3), 86 open issues (1, 2, 3)
Nervos
46 merged PRs (1, 2, 3), 1 closed issues (1), 1 open issues (1)
Parity
341 merged PRs (1, 2, 3, 4, 5), 148 closed issues (1, 2, 3, 4, 5), 122 open issues (1, 2, 3, 4, 5)
Rust Bitcoin
52 merged PRs (1, 2, 3, 4, 5, 6), 15 closed issues (1, 2, 3), 26 open issues (1, 2, 3, 4)
- Twitter thread: Taproot upgrade
Secret Network
11 merged PRs (1), 6 closed issues (1), 6 open issues (1)
Solana
222 merged PRs (1, 2), 36 closed issues (1, 2), 45 open issues (1, 2)
- Proof of History: How Solana brings time to crypto
- Solana’s Energy Use Report: November 2021
- Solana Validator 101: Transaction Processing
Spacemesh
13 merged PRs (1), 48 closed issues (1, 2), 21 open issues (1, 2)
Subspace Labs
45 merged PRs (1), 11 closed issues (1), 1 open issues (1)
TezEdge
33 merged PRs (1), 2 closed issues (1), 1 open issues (1)
Zcash
83 merged PRs (1, 2, 3), 64 closed issues (1, 2, 3), 51 open issues (1, 2, 3)
zkSync
0 merged PRs, 2 closed issues (1), 6 open issues (1)
- Twitter thread: Highlights from our first reddit zkEVM AMA!
Events
Dec 1-3 | Seoul, Korea
ICISC: The 24th Annual International Conference on information Security and Cryptology
Dec 14-15 | Online
18th IMA International Conference on Cryptography and Coding
Jan 24-26, 2022 | Arrillaga Alumni Center, Stanford University
SBC'22: The Science of Blockchain Conference 2022
Feb 14-18, 2022 | Canada
Financial Cryptography and Data Security 2022
Apr 6-9 | Portland, OR
dystopia Fest: Summit & Hackathon
Apr 16 - May 13th | Online
Careers
Bolt Labs | US, Remote
Hubble (Solana, DeFi) | London, Remote
Massa | Paris, Remote
- Lead blockchain Developer
- Senior Blockchain Developer
- Lead Blockchain Security Engineer
- Senior Blockchain Security Engineer
- Lead Blockchain Performance Engineer
- Lead Blockchain Tools Engineer
- Lead DApps Developer
- Lead Infrastructure Engineer
- Lead Support Engineer
Worldcoin | Berlin, San Francisco
More jobs can be found at Job Board.
Want to be included in the next issue? Feel free to submit a PR to the #31 draft.
Join the discussion on RiB telegram group ❤️