Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add the genesis header to the proof #2347

Open
ineiti opened this issue Jul 29, 2020 · 0 comments
Open

Add the genesis header to the proof #2347

ineiti opened this issue Jul 29, 2020 · 0 comments

Comments

@ineiti
Copy link
Member

ineiti commented Jul 29, 2020

To verify a proof of byzcoin, the client not only needs the genesis-ID, but also the genesis-header. If he doesn't have this information, he cannot verify whether the first forward-link is valid or not! Thus an attacker could create a false roster for the genesis block and send this along with the proof and proof any state he wants.

The current code takes care of this by downloading the genesis-header manually. But this makes it so that the verifier needs an internet connection. I propose to:

  • update the documentation at byzcoin/DataStructures.md
  • add an optional GenesisHeader field to the Proof structure
  • create a Proof.VerifyGenesis that takes into account the verification of the genesis-block and returns an error if the genesis-block is not present - both for go, and javascript
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant