-
Notifications
You must be signed in to change notification settings - Fork 221
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improve security by updating blst to version 0.3.12 #1257
Labels
enhancement
New feature or request
Comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Context and scope
Currently
subnet-evm
uses the version 0.3.11 of the libraryblst
to implement the cryptographic signature BLS12-381. The version 0.3.12 ofblst
improves security as described in its release notes https://github.com/supranational/blst/releases/tag/v0.3.12 and in particular includes the commits supranational/blst@dae1f94 and supranational/blst@6cca12a thatDiscussion and alternatives
IMHO it is a good security practice to update version of libraries periodically.
Open questions
See ava-labs/avalanchego#3079 , ava-labs/coreth#614 and ava-labs/avalanche-network-runner#724
The text was updated successfully, but these errors were encountered: