oasisprotocol / oasisprotocol/oasis-core
Make node P2P keys totally ephemeral
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 369
- Forks
- 151
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 6
Description
Node P2P keys used for authenticating libp2p connections should be made totally ephemeral (e.g., regenerated periodically while the node is running).
Care needs to be taken to not make the node unreachable until the next epoch transition as currently the other nodes will only update their local cache on an epoch transition.
It is not immediately obvious if libp2p supports such a thing without shutting down the P2P host.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Investigate how the node currently creates and rotates its libp2p authentication keys, how the P2P host supports key replacement, and how peer caches update at epoch transitions. Done means keys regenerate periodically while the node runs, without shutting down the host or making the node unreachable during cache updates.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- blockchain, networking
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100