mimblewimble/grin

Add TLS to peer-to-peer connections

Open

#1,420 opened on 2018年8月25日

GitHub で見る
 (3 comments) (1 reaction) (0 assignees)Rust (4,876 stars) (991 forks)batch import
enhancementgood first issuehelp wanted

説明

The goal is to improve privacy by making packet inspections a lot harder. In countries where cryptocurrencies or anonymous cryptocurrencies are illegal, this could be very important.

Ulttimately we could use Kovri or something similar, but this gets us 80% there for almost no performance penalty with what should just be very little code.

To preempt some comments about TLS security (which isn't great), this is only for privacy and we can support only a very small subset of known good cyphers.

コントリビューターガイド

技術スタック
rust
領域
backendsecurityblockchain
Issue 種別
feature
難度新しい貢献者にとっての実装難度です。1 は非常に小さな変更、5 は専門的な作業です。
4
推定時間経験ある貢献者が調査、実装、テスト、pull request 準備にかけるおおよその時間範囲です。
over 1 week
活動状況Issue が今どれだけ取り組みやすいかを示します。新しい、活発、古い、ブロック中、またはメンテナー入力待ちなどです。
stale
明確さ期待される変更、受け入れ条件、次の手順がどれだけ明確かを示します。
mostly clear
前提条件
RustTLS/SSLnetworking
初心者向け度初回貢献者にどれだけ取り組みやすいかを 1-100 で推定したスコアです。
30
調査方針
Implement TLS for peer to peer connections in Grin's networking layer. Likely requires modifying the existing P2P module (e.g., 'p2p/' or 'net/') to wrap TCP streams with TLS using a Rust TLS library such as rustls or native tls. The implementation should support a limited set of strong ciphersuites as mentioned in the issue. Ensure that the change is backward compatible and does not break existing non TLS connections.