mirror of
https://github.com/serai-dex/serai.git
synced 2025-12-09 12:49:23 +00:00
a141deaf36
This helps identify where the various functionalities are used, or rather, not used. The `Ciphersuite` trait present in `patches/ciphersuite`, facilitating the entire FCMP++ tree, only requires the markers _and_ canonical point decoding. I've opened a PR to upstream such a trait into `group` (https://github.com/zkcrypto/group/pull/68). `WrappedGroup` is still justified for as long as `Group::generator` exists. Moving `::generator()` to its own trait, on an independent structure (upstream) would be massively appreciated. @tarcieri also wanted to update from `fn generator()` to `const GENERATOR`, which would encourage further discussion on https://github.com/zkcrypto/group/issues/32 and https://github.com/zkcrypto/group/issues/45, which have been stagnant. The `Id` trait is occasionally used yet really should be first off the chopping block. Finally, `WithPreferredHash` is only actually used around a third of the time, which more than justifies it being a separate trait. --- Updates `dalek_ff_group::Scalar` to directly re-export `curve25519_dalek::Scalar`, as without issue. `dalek_ff_group::RistrettoPoint` also could be replaced with an export of `curve25519_dalek::RistrettoPoint`, yet the coordinator relies on how we implemented `Hash` on it for the hell of it so it isn't worth it at this time. `dalek_ff_group::EdwardsPoint` can't be replaced for an re-export of `curve25519_dalek::SubgroupPoint` as it doesn't implement `zeroize`, `subtle` traits within a released, non-yanked version. Relevance to https://github.com/serai-dex/serai/issues/201 and https://github.com/dalek-cryptography/curve25519-dalek/issues/811#issuecomment-3247732746. Also updates the `Ristretto` ciphersuite to prefer `Blake2b-512` over `SHA2-512`. In order to maintain compliance with FROST's IETF standard, `modular-frost` defines its own ciphersuite for Ristretto which still uses `SHA2-512`.
99 lines
2.8 KiB
Rust
99 lines
2.8 KiB
Rust
use std::path::Path;
|
|
|
|
use zeroize::Zeroizing;
|
|
|
|
use dalek_ff_group::Ristretto;
|
|
use ciphersuite::{group::ff::PrimeField, WrappedGroup};
|
|
|
|
use crate::{Network, Os, mimalloc, os, build_serai_service, write_dockerfile};
|
|
|
|
#[allow(clippy::needless_pass_by_value)]
|
|
pub fn processor(
|
|
orchestration_path: &Path,
|
|
network: Network,
|
|
coin: &'static str,
|
|
_coordinator_key: <Ristretto as WrappedGroup>::G,
|
|
processor_key: Zeroizing<<Ristretto as WrappedGroup>::F>,
|
|
substrate_evrf_key: Zeroizing<Vec<u8>>,
|
|
network_evrf_key: Zeroizing<Vec<u8>>,
|
|
) {
|
|
let setup = mimalloc(Os::Debian).to_string() +
|
|
&build_serai_service(
|
|
if coin == "ethereum" {
|
|
r#"
|
|
RUN cargo install svm-rs
|
|
RUN svm install 0.8.26
|
|
RUN svm use 0.8.26
|
|
"#
|
|
} else {
|
|
""
|
|
},
|
|
network.release(),
|
|
&format!("binaries {} {coin}", network.db()),
|
|
"serai-processor",
|
|
);
|
|
|
|
const ADDITIONAL_ROOT: &str = r#"
|
|
# Install ca-certificates
|
|
RUN apt install -y ca-certificates
|
|
"#;
|
|
|
|
// TODO: Randomly generate these
|
|
const RPC_USER: &str = "serai";
|
|
const RPC_PASS: &str = "seraidex";
|
|
// TODO: Isolate networks
|
|
let hostname = format!("serai-{}-{coin}", network.label());
|
|
let port = format!(
|
|
"{}",
|
|
match coin {
|
|
"bitcoin" => 8332,
|
|
"ethereum" => 8545,
|
|
"monero" => 18081,
|
|
_ => panic!("unrecognized external network"),
|
|
}
|
|
);
|
|
|
|
let mut env_vars = vec![
|
|
("MESSAGE_QUEUE_RPC", format!("serai-{}-message-queue", network.label())),
|
|
("MESSAGE_QUEUE_KEY", hex::encode(processor_key.to_repr())),
|
|
("SUBSTRATE_EVRF_KEY", hex::encode(substrate_evrf_key)),
|
|
("NETWORK_EVRF_KEY", hex::encode(network_evrf_key)),
|
|
("NETWORK", coin.to_string()),
|
|
("NETWORK_RPC_LOGIN", format!("{RPC_USER}:{RPC_PASS}")),
|
|
("NETWORK_RPC_HOSTNAME", hostname),
|
|
("NETWORK_RPC_PORT", port),
|
|
("DB_PATH", "/volume/processor-db".to_string()),
|
|
("RUST_LOG", "info,serai_processor=debug".to_string()),
|
|
];
|
|
if coin == "ethereum" {
|
|
env_vars
|
|
.push(("ETHEREUM_RELAYER_HOSTNAME", format!("serai-{}-ethereum-relayer", network.label())));
|
|
env_vars.push(("ETHEREUM_RELAYER_PORT", "20830".to_string()));
|
|
}
|
|
let mut env_vars_str = String::new();
|
|
for (env_var, value) in env_vars {
|
|
env_vars_str += &format!(r#"{env_var}=${{{env_var}:="{value}"}} "#);
|
|
}
|
|
|
|
let run_processor = format!(
|
|
r#"
|
|
# Copy the Processor binary and relevant license
|
|
COPY --from=builder --chown=processor /serai/bin/serai-processor /bin/
|
|
COPY --from=builder --chown=processor /serai/AGPL-3.0 .
|
|
|
|
# Run processor
|
|
CMD {env_vars_str} serai-processor
|
|
"#
|
|
);
|
|
|
|
let run = os(Os::Debian, ADDITIONAL_ROOT, "processor") + &run_processor;
|
|
let res = setup + &run;
|
|
|
|
let mut processor_path = orchestration_path.to_path_buf();
|
|
processor_path.push("processor");
|
|
processor_path.push(coin);
|
|
processor_path.push("Dockerfile");
|
|
|
|
write_dockerfile(processor_path, &res);
|
|
}
|