coosld/ceremonyclient
1
0
Fork 0
mirror of https://github.com/QuilibriumNetwork/ceremonyclient.git synced 2026-03-02 06:47:27 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

use deterministic key for peer id of workers to stop flagging workers as sybil attacks

Browse Source
This commit is contained in:
Cassandra Heart 2026-02-23 20:56:41 -06:00
parent 4e0d71409a
commit 4a4543fae9
No known key found for this signature in database
GPG Key ID: 371083BFA6C240AA
1 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
node/p2p/blossomsub.go
View File

@ -44,6 +44,7 @@ import (
"github.com/pkg/errors"
"github.com/prometheus/client_golang/prometheus"
"go.uber.org/zap"
"golang.org/x/crypto/sha3"
"google.golang.org/grpc"
"google.golang.org/grpc/credentials/insecure"
grpcpeer "google.golang.org/grpc/peer"
@ -459,7 +460,24 @@ func NewBlossomSub(
if coreId == 0 {
opts = append(opts, libp2p.Identity(privKey))
} else {
workerKey, _, err := crypto.GenerateEd448Key(rand.Reader)
// Derive a deterministic worker key from the peer key + core ID.
// This gives each worker a stable, unique peer ID across restarts
// (avoiding sybil detection) while still using the original peer
// key for message signing.
rawPriv, err := privKey.Raw()
if err != nil {
logger.Panic("error getting private key bytes", zap.Error(err))
}
shake := sha3.NewShake256()
shake.Write(rawPriv)
shake.Write([]byte(fmt.Sprintf("/worker/%d", coreId)))
seed := make([]byte, 64)
if _, err := shake.Read(seed); err != nil {
logger.Panic("error deriving worker key seed", zap.Error(err))
}
workerKey, _, err := crypto.GenerateEd448Key(
bytes.NewReader(seed),
)
if err != nil {
logger.Panic("error generating worker peerkey", zap.Error(err))
}