Hyperledger Ursa is a shared cryptographic library that would enable people (and projects) to avoid duplicating other cryptographic work and hopefully increase security in the process. The library would be an opt-in repository for projects (and, potentially others) to place and use crypto.
As Hyperledger has matured, the individual projects within Hyperledger have started to find a need for sophisticated cryptographic implementations. Rather than have each project implement its own cryptographic protocols, we think it would be more desirable to collaborate on a shared library. There are many reasons to do this:
Avoiding duplication: crypto implementations are notoriously difficult to get correct (particularly when side channels are taken into account) and often require a lot of work in order to complete with a high level of security. The library would potentially allow projects to share crypto implementations, avoiding unnecessary duplication and extra work.
Security: having most (or all) of the crypto code in a single location would substantially simplify doing a security analysis of the crypto portion of Hyperledger. In addition, the lack of duplication would mean that maintenance would be easier (and thus, hopefully, security bugs would be less numerous). People might also be less likely to “roll their own crypto” if there are easily accessible implementations.
Expert Review: In addition, the ability to enforce expert review of all cryptographic code should increase security as well. There has already been at least one substantial bug in a Hyperledger DLT platform at a cryptographic algorithm level. We think that having a concentration of cryptographic experts in Hyperledger will help us minimize the risk of this in the future.
Cross-platform interoperability: if two projects use the same crypto libraries, it will simplify (substantially in some cases) cross-platform interoperability, since cryptographic verification will involve the same protocols on both sides.
Modularity: This could be the first common component/module and a step towards modular DLT platforms, which share common components. While we have already outlined most of the advantages this modularity would bring in terms of actual functionality, a successful crypto library could encourage and push forward more modular activities.
New Projects: It would be easier for new projects to get off the ground if they had easy access to well-implemented, modular cryptographic abstractions.
Chat (for questions and ephemeral discussions)
- Meetings happen every other week on Wednesdays at 7:00 AM Pacific Time.
- The most recent meeting was on January 9th, 2019.
- The next meeting will be on January 23rd, 2019.
- Previous Meeting recordings can be found in the "Meeting Agendas and Notes" tab. Some (very old) previous meeting recordings can be found here .
Include Page Meeting Agendas and Notes Meeting Agendas and Notes
Hart Montgomery, Fujitsu
Dave Huseby, The Linux Foundation
Nathan George, Sovrin Foundation
Dan Middleton, Intel
Mic Bowman, Intel
Manu Drijvers, DFINITY
Jan Camenisch, DFINITY
Binh Nguyen, State Street
Angelo De Caro, IBM
Amit Kumar Gupta, Sai Infratel
Shawn Amundson, Bitwise.io
Approved by the TSC on 2018-11-01
- Nathan George Document the road mapping process using JIRA and Confluence and what needs to be done.
- Create a rough draft of the RFC process for Ursa.
- Create a rough draft of the selection criteria and checklist for adding new dependencies to Ursa
Recent space activity