Timeline for Linking libsecp256k1 as shared library to Bitcoin Core
Current License: CC BY-SA 4.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 11, 2020 at 2:31 | comment | added | Claris | There's inbuilt benchmarking for libsecp256k1, but be aware that it's not the purpose of the library to be fast for signing or key generation. There's many functions which are made intentionally, seemingly arbitrarily slow to avoid secret dependent memory accesses and other secret leaks through timing. | |
| Dec 11, 2020 at 2:29 | comment | added | Tom | Ok I get the point, but this could be fixed with rpath and a separate directories. Anyway. I just wanted to benchmark different modifications. Without recompiling the whole thing by swapping symlinks :) | |
| Dec 11, 2020 at 2:15 | comment | added | Claris |
The only reason for dynamic dependencies in software at all is for space saving, which is not a consideration today with the size of modern storage, and the fact that the several megabyte bitcoind binary will probably be downloading 300GB of data shortly after installation.
|
|
| Dec 11, 2020 at 2:14 | comment | added | Claris | No, the reason why Bitcoin Core is distributed as a static binary is due to security concerns, not "security by obscurity". What we've seen in the past is that many distributions of packages tend to be providing hilariously outdated versions of core libraries like OpenSSL, which for a time was consensus critical. Two versions of Bitcoin Core that are otherwise identical could become out of sync with one another just due to minor changes within its dependent libraries. | |
| Dec 11, 2020 at 2:12 | comment | added | Tom | It is not a productive system! But even if it were a productive system. Isn't it obscurity rather than security. I suspect the reason was optimization of course a LD_PRELOAD or similar would be possible. But then we are talking about a deeper system level security problem and such a system is the wrong place for your coins in the first place. But I am open to other points of view. | |
| Dec 11, 2020 at 1:36 | comment | added | Claris | Why on earth would you want to be dynamic linking a security and safety critical library? | |
| Dec 10, 2020 at 23:24 | history | edited | Michael Folkson |
edited tags
|
|
| Dec 10, 2020 at 23:01 | review | First posts | |||
| Dec 10, 2020 at 23:19 | |||||
| Dec 10, 2020 at 22:56 | history | asked | Tom | CC BY-SA 4.0 |