337e87b228
This is done so that the time spent on bcrypt during test cases can be reduced. This change reduces the amount of time lcd tests spend on bcrypt from 76% to 40%. (We need to reduce the number of calls to bcrypt in a seperate PR, along with fixing other sources of slowness) Making the bcrypt security parameter a var shouldn't be a security issue: One can't verify an invalid key by maliciously changing the bcrypt parameter during a runtime vulnerability. The main security threat this then exposes would be something that changes this during runtime before the user creates their key. This vulnerability must succeed to update this to that same value before every subsequent call to gaiacli keys in future startups / or the attacker must get access to the filesystem. However, with this same threat model (changing variables in runtime), one can cause the user to sign a different tx than what they see, which is a significantly cheaper attack then breaking a bcrypt hash. (Recall that the nonce still exists to break rainbow tables) |
||
|---|---|---|
| .circleci | ||
| .github | ||
| baseapp | ||
| client | ||
| cmd/gaia | ||
| crypto | ||
| docs | ||
| examples | ||
| networks | ||
| scripts | ||
| server | ||
| store | ||
| tests | ||
| tools | ||
| types | ||
| version | ||
| wire | ||
| x | ||
| .codecov.yml | ||
| .dockerignore | ||
| .gitignore | ||
| CHANGELOG.md | ||
| CODE_OF_CONDUCT.md | ||
| CODEOWNERS | ||
| docker-compose.yml | ||
| Dockerfile | ||
| Gopkg.lock | ||
| Gopkg.toml | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
| Vagrantfile | ||
Cosmos SDK
| Branch | Tests | Coverage |
|---|---|---|
| develop |  |
 |
| master |  |
 |
The Cosmos-SDK is a framework for building blockchain applications in Golang.
It is being used to build Gaia, the first implementation of the Cosmos Hub,
WARNING: The SDK has mostly stabilized, but we are still making some breaking changes.
Note: Requires Go 1.10+
Gaia Testnet
For more information on connecting to the testnet, see cmd/gaia/testnets
For the latest status of the testnet, see the status file.
Install
See the install instructions
Quick Start
Disambiguation
This Cosmos-SDK project is not related to the React-Cosmos project (yet). Many thanks to Evan Coury and Ovidiu (@skidding) for this Github organization name. As per our agreement, this disambiguation notice will stay here.