Paul Miller

@paulm

26 Following

16964 Followers

Paul Miller pfp

The new ETH client by @gakonst and @paradigm is live. All historical transactions (aka “archive node”) fit in just 2.3TB. Full node is 1.2TB. Syncing from genesis takes 50 hours. Can be ran on a cheap pc: no need to pay for 3rd party RPC which tracks users. https://www.paradigm.xyz/2024/06/reth-prod

28 replies

70 recasts

396 reactions

Paul Miller pfp

Human Rights Foundation (hrf.org) awarded us some money for nip44 encrypted chat spec. Looks like we’ll be having an audit of noble-ciphers and remaining parts of curves later in the summer!

22 replies

73 recasts

566 reactions

Paul Miller pfp

micro-eth-signer 0.9 is out. No more block explorers: the release adds ability to fetch full account history and token balances using an archive node, such as @erigon It also implements SSZ in just 900 lines: nearest library is 8x larger. https://github.com/paulmillr/micro-eth-signer

0 reply

1 recast

11 reactions

Paul Miller pfp

Grateful for the grant from Farcaster. Going to spend the funding on new security audits of open-source software.

0 reply

0 recast

9 reactions

Paul Miller pfp

Announcing noble-post-quantum: minimal JS implementation of ML-KEM, ML-DSA and SLH-DSA. Also known as Kyber, Dilithium & SPHINCS+. Only 2000 lines of code - great learning resource for anyone who’s messing with PQ stuff. Check out README for comparison. https://github.com/paulmillr/noble-post-quantum

2 replies

3 recasts

13 reactions

Paul Miller pfp

micro-eth-signer 0.8 with support for dencun EIP4844 “blob-carrying” transactions is out. - Alternative to ethers and viem when you only need basics - New 100-line RLP parser - Very friendly debugging experience - Tested against 150MB of vectors https://github.com/paulmillr/micro-eth-signer

0 reply

7 recasts

38 reactions

Paul Miller pfp

New uniswap drama: the lawyers sent takedown notices to legitimate forks that removed censorship. If you are looking to embed uni functionality into your app, glance over micro-eth-signer (https://github.com/paulmillr/micro-eth-signer). It allows to call Uni contract directly, without censorship, in 10 lines of code.

2 replies

4 recasts

28 reactions

Paul Miller pfp

Ethereum ABI parsers are vulnerable to DoS. It’s also possible to inject information in transactions, hidden from parsers. This allows tracking users across different wallets and even stealing private data. Details in a new article. https://github.com/paulmillr/micro-eth-signer/discussions/20

0 reply

1 recast

11 reactions

Paul Miller pfp

Last month, we've collaborated with Starknet and released a new addition to "scure" family of audited libraries. The audit was done by Kudelski security. The package includes stark curve and poseidon / pedersen hashes. Check it out: https://github.com/paulmillr/scure-starknet

0 reply

0 recast

4 reactions

Paul Miller pfp

Someone published NPM fork of noble-curves (and ethereum-cryptography) that sent private keys to a server in China. Be careful and check for typos https://blog.phylum.io/typosquat-of-popular-ethereum-package-steals-private-keys/

0 reply

2 recasts

9 reactions

Paul Miller pfp

MLS is a new open protocol for e2e encrypted group messaging. Think of it as Signal ratchet v2023, or OTR. Did you know Signal group chats are basically a bunch of 1-to-1 messages? Not very efficient. The new protocol has just received the RFC number and will improve on that. https://blog.phnx.im/rfc-9420-mls/

0 reply

1 recast

4 reactions

Paul Miller pfp

Announcing noble-ciphers: tiny 0-dependency cryptographic library, implementing Salsa20, ChaCha, Poly1305, AES-SIV and others. Bonus: a reasonable wrapper around native WebCrypto's AES. Check out its README for some insights: https://github.com/paulmillr/noble-ciphers

0 reply

0 recast

1 reaction

Paul Miller pfp

What’s happening?

9 replies

0 recast

0 reaction