{"signature": "0x8237e3e21330432ee10ecdc7cd6b9f6a8fbd63060f928ae5e757c81b784cc2c5659d3abb532d67a5ba04c7460c58a43109341018f63218456861d3014ddf2ad61b", "application": {"round": "0xf50fa2dc5cbe583670323bc5acdeb02c447cd8b3", "answers": [{"type": "email", "hidden": true, "question": "Email Address", "questionId": 0, "encryptedAnswer": {"ciphertext": "AIMMIrlPe/sLpC+FF84d6dGA4o2BKhWUsGfr1q8EgcYQ8/DfqCt79yAYB+XfyhNW", "encryptedSymmetricKey": "83f52945ec3b3650f040bf9678bff9a316170ef7ec3e7d3a791e4772cb2ba0b850ae892ac800692059234f55910cd00cb7ffef6dbe17a00f741cfccf3ca977d151d296de0e46b41b8f23306fec9369e2b4764a63b01707d2375f67a220eb198f9ade34bae538e43b6cb96bd4756136db6bd809c8217395944892a3a55546a352000000000000002008e7f222c760b564ef0e8acdfb164c7785d61dedf135127af065c69f15d174771e68cab458e992af46682a7b2abbaa94"}}, {"type": "short-answer", "answer": "0", "hidden": true, "question": "Please Provide Prior Funding Sources Including Total Prior Funding for the project in USD", "questionId": 1}, {"type": "link", "hidden": true, "question": "Telegram Handle of Primary Contact", "questionId": 2, "encryptedAnswer": {"ciphertext": "/XJzfXt3X4SbVB76sZtoJmDgwpKPPMqxFwhvnB3c5GamgVbruV5md+NYxNOsEOyd", "encryptedSymmetricKey": "b98bc48f40b8ad9201710e9128bb21e155d56b1df6f46c74c5d2feb4eb7673f26583563813ca0a00402c4eee81f77602ff8e2c139cf59e9701058138ad99958a16c7c216868b3faaa4a253c21525d168484491e2b2e985d5eee36f67491b34a464430ce9beb353b53476feac01a6e193b1431ad3e58ed6f9cf67639d08dec8b20000000000000020baefb7e2bd8e7182b250783245b3e315e8dbf97f615cacd34ccd8118e72472dca1d6967d8708ca8307bfee3819dd8385"}}, {"type": "short-answer", "hidden": true, "question": "Profiles or socials of other main team members publicly associated with the project", "questionId": 3, "encryptedAnswer": {"ciphertext": "QQmREy/51xTX1GP7I73LwS6Y3LcQ2lpHLwCAePU5OKs=", "encryptedSymmetricKey": "b9c33308d70e1c8e723ace587286090efa981bd8763aa48df54771d5eea7b93b411ae9c665cb3006a18e55d34cd1cc1219355fb9d155a63dbb02bd25f25cda3dc25b62d4801df612a3bfae9db711b5ec2e6e8ad143a0623347f3e72f7d65b5b263e7acd190820c245d3f973c7aba5b9d8dd85d1562512281caa3c4196bc238eb00000000000000207f12eba3630f0011a8d60b0ba0dbb02f89005af9140cfdfe29a616d97ca9bc423069b8a9ff0d187175cf558d63d90794"}}, {"type": "link", "answer": "https://forum.avax.network/t/audit-improve-and-port-fundamental-avalanche-tools-to-openbsd-adj-round-1/2098", "hidden": true, "question": "Please provide a link to the forum.avax.network post detailing the application", "questionId": 4}, {"type": "paragraph", "answer": "Detailed at https://forum.avax.network/t/audit-improve-and-port-fundamental-avalanche-tools-to-openbsd-adj-round-1/2098/1\n\nOn October 2023 I started porting Avalanche tools to OpenBSD/adJ, please check social interactions where  I shared how to use Core wallet on OpenBSD/adJ at: \n https://t.me/avalancheacademy/1/837\n\nSince the source code of the Core wallet is closed it is not possible to audit it with the methodology I'm proposing for this project (for security I also prefer open source wallets that don't use WebAssembly like metamask).\n\nI started the effort to port the open source avalanche tools in February 2024 as can be seen at: <https://github.com/ava-labs/avalanche-cli/issues/1498>", "hidden": true, "question": "Please explain how your project meets the round eligibility criteria", "questionId": 5}, {"type": "paragraph", "answer": "Improving the security of the full nework, by improving the security of the tools used by validators and developers.\n\nWe already got a  result that will improve the security of the full network, because all the Avalanche tools used by the validators depend on `blst`, and our methodology helped to discover a spot to improve the security of `blst`  and its author improved it,  we expect  soon the release of a new version of `blst` and that it will be used by all the avalanche tools and the the validators.  See details of the improvement to `blst` at <https://github.com/supranational/blst/issues/206>", "hidden": true, "question": "How does your project benefit the Avalanche Ecosystem?  Please mention any existing or upcoming partnerships.", "questionId": 6}, {"type": "link", "answer": "https://t.me/AvalancheEnAdJ", "hidden": true, "question": "Please provide a link to your Public Group Chat (Discord or Telegram)", "questionId": 7}, {"type": "short-answer", "answer": "I was TON Award Recipient., for porting tools of the TON blockchain to OpenBSD/adJ, see  https://t.me/tondev_eng/26429", "hidden": true, "question": "Is there anything else you'd like to share about your project, previous work, or other affiliations?", "questionId": 8}], "project": {"id": "0x9a9d3a869e62e12b7a510d0bceef46c4f42ca5244e45bd4d9f0da02fac990d00", "title": "Audit, improve and port fundamental Avalanche tools to OpenBSD/adJ", "metaPtr": {"pointer": "bafkreiajwurktmmk5ljbwe5vkqia6hmz2mpb7ozw3l2oyewqfnutusycsa", "protocol": "undefined"}, "website": "https://github.com/vtamara/avalanchego/wiki/Audit,-improve-and-port-fundamental-Avalanche-tools-to-OpenBSD-adJ", "createdAt": 1712849601333, "userGithub": "vtamara", "credentials": {"github": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..i2XFs36VhIpeopCJku3Hv1MBN5s29G7wVQuChcqiRTScpGP15XZNeaLRtSDymD3WzqM6q501BT7hqlVpXfs0CA", "type": "Ed25519Signature2018", "created": "2024-04-11T14:27:06.110Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2024-04-11T14:27:06.110Z", "expirationDate": "2024-07-10T14:27:06.110Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x2e2c4AC19c93d0984840cDD8E7f77500e2ef978e", "hash": "v0.0.0:jMgNV9IRChHicb6fkbTaU3tMlmNatPeEFuRR60w3cWk=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextGithubOrg#pasosdeJesus#701221"}}, "twitter": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..-pQpaAJ_23UpTYCl240f2o-9DDjyVr2aFKY7fD_D96Wg0X0LaTut8sbACl2nBkowA1eZ0u9ySVsWhf29AoN7Cg", "type": "Ed25519Signature2018", "created": "2024-04-11T14:26:29.316Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2024-04-11T14:26:29.316Z", "expirationDate": "2024-07-10T14:26:29.316Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x2e2c4AC19c93d0984840cDD8E7f77500e2ef978e", "hash": "v0.0.0:tLyuTj+RMorKGOt7Uf0HpoVIKz8Ao66i36v9KTSt30Q=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextTwitter#pasosdeJesus"}}}, "description": "We propose to improve the security of the Avalanche network as a whole by:\n\n1. Auditing the source code of the Avalanche tools and some of the libraries on which they depend. To audit we will follow the [methodology of OpenBSD](<https://www.openbsd.org/security.html>)\n2. Porting the libraries and the fundamental avalanche tools to OpenBSD/adJ (at least `avalanchego`, `subnet-evm`, `coreth`, `avalanche-network-runner`, `precompile-evm` and `avalanche-cli`)\n3. On OpenBSD/adJ run the tests of the Avalanche tools and use them with different use cases (including a validator and developing dApps) and with loads as close as production as possible  to discover runtime failures that could point to security flaws. \n4. Report the problems found and recommend ways to improve and/or propose Pull Requests to fix them.\n\nUp to now we have been advancing in the porting effort, and it has shown fruits, in particular in the library [supranational/blst](https://github.com/supranational/blst) used by Avalanchego and that was improved as a result of our testing on OpenBSD/adJ.  See its security improvement at [commit dae1f](https://github.com/supranational/blst/commit/dae1f9416f157112be1dc46209a32ed5414fd525) and [commit 6cca1](https://github.com/supranational/blst/commit/6cca12ac0c10ca8752d1788ee44891261c0f272a) --a constant table  required for the cryptographic BLS12-381 signature library now is in a section for constants (.rodata) making more difficult for an attacker to modify it after avalanchego starts), see the details of our report and feedback at the [issue 206](https://github.com/supranational/blst/issues/206).\n\n\nPlease see more about this project in [its description in the Forum](https://forum.avax.network/t/audit-improve-and-port-fundamental-avalanche-tools-to-openbsd-adj-round-1/2098)  and in  [its status page](https://github.com/vtamara/avalanchego/wiki/Audit,-improve-and-port-fundamental-Avalanche-tools-to-OpenBSD-adJ)\n", "lastUpdated": 0, "projectGithub": "pasosdeJesus", "projectTwitter": "pasosdeJesus"}, "recipient": "0x8BFA46F6c184550e499304809f9133F907a0471f"}}