New node registration transaction

[tarakby]

Checklist

• App update process has been followed
• Target branch is develop
• Application version has been bumped

Changes

• add a new transaction SCO.17 to the app. All existing transactions are unchanged (supported transactions are listed in the manifest file)
• the flow-app source only tracks the Merkle root of all supported transactions. The root is updated to reflect the newly added transaction.
• python and js tests are adjusted - in particular Merkle proofs of the supported transactions are updated.
• new snapshots of all Ledger devices are generated because of slight SDK changes.

More on the new transaction

The new transaction SCO.17 registers a node to the network using a new extra parameter: the proof of possession of a staking private key.

The PR keeps the old version of the node registration transaction SCO.03 (without the extra parameter) for backward compatibility of the Ledger wallet. The clients would call SCO.17 or SCO.03 depending on the transaction version supported by the chain.
Currently, only SCO.03 is supported. In the near future, only the new transaction version SCO.17 will be supported through an on-chain contract upgrade. The version SCO.03 will become obsolete and can be removed from the flow ledger app in a future update.

What is the proof of possession of the private key:

Flow protocol uses BLS signature to authenticate participating nodes in the protocol, including the proof of stake consensus algorithm. BLS signature aggregation requires a mechanism to prevent rogue key attacks. The mechanism chosen in the Flow protocol is called the proof of possession (PoP) of the private key. This requires the nodes to present a public proof of knowing the staking private key corresponding to the staking public key they submit to the network. The new registration transaction SCO.17 is the transaction that node operators use to submit their public info to the network, including the PoP of the staking private key.

[socket-security]

Updated and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@ledgerhq/[email protected] 🔁 npm/@ledgerhq/[email protected], npm/@ledgerhq/[email protected]	None	+7	5.37 MB	ldg-github-ci

🚮 Removed packages: npm/@ledgerhq/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎