Cardano Updates

The legacy iterator-fallback in BlockByHashTxn ran a full block-blob
prefix scan on every hash-index miss, dominating fork-resolution CPU
during preview catch-up (11.2% cum, 370 MB/min churn — issue #2105).

Hash-index entries are written for every block since #1915, so a miss
on a healthy DB means the hash is unknown to us. Returning
ErrBlockNotFound directly lets findPeerForkPath rotate to the next peer
without a worst-case scan. Real backend errors are still surfaced.

Add atomic hit/miss counters (BlockByHashStats) so operators can track
the false-fallback rate and decide whether a pre-#1915 index back-fill
is needed — exactly the metric the issue asks for.

Signed-off-by: SAY-5 <[email protected]>

newChannelSubscriber allocated EventQueueSize (100k) slots per
subscriber, dominating the steady-state heap (~190 subscribers, ~192
MB / 45% of in-use heap on a serving preview node). The 100k buffer
was sized for the worst-case bulk-sync burst from #1556 / #1914 but
stayed allocated for the lifetime of every subscription, including
quiescent peergov, governance, and housekeeping callbacks.

Subscribe / SubscribeFunc now default to DefaultSubscriberBuffer
(1024) and new SubscribeWithBuffer / SubscribeFuncWithBuffer variants
let callers opt into a larger size. The bursty consumers in
ledger/state.go (chainsync, blockfetch, chain-update) and the
mempool's chain-update consumer opt into EventQueueSize so the
catch-up burst headroom that motivated #1914 is preserved exactly
where it is needed.

Fixes #2106.

Signed-off-by: SAY-5 <[email protected]>

JWT.verify did not validate the nbf (not before) claim, so JWTs with nbf in the future were incorrectly considered valid. This is a security issue per RFC 7519 Section 4.1.5.

Added an explicit nbf check after JWT decode: if nbf is present and the current time is before it, verify() returns false. JWTs without an nbf claim keep the previous behavior (no nbf enforced).

This is a sister fix to #489/#550 (which addressed the exp claim).

Closes #551

Signed-off-by: Seydi Charyyev <[email protected]>

Signed-off-by: Seydi Charyyev <[email protected]>

This commit implements a compact bitmaps via ByteStrings, adapted from
the Leios voting committee demo package (leios-wfa-ls-demo):

https://github.com/cardano-scaling/leios-wfa-ls-demo/blob/main/leios-wfa-ls-demo/lib/Cardano/Leios/BitMapPV.hs

Co-authored-by: Agustin Mista <[email protected]>
Co-authored-by: Thomas BAGREL <[email protected]>
Co-authored-by: Nicolas BACQUEY <[email protected]>

This commit implements conversion routines between the brand-new
(concrete) Peras votes and certificates and their corresponding
(abstract) voting committee counterparts.

This is done by introducing a `VotingCommitteeSupportsPeras` type class
to allow us to easily change the underlying voting committee
implementation via a proxy type.

Co-authored-by: Agustin Mista <[email protected]>
Co-authored-by: Thomas BAGREL <[email protected]>
Co-authored-by: Nicolas BACQUEY <[email protected]>

This commit defines a concrete PerasCrypto scheme using BLS signatures
to instantiate all the voting committee superclasses needed by the WFALS
and EveryoneVotes voting committee implementations.

Note that these instances are heavily inspired by the ones defined for
TestCrypto in the generic voting committee test-suite, albeit with
slightly different types and more documentation.

Co-authored-by: Agustin Mista <[email protected]>
Co-authored-by: Thomas BAGREL <[email protected]>
Co-authored-by: Nicolas BACQUEY <[email protected]>

This commit adds conversion rountrip tests between concrete Peras votes
and certificates and their corresponding (abstract) counterparts in the
WFALS and EveryoneVotes voting committee implementations.

Notably, the roundtrip properties allow testing both total (WFALS) and partial
(EveryoneVotes) conversions, generating both good and bad cases and
contrasting them against their expected rountrip outcome.

Co-authored-by: Agustin Mista <[email protected]>
Co-authored-by: Thomas BAGREL <[email protected]>
Co-authored-by: Nicolas BACQUEY <[email protected]>

This commit adds test helpers to aid with the definition of the upcoming
roundtrip properties for concrete Peras votes and certificates.

Co-authored-by: Agustin Mista <[email protected]>
Co-authored-by: Thomas BAGREL <[email protected]>
Co-authored-by: Nicolas BACQUEY <[email protected]>

This commit adds property tests for the newly added bitmap library
asserting that both conversion from and/to indices as well as
serialization roundtrip correctly.

Co-authored-by: Agustin Mista <[email protected]>
Co-authored-by: Thomas BAGREL <[email protected]>
Co-authored-by: Nicolas BACQUEY <[email protected]>