I'm David Wong, a security engineer on the Libra blockchain at Facebook. Previously I was at Cryptography Services (NCC Group). I'm currently writing a book called Real-World Cryptography. You can find more about what I do on my crypto blog cryptologie.net or my portfolio davidwong.fr.
Highlights
- Arctic Code Vault Contributor
Create your own GitHub profile
Sign up for your own profile on GitHub, the best place to host code, manage projects, and build software alongside 50 million developers.
Sign up
Pinned
1,101 contributions in the last year
Contribution activity
October 2020
Created a pull request in libra/libra that received 11 comments
[libra-mutex] introduce wrapper around std mutex
This PR takes the same approach @AnomalRoil took with libra-time: hide the panic under an API that is infallible. The same way unsafe interfaces ca…
- [fuzzing] split fuzzer scripts in multiple scripts for usability, also remove dead-link flag
- [consensus] implementing more granular logging when receiving a proposal
- [backup-cli] removing dirs crate due to RUSTSEC-2020-0053
- [backup-cli] removing dirs crate due to RUSTSEC-2020-0053
- TEST
- [TCB] building the TCB with overflow checks
- [integer-overflow] enforce some checked operations
- [security] adding checked arithmetic to the coding guidelines
- Cargo.toml fix (versino -> version)
- [proofs] fix integer overflow
- [json-rpc] fix fuzzing harness
- [libra-infallible] introduce a wrapper for std::sync::Rwlock
- TEST
- rust version 1.46.0
- TEST
- [cluster-test] removing infinite recursion in Debug implementation
- experiment on std mutex -> parking_lot
- [clippy] warn on non-checked integer arithemtic
- [json-rpc] update the README
- [cli] fix CLI problems with new json-rpc client
- [json-rpc] fix cors validation to allow cross domain call in browser
- [specifications][mempool] Add initial mempool specs
- [state sync] specs/README
- [json-rpc] fix fuzz test data setup and some invalid request param errors
- removing unwrap in a function of type result. using unstable sort ins…
- [JSON-RPC] Adding a get_transactions_with_proofs API
- [breaking] Add 5-min rate limit to validators calling the reconfiguration
- Removing unwrap and unreachable macros inside fns of type result
- [network] refactor network README
- [network] improve context and clarity of noise handshake errors
- [fuzzing] add json-rpc api methods fuzz targets
- [json-rpc] CORS: allowing all origins for the interface
Created an issue in rust-lang/rust-clippy that received 4 comments
integer_arithmetic rule is too simplistic and is triggered even when arithmetic operations are applied to constants/literals that cannot cause overflow or panic
Hello, the following code triggers the integer-arithmetic rule:
warning: integer arithmetic detected --> client/json-rpc/src/blocking/client.rs:89:…