+1 (binding) I checked: - incubating is in the name - LICENSE, NOTICE, DISCLAIMER are there and look good - Signature and hash are OK - ASF header is there (rat complains about some missing header in sh scripts) - No binary file in source distribution - Build passed on my machine
Regards JB On Wed, Oct 26, 2022 at 7:32 PM John McCane-Whitney <j...@qredo.com.invalid> wrote: > > Hi, > > This is a call to vote on the release of the Apache Milagro (incubating) MPC > v0.1 > > The Apache Milagro (incubating) community has voted to approve this release > with 5 +1 votes. The vote result thread can be found here: > https://lists.apache.org/thread/y95lold2mt751w6z2g5cycr9dr1rjsjr > > Release tag for Incubator-milagro-MPC: > https://github.com/apache/incubator-milagro-MPC/releases/tag/0.1 > > OVERVIEW > libmpc is a modern cryptographic C library that implements Multi-Party > Computation, or MPC. > This library implements the primitives necessary to instantiate the > multi-party ECDSA signature scheme provided in Gennaro and Goldfeder’s “Fast > Multiparty Threshold ECDSA with Fast Trustless Setup” (GG18) > (https://eprint.iacr.org/2019/114.pdf). > GG18 consists of a multiparty threshold signature scheme which enables > distributed signing among n players such that any subgroup of size t + 1 can > sign, whereas any group with t or fewer players cannot. This scheme is proven > secure for any t <= n and provides significant reduction of computation and > communication complexity comparing to other existing schemes. > NCC Group has conducted a security assessment of libmpc > (https://research.nccgroup.com/wp-content/uploads/2020/07/NCC_Group_Qredo_Apache_Milagro_MPC_Cryptographic_Review_2020-07-16_v1.3.pdf). > > RELEASE RATIONALE > libmpc has been under development for several years now, and we consider it > to be stable enough to have a first official release. > With this release, we also introduce a modernised docker-first build-system > that we would like to extend to other Apache Milagro releases. We have taken > this step to better support the most diverse development and deployment > environments currently used by the community. Please provide feedback if > there is anything you would like to see happening next. > As always, please see the README for build/test instructions, a list of > contributors and guidelines on how to contribute yourself. > > The repo has the required DISCLAIMER, NOTICE and LICENSE file in its root > directory. All source files have the appropriate license header. No binaries > are included in this release. > > I have successfully built and ran the tests as per the instructions in the > readme file. > > The compressed archives from this release along with a SHA512 checksum, PGP > signature and PGP key file are being staged here: > https://dist.apache.org/repos/dist/dev/incubator/milagro/apache-milagro-mpc-0.1-incubating/ > > Specifically: > Source code archive: > https://dist.apache.org/repos/dist/dev/incubator/milagro/apache-milagro-mpc-0.1-incubating/apache-milagro-mpc-0.1-incubating-src.tar.gz > SHA512 checksum: > https://dist.apache.org/repos/dist/dev/incubator/milagro/apache-milagro-mpc-0.1-incubating/apache-milagro-mpc-0.1-incubating-src.tar.gz.sha512 > PGP Signature: > https://dist.apache.org/repos/dist/dev/incubator/milagro/apache-milagro-mpc-0.1-incubating/apache-milagro-mpc-0.1-incubating-src.tar.gz.asc > Keys: https://dist.apache.org/repos/dist/dev/incubator/milagro/KEYS > > Documentation can be found here: https://milagro.apache.org/docs/mpc-api-0.1/ > (including a link at the bottom of the page to the Doxygen output from the > MPC library). > > Please note that the project’s website (https://milagro.apache.org/) will be > updated with download links as soon as the release’s approval has been > completed and the archives are available for public download. > > We now kindly request that the Incubator PMC members review and vote on this > incubator release as follows: > > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove with the reason > > Checklist for reference: > > [ ] Download links are valid > [ ] Checksums and PGP signatures are valid > [ ] DISCLAIMER, LICENCE & NOTICE files are included > [ ] Source code archives have correct names matching the current release. > [ ] All source code files have licence headers > [ ] No compiled binaries are included > [ ] Libraries build correctly and all tests pass (as per the instructions in > the readme file) > > The vote will be open for a minimum of 72 hours. 3 x +1 votes are required to > approve this release. > > Many thanks, > John > > John McCane-Whitney > DIRECTOR OF PRODUCT > +44 (0) 7966 490687 > qredo.com <http://www.qredo.com/> > <https://www.linkedin.com/company/qredo> <https://twitter.com/qredonetwork> > <http://www.qredo.com/> > Qredo Ltd is a limited company registered in England and Wales (registered > number 7834052). This e-mail and any attachments are confidential, and are > intended only for the named addressee(s). If you are not the intended > recipient you may not copy, disclose to anyone else or otherwise use the > content of this e-mail or any attachment thereto and should notify the sender > immediately and delete them from your system. > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org