Thursday, June 18, 2015

Litecoin v0.10.2.2

Follow the Google+ page or Twitter for the latest dev news.

Version 0.10.2.2 is the official release version of Litecoin Core. On top of the new features, this update contains very important security fixes and all users MUST upgrade to this version as soon as possible as details on several vulnerabilities will be made public on July 7th (Official Bitcoin warning). Pool operators, P2Pool and solo miners especially, as once BIP 66 is enforced, version 2 blocks will be rejected from the network entirely. P2Pool miners must upgrade to the latest version which can be obtained from here.

What's New in version v0.10?
This is a major release of Litecoin Core, featuring the technical equivalent of Bitcoin v0.10.2 but with Litecoin specific patches. On a general level, most of what is new is is hidden where block synchronization and various internals are considerably faster and more efficient, and it has several major privacy improvements.  The most significant changes include:


  • Watch-only wallet support. This allows the wallet to track transactions to and form wallets for which you know the address of but do not have the private key to.
  • Faster blockchain synchronization due to headers-first synchronization and support for downloading blocks in parallel. Downloading the blockchain is now much quicker and can be completed within a few hours instead of taking days for some users.
  • A REST interface which allows unauthenticated access to public node data when the -rest flag is specified.
  • RPC Server “Warm-Up” Mode which starts earlier than previous versions. This helps users or services relying on it know that the server has already started and will be available soon.
  • Improved signing security. This is due to using the libsecp256k1 library for signing instead of OpenSSL. libsecp256k1 is a cryptographic library optimized for elliptic curve uses which Litecoin relies on and was created by Bitcoin Core developer Pieter Wuille. Featuring better security, via hardening against timing leaks and derandomization, this library is believed to be better tested and more thoroughly reviewed than the implementation in OpenSSL.
  • New utility applications including litecoin-tx for transaction related functionality and litecoin-cli for RPC command line functionality as litecoind no longer accepts them.
  • Strict DER encoding for signatures (BIP 66). This introduces block version 3 and a new consensus rule which prevents non-standard transactions from being included in blocks. This also removes the dependency on OpenSSL’s signature parsing. Eventually, libsecp256k1 will be used for all consensus related tasks, depreciating the need for OpenSSL entirely.
  • RPC Access Changes. RPC access now supports binary network addresses. This means that you can specify a single IP address, a CIDR network address or a netmask for accessing the RPC service. Please note, wildcard string matching no longer works and will display an error in the debug.log file when you attempt to use a wildcard string in the rpcallowip= variable, either as a config setting or launch parameter. For some examples on what has changed, please click here.

The major user-visible features that were new in Bitcoin v0.9 and v0.10 are not actually new for Litecoin v0.10 because we backported it to Litecoin v0.8 (like Coin Control).

For a complete list of Litecoin Core specific changes, you can view the release notes here.
For a complete list of Bitcoin Core specific changes, you can view the release notes here.

What’s New in version v0.10.2.2?
Litecoin v0.10.2.2 is a minor release from the previous release candidate, featuring improvements and bug fixes. The changes can be seen below:


  • Added option -alerts’ to opt out of the network alert system. Please note that disabling network alerts should only be used by power users as this system is used for network emergencies and important security releases. The default behavior is that network alerts are enabled.
  • Detect and reject LibreSSL. This prevents a non-approved SSL library being used for compiling Litecoin Core, preventing potential consensus compatibility issues.
  • Improved getbalance RPC functionality to allow the user to display zero confirmation transactions (this works with watch-only addresses as well).
  • PID file bug fix for non-Windows based systems.
  • Bug fix for signing and verifying messages.


New GPG Signing Process
To enhance the security of Litecoin Core releases, we have changed the GPG signing procedure and opted for one of the Litecoin development team members to individually sign the release binaries.

Prior to this, we used a team signing key. The problem with this is that if the key were to be compromised, we would not be able to identify the member of who it was obtained from. Switching to this new procedure allows us to pinpoint the leak, revoke the individual key and leads to further decentralization of the build process.

As with any release, please use GPG to verify the integrity of the release binaries. This ensures that the binary you have downloaded has not been tampered with. Linux, MacOS and Win32 cygwin command line GPG instructions are available here. Please also note that we GPG sign the binaries as a convenience to you, the ultimate way to verify the integrity of the builds is to build them yourself using Gitian. Instructions on how to perform these builds, can be found here.

For the v0.10.2.2 release, the binaries have been signed with key identifier FE3348877809386C.

Download Binaries
Binaries for Litecoin can be located at https://dev.litecoin.org covering all major operating systems. Litecoin Core 64bit versions are now also available.

Source
The master-0.10 branch contains the latest commits to the next stable releases of Litecoin Core.

Bug Reporting
Updates
Updates will be placed here as needed.

Mailing Lists
Sign up for announcements only or development discussion.

WARNING
While this branch has been extensively tested to be compatible with the existing Litecoin 0.8 network there is the possibility that we missed something.  BACKUP YOUR LITECOIN DATADIR and wallet.dat because after you run v0.10 the old v0.8 version is no longer compatible with your on-disk data.

Discuss
For v0.10.2.2 discussion, please visit the forum thread here.

Tuesday, January 13, 2015

Litecoin v0.8.7.5

Follow the Google+ page or Twitter for the latest dev news.

Summary
This is a critical update for the openssl compatibility issue as documented for Bitcoin by gmaxwell.  If you build Litecoin from source you MUST upgrade to Litecoin v0.8.7.5 because your operating system's openssl has become incompatible in a security update for CVE-2014-8275.  This is especially important for Linux users and mining pools who built from source.

Technical Changelog
  • v0.8.7.5

    • Critical: Maintain consensus with openssl-1.0.1k+ or CVE-2014-8275.
    • If you are running the v0.8.7.4 binaries from litecoin.org you do not need to upgrade as that contained an older version of openssl before the consensus breaking change in openssl-1.0.1k.  v0.8.7.5 was released primarily to remove all confusion about what version is safe to operate.

  • v0.8.7.4
    • Enforce v2 blocks at height 710000 on mainnet, 400000 on testnet
      • All miners must upgrade prior to this point or they run the risk of losing future block rewards.
    • Add `-maxorphantx=<n>` option for control over the maximum orphan transactions and blocks
    • Don't poll showmyip.com, it doesn't exist anymore

      BACKUP YOUR WALLET.DAT BEFORE UPGRADING

      https://litecoin.info/Data_directory
      Follow the directions on this page to find the location of your wallet.dat.  Make a backup copy before you upgrade.  This is the only file you need to recover if anything goes wrong.

      Download Binaries
      Warning: Please use GPG to verify the integrity of the binary downloads.  Linux, MacOS or Win32 cygwin command line GPG instructions are available here.  The community wrote a Windows GPG4Win guide with screenshots which is available here.  All builds are signed by the team GPG key C37E4723969276F5.  The exact binaries for Linux and Win32 are reproducible with Gitian.
      Discuss Litecoin 0.8.7.5 in this forum thread.

      Wednesday, September 17, 2014

      Litecoin v0.8.7.4

      Follow the Google+ page or Twitter for the latest dev news.

      Summary
      This is an important update corresponding with Bitcoin v0.9.3.  Everyone is strongly advised to upgrade.  Miners must upgrade to v0.8.7.4+ which enforces block version 2 by height710k or risk having their blocks discarded.

      Technical Changelog
      • v0.8.7.4
        • Enforce v2 blocks at height 710000 on mainnet, 400000 on testnet
          • All miners must upgrade prior to this point or they run the risk of losing future block rewards.
        • Add `-maxorphantx=<n>` option for control over the maximum orphan transactions and blocks
        • Don't poll showmyip.com, it doesn't exist anymore
      • v0.8.7.2
        • Mac and Windows Official Gitian Builds: upgrade to openssl-1.0.1h for CVE-2014-0224
          • Linux Gitian build uses Lucid 0.9.8k-7ubuntu8.18
      • v0.8.7.1
        • Mac and Windows: upgrade to openssl-1.0.1g for CVE-2014-0160 
          • All past Linux binaries were not vulnerable due to Lucid's openssl-0.9.8k. 
        • Upgrade openssl, qt, miniupnpc, zlib, libpng, qrencode.
        • Many bug fixes from Bitcoin 0.8.7rc stable branch including transaction malleability mitigation backports from 0.9.
          • Add testnet checkpoints.
          • Add new testnet seed.
        • v0.8.6.2
          • Windows only: Fixes issue where network connectivity can fail.
          • Minor fixes:
            • Display Litecoin instead of Bitcoin in the Coin Control change address dialog
            • Fix custom build on MacOS X 10.9
            • Fix QT5 custom build
            • Update Debian build instructions
            • Update Homebrew build 
            • Cleanup of SSE2 scrypt detection.

            BACKUP YOUR WALLET.DAT BEFORE UPGRADING

            https://litecoin.info/Data_directory
            Follow the directions on this page to find the location of your wallet.dat.  Make a backup copy before you upgrade.  This is the only file you need to recover if anything goes wrong.

            Download Binaries
            Warning: Please use GPG to verify the integrity of the binary downloads.  Linux, MacOS or Win32 cygwin command line GPG instructions are available here.  The community wrote a Windows GPG4Win guide with screenshots which is available here.  All builds are signed by the team GPG key C37E4723969276F5.  The exact binaries for Linux and Win32 are reproducible with Gitian.
            Discuss Litecoin 0.8.7.4 in this forum thread.

            Monday, July 14, 2014

            Litecoin Logo version 3

            We are near completion of version 3 of the Litecoin Logo.  The logo itself is finalized however we could use feedback on improving the font used in the title and merchant "Accepted Here" buttons.

            Completed
            http://ltc.133.io/?page_id=19
            There are three vector templates from which you can generate the Litecoin Logo v3 depending on the desired size.  The full sized vector is intended for 100px and larger.  The icon vector is intended for 32px through 100px.  The favicon vector is intended for 16px through 50px.

            http://ltc.133.io/?page_id=21
            The favicon went through several iterations before we settled on ico5 which is in use as the actual favicon of ltc.133.io.

            http://ltc.133.io/?page_id=23
            The splash is ready for Litecoin v0.9.x.

            Needs Work
            http://ltc.133.io/?page_id=106
            The Title graphic needs work.  Note the below variant text is the same as this title by dballing which manually edited the L.  We are not entirely pleased with the font "Ubuntu" and we would like to see variations using this logo with different typography.

            http://ltc.133.io/?page_id=25
            Similarly the font in the merchant buttons could be improved.  The .ai file is provided so others can easily modify it in vector graphic software like Adobe Illustrator or Inkscape.

            Please post ideas to improve the Title and Merchant graphics and typography in this thread.

            Wednesday, June 18, 2014

            Litecoin v0.8.7.2 Release Notes

            Follow the Google+ page or Twitter for the latest dev news.

            Summary
            This is a minor update for openssl CVE-2014-0224.  Generally users of v0.8.7.1 do not need to upgrade to v0.8.7.2 unless they are using RPC SSL, a feature that is disabled by default and rarely used.

            Technical Changelog
            • v0.8.7.2
              • Mac and Windows Official Gitian Builds: upgrade to openssl-1.0.1h for CVE-2014-0224
                • Linux Gitian build uses Lucid 0.9.8k-7ubuntu8.18
            • v0.8.7.1
              • Mac and Windows: upgrade to openssl-1.0.1g for CVE-2014-0160 
                • All past Linux binaries were not vulnerable due to Lucid's openssl-0.9.8k. 
              • Upgrade openssl, qt, miniupnpc, zlib, libpng, qrencode.
              • Many bug fixes from Bitcoin 0.8.7rc stable branch including transaction malleability mitigation backports from 0.9.
                • Add testnet checkpoints.
                • Add new testnet seed.
              • v0.8.6.2
                • Windows only: Fixes issue where network connectivity can fail.
                • Minor fixes:
                  • Display Litecoin instead of Bitcoin in the Coin Control change address dialog
                  • Fix custom build on MacOS X 10.9
                  • Fix QT5 custom build
                  • Update Debian build instructions
                  • Update Homebrew build 
                  • Cleanup of SSE2 scrypt detection.

                  BACKUP YOUR WALLET.DAT BEFORE UPGRADING

                  https://litecoin.info/Data_directory
                  Follow the directions on this page to find the location of your wallet.dat.  Make a backup copy before you upgrade.  This is the only file you need to recover if anything goes wrong.

                  Download Binaries
                  Warning: Please use GPG to verify the integrity of the binary downloads.  Linux, MacOS or Win32 cygwin command line GPG instructions are available here.  The community wrote a Windows GPG4Win guide with screenshots which is available here.  All builds are signed by the team GPG key C37E4723969276F5.  The exact binaries for Linux and Win32 are reproducible with Gitian.
                  Discuss Litecoin 0.8.7.2 in this forum thread.

                  Support Litecoin Development
                  If you appreciate our work, please consider making a small donation to the Litecoin Dev Fundraiser.  It takes a considerable amount of effort to guard against mistakes while working on this software.  We also use funds to cover regular expenses like server infrastructure, hire a professional security auditor and other contractors, to pay a law firm to protect the project, and to produce an upcoming educational video about Litecoin.  Businesses may be interested in getting their name listed in the sponsor list.

                  Monday, April 21, 2014

                  Litecoin v0.8.7.1 Release Notes

                  Follow the Google+ page or Twitter for the latest dev news.

                  Summary
                  This release contains a large quantity of minor bug fixes from Bitcoin 0.9 in addition to major fixes like mitigation of transaction malleability and the OpenSSL transaction malleability issue.  All users of Litecoin-Qt or litecoind must upgrade.

                  Note: Prior versions of Litecoin was mostly immune to the so called openssl "Heartbleed" issue except in the rare case where RPC SSL was enabled.

                  Technical Changelog
                  • v0.8.7.1
                    • Mac and Windows: upgrade to openssl-1.0.1g for CVE-2014-0160 
                      • All past Linux binaries were not vulnerable due to Lucid's openssl-0.9.8k. 
                    • Upgrade openssl, qt, miniupnpc, zlib, libpng, qrencode.
                    • Many bug fixes from Bitcoin 0.8.7rc stable branch including transaction malleability mitigation backports from 0.9.
                    • Add testnet checkpoints.
                    • Add new testnet seed.
                  • v0.8.6.2
                    • Windows only: Fixes issue where network connectivity can fail.
                    • Minor fixes:
                      • Display Litecoin instead of Bitcoin in the Coin Control change address dialog
                      • Fix custom build on MacOS X 10.9
                      • Fix QT5 custom build
                      • Update Debian build instructions
                      • Update Homebrew build 
                      • Cleanup of SSE2 scrypt detection.

                    BACKUP YOUR WALLET.DAT BEFORE UPGRADING

                    https://litecoin.info/Data_directory
                    Follow the directions on this page to find the location of your wallet.dat.  Make a backup copy before you upgrade.  This is the only file you need to recover if anything goes wrong.

                    Download Binaries
                    Warning: Please use GPG to verify the integrity of the binary downloads.  Linux, MacOS or Win32 cygwin command line GPG instructions are available here.  The community wrote a Windows GPG4Win guide with screenshots which is available here.  All builds are signed by the team GPG key C37E4723969276F5.  The exact binaries for Linux and Win32 are reproducible with Gitian.
                    Discuss Litecoin 0.8.7.1 in this forum thread.

                    Support Litecoin Development
                    If you appreciate our work, please consider making a small donation to the Litecoin Dev Fundraiser.  It takes a considerable amount of effort to guard against mistakes while working on this software.  We also use funds to cover regular expenses like server infrastructure, hire a professional security auditor and other contractors, to pay a law firm to protect the project, and to produce an upcoming educational video about Litecoin.  Businesses may be interested in getting their name listed in the sponsor list.

                    Saturday, January 11, 2014

                    Litecoin 0.8.6.2 Release Notes

                    Follow the Google+ page or Twitter for the latest dev news.

                    Summary
                    v0.8.6.2 is a very important bug fix update for Windows users.  v0.8.6.1 win32 builds contained a problematic version of the boost library that would occasionally cause all network activity to fail until the client is restarted.  This annoyance was solved with an upgrade to boost-1.55 for the win32 builds.  Linux and Mac users are encouraged to upgrade too mainly as it helps the network to better differentiate peers by version number.

                    p2pool users must upgrade to version 13.4+.

                    Technical Changelog
                    • v0.8.6.2
                      • Windows only: Fixes issue where network connectivity can fail.
                      • Minor fixes:
                        • Display Litecoin instead of Bitcoin in the Coin Control change address dialog
                        • Fix custom build on MacOS X 10.9
                        • Fix QT5 custom build
                        • Update Debian build instructions
                        • Update Homebrew build 
                        • Cleanup of SSE2 scrypt detection.
                    • v0.8.6.1
                      • Bitcoin 0.8.6 Fixes
                        • Fixed rare issue involving relay of invalid transactions.
                          • Fixed rare MacOS X crash during GUI send.
                            • Fixed the MacOS X leveldb corruption issue.
                            • More informative debug.log messages about peers and messages.
                            • Timestamps enabled by default in debug.log.
                            • Litecoin Changes
                              • Default mintxfee reduced by 20x to 0.001 LTC per kilobyte.
                            • Dust thresholds reduced by 10x.
                            • More fairness: High priority area reduced to 17KB per block.  High priority tx size limit reduced to 5KB.  See notes in commits to learn more.
                            • Coin Control 0.8.5
                            • SSE2 PoW validation 
                            • Disable Wallet Mode
                              • Optional advanced feature for relay-only or mining nodes where a wallet is not required.  Operating litecoind with disablewallet saves between 40-200MB of RAM.
                              • Disconnect nodes older than protocol version 70002 (Litecoin 0.8.3.7)
                                • Disallow connections from clients that are a dangerously old.  Along with the alerts this is to encourage those users to upgrade their client to better protect both themselves and the entire network.
                              • Add verifychain and getbestblockhash
                              • Fix MacOS X dock icon menu.

                              BACKUP YOUR WALLET.DAT BEFORE UPGRADING

                              https://litecoin.info/Data_directory
                              Follow the directions on this page to find the location of your wallet.dat.  Make a backup copy before you upgrade.  This is the only file you need to recover if anything goes wrong.

                              Download Binaries
                              Warning: Please use GPG to verify the integrity of the binary downloads.  Linux, MacOS or Win32 cygwin command line GPG instructions are available here.  The community wrote a Windows GPG4Win guide with screenshots which is available here.  All builds are signed by the team GPG key C37E4723969276F5.  The exact binaries for Linux and Win32 are reproducible with Gitian.
                              Discuss Litecoin 0.8.6.2 in this forum thread.

                              Support Litecoin Development
                              If you appreciate our work, please consider making a small donation to the Litecoin Dev Fundraiser.  It takes a considerable amount of effort to guard against mistakes while working on this software.  We also use funds to cover regular expenses like server infrastructure, hire a professional security auditor and other contractors, to pay a law firm to protect the project, and to produce an upcoming educational video about Litecoin.  Businesses may be interested in getting their name listed in the sponsor list.