Internet Computer Association

DFINITY Foundation

Elect/Bless new replica binary revision (commit 3a1286e844ed3b53b1848533cb844ea29b508f28)

Changelog:
* CI: Reproducibility improvements
* CI: Update rustc to 1.55
* Consensus: Unify CUP creation
* Consensus: Update consensus ECDSA payload handling
* Consensus: Send/validate dealing support
* Crypto: Add Polynomial using EccScalars as coefficients
* Crypto: Add simple and Pedersen commitments of polynomials
* Crypto: Implement hash2curve for secp256k1 and P-256
* Crypto: Implement perform_server_handshake with Rustls
* Crypto: Remove TLS server handshake with optional client auth for Rustls
* Crypto: Replace ring with internal Ed25519 crypto lib for TLS signing
* Crypto: tECDSA and MEGa improvements
* Crypto: Validate TLS certs in handshake
* Execution: Implement mmap-based page allocator
* Execution: Increase the number of query threads to 2
* Execution: Handle missing stable memory files in checkpoints
* Execution: Support for limiting the number of canisters in a subnet
* Execution: Tune signal handler parameters to increase throughput
* Execution: Update SystemAPI which supports Cycles(u128)
* Message Routing: Account for oversized intra-subnet requests
* Message Routing: Bump and consolidate pprof and prost dependencies
* Message Routing: Cache aborted state syncs
* Message Routing: Compute manifest chunks in parallel
* Message Routing: Enforce in-flight message memory limits
* Message Routing: Enforce message memory limits at induction
* Message Routing: Incremental manifest computation
* Message Routing: Limit memory usage of subnet queues
* Message Routing: Make `load_checkpoint()`, `tip_to_checkpoint()`, `serialize_to_tip()` parallel
* Message Routing: Use certified map for registry certification
* Net: Establish the TLS connection in the HttpHandler and the Prometheus metrics exporter WITHOUT client auth
* Net: Split the read handler into query and read state handlers
* Net: Turn the parsing of the HTTP body in tower service
* Node: Preparatory work on the canister sandboxing
* Node: SELinux labeling optimizations
* Various bugfixes and test updates
