1187 Commits

Author SHA1 Message Date
Karolin Varner
433ff09c43 chore(deps): bump actions/checkout from 4 to 5 (#700) 2025-09-20 11:31:50 +02:00
dependabot[bot]
11c055738e chore(deps): bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-16 08:45:06 +00:00
Karolin Varner
0c48cfb91f feat: add preliminary miri support (#699) 2025-09-05 16:22:16 +02:00
Karolin Varner
3f0c71d74b chore: Regenerate cargo vet exemptions 2025-09-05 16:22:02 +02:00
wucke13
55ab57a1d0 fix: remove TODO via update of assert_tv
Before the fix from https://github.com/aminfa/assert_tv/issues/1,
`assert_tv` wouldn't pass through `#[cfg_attr(miri, ignore)]`. Now that
it is fixed, this works, thus we have one less miri test case failing.

Signed-off-by: wucke13 <wucke13+github@gmail.com>
2025-09-05 16:22:02 +02:00
wucke13
49be83847b feat: add preliminary miri support
- Adds a devShell with Miri
- Marks some of the tests which Miri cannot execute as ignored for Miri

Signed-off-by: wucke13 <wucke13+github@gmail.com>
2025-09-05 16:22:02 +02:00
Karolin Varner
aa42ba070b Apply Steffens review Fixes (#698) 2025-09-05 16:21:45 +02:00
Karolin Varner
8bf9ca203e feat(whitepaper): Update scientific illustrations to account for Steffen Vogel's reviews 2025-09-05 16:14:13 +02:00
Karolin Varner
8b98d4caca fix(whitepaper): Typos 2025-09-05 16:12:11 +02:00
Karolin Varner
9d5996e71c fix(whitepaper): Cookie feature is implemented but experimental 2025-09-05 16:12:11 +02:00
Karolin Varner
f59b63a4d3 fix(whitepaper): pidi naming typo in load_biscuit() 2025-09-05 16:12:11 +02:00
Karolin Varner
e3a88d9a5e fix(whitepaper): Harmonize naming of package size sums in Fig 2 (Message Types)
Graphics to be updated later
2025-09-05 16:12:11 +02:00
Karolin Varner
3c6a3a3735 fix: Upgrade stacker
Potentially fixes issues with flaky tests using stacker.
2025-09-05 16:12:11 +02:00
Karolin Varner
f38949615f feat(whitepaper): Move protocol code figure higher in white paper 2025-09-05 16:12:11 +02:00
Karolin Varner
f431301d1e feat(whitepaper): Info about timers used
Text recovered from PR #145: https://github.com/rosenpass/rosenpass/pull/145
2025-09-05 16:12:11 +02:00
Karolin Varner
771cacb8c8 feat(whitepaper): More info about initiator/responder roles
Text recovered from PR #145: https://github.com/rosenpass/rosenpass/pull/145
2025-09-05 16:12:11 +02:00
Karolin Varner
6383231a6a fix(whitepaper): biscuit_ct destructuring is destructuring a concatenation 2025-09-05 16:12:11 +02:00
Karolin Varner
4daca9ed56 chore(whitepaper): Biscuit and pidi cipher texts now called pidi_ct/biscuit_ct 2025-09-05 16:12:11 +02:00
Karolin Varner
75ff1e8292 chore(whitepaper): Nomenclature improvements 2025-09-05 16:12:11 +02:00
Karolin Varner
484af1654a feat(whitepaper): Precise references to KEM versions 2025-09-05 16:12:11 +02:00
Karolin Varner
9c82424dee fix(whitepaper): Relax requirements on biscuit key life times
…and harmonize with the implementation
2025-09-05 16:12:11 +02:00
Karolin Varner
823e5aca56 fix(whitepaper): Incorrect ordering of auth and biscuit in RespHello
Graphic fix to come later
2025-09-05 16:12:11 +02:00
Karolin Varner
22bf2e3990 fix(proverif): Incorrect parameter ordering in encaps_/decaps_and_mix 2025-09-05 16:12:11 +02:00
Karolin Varner
f39a43a821 fix(proverif): Remove broken protocol analysis code
The identity hiding and DOS protection models where never actually
functional. Here we just remove them so the CI and manual runs of
analysis.sh stop giving spurious errors.
2025-09-05 16:12:11 +02:00
Karolin Varner
bc6fa0d672 fix(whitepaper): Incorrect parameter ordering in encaps_/decaps_and_mix
Update of the figures in the white paper to come later.
2025-09-05 16:12:10 +02:00
Karolin Varner
db797ff11e fix(whitepaper): Specify our incorrect (but likely secure) variant of HMAC 2025-09-05 16:12:10 +02:00
Karolin Varner
7790d82b51 fix(whitepaper): Inconsistency between implementation and whitepaper about blake2s/blake2b usage 2025-09-05 16:12:10 +02:00
Karolin Varner
b52c607efc fix(whitepaper): Inconsistency between implementation and whitepaper about PROTOCOL label 2025-09-05 16:12:10 +02:00
Karolin Varner
d2a85a0d6b fix(whitepaper): Inconsistency between implementation and whitepaper about labels for txki/txkr
Fix of Fig. 5 follows later.
2025-09-05 16:12:10 +02:00
Karolin Varner
221c583508 fix(whitepaper): Incorrect biscuit_no comparison in load_biscuit() 2025-09-05 16:12:10 +02:00
Karolin Varner
14c48cf069 fix(whitepaper): Incorrect name used
Fig. 5: Rosenpass Message Handling Code; in IHR5: `decaps_and_mix<SKEM>(sskr, spkr, ct1)` -> `decaps_and_mix<SKEM>(sskr, spkr, sctr)`

Actual update to the figure will be done later
2025-09-05 16:12:10 +02:00
Karolin Varner
6e43a21e74 feat(whitepaper): Brief section about endianness 2025-09-05 16:12:10 +02:00
Karolin Varner
6bfc29ef93 feat(whitepaper): Brief section about protocol roles 2025-09-05 16:12:10 +02:00
Karolin Varner
39341c0ef8 chore(whitepaper): Added an explaining paragraph to section 'Live Session State' 2025-09-05 16:12:10 +02:00
Karolin Varner
9ee86e01ec feat(whitepaper): Comprehensive reference about packages, labels, and symmetric keys used in protocol 2025-09-05 16:12:10 +02:00
Karolin Varner
3721996f2d chore(whitepaper): Stub for steffen vogel changelog entry 2025-09-05 16:12:10 +02:00
Karolin Varner
49ccb1ea95 fix: Spurious debug output in nix flake 2025-09-05 16:01:15 +02:00
Karolin Varner
baa534f2e2 Add integration tests (#672) 2025-09-03 15:52:39 +02:00
Karolin Varner
6e62cd7c36 chore(ci): Remove spurious debug output 2025-09-03 15:52:01 +02:00
David Niehues
a18e793a53 chore(test): Move debug print in integration tests to extra function for less repetition 2025-09-01 10:58:28 +02:00
David Niehues
48e9dd2a86 chore(test): Move the wireguard key generation in the integration tests to the test script to make the derivations deterministc while keeping random keys 2025-09-01 10:58:28 +02:00
David Niehues
7d4ae23db9 chore(test): Move generation of rosenpass keys in integration tests into test script as the frst of two steps to make the nix derivations deterministic 2025-09-01 10:58:28 +02:00
David Niehues
1c85091b6d chore(tests+CI): Remove nix log command in CI for i686 nix checks 2025-09-01 10:58:28 +02:00
Karolin Varner
b88d3961ea chore(integration-test): Nix fmt 2025-09-01 10:58:28 +02:00
Karolin Varner
82135cce5c fix(integration-test): Incorrect peer IP in connection BA 2025-09-01 10:58:28 +02:00
Karolin Varner
879a25ec46 fix(integration-test): Use /32 again for allowed ips 2025-09-01 10:58:28 +02:00
Karolin Varner
098aff91ab fix(integration-test): Don't erase endpoint & allowed ips when setting PSK 2025-09-01 10:58:28 +02:00
Karolin Varner
d5162d7b9a fix(integration-test): Use deterministic WG keys 2025-09-01 10:58:28 +02:00
David Niehues
8ee0619c08 chore(tests): Move truncation to when key files in integration tests are read instead of when they are written 2025-09-01 10:58:28 +02:00
Karolin Varner
15f2153b1b fix(integration-test): Use consistent network sizes 2025-09-01 10:58:28 +02:00