Commit Graph

1181 Commits

Author SHA1 Message Date
Karolin Varner
aa42ba070b Apply Steffens review Fixes (#698) 2025-09-05 16:21:45 +02:00
Karolin Varner
8bf9ca203e feat(whitepaper): Update scientific illustrations to account for Steffen Vogel's reviews 2025-09-05 16:14:13 +02:00
Karolin Varner
8b98d4caca fix(whitepaper): Typos 2025-09-05 16:12:11 +02:00
Karolin Varner
9d5996e71c fix(whitepaper): Cookie feature is implemented but experimental 2025-09-05 16:12:11 +02:00
Karolin Varner
f59b63a4d3 fix(whitepaper): pidi naming typo in load_biscuit() 2025-09-05 16:12:11 +02:00
Karolin Varner
e3a88d9a5e fix(whitepaper): Harmonize naming of package size sums in Fig 2 (Message Types)
Graphics to be updated later
2025-09-05 16:12:11 +02:00
Karolin Varner
3c6a3a3735 fix: Upgrade stacker
Potentially fixes issues with flaky tests using stacker.
2025-09-05 16:12:11 +02:00
Karolin Varner
f38949615f feat(whitepaper): Move protocol code figure higher in white paper 2025-09-05 16:12:11 +02:00
Karolin Varner
f431301d1e feat(whitepaper): Info about timers used
Text recovered from PR #145: https://github.com/rosenpass/rosenpass/pull/145
2025-09-05 16:12:11 +02:00
Karolin Varner
771cacb8c8 feat(whitepaper): More info about initiator/responder roles
Text recovered from PR #145: https://github.com/rosenpass/rosenpass/pull/145
2025-09-05 16:12:11 +02:00
Karolin Varner
6383231a6a fix(whitepaper): biscuit_ct destructuring is destructuring a concatenation 2025-09-05 16:12:11 +02:00
Karolin Varner
4daca9ed56 chore(whitepaper): Biscuit and pidi cipher texts now called pidi_ct/biscuit_ct 2025-09-05 16:12:11 +02:00
Karolin Varner
75ff1e8292 chore(whitepaper): Nomenclature improvements 2025-09-05 16:12:11 +02:00
Karolin Varner
484af1654a feat(whitepaper): Precise references to KEM versions 2025-09-05 16:12:11 +02:00
Karolin Varner
9c82424dee fix(whitepaper): Relax requirements on biscuit key life times
…and harmonize with the implementation
2025-09-05 16:12:11 +02:00
Karolin Varner
823e5aca56 fix(whitepaper): Incorrect ordering of auth and biscuit in RespHello
Graphic fix to come later
2025-09-05 16:12:11 +02:00
Karolin Varner
22bf2e3990 fix(proverif): Incorrect parameter ordering in encaps_/decaps_and_mix 2025-09-05 16:12:11 +02:00
Karolin Varner
f39a43a821 fix(proverif): Remove broken protocol analysis code
The identity hiding and DOS protection models where never actually
functional. Here we just remove them so the CI and manual runs of
analysis.sh stop giving spurious errors.
2025-09-05 16:12:11 +02:00
Karolin Varner
bc6fa0d672 fix(whitepaper): Incorrect parameter ordering in encaps_/decaps_and_mix
Update of the figures in the white paper to come later.
2025-09-05 16:12:10 +02:00
Karolin Varner
db797ff11e fix(whitepaper): Specify our incorrect (but likely secure) variant of HMAC 2025-09-05 16:12:10 +02:00
Karolin Varner
7790d82b51 fix(whitepaper): Inconsistency between implementation and whitepaper about blake2s/blake2b usage 2025-09-05 16:12:10 +02:00
Karolin Varner
b52c607efc fix(whitepaper): Inconsistency between implementation and whitepaper about PROTOCOL label 2025-09-05 16:12:10 +02:00
Karolin Varner
d2a85a0d6b fix(whitepaper): Inconsistency between implementation and whitepaper about labels for txki/txkr
Fix of Fig. 5 follows later.
2025-09-05 16:12:10 +02:00
Karolin Varner
221c583508 fix(whitepaper): Incorrect biscuit_no comparison in load_biscuit() 2025-09-05 16:12:10 +02:00
Karolin Varner
14c48cf069 fix(whitepaper): Incorrect name used
Fig. 5: Rosenpass Message Handling Code; in IHR5: `decaps_and_mix<SKEM>(sskr, spkr, ct1)` -> `decaps_and_mix<SKEM>(sskr, spkr, sctr)`

Actual update to the figure will be done later
2025-09-05 16:12:10 +02:00
Karolin Varner
6e43a21e74 feat(whitepaper): Brief section about endianness 2025-09-05 16:12:10 +02:00
Karolin Varner
6bfc29ef93 feat(whitepaper): Brief section about protocol roles 2025-09-05 16:12:10 +02:00
Karolin Varner
39341c0ef8 chore(whitepaper): Added an explaining paragraph to section 'Live Session State' 2025-09-05 16:12:10 +02:00
Karolin Varner
9ee86e01ec feat(whitepaper): Comprehensive reference about packages, labels, and symmetric keys used in protocol 2025-09-05 16:12:10 +02:00
Karolin Varner
3721996f2d chore(whitepaper): Stub for steffen vogel changelog entry 2025-09-05 16:12:10 +02:00
Karolin Varner
49ccb1ea95 fix: Spurious debug output in nix flake 2025-09-05 16:01:15 +02:00
Karolin Varner
baa534f2e2 Add integration tests (#672) 2025-09-03 15:52:39 +02:00
Karolin Varner
6e62cd7c36 chore(ci): Remove spurious debug output 2025-09-03 15:52:01 +02:00
David Niehues
a18e793a53 chore(test): Move debug print in integration tests to extra function for less repetition 2025-09-01 10:58:28 +02:00
David Niehues
48e9dd2a86 chore(test): Move the wireguard key generation in the integration tests to the test script to make the derivations deterministc while keeping random keys 2025-09-01 10:58:28 +02:00
David Niehues
7d4ae23db9 chore(test): Move generation of rosenpass keys in integration tests into test script as the frst of two steps to make the nix derivations deterministic 2025-09-01 10:58:28 +02:00
David Niehues
1c85091b6d chore(tests+CI): Remove nix log command in CI for i686 nix checks 2025-09-01 10:58:28 +02:00
Karolin Varner
b88d3961ea chore(integration-test): Nix fmt 2025-09-01 10:58:28 +02:00
Karolin Varner
82135cce5c fix(integration-test): Incorrect peer IP in connection BA 2025-09-01 10:58:28 +02:00
Karolin Varner
879a25ec46 fix(integration-test): Use /32 again for allowed ips 2025-09-01 10:58:28 +02:00
Karolin Varner
098aff91ab fix(integration-test): Don't erase endpoint & allowed ips when setting PSK 2025-09-01 10:58:28 +02:00
Karolin Varner
d5162d7b9a fix(integration-test): Use deterministic WG keys 2025-09-01 10:58:28 +02:00
David Niehues
8ee0619c08 chore(tests): Move truncation to when key files in integration tests are read instead of when they are written 2025-09-01 10:58:28 +02:00
Karolin Varner
15f2153b1b fix(integration-test): Use consistent network sizes 2025-09-01 10:58:28 +02:00
David Niehues
2fc2e073ef chore(tests): Configure explicit endpoints on all wireguard interfaces for the integration tests 2025-09-01 10:58:28 +02:00
David Niehues
8f01790d04 chore(tests): Change order of pings in integration test so that initiator always pings first. 2025-09-01 10:58:28 +02:00
Karolin Varner
ad1235c4f8 chore: Dump network config in integration tests 2025-09-01 10:58:28 +02:00
David Niehues
c08c99968f chore(CI): disable 32 bit integration tests 2025-09-01 10:58:28 +02:00
David Niehues
3498a6e12c chore(tests): Make the services in the integration tests only start once they are needed 2025-09-01 10:58:28 +02:00
David Niehues
ed4ec9d7dd longer timeout for ping in integration tests 2025-09-01 10:58:28 +02:00