bddf44ecc9
upgrade dependency: signal-hook-mio
2026-06-09 12:16:22 +02:00
7d52584d40
upgrade dependency: test_bin
2026-06-09 11:35:29 +02:00
b5fd6b96db
upgrade dependency: home
2026-06-09 11:04:11 +02:00
565cf1bf2d
upgrade dependency: signal-hook
2026-06-09 11:01:43 +02:00
0a87ab13a6
upgrade dependency: clap_mangen
2026-06-09 10:59:05 +02:00
54ddf3d0ec
upgrade dependency rtnetlink and fix regressions
2026-06-09 10:24:21 +02:00
23cf9a8eff
chore(deps): bump hex-literal from 0.4.1 to 1.1.0
...
Bumps [hex-literal](https://github.com/RustCrypto/utils ) from 0.4.1 to 1.1.0.
- [Commits](https://github.com/RustCrypto/utils/compare/hex-literal-v0.4.1...hex-literal-v1.1.0 )
---
updated-dependencies:
- dependency-name: hex-literal
dependency-version: 1.1.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 23:13:41 +00:00
fd82409870
upgrade dependency: command-fds
2026-06-08 17:42:05 +02:00
3a5ac78c03
upgrade dependency: criterion
2026-06-08 17:17:12 +02:00
4a5d032161
upgrade dependency: toml
2026-06-08 17:14:13 +02:00
d854d0b3e5
upgrade dependency: env_logger
2026-06-08 17:14:13 +02:00
039c8ef341
cargo update
2026-06-08 13:53:02 +02:00
e0e9362046
also remove libcrux as it is no longer needed
2026-06-08 11:06:38 +02:00
be2b002fe4
remove libcrux-* (see PR for reasons) but leave libcrux and libcrux-test-utils in
2026-06-08 10:58:13 +02:00
475d69333d
upgrade netlink dependency
2026-06-07 15:52:13 +02:00
f0a4526426
upgrade thiserror and genetlink
2026-06-07 14:50:15 +02:00
8d2b23d73e
cargo update --workspace tempfile
2026-06-07 14:01:44 +02:00
78664898fd
upgrade rustix (old version not compatible with Rust edition2024 anymore, )
2026-06-07 13:56:33 +02:00
c658c7258b
crate ctrl-async has been renamed to ctrlc
2026-06-07 13:52:21 +02:00
e733a5575e
upgrade oqs-sys from 0.9.1 to 0.11.0
2026-06-07 12:37:35 +02:00
eec3ee6308
cargo: update rand to 0.10.1 (required by security advisory)
2026-06-07 10:29:09 +02:00
8c2b60f898
fix: Security updates
2026-05-14 19:44:58 +02:00
55ab57a1d0
fix: remove TODO via update of assert_tv
...
Before the fix from https://github.com/aminfa/assert_tv/issues/1 ,
`assert_tv` wouldn't pass through `#[cfg_attr(miri, ignore)]`. Now that
it is fixed, this works, thus we have one less miri test case failing.
Signed-off-by: wucke13 <wucke13+github@gmail.com >
2025-09-05 16:22:02 +02:00
3c6a3a3735
fix: Upgrade stacker
...
Potentially fixes issues with flaky tests using stacker.
2025-09-05 16:12:11 +02:00
223fbd551f
feat: Derandomize the rosenpass protocol by adding testvectors
...
- Introduced a new module `test_vector_sets.rs` containing test vector definitions for deterministic protocol testing.
- Added a new test file `test_vector_crypto_server.rs` to validate the protocol implementation using captured internal randomness.
- Added serialization and deserialization of `Secret`, `Public`, and `PublicBox` types in `serialization.rs`.
- Added necessary dependencies in `Cargo.toml` for test vectors: assert_tv, serde and base64
- Updated audit records in `audits.toml` and `imports.lock` for new dependencies.
2025-08-28 11:41:58 +02:00
5b8760cb46
chore(deps): bump libfuzzer-sys from 0.4.9 to 0.4.10
...
Bumps [libfuzzer-sys](https://github.com/rust-fuzz/libfuzzer ) from 0.4.9 to 0.4.10.
- [Changelog](https://github.com/rust-fuzz/libfuzzer/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rust-fuzz/libfuzzer/compare/0.4.9...0.4.10 )
---
updated-dependencies:
- dependency-name: libfuzzer-sys
dependency-version: 0.4.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-08 23:13:08 +00:00
83ad7652bc
chore(deps): bump anyhow from 1.0.96 to 1.0.98
...
Bumps [anyhow](https://github.com/dtolnay/anyhow ) from 1.0.96 to 1.0.98.
- [Release notes](https://github.com/dtolnay/anyhow/releases )
- [Commits](https://github.com/dtolnay/anyhow/compare/1.0.96...1.0.98 )
---
updated-dependencies:
- dependency-name: anyhow
dependency-version: 1.0.98
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-07 23:44:29 +00:00
de72e4a2a1
Use serde for JSON-encoding benchmark data ( #667 )
2025-08-07 16:40:16 +02:00
b905c0aa06
chore(deps): bump log from 0.4.26 to 0.4.27
...
Bumps [log](https://github.com/rust-lang/log ) from 0.4.26 to 0.4.27.
- [Release notes](https://github.com/rust-lang/log/releases )
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/log/compare/0.4.26...0.4.27 )
---
updated-dependencies:
- dependency-name: log
dependency-version: 0.4.27
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-07 16:03:32 +02:00
7908359eab
Use serde for JSON-encoding benchmark data
2025-08-06 17:58:38 +02:00
3c0e167347
fix(rosenpass): Integrate signal handlers with mio
...
With this commit, rosenpass uses a signal handler based on the signal-hook-mio crate.
Even though, in this commit, no rosenpass-rp code is touched, this also
fixes the signal handling in rosenpass-rp. The way rosenpass is
integrated in rp is a bit of a hack – it just directly embeds
rosenpass in the same process (though on a dedicated thread). For this
reason, rp now just inherits rosenpass' signal handlers. The
rosenpass event_loop() will terminate. The main loop of `rp` just spends
most of the time waiting for rosenpass itself to finish, and exits when
it finishes.
Unfortunately, this means we are not using signalfd(2)[^0]; the
signal-hook-mio crate appears to use a pipe-based mechanism to deliver
events to mio instead.
This may not be such a bad thing, as signalfd has some severe drawbacks
with respect to subprocesses and masked signals[^1].
Fixes : #358 (https://github.com/rosenpass/rosenpass/issues/385 )
Fixes : #522 (https://github.com/rosenpass/rosenpass/issues/522 )
Fixes : #678 (https://github.com/rosenpass/rosenpass/pull/678 )
[^0]: https://unixism.net/2021/02/making-signals-less-painful-under-linux/
[^1]: https://ldpreload.com/blog/signalfd-is-useless?reposted-on-request
2025-08-04 08:44:15 +02:00
6f6fdef542
chore(rp): Rename crate rp -> rosenpass-rp
2025-08-04 08:44:15 +02:00
c689f8e78a
feat(rp): Enable logging
2025-08-04 08:44:15 +02:00
31a5dbe420
feat: Janitor, utilities for cleaning up with tokio
2025-08-04 08:44:15 +02:00
a85f9b8e63
chore: Better error handling in link_create_and_up in rp
2025-08-03 15:15:14 +02:00
f31d635df8
chore(deps): bump tokio from 1.44.2 to 1.46.1
...
Bumps [tokio](https://github.com/tokio-rs/tokio ) from 1.44.2 to 1.46.1.
- [Release notes](https://github.com/tokio-rs/tokio/releases )
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.44.2...tokio-1.46.1 )
---
updated-dependencies:
- dependency-name: tokio
dependency-version: 1.46.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-30 23:44:49 +00:00
e76e5b253f
chore(deps): bump clap_mangen from 0.2.24 to 0.2.27
...
Dependabot couldn't find the original pull request head commit, 518c533e040c5dd92156f84f8c20cffb9c7eacf6.
2025-07-29 15:19:47 +00:00
91707cc430
Address feedback
2025-06-23 16:39:22 +02:00
5097d9fce1
Add benchmarking for cryptographic primitives and protocol performance
...
This commit introduces two kinds of benchmarks:
1. Cryptographic Primitives. Measures the performance of all available
implementations of cryptographic algorithms using traditional
benchmarking. Uses criterion.
2. Protocol Runs. Measures the time each step in the protocol takes.
Measured using a tracing-based approach.
The benchmarks are run on CI and an interactive visual overview is
written to the gh-pages branch. If a benchmark takes more than twice the
time than the reference commit (for PR: the main branch), the action
fails.
2025-06-23 16:39:22 +02:00
b46cd636d2
fix: Security update – crossbeam-channel
2025-04-13 13:44:36 +02:00
d453002230
fix: Security update for tokio
2025-04-08 18:14:45 +02:00
d023108d3b
attempt to work around the importCargoLock bugs
2025-04-03 16:55:03 +02:00
417df7aa7f
update the lock file
2025-04-03 16:55:03 +02:00
2dba9205e7
Address Feedback
2025-04-03 16:14:55 +02:00
576ad5f6d0
respect experiment_libcrux_blake2 feature flag
2025-04-03 16:14:47 +02:00
6494518460
add fine-grained features
2025-04-03 16:14:19 +02:00
185e92108e
add blake2 from libcrux
2025-04-03 16:14:19 +02:00
253243a8c8
add kyber512 from libcrux
2025-04-03 16:14:19 +02:00
075d9ffff3
update libcrux chachapoly to use libcrux-chacha20poly1305
2025-04-03 16:14:19 +02:00
b84e0beae8
introduce traits for all the primitives and algorithms. A bit more cleanup.
2025-04-03 16:12:44 +02:00
Ilka Schulz