sinu.eth
79c230f2fa
refactor(mpc-tls): remove commit-reveal from tag verification ( #907 )
2025-06-06 06:39:12 +00:00
dan
345d5d45ad
feat: prove server mac key ( #868 )
...
* feat(mpc-tls): prove server mac key
* remove stray dep
* move mac key into `SessionKeys`
* fix key translation
* remove dangling dep
* move ghash mod to tlsn-common
* fix clippy lints
* treat all recv recs as unauthenticated
* detach zkvm first, then prove
* decrypt with aes_gcm, decode mac key only in zkvm
* encapsulate into `fn verify_tags`; inline mod `zk_aes_ecb`
* handle error
* fix dangling and clippy
* bump Cargo.lock
2025-06-05 09:19:41 -07:00
Hendrik Eeckhaut
55a26aad77
build: Lock + document Cargo.lock ( #885 )
2025-06-04 09:12:06 +02:00
Hendrik Eeckhaut
1132d441e1
docs: improve example readme ( #904 )
2025-06-04 08:56:55 +02:00
Hendrik Eeckhaut
fa2fdfd601
feat: add logging to server fixture ( #903 )
2025-06-04 08:49:33 +02:00
Hendrik Eeckhaut
24e10d664f
Fix wasm-pack warnings ( #888 )
2025-06-03 22:38:54 +02:00
yuroitaki
c0e084c1ca
fix(wasm): expose revealing server identity. ( #898 )
...
* Add reveal server identity.
* Fix test.
* Remove defualt.
---------
Co-authored-by: yuroitaki <>
2025-05-30 10:39:13 +08:00
Jakub Konka
b6845dfc5c
feat(notary): add JWT-based authorization mode ( #817 )
...
* feat(server): add JWT-based authorization mode
This mode is an alternative to whitelist authorization mode.
It extracts the JWT from the authorization header (bearer token),
validates token's signature, claimed expiry times and additional
(user-configurable) claims.
* Fix formatting and lints
* Address review comments
* feat(server): remove JwtClaimType config property
* Fix missing README comments
* Address review comments
* Address review comments
---------
Co-authored-by: yuroitaki <25913766+yuroitaki@users.noreply.github.com >
2025-05-28 12:51:18 +08:00
sinu.eth
31def9ea81
chore: bump prerelease version ( #895 )
2025-05-27 11:43:42 -07:00
sinu.eth
878fe7e87d
chore: release v0.1.0-alpha.11 ( #894 )
2025-05-27 09:27:26 -07:00
Hendrik Eeckhaut
3348ac34b6
Release automation ( #890 )
...
* ci: create release draft for tagged builds
* Apply suggestions from code review
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: sinu.eth <65924192+sinui0@users.noreply.github.com >
2025-05-27 08:43:57 -07:00
Hendrik Eeckhaut
82767ca2d5
Automatic workflow to update main after a release ( #891 )
2025-05-27 09:06:38 +02:00
sinu.eth
c9aaf2e0fa
refactor(mpc-tls): default to full-mpc PRF ( #892 )
2025-05-27 08:57:34 +02:00
sinu.eth
241ed3b5a3
chore: bump mpz to alpha.3 ( #893 )
2025-05-27 08:34:35 +02:00
Hendrik Eeckhaut
56f088db7d
ci: build ci with explicit, fixed rust version (1.87.0) ( #879 )
2025-05-24 21:25:36 +02:00
Hendrik Eeckhaut
f5250479bd
docs: correct notary-server command in example readme ( #883 )
2025-05-23 11:06:14 +02:00
yuroitaki
0e2eabb833
misc(notary): update doc, docker, tee, ci ( #874 )
...
* Update docs, docker, tee, ci.
* Restore deleted dockerfile.
* Add concurrency in readme.
* Apply suggestions.
* Correct file path.
---------
Co-authored-by: yuroitaki <>
2025-05-23 11:55:36 +08:00
sinu.eth
ad530ca500
feat: SHA256 transcript commitments ( #881 )
...
* feat: SHA256 transcript commitments
* clippy
2025-05-22 09:10:21 -07:00
sinu.eth
8b1cac6fe0
refactor(core): decouple attestation from core api ( #875 )
...
* refactor(core): decouple attestation from core api
* remove dead test
* fix encoding tree test
* clippy
* fix comment
2025-05-22 09:00:43 -07:00
Hendrik Eeckhaut
555f65e6b2
fix: expose network setting type in WASM ( #880 )
2025-05-22 09:35:57 +02:00
dan
046485188c
chore: add Cargo.lock to .gitignore ( #870 )
2025-05-21 09:56:08 +00:00
th4s
db53814ee7
fix(prf): set correct default logic ( #873 )
2025-05-20 15:22:34 +02:00
yuroitaki
d924bd6deb
misc(notary): add common crate for server and client ( #871 )
...
* Add notary-common crate.
* Add cargo lock changes.
* Add copy.
---------
Co-authored-by: yuroitaki <>
2025-05-20 12:24:27 +08:00
yuroitaki
b3558bef9c
feat(notary): add support for custom extension ( #872 )
...
* Add dos extension validator.
* Revert to allow any extensions.
---------
Co-authored-by: yuroitaki <>
2025-05-20 11:19:05 +08:00
yuroitaki
33c4b9d16f
chore(notary): ignore clippy warning on large enum ( #869 )
...
* Fix clippy.
* Fix clippy.
---------
Co-authored-by: yuroitaki <>
2025-05-16 08:45:29 -07:00
yuroitaki
edc2a1783d
refactor(notary): default to ephemeral key, remove config file & fixtures ( #818 )
...
* Add default values, refactor.
* Prepend file paths.
* Remove config and refactor.
* Fix fmt, add missing export.
* Simplify error.
* Use serde to print.
* Update crates/notary/server/src/config.rs
Co-authored-by: dan <themighty1@users.noreply.github.com >
* fixture removal + generate signing key (#819 )
* Default to ephemeral key gen, remove fixutres.
* Fix wording.
* Add configuring sig alg, comment fixes.
* Fix sig alg id parsing.
* Refactor pub key to pem.
* Return error, add test.
* Update crates/notary/server/src/signing.rs
Co-authored-by: Hendrik Eeckhaut <hendrik@eeckhaut.org >
---------
Co-authored-by: yuroitaki <>
Co-authored-by: Hendrik Eeckhaut <hendrik@eeckhaut.org >
---------
Co-authored-by: yuroitaki <>
Co-authored-by: dan <themighty1@users.noreply.github.com >
Co-authored-by: Hendrik Eeckhaut <hendrik@eeckhaut.org >
2025-05-16 19:02:20 +08:00
sinu.eth
c2a6546deb
refactor(core): encode by ref and rip out dead hash functionality ( #866 )
2025-05-15 09:10:05 -07:00
th4s
2dfa386415
chore: bump mpz and adapt update method call in hmac-sha256 ( #867 )
...
* fix(hmac-sha256): use new `update` method from mpz-hash
* use `into` conversion
2025-05-15 15:58:32 +02:00
sinu.eth
5a188e75c7
refactor(cipher): remove contiguous memory assumption ( #864 )
...
* refactor(cipher): remove contiguous memory assumption
* fix mpc-tls and upstream crates
2025-05-13 09:41:55 -07:00
sinu.eth
a8bf1026ca
feat(deap): address space mapping ( #809 )
2025-05-13 09:38:39 -07:00
sinu.eth
f900fc51cd
chore: bump mpz to abd02e6 ( #825 )
2025-05-13 09:35:51 -07:00
th4s
6ccf102ec8
feat(prf): reduced MPC variant ( #735 )
...
* feat(prf): reduced MPC variant
* move sending `client_random` from `alloc` to `preprocess`
* rename `Config` -> `Mode` and rename variants
* add feedback for handling of prf config
* fix formatting to nightly
* simplify `MpcPrf`
* improve external flush handling
* improve control flow
* improved inner control flow for normal prf version
* rename leftover `config` -> `mode`
* remove unnecessary pub(crate)
* rewrite state flow for reduced prf
* improve state transition for reduced prf
* repair prf bench
* WIP: Adapting to new `Sha256` from mpz
* repair failing test
* fixed all tests
* remove output decoding for p
* do not use mod.rs file hierarchy
* remove pub(crate) from function
* improve config handling
* use `Array::try_from`
* simplify hmac to function
* remove `merge_vecs`
* move `mark_public` to allocation
* minor fixes
* simplify state logic for reduced prf even more
* simplify reduced prf even more
* set reduced prf as default
* temporarily fix commit for mpz
* add part of feedback
* simplify state transition
* adapt comment
* improve state transition in flush
* simplify flush
* fix wasm prover config
---------
Co-authored-by: sinu <65924192+sinui0@users.noreply.github.com >
2025-05-13 09:26:43 -07:00
sinu.eth
2c500b13bd
chore: bump mpz to alpha.3 ( #806 )
...
* temporary remove hmac crates
* wip: adapting cipher crate...
* wip: adapting key-exchange crate...
* wip: adapt most of mpc-tls...
* adapt prover and verifier crates
* remove unnecessary rand compat import for deap
* adapt mpc-tls
* fix: endianness of key-exchange circuit
* fix: output endianness of ke circuit
* fix variable name
---------
Co-authored-by: th4s <th4s@metavoid.xyz >
2025-05-13 09:03:09 -07:00
Hendrik Eeckhaut
2da0c242cb
build: Check in Cargo lock files ( #742 )
2025-05-12 10:22:13 +02:00
th4s
798c22409a
chore(config): move defer_decryption_from_start to ProtocolConfig
2025-05-10 11:41:01 +02:00
dan
3b5ac20d5b
fix(benches): browser bench fixes ( #821 )
...
* fix(benches): make browser benches work again
* Update crates/benches/binary/README.md
Co-authored-by: Hendrik Eeckhaut <hendrik@eeckhaut.org >
* Update crates/benches/browser/wasm/Cargo.toml
Co-authored-by: Hendrik Eeckhaut <hendrik@eeckhaut.org >
* add --release flag
---------
Co-authored-by: Hendrik Eeckhaut <hendrik@eeckhaut.org >
2025-05-08 06:13:15 +00:00
Hendrik Eeckhaut
a063f8cc14
ci: build gramine-sgx for dev and tagged builds only ( #805 )
2025-05-05 17:16:50 +02:00
dan
6f6b24e76c
test: fix failing tests ( #823 )
2025-05-05 17:01:42 +02:00
dan
a28718923b
chore(examples): inline custom crypto provider for clarity ( #815 )
...
Co-authored-by: sinu.eth <65924192+sinui0@users.noreply.github.com >
2025-04-30 06:41:07 +00:00
Hendrik Eeckhaut
19447aabe5
Tee dev cleanup ( #759 )
...
* build: added scripts for local tee/sgx development
* Improved documentation: move all explanation to one README file
2025-04-28 14:46:32 +02:00
Jakub Konka
8afb7a4c11
fix(notary): use custom HTTP header for authorization: X-API-Key ( #804 )
...
Co-authored-by: yuroitaki <25913766+yuroitaki@users.noreply.github.com >
2025-04-28 14:24:32 +08:00
dan
43c6877ec0
chore: support workspace lints in all crates ( #797 )
2025-04-25 13:58:26 +02:00
dan
39e14949a0
chore: add rustls licence and attribution ( #795 )
...
* chore: add rustls licence and attribution
* add missing commit
2025-04-25 07:10:49 +00:00
dan
31f62982b5
feat(wasm): allow max records config ( #810 )
2025-04-25 06:34:49 +00:00
yuroitaki
6623734ca0
doc(example): add comments on verifying custom extension ( #788 )
...
* Add comments.
* Fix comment.
---------
Co-authored-by: yuroitaki <>
2025-04-25 11:18:47 +08:00
Hendrik Eeckhaut
41e215f912
chore: set version number to 0.1.0-alpha.11-pre ( #798 )
2025-04-23 13:19:05 +02:00
dan
9e0f79125b
misc(notary): improve error msg when tls is expected ( #776 )
...
* misc(notary): improve error msg when tls is expected
* change wording
* fix nested if
* process hyper error
* refactor into a fn
* fix error msg
Co-authored-by: yuroitaki <25913766+yuroitaki@users.noreply.github.com >
* do not catch hyper error
---------
Co-authored-by: yuroitaki <25913766+yuroitaki@users.noreply.github.com >
2025-04-22 12:03:23 +00:00
Hendrik Eeckhaut
7bdd3a724b
fix: Add missing concurrency param in tee config ( #791 )
2025-04-22 11:19:35 +02:00
dan
baa486ccfd
chore(examples): fix formatting ( #793 )
2025-04-21 08:46:28 +00:00
sinu.eth
de7a47de5b
feat: expose record count config ( #786 )
...
* expose record config
* update default record counts
* make fields optional
* override record count in integration test
2025-04-18 14:58:28 +07:00
