dan
f2ff4ba792
chore: release v0.1.0-alpha.12 ( #928 )
2025-06-19 09:05:34 +00:00
dan
9bf3371873
chore(wasm): expose client auth config to js ( #927 )
2025-06-19 07:15:09 +00:00
dan
9d853eb496
feat(prover): client authentication ( #916 )
2025-06-17 14:02:14 +00:00
sinu.eth
6923ceefd3
fix(harness): iptable rule and bench config variable ( #925 )
...
* fix(harness): iptable rule and bench config variable
* rustfmt
2025-06-16 13:18:34 -04:00
sinu.eth
5239c2328a
chore: bump mpz to ccc0057 ( #924 )
2025-06-16 07:42:49 -07:00
Hendrik Eeckhaut
6a7c5384a9
build: fixed version numbers
2025-06-12 14:24:55 +02:00
th4s
7e469006c0
fix(prf): adapt logic to new default setting ( #920 )
2025-06-11 20:34:47 +02:00
dan
55091b5e94
fix: set TCP_NODELAY for prover and notary ( #911 )
2025-06-10 08:13:12 +00:00
dan
bc1eba18c9
feat(mpc-tls): use concurrent ot setup and gc preprocessing ( #910 )
...
* feat(mpc-tls): use concurrent ot setup and gc preprocessing
* bump mpz
* increase muxer stream count
* update Cargo.lock
---------
Co-authored-by: sinu.eth <65924192+sinui0@users.noreply.github.com >
2025-06-06 15:39:35 -07:00
sinu.eth
c128ab16ce
fix(harness): retry browser connection until timeout ( #914 )
...
* fix(harness): retry browser connection until timeout
* add timeout to executor shutdown
* shutdown timeout error msg
* clippy
2025-06-06 15:01:28 -07:00
sinu.eth
a87125ff88
fix(ci): wasm tests ( #913 )
2025-06-06 13:51:34 -07:00
sinu.eth
0933d711d2
feat: harness ( #703 )
...
* feat: harness
* delete tests.rs build artifact
* fix binary path
* seconds -> milliseconds
* update lock
* add empty tests module
* rustfmt
* ToString -> Display
* output tests module into build artifacts
* clippy
* rustfmt
2025-06-06 13:34:32 -07:00
sinu.eth
79c230f2fa
refactor(mpc-tls): remove commit-reveal from tag verification ( #907 )
2025-06-06 06:39:12 +00:00
dan
345d5d45ad
feat: prove server mac key ( #868 )
...
* feat(mpc-tls): prove server mac key
* remove stray dep
* move mac key into `SessionKeys`
* fix key translation
* remove dangling dep
* move ghash mod to tlsn-common
* fix clippy lints
* treat all recv recs as unauthenticated
* detach zkvm first, then prove
* decrypt with aes_gcm, decode mac key only in zkvm
* encapsulate into `fn verify_tags`; inline mod `zk_aes_ecb`
* handle error
* fix dangling and clippy
* bump Cargo.lock
2025-06-05 09:19:41 -07:00
Hendrik Eeckhaut
55a26aad77
build: Lock + document Cargo.lock ( #885 )
2025-06-04 09:12:06 +02:00
Hendrik Eeckhaut
1132d441e1
docs: improve example readme ( #904 )
2025-06-04 08:56:55 +02:00
Hendrik Eeckhaut
fa2fdfd601
feat: add logging to server fixture ( #903 )
2025-06-04 08:49:33 +02:00
Hendrik Eeckhaut
24e10d664f
Fix wasm-pack warnings ( #888 )
2025-06-03 22:38:54 +02:00
yuroitaki
c0e084c1ca
fix(wasm): expose revealing server identity. ( #898 )
...
* Add reveal server identity.
* Fix test.
* Remove defualt.
---------
Co-authored-by: yuroitaki <>
2025-05-30 10:39:13 +08:00
Jakub Konka
b6845dfc5c
feat(notary): add JWT-based authorization mode ( #817 )
...
* feat(server): add JWT-based authorization mode
This mode is an alternative to whitelist authorization mode.
It extracts the JWT from the authorization header (bearer token),
validates token's signature, claimed expiry times and additional
(user-configurable) claims.
* Fix formatting and lints
* Address review comments
* feat(server): remove JwtClaimType config property
* Fix missing README comments
* Address review comments
* Address review comments
---------
Co-authored-by: yuroitaki <25913766+yuroitaki@users.noreply.github.com >
2025-05-28 12:51:18 +08:00
sinu.eth
31def9ea81
chore: bump prerelease version ( #895 )
2025-05-27 11:43:42 -07:00
sinu.eth
878fe7e87d
chore: release v0.1.0-alpha.11 ( #894 )
2025-05-27 09:27:26 -07:00
Hendrik Eeckhaut
3348ac34b6
Release automation ( #890 )
...
* ci: create release draft for tagged builds
* Apply suggestions from code review
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: sinu.eth <65924192+sinui0@users.noreply.github.com >
2025-05-27 08:43:57 -07:00
Hendrik Eeckhaut
82767ca2d5
Automatic workflow to update main after a release ( #891 )
2025-05-27 09:06:38 +02:00
sinu.eth
c9aaf2e0fa
refactor(mpc-tls): default to full-mpc PRF ( #892 )
2025-05-27 08:57:34 +02:00
sinu.eth
241ed3b5a3
chore: bump mpz to alpha.3 ( #893 )
2025-05-27 08:34:35 +02:00
Hendrik Eeckhaut
56f088db7d
ci: build ci with explicit, fixed rust version (1.87.0) ( #879 )
2025-05-24 21:25:36 +02:00
Hendrik Eeckhaut
f5250479bd
docs: correct notary-server command in example readme ( #883 )
2025-05-23 11:06:14 +02:00
yuroitaki
0e2eabb833
misc(notary): update doc, docker, tee, ci ( #874 )
...
* Update docs, docker, tee, ci.
* Restore deleted dockerfile.
* Add concurrency in readme.
* Apply suggestions.
* Correct file path.
---------
Co-authored-by: yuroitaki <>
2025-05-23 11:55:36 +08:00
sinu.eth
ad530ca500
feat: SHA256 transcript commitments ( #881 )
...
* feat: SHA256 transcript commitments
* clippy
2025-05-22 09:10:21 -07:00
sinu.eth
8b1cac6fe0
refactor(core): decouple attestation from core api ( #875 )
...
* refactor(core): decouple attestation from core api
* remove dead test
* fix encoding tree test
* clippy
* fix comment
2025-05-22 09:00:43 -07:00
Hendrik Eeckhaut
555f65e6b2
fix: expose network setting type in WASM ( #880 )
2025-05-22 09:35:57 +02:00
dan
046485188c
chore: add Cargo.lock to .gitignore ( #870 )
2025-05-21 09:56:08 +00:00
th4s
db53814ee7
fix(prf): set correct default logic ( #873 )
2025-05-20 15:22:34 +02:00
yuroitaki
d924bd6deb
misc(notary): add common crate for server and client ( #871 )
...
* Add notary-common crate.
* Add cargo lock changes.
* Add copy.
---------
Co-authored-by: yuroitaki <>
2025-05-20 12:24:27 +08:00
yuroitaki
b3558bef9c
feat(notary): add support for custom extension ( #872 )
...
* Add dos extension validator.
* Revert to allow any extensions.
---------
Co-authored-by: yuroitaki <>
2025-05-20 11:19:05 +08:00
yuroitaki
33c4b9d16f
chore(notary): ignore clippy warning on large enum ( #869 )
...
* Fix clippy.
* Fix clippy.
---------
Co-authored-by: yuroitaki <>
2025-05-16 08:45:29 -07:00
yuroitaki
edc2a1783d
refactor(notary): default to ephemeral key, remove config file & fixtures ( #818 )
...
* Add default values, refactor.
* Prepend file paths.
* Remove config and refactor.
* Fix fmt, add missing export.
* Simplify error.
* Use serde to print.
* Update crates/notary/server/src/config.rs
Co-authored-by: dan <themighty1@users.noreply.github.com >
* fixture removal + generate signing key (#819 )
* Default to ephemeral key gen, remove fixutres.
* Fix wording.
* Add configuring sig alg, comment fixes.
* Fix sig alg id parsing.
* Refactor pub key to pem.
* Return error, add test.
* Update crates/notary/server/src/signing.rs
Co-authored-by: Hendrik Eeckhaut <hendrik@eeckhaut.org >
---------
Co-authored-by: yuroitaki <>
Co-authored-by: Hendrik Eeckhaut <hendrik@eeckhaut.org >
---------
Co-authored-by: yuroitaki <>
Co-authored-by: dan <themighty1@users.noreply.github.com >
Co-authored-by: Hendrik Eeckhaut <hendrik@eeckhaut.org >
2025-05-16 19:02:20 +08:00
sinu.eth
c2a6546deb
refactor(core): encode by ref and rip out dead hash functionality ( #866 )
2025-05-15 09:10:05 -07:00
th4s
2dfa386415
chore: bump mpz and adapt update method call in hmac-sha256 ( #867 )
...
* fix(hmac-sha256): use new `update` method from mpz-hash
* use `into` conversion
2025-05-15 15:58:32 +02:00
sinu.eth
5a188e75c7
refactor(cipher): remove contiguous memory assumption ( #864 )
...
* refactor(cipher): remove contiguous memory assumption
* fix mpc-tls and upstream crates
2025-05-13 09:41:55 -07:00
sinu.eth
a8bf1026ca
feat(deap): address space mapping ( #809 )
2025-05-13 09:38:39 -07:00
sinu.eth
f900fc51cd
chore: bump mpz to abd02e6 ( #825 )
2025-05-13 09:35:51 -07:00
th4s
6ccf102ec8
feat(prf): reduced MPC variant ( #735 )
...
* feat(prf): reduced MPC variant
* move sending `client_random` from `alloc` to `preprocess`
* rename `Config` -> `Mode` and rename variants
* add feedback for handling of prf config
* fix formatting to nightly
* simplify `MpcPrf`
* improve external flush handling
* improve control flow
* improved inner control flow for normal prf version
* rename leftover `config` -> `mode`
* remove unnecessary pub(crate)
* rewrite state flow for reduced prf
* improve state transition for reduced prf
* repair prf bench
* WIP: Adapting to new `Sha256` from mpz
* repair failing test
* fixed all tests
* remove output decoding for p
* do not use mod.rs file hierarchy
* remove pub(crate) from function
* improve config handling
* use `Array::try_from`
* simplify hmac to function
* remove `merge_vecs`
* move `mark_public` to allocation
* minor fixes
* simplify state logic for reduced prf even more
* simplify reduced prf even more
* set reduced prf as default
* temporarily fix commit for mpz
* add part of feedback
* simplify state transition
* adapt comment
* improve state transition in flush
* simplify flush
* fix wasm prover config
---------
Co-authored-by: sinu <65924192+sinui0@users.noreply.github.com >
2025-05-13 09:26:43 -07:00
sinu.eth
2c500b13bd
chore: bump mpz to alpha.3 ( #806 )
...
* temporary remove hmac crates
* wip: adapting cipher crate...
* wip: adapting key-exchange crate...
* wip: adapt most of mpc-tls...
* adapt prover and verifier crates
* remove unnecessary rand compat import for deap
* adapt mpc-tls
* fix: endianness of key-exchange circuit
* fix: output endianness of ke circuit
* fix variable name
---------
Co-authored-by: th4s <th4s@metavoid.xyz >
2025-05-13 09:03:09 -07:00
Hendrik Eeckhaut
2da0c242cb
build: Check in Cargo lock files ( #742 )
2025-05-12 10:22:13 +02:00
th4s
798c22409a
chore(config): move defer_decryption_from_start to ProtocolConfig
2025-05-10 11:41:01 +02:00
dan
3b5ac20d5b
fix(benches): browser bench fixes ( #821 )
...
* fix(benches): make browser benches work again
* Update crates/benches/binary/README.md
Co-authored-by: Hendrik Eeckhaut <hendrik@eeckhaut.org >
* Update crates/benches/browser/wasm/Cargo.toml
Co-authored-by: Hendrik Eeckhaut <hendrik@eeckhaut.org >
* add --release flag
---------
Co-authored-by: Hendrik Eeckhaut <hendrik@eeckhaut.org >
2025-05-08 06:13:15 +00:00
Hendrik Eeckhaut
a063f8cc14
ci: build gramine-sgx for dev and tagged builds only ( #805 )
2025-05-05 17:16:50 +02:00
dan
6f6b24e76c
test: fix failing tests ( #823 )
2025-05-05 17:01:42 +02:00
