Rust CI / cargo fmt (pull_request) Successful in 13s
Rust CI / test (1.88.0 / no backend / no frontend) (pull_request) Failing after 13s
Rust CI / cargo clippy (pull_request) Successful in 1m23s
Rust CI / test (stable / no backend / no frontend) (pull_request) Successful in 2m18s
Rust CI / test (1.88.0 / no backend / --features argon2) (pull_request) Failing after 3s
Rust CI / test (stable / no backend / --features argon2) (pull_request) Successful in 2m27s
Rust CI / test (stable / no backend / --features serde) (pull_request) Successful in 2m48s
Rust CI / test (1.88.0 / no backend / --features serde) (pull_request) Failing after 4s
Rust CI / test (1.88.0 / --features curve25519 / no frontend) (pull_request) Failing after 4s
Rust CI / test (stable / --features curve25519 / no frontend) (pull_request) Successful in 2m23s
Rust CI / test (1.88.0 / --features curve25519 / --features argon2) (pull_request) Failing after 4s
Rust CI / test (stable / --features curve25519 / --features argon2) (pull_request) Successful in 2m32s
Rust CI / test (1.88.0 / --features curve25519 / --features serde) (pull_request) Failing after 4s
Rust CI / test (stable / --features curve25519 / --features serde) (pull_request) Successful in 2m50s
Rust CI / test (stable / --features ecdsa / no frontend) (pull_request) Successful in 2m44s
Rust CI / test (1.88.0 / --features ecdsa / no frontend) (pull_request) Failing after 4s
Rust CI / test (1.88.0 / --features ecdsa / --features serde) (pull_request) Has been cancelled
Rust CI / test (stable / --features ecdsa / --features serde) (pull_request) Has been cancelled
Rust CI / test (1.88.0 / --features ed25519 / no frontend) (pull_request) Has been cancelled
Rust CI / test (stable / --features ed25519 / no frontend) (pull_request) Has been cancelled
Rust CI / test (1.88.0 / --features ed25519 / --features argon2) (pull_request) Has been cancelled
Rust CI / test (stable / --features ed25519 / --features argon2) (pull_request) Has been cancelled
Rust CI / test (1.88.0 / --features ed25519 / --features serde) (pull_request) Has been cancelled
Rust CI / test (stable / --features ed25519 / --features serde) (pull_request) Has been cancelled
Rust CI / test (1.88.0 / --features ristretto255 / no frontend) (pull_request) Has been cancelled
Rust CI / test (stable / --features ristretto255 / no frontend) (pull_request) Has been cancelled
Rust CI / test (1.88.0 / --features ristretto255 / --features argon2) (pull_request) Has been cancelled
Rust CI / test (stable / --features ristretto255 / --features argon2) (pull_request) Has been cancelled
Rust CI / test (1.88.0 / --features ristretto255 / --features serde) (pull_request) Has been cancelled
Rust CI / test (stable / --features ristretto255 / --features serde) (pull_request) Has been cancelled
Rust CI / test (1.88.0 / --features ecdsa / --features argon2) (pull_request) Failing after 3s
Rust CI / test (1.88.0 / --features ristretto255,curve25519,ecdsa,ed25519 / no frontend) (pull_request) Has been cancelled
Rust CI / test (stable / --features ristretto255,curve25519,ecdsa,ed25519 / no frontend) (pull_request) Has been cancelled
Rust CI / test (1.88.0 / --features ristretto255,curve25519,ecdsa,ed25519 / --features argon2) (pull_request) Has been cancelled
Rust CI / test (stable / --features ristretto255,curve25519,ecdsa,ed25519 / --features argon2) (pull_request) Has been cancelled
Rust CI / test (1.88.0 / --features ristretto255,curve25519,ecdsa,ed25519 / --features serde) (pull_request) Has been cancelled
Rust CI / test (stable / --features ristretto255,curve25519,ecdsa,ed25519 / --features serde) (pull_request) Has been cancelled
Rust CI / test (1.88.0 / --features ristretto255,kem / no frontend) (pull_request) Has been cancelled
Rust CI / test (stable / --features ristretto255,kem / no frontend) (pull_request) Has been cancelled
Rust CI / test (1.88.0 / --features ristretto255,kem / --features argon2) (pull_request) Has been cancelled
Rust CI / test (stable / --features ristretto255,kem / --features argon2) (pull_request) Has been cancelled
Rust CI / test (1.88.0 / --features ristretto255,kem / --features serde) (pull_request) Has been cancelled
Rust CI / test (stable / --features ristretto255,kem / --features serde) (pull_request) Has been cancelled
Rust CI / test simple_login example (pull_request) Has been cancelled
Rust CI / test digital_locker example (pull_request) Has been cancelled
Rust CI / cargo bench compilation () (pull_request) Has been cancelled
Rust CI / cargo bench compilation (--features ristretto255) (pull_request) Has been cancelled
Rust CI / cargo bench compilation (--features ristretto255,kem) (pull_request) Has been cancelled
Rust CI / cargo audit (pull_request) Has been cancelled
Rust CI / test (stable / --features ecdsa / --features argon2) (pull_request) Has been cancelled
Rust CI / no-std (wasm32-unknown-unknown / ristretto255,curve25519,ecdsa,ed25519) (pull_request) Has been cancelled
Rust CI / no-std (thumbv6m-none-eabi / no backend) (pull_request) Has been cancelled
Rust CI / no-std (wasm32-unknown-unknown / no backend) (pull_request) Has been cancelled
Rust CI / no-std (thumbv6m-none-eabi / curve25519) (pull_request) Has been cancelled
Rust CI / no-std (wasm32-unknown-unknown / curve25519) (pull_request) Has been cancelled
Rust CI / no-std (thumbv6m-none-eabi / ecdsa) (pull_request) Has been cancelled
Rust CI / no-std (wasm32-unknown-unknown / ecdsa) (pull_request) Has been cancelled
Rust CI / no-std (thumbv6m-none-eabi / ed25519) (pull_request) Has been cancelled
Rust CI / no-std (wasm32-unknown-unknown / ed25519) (pull_request) Has been cancelled
Rust CI / no-std (thumbv6m-none-eabi / ristretto255) (pull_request) Has been cancelled
Rust CI / no-std (wasm32-unknown-unknown / ristretto255) (pull_request) Has been cancelled
Rust CI / no-std (thumbv6m-none-eabi / ristretto255,curve25519,ecdsa,ed25519) (pull_request) Has been cancelled
Upgrade all core cryptographic dependencies to their latest versions: Dependencies: - digest: 0.10 to 0.11 - elliptic-curve: 0.13 to 0.14 - hkdf: 0.12 to 0.13 - hmac: 0.12 to 0.13 - rand: 0.8 to 0.10 - rand_chacha: 0.3 to 0.10 - sha2: 0.10 to 0.11 - getrandom: 0.2 to 0.4 (WASM) - ml-kem: 0.3.0-rc.0 to 0.3 - ecdsa: 0.16 to 0.17.0-rc.23 - rfc6979: 0.4 to 0.6 (now internal to ecdsa) - p256/p384/p521: 0.13 to 0.14.0-rc.15 - curve25519-dalek: 4 to 5.0.0-rc - ed25519-dalek: 2 to 3.0.0-rc - cryptoki: 0.9 to 0.12 - rustyline: 17 to 18 - scrypt: 0.11 to 0.12 - voprf replaced by voprf-vx 1.0.0-pre.0 Migration changes: - generic-array 0.14 to 1.4 with hybrid-array 0.4 interop - ArrayLength<u8> to ArrayLength (generic-array 1.x) - Added ConcatExt trait to disambiguate from [T]::concat - Replaced Hmac with SimpleHmac for digest 0.11 compatibility - Added OutputSize<H>: ArrayLength bounds throughout Hash trait - Converted hybrid_array::Array between GenericArray at API boundaries - Updated GroupEncoding Repr bound to hybrid_array::Array - ECDSA sign now uses ecdsa::hazmat::sign_prehashed_rfc6979 - Removed direct rfc6979 dependency (handled by ecdsa internally) - Replaced bincode with postcard for no_std serialization - Re-exported hybrid_array from crate root Other changes: - Renamed crate to opaque-vx - Increased MSRV to 1.88 - Added cryptography to Cargo.toml categories - Removed Facebook-specific contributions from CONTRIBUTING.md - Removed v3 to v4 migration test - Removed unstable rustfmt configurations for stable compatibility
339 lines
11 KiB
Rust
339 lines
11 KiB
Rust
// Copyright (c) Meta Platforms, Inc. and affiliates.
|
|
//
|
|
// This source code is dual-licensed under either the MIT license found in the
|
|
// LICENSE-MIT file in the root directory of this source tree or the Apache
|
|
// License, Version 2.0 found in the LICENSE-APACHE file in the root directory
|
|
// of this source tree. You may select, at your option, one of the above-listed
|
|
// licenses.
|
|
|
|
#[macro_use]
|
|
extern crate criterion;
|
|
|
|
use criterion::Criterion;
|
|
use opaque_vx::*;
|
|
use rand::rngs::SysRng;
|
|
use rand_core::UnwrapErr;
|
|
|
|
#[cfg(feature = "ristretto255")]
|
|
static SUFFIX: &str = "ristretto255";
|
|
#[cfg(not(feature = "ristretto255"))]
|
|
static SUFFIX: &str = "p256";
|
|
|
|
struct Default;
|
|
|
|
#[cfg(feature = "ristretto255")]
|
|
impl CipherSuite for Default {
|
|
type OprfCs = Ristretto255;
|
|
type KeyExchange = TripleDh<Ristretto255, sha2::Sha512>;
|
|
type Ksf = ksf::Identity;
|
|
}
|
|
|
|
#[cfg(not(feature = "ristretto255"))]
|
|
impl CipherSuite for Default {
|
|
type OprfCs = p256::NistP256;
|
|
type KeyExchange = TripleDh<p256::NistP256, sha2::Sha256>;
|
|
type Ksf = ksf::Identity;
|
|
}
|
|
|
|
fn server_setup(c: &mut Criterion) {
|
|
let mut rng = UnwrapErr(SysRng);
|
|
|
|
c.bench_function(&format!("server setup ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
ServerSetup::<Default>::new(&mut rng);
|
|
})
|
|
});
|
|
}
|
|
|
|
fn client_registration_start(c: &mut Criterion) {
|
|
let mut rng = UnwrapErr(SysRng);
|
|
let password = b"password";
|
|
|
|
c.bench_function(&format!("client registration start ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
fn server_registration_start(c: &mut Criterion) {
|
|
let mut rng = UnwrapErr(SysRng);
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_registration_start_result =
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
|
|
c.bench_function(&format!("server registration start ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
ServerRegistration::<Default>::start(
|
|
&server_setup,
|
|
client_registration_start_result.message.clone(),
|
|
username,
|
|
)
|
|
.unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
fn client_registration_finish(c: &mut Criterion) {
|
|
let mut rng = UnwrapErr(SysRng);
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_registration_start_result =
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
let server_registration_start_result = ServerRegistration::<Default>::start(
|
|
&server_setup,
|
|
client_registration_start_result.message.clone(),
|
|
username,
|
|
)
|
|
.unwrap();
|
|
|
|
c.bench_function(
|
|
&format!("client registration finish ({SUFFIX})"),
|
|
move |b| {
|
|
b.iter(|| {
|
|
client_registration_start_result
|
|
.clone()
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_registration_start_result.message.clone(),
|
|
ClientRegistrationFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
})
|
|
},
|
|
);
|
|
}
|
|
|
|
fn server_registration_finish(c: &mut Criterion) {
|
|
let mut rng = UnwrapErr(SysRng);
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_registration_start_result =
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
let server_registration_start_result = ServerRegistration::<Default>::start(
|
|
&server_setup,
|
|
client_registration_start_result.message.clone(),
|
|
username,
|
|
)
|
|
.unwrap();
|
|
let client_registration_finish_result = client_registration_start_result
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_registration_start_result.message,
|
|
ClientRegistrationFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
|
|
c.bench_function(
|
|
&format!("server registration finish ({SUFFIX})"),
|
|
move |b| {
|
|
b.iter(|| {
|
|
ServerRegistration::finish(client_registration_finish_result.clone().message);
|
|
})
|
|
},
|
|
);
|
|
}
|
|
|
|
fn client_login_start(c: &mut Criterion) {
|
|
let mut rng = UnwrapErr(SysRng);
|
|
let password = b"password";
|
|
|
|
c.bench_function(&format!("client login start ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
ClientLogin::<Default>::start(&mut rng, password).unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
fn server_login_start_real(c: &mut Criterion) {
|
|
let mut rng = UnwrapErr(SysRng);
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_registration_start_result =
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
let server_registration_start_result = ServerRegistration::<Default>::start(
|
|
&server_setup,
|
|
client_registration_start_result.message.clone(),
|
|
username,
|
|
)
|
|
.unwrap();
|
|
let client_registration_finish_result = client_registration_start_result
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_registration_start_result.message,
|
|
ClientRegistrationFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
let password_file = ServerRegistration::finish(client_registration_finish_result.message);
|
|
let client_login_start_result = ClientLogin::<Default>::start(&mut rng, password).unwrap();
|
|
|
|
c.bench_function(&format!("server login start (real) ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
ServerLogin::start(
|
|
&mut rng,
|
|
&server_setup,
|
|
Some(password_file.clone()),
|
|
client_login_start_result.clone().message,
|
|
username,
|
|
ServerLoginParameters::default(),
|
|
)
|
|
.unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
fn server_login_start_fake(c: &mut Criterion) {
|
|
let mut rng = UnwrapErr(SysRng);
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_login_start_result = ClientLogin::<Default>::start(&mut rng, password).unwrap();
|
|
|
|
c.bench_function(&format!("server login start (fake) ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
ServerLogin::start(
|
|
&mut rng,
|
|
&server_setup,
|
|
None,
|
|
client_login_start_result.clone().message,
|
|
username,
|
|
ServerLoginParameters::default(),
|
|
)
|
|
.unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
fn client_login_finish(c: &mut Criterion) {
|
|
let mut rng = UnwrapErr(SysRng);
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_registration_start_result =
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
let server_registration_start_result = ServerRegistration::<Default>::start(
|
|
&server_setup,
|
|
client_registration_start_result.message.clone(),
|
|
username,
|
|
)
|
|
.unwrap();
|
|
let client_registration_finish_result = client_registration_start_result
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_registration_start_result.message,
|
|
ClientRegistrationFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
let password_file = ServerRegistration::finish(client_registration_finish_result.message);
|
|
let client_login_start_result = ClientLogin::<Default>::start(&mut rng, password).unwrap();
|
|
let server_login_start = ServerLogin::start(
|
|
&mut rng,
|
|
&server_setup,
|
|
Some(password_file),
|
|
client_login_start_result.clone().message,
|
|
username,
|
|
ServerLoginParameters::default(),
|
|
)
|
|
.unwrap();
|
|
|
|
c.bench_function(&format!("client login finish ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
client_login_start_result
|
|
.clone()
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_login_start.clone().message,
|
|
ClientLoginFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
fn server_login_finish(c: &mut Criterion) {
|
|
let mut rng = UnwrapErr(SysRng);
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_registration_start_result =
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
let server_registration_start_result = ServerRegistration::<Default>::start(
|
|
&server_setup,
|
|
client_registration_start_result.message.clone(),
|
|
username,
|
|
)
|
|
.unwrap();
|
|
let client_registration_finish_result = client_registration_start_result
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_registration_start_result.message,
|
|
ClientRegistrationFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
let password_file = ServerRegistration::finish(client_registration_finish_result.message);
|
|
let client_login_start_result = ClientLogin::<Default>::start(&mut rng, password).unwrap();
|
|
let server_login_start_result = ServerLogin::start(
|
|
&mut rng,
|
|
&server_setup,
|
|
Some(password_file),
|
|
client_login_start_result.clone().message,
|
|
username,
|
|
ServerLoginParameters::default(),
|
|
)
|
|
.unwrap();
|
|
let client_login_finish_result = client_login_start_result
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_login_start_result.clone().message,
|
|
ClientLoginFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
|
|
c.bench_function(&format!("server login finish ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
server_login_start_result
|
|
.clone()
|
|
.state
|
|
.finish(
|
|
client_login_finish_result.clone().message,
|
|
ServerLoginParameters::default(),
|
|
)
|
|
.unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
criterion_group!(
|
|
opaque_benches,
|
|
server_setup,
|
|
client_registration_start,
|
|
server_registration_start,
|
|
client_registration_finish,
|
|
server_registration_finish,
|
|
client_login_start,
|
|
server_login_start_real,
|
|
server_login_start_fake,
|
|
client_login_finish,
|
|
server_login_finish,
|
|
);
|
|
criterion_main!(opaque_benches);
|