daxpeddaandGitHub
bebd2c605b
* Move `KeGroup` to `KeyExchange::Group` - Introduce `KeyExchange::Hash`, which separates the OPRF hash from the one used in `KeyExchange`. - Remove `De/Serialize` requirement on key exchange messages and states, which forced a lot of where bounds on downstream users. - Rename `KeGroup` to `Group`. - Replace `D` generic for hash with `H`. * Use `voprf::derive_key()` directly * Implement SIGMA-I key exchange * Improve `KeyExchange` for SIGMA-I and Ed25519 * Implement EdDSA * Un-qualify some method calls * SIGMA-I: only include client identity in client mac * SIGMA-I: include server mac in client signature * Expose key exchange types in `crate` & move modules * Implement Ed25519ph * Document `ed25519` crate feature * Remove `ristretto255-voprf` crate feature * Adjust CI crate feature testing * Fix Rustdoc * Remove unnecessary generic parameters from SIGMA-I * Properly mark to-do's with TODO * Assorted fixes * SIGMA-I: include context in signature * SIGMA-I: include identifiers in signature * Merge `ServerLoginStart/FinishParameters` * Re-export more necessary types * More carefully expose types * Add ECDSA test * SIGMA-I: share context hashing * De-duplicate client static public key storage * Hide `KeyExchange` better * Use the correct hash in the root documentation * Bump `derive-where` * Format documentation examples a bit further * Add remote OPRF seed documentation * Rename `deserialize_key_pair` to `deserialize_take_key_pair` * Add more key tests * Remove `SharedSecret` trait * SIGMA-I refactor message API * Share more implementation between 3DH and SIGMA-I * Remove unnecessary zero scalar check for Curve25519 * Use correct hash in test * Add some more TODOs * Exclude `tests` folder from Cargo publishing * Enable missing dependencies * Use right crate for testing Ed25519 * Remove unnecessary `Sized` constraints * Remove unnecessary `ecdsa` crate features * Move signature de/serialization to trait methods * Nit: move import to appropriate location * Add warning to SIGMA-I
338 lines
11 KiB
Rust
338 lines
11 KiB
Rust
// Copyright (c) Meta Platforms, Inc. and affiliates.
|
|
//
|
|
// This source code is dual-licensed under either the MIT license found in the
|
|
// LICENSE-MIT file in the root directory of this source tree or the Apache
|
|
// License, Version 2.0 found in the LICENSE-APACHE file in the root directory
|
|
// of this source tree. You may select, at your option, one of the above-listed
|
|
// licenses.
|
|
|
|
#[macro_use]
|
|
extern crate criterion;
|
|
|
|
use criterion::Criterion;
|
|
use opaque_ke::*;
|
|
use rand::rngs::OsRng;
|
|
|
|
#[cfg(feature = "ristretto255")]
|
|
static SUFFIX: &str = "ristretto255";
|
|
#[cfg(not(feature = "ristretto255"))]
|
|
static SUFFIX: &str = "p256";
|
|
|
|
struct Default;
|
|
|
|
#[cfg(feature = "ristretto255")]
|
|
impl CipherSuite for Default {
|
|
type OprfCs = opaque_ke::Ristretto255;
|
|
type KeyExchange = opaque_ke::TripleDh<opaque_ke::Ristretto255, sha2::Sha512>;
|
|
type Ksf = opaque_ke::ksf::Identity;
|
|
}
|
|
|
|
#[cfg(not(feature = "ristretto255"))]
|
|
impl CipherSuite for Default {
|
|
type OprfCs = p256::NistP256;
|
|
type KeyExchange = opaque_ke::TripleDh<p256::NistP256, sha2::Sha256>;
|
|
type Ksf = opaque_ke::ksf::Identity;
|
|
}
|
|
|
|
fn server_setup(c: &mut Criterion) {
|
|
let mut rng = OsRng;
|
|
|
|
c.bench_function(&format!("server setup ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
ServerSetup::<Default>::new(&mut rng);
|
|
})
|
|
});
|
|
}
|
|
|
|
fn client_registration_start(c: &mut Criterion) {
|
|
let mut rng = OsRng;
|
|
let password = b"password";
|
|
|
|
c.bench_function(&format!("client registration start ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
fn server_registration_start(c: &mut Criterion) {
|
|
let mut rng = OsRng;
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_registration_start_result =
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
|
|
c.bench_function(&format!("server registration start ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
ServerRegistration::<Default>::start(
|
|
&server_setup,
|
|
client_registration_start_result.message.clone(),
|
|
username,
|
|
)
|
|
.unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
fn client_registration_finish(c: &mut Criterion) {
|
|
let mut rng = OsRng;
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_registration_start_result =
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
let server_registration_start_result = ServerRegistration::<Default>::start(
|
|
&server_setup,
|
|
client_registration_start_result.message.clone(),
|
|
username,
|
|
)
|
|
.unwrap();
|
|
|
|
c.bench_function(
|
|
&format!("client registration finish ({SUFFIX})"),
|
|
move |b| {
|
|
b.iter(|| {
|
|
client_registration_start_result
|
|
.clone()
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_registration_start_result.message.clone(),
|
|
ClientRegistrationFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
})
|
|
},
|
|
);
|
|
}
|
|
|
|
fn server_registration_finish(c: &mut Criterion) {
|
|
let mut rng = OsRng;
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_registration_start_result =
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
let server_registration_start_result = ServerRegistration::<Default>::start(
|
|
&server_setup,
|
|
client_registration_start_result.message.clone(),
|
|
username,
|
|
)
|
|
.unwrap();
|
|
let client_registration_finish_result = client_registration_start_result
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_registration_start_result.message,
|
|
ClientRegistrationFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
|
|
c.bench_function(
|
|
&format!("server registration finish ({SUFFIX})"),
|
|
move |b| {
|
|
b.iter(|| {
|
|
ServerRegistration::finish(client_registration_finish_result.clone().message);
|
|
})
|
|
},
|
|
);
|
|
}
|
|
|
|
fn client_login_start(c: &mut Criterion) {
|
|
let mut rng = OsRng;
|
|
let password = b"password";
|
|
|
|
c.bench_function(&format!("client login start ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
ClientLogin::<Default>::start(&mut rng, password).unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
fn server_login_start_real(c: &mut Criterion) {
|
|
let mut rng = OsRng;
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_registration_start_result =
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
let server_registration_start_result = ServerRegistration::<Default>::start(
|
|
&server_setup,
|
|
client_registration_start_result.message.clone(),
|
|
username,
|
|
)
|
|
.unwrap();
|
|
let client_registration_finish_result = client_registration_start_result
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_registration_start_result.message,
|
|
ClientRegistrationFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
let password_file = ServerRegistration::finish(client_registration_finish_result.message);
|
|
let client_login_start_result = ClientLogin::<Default>::start(&mut rng, password).unwrap();
|
|
|
|
c.bench_function(&format!("server login start (real) ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
ServerLogin::start(
|
|
&mut rng,
|
|
&server_setup,
|
|
Some(password_file.clone()),
|
|
client_login_start_result.clone().message,
|
|
username,
|
|
ServerLoginParameters::default(),
|
|
)
|
|
.unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
fn server_login_start_fake(c: &mut Criterion) {
|
|
let mut rng = OsRng;
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_login_start_result = ClientLogin::<Default>::start(&mut rng, password).unwrap();
|
|
|
|
c.bench_function(&format!("server login start (fake) ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
ServerLogin::start(
|
|
&mut rng,
|
|
&server_setup,
|
|
None,
|
|
client_login_start_result.clone().message,
|
|
username,
|
|
ServerLoginParameters::default(),
|
|
)
|
|
.unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
fn client_login_finish(c: &mut Criterion) {
|
|
let mut rng = OsRng;
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_registration_start_result =
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
let server_registration_start_result = ServerRegistration::<Default>::start(
|
|
&server_setup,
|
|
client_registration_start_result.message.clone(),
|
|
username,
|
|
)
|
|
.unwrap();
|
|
let client_registration_finish_result = client_registration_start_result
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_registration_start_result.message,
|
|
ClientRegistrationFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
let password_file = ServerRegistration::finish(client_registration_finish_result.message);
|
|
let client_login_start_result = ClientLogin::<Default>::start(&mut rng, password).unwrap();
|
|
let server_login_start = ServerLogin::start(
|
|
&mut rng,
|
|
&server_setup,
|
|
Some(password_file),
|
|
client_login_start_result.clone().message,
|
|
username,
|
|
ServerLoginParameters::default(),
|
|
)
|
|
.unwrap();
|
|
|
|
c.bench_function(&format!("client login finish ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
client_login_start_result
|
|
.clone()
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_login_start.clone().message,
|
|
ClientLoginFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
fn server_login_finish(c: &mut Criterion) {
|
|
let mut rng = OsRng;
|
|
let username = b"username";
|
|
let password = b"password";
|
|
let server_setup = ServerSetup::<Default>::new(&mut rng);
|
|
let client_registration_start_result =
|
|
ClientRegistration::<Default>::start(&mut rng, password).unwrap();
|
|
let server_registration_start_result = ServerRegistration::<Default>::start(
|
|
&server_setup,
|
|
client_registration_start_result.message.clone(),
|
|
username,
|
|
)
|
|
.unwrap();
|
|
let client_registration_finish_result = client_registration_start_result
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_registration_start_result.message,
|
|
ClientRegistrationFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
let password_file = ServerRegistration::finish(client_registration_finish_result.message);
|
|
let client_login_start_result = ClientLogin::<Default>::start(&mut rng, password).unwrap();
|
|
let server_login_start_result = ServerLogin::start(
|
|
&mut rng,
|
|
&server_setup,
|
|
Some(password_file),
|
|
client_login_start_result.clone().message,
|
|
username,
|
|
ServerLoginParameters::default(),
|
|
)
|
|
.unwrap();
|
|
let client_login_finish_result = client_login_start_result
|
|
.state
|
|
.finish(
|
|
&mut rng,
|
|
password,
|
|
server_login_start_result.clone().message,
|
|
ClientLoginFinishParameters::default(),
|
|
)
|
|
.unwrap();
|
|
|
|
c.bench_function(&format!("server login finish ({SUFFIX})"), move |b| {
|
|
b.iter(|| {
|
|
server_login_start_result
|
|
.clone()
|
|
.state
|
|
.finish(
|
|
client_login_finish_result.clone().message,
|
|
ServerLoginParameters::default(),
|
|
)
|
|
.unwrap();
|
|
})
|
|
});
|
|
}
|
|
|
|
criterion_group!(
|
|
opaque_benches,
|
|
server_setup,
|
|
client_registration_start,
|
|
server_registration_start,
|
|
client_registration_finish,
|
|
server_registration_finish,
|
|
client_login_start,
|
|
server_login_start_real,
|
|
server_login_start_fake,
|
|
client_login_finish,
|
|
server_login_finish,
|
|
);
|
|
criterion_main!(opaque_benches);
|